last executing test programs: 2m29.642695443s ago: executing program 2 (id=1700): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000340)={[{@noacl}]}, 0xfc, 0x7bb, &(0x7f00000007c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, &(0x7f0000000680), &(0x7f0000000000), 0x6c, r0}, 0x38) 2m29.371261258s ago: executing program 2 (id=1710): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x300) 2m28.480354722s ago: executing program 2 (id=1727): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) 2m28.456205862s ago: executing program 2 (id=1730): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x580, 0x40) move_mount(r0, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) 2m28.430060853s ago: executing program 2 (id=1732): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000046, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota}, {@oldalloc}, {@errors_remount}, {@orlov}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x622}}]}, 0x1, 0x56c, &(0x7f0000001a00)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MHQUvfCmctKTLmuTJttiUs3nA6e87zknfc+bc543z5uTkACG1kT2pxDxfER8kUQcjogk3zYa+caJjf3WHl6fzZYk1tc//C2p75fVG/+r8biDeeW5iPjps4iThe3tVldWF0rlcrqU1ydri1cmqyurpy4tlubT+fTy9MzMmddnpt96842e9fWV839+/cHdd898fnztqx/uH7mdxNk4lG9r7sczuNFcmYiJ/DkZi7NbdpzqQWO7STLoA+CpjORxPhbZGHA4RvKoB/77Po2IdWBIJeIfhlQjD2jM7XeeB/+/T1lJ/zx4Z2MCtL3/oxvvjcS++tzowFry2Mwom++O96D9rI0ff71zO1uid+9DAHR042ZEnB4d3T7+Jfn4t4MOb/qdbr16X3NlaxvGP+ifu1n+82qr/KdQj83f83Ddmv8cbBG7T6Nz/Bfu96CZtrL87+2W+e/mTavxkbz2v3rON5ZcvFROT+fZ8IkY25vVd7qfc2bt3nq7bc35X7Zk7Tdywfw47o/uffwxc6Va6Vn63OzBzYgXWua/yWb+m7Q4/9nzcb7LNo6ld15qt61z//9Z699FvNzy/D96cUt2vj85Wb8eJhtXxXZ/3Dr2c7v2B93/7Pwf2Ln/40nz/drqk7fx7b6/0nbbHut/dH/970k+qpf35OuulWq1pamIPcn729dPP3pso97YP+v/iePtx7921//+iPi4y/7fOvr9i131f0Dnf+6Jzv+TF+6998k37drvbvx7rV46ka/pZvzr9gCf5bkDAAAAAACA3aYQEYciKRQ3y4VCsbjx+Y6jcaBQrlRrJy9Wli/PRf27suMxVmjc6T7c9HmIqfzzsI369Jb6TEQciYgvR/bX68XZSnlu0J0HAAAAAAAAAAAAAAAAAACAXeJg/Tv/I5v1xvf/M7+MDO64gD7xk98wvDrGfy9+6QnYlbz+w/AS/zC8xD8ML/EPw0v8w/AS/zC8uoj/Qj+OA+g/r/8AAAAAAAAAAAAAAAAAAAAAAAAAAADQU+fPncuW9bWH12ez+tzVleWFytVTc2l1obi4PFucrSxdKc5XKvPltDhbWez0/8qVypWp6Vi+NllLq7XJ6srqhcXK8uXahUuLpfn0QjrWl14BAAAAAAAAAAAAAAAAAADAv0t1ZXWhVC6nSwoKT1UY3R2HodDjwqBHJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB45O8AAAD//8A2OIo=") chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 2m28.203118377s ago: executing program 2 (id=1739): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x4) 2m28.195971546s ago: executing program 32 (id=1739): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x4) 1m31.256269772s ago: executing program 5 (id=3457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100), &(0x7f00000001c0)=@tcp}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m31.225141323s ago: executing program 5 (id=3458): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 1m31.144081904s ago: executing program 5 (id=3460): getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {0xa}, {0xd}, {0x1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x6c}}, 0x40) 1m30.527268094s ago: executing program 33 (id=3476): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {0xa}, {0xd}, {0x1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x6c}}, 0x40) 1.342300629s ago: executing program 0 (id=5935): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8011, r0, 0x2000) 1.119197463s ago: executing program 0 (id=5948): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23, @empty}, 0x10) 810.257847ms ago: executing program 3 (id=5968): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioperm(0x2, 0x1, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 754.122868ms ago: executing program 1 (id=5956): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 753.948358ms ago: executing program 3 (id=5958): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000300)={r2, r3/1000+10000}, 0x10) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 751.137219ms ago: executing program 4 (id=5959): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10) close(0x3) 730.989829ms ago: executing program 6 (id=5960): syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x822, &(0x7f0000203000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") mlockall(0x2) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) 723.136149ms ago: executing program 4 (id=5961): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) 687.625809ms ago: executing program 3 (id=5962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 687.213209ms ago: executing program 4 (id=5964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3c03, &(0x7f00000005c0)={0x0, 0x2283, 0x80, 0x1, 0x160}, &(0x7f0000000780)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc2, 0x101602, 0x12345}) io_uring_enter(r2, 0x1d69, 0x0, 0x0, 0x0, 0x0) 683.84254ms ago: executing program 1 (id=5975): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000000)={0x3, 0x2, "e900", 0xc}) 608.725521ms ago: executing program 1 (id=5965): sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0}, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000000c0)=ANY=[]) 608.347491ms ago: executing program 4 (id=5967): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 598.554761ms ago: executing program 3 (id=5969): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) clock_adjtime(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5b510f4a4fab5a62d5fa7e8ead851b01dbfdfe5823c2600"/3432], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 508.748062ms ago: executing program 1 (id=5970): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x4, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 508.464833ms ago: executing program 4 (id=5971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x25cf, 0x800000, 0x0, 0x0, 0xaf, 0x0, 0x1f4, 0x0, 0x20000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7b2, 0xfffffffb, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x9bd, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 508.083023ms ago: executing program 6 (id=5981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 458.597673ms ago: executing program 4 (id=5972): unshare(0x44040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000f4a0000000000002"], 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 376.713905ms ago: executing program 6 (id=5973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 304.481766ms ago: executing program 3 (id=5974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 303.867976ms ago: executing program 6 (id=5976): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x2, 0x1, 0x6, 0x2, 0xfffffeb6, 0x7f}}, {0x4}}, {{0x1c, 0x1, {0xa, 0xa0, 0x46, 0x3, 0x0, 0x6, 0xfffffff2, 0x2}}, {0x8, 0x2, [0x3, 0x3]}}, {{0x1c, 0x1, {0xfa, 0x3, 0xd, 0x3, 0x2, 0x62c, 0x10001, 0x3}}, {0xa, 0x2, [0x2, 0x133f, 0x2]}}]}]}, 0xb0}}, 0x0) 158.301338ms ago: executing program 0 (id=5977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 70.52493ms ago: executing program 0 (id=5978): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x1869, &(0x7f0000000800)={0x0, 0xead4, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x12, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 70.07654ms ago: executing program 6 (id=5979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) 61.35443ms ago: executing program 1 (id=5980): mkdir(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x28, r1, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}}, 0x40) 60.85481ms ago: executing program 0 (id=5982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x1, {}, 0xff}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x33455f3bf40dd4e0, 0x1, 0xffffffffffffffff}, 0xfe}, 0x18, &(0x7f0000000200)={0x0, 0x1e}, 0x4, 0x0, 0x0, 0x4c014}, 0x40008c1) 42.06954ms ago: executing program 3 (id=5983): socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 846.72µs ago: executing program 1 (id=5984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) 489.991µs ago: executing program 0 (id=5985): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0xff, 0x11dc, &(0x7f0000001280)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 6 (id=5994): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x1869, &(0x7f0000000800)={0x0, 0xead4, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x12, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): xt=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.011344][ T29] audit: type=1400 audit(1745224245.495:5346): avc: denied { listen } for pid=14518 comm="syz.1.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.041042][T14521] vhci_hcd: invalid port number 96 [ 179.046382][T14521] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 179.053856][ T29] audit: type=1400 audit(1745224245.515:5347): avc: denied { map } for pid=14520 comm="syz.0.4431" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 179.203515][T14537] atomic_op ffff888150b33d28 conn xmit_atomic 0000000000000000 [ 179.263775][T14543] netlink: 'syz.1.4438': attribute type 10 has an invalid length. [ 179.272537][T14543] batman_adv: batadv0: Adding interface: team0 [ 179.278785][T14543] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.304046][T14543] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 179.317875][T14543] netlink: 'syz.1.4438': attribute type 10 has an invalid length. [ 179.325971][T14543] team0: entered promiscuous mode [ 179.331078][T14543] team_slave_0: entered promiscuous mode [ 179.336926][T14543] team_slave_1: entered promiscuous mode [ 179.346401][T14543] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.353489][T14543] batman_adv: batadv0: Interface activated: team0 [ 179.360097][T14543] batman_adv: batadv0: Interface deactivated: team0 [ 179.366917][T14543] batman_adv: batadv0: Removing interface: team0 [ 179.438085][ T29] audit: type=1326 audit(1745224245.925:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14541 comm="syz.6.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a106e169 code=0x7ffc0000 [ 179.579274][T14559] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 179.615325][T14563] __nla_validate_parse: 6 callbacks suppressed [ 179.615341][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4449'. [ 179.637297][T14563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.655324][T14563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.662685][T14563] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 179.674187][T14563] bond1: (slave vti0): Error -95 calling set_mac_address [ 179.866598][T14576] atomic_op ffff888150b33d28 conn xmit_atomic 0000000000000000 [ 179.878006][T14575] loop3: detected capacity change from 0 to 1024 [ 179.905329][T14575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.956459][T14575] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 180.056669][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.089492][T14592] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 180.260725][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4467'. [ 180.370274][T14619] loop4: detected capacity change from 0 to 1024 [ 180.386607][T14619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.413772][T14624] bridge0: port 3(bond0) entered blocking state [ 180.420257][T14624] bridge0: port 3(bond0) entered disabled state [ 180.471998][T14619] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 180.499275][T14624] bond0: entered allmulticast mode [ 180.504496][T14624] bond_slave_0: entered allmulticast mode [ 180.510262][T14624] bridge0: entered allmulticast mode [ 180.520606][T14624] bond0: left allmulticast mode [ 180.525634][T14624] bond_slave_0: left allmulticast mode [ 180.531266][T14624] bridge0: left allmulticast mode [ 180.596981][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.616663][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4481'. [ 180.738231][T14648] loop3: detected capacity change from 0 to 512 [ 180.748161][T14650] xt_hashlimit: size too large, truncated to 1048576 [ 180.809490][T14648] EXT4-fs (loop3): 1 orphan inode deleted [ 180.829389][T14648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.842134][ T5102] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 1 [ 180.868046][T14648] ext4 filesystem being mounted at /915/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.919759][T14654] loop6: detected capacity change from 0 to 256 [ 180.940079][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.985111][T14654] FAT-fs (loop6): Directory bread(block 64) failed [ 180.993638][T14654] FAT-fs (loop6): Directory bread(block 65) failed [ 181.030694][T14654] FAT-fs (loop6): Directory bread(block 66) failed [ 181.046956][T14657] loop3: detected capacity change from 0 to 512 [ 181.063524][T14654] FAT-fs (loop6): Directory bread(block 67) failed [ 181.096230][T14654] FAT-fs (loop6): Directory bread(block 68) failed [ 181.103039][T14654] FAT-fs (loop6): Directory bread(block 69) failed [ 181.134160][T14654] FAT-fs (loop6): Directory bread(block 70) failed [ 181.140856][T14654] FAT-fs (loop6): Directory bread(block 71) failed [ 181.150987][T14654] FAT-fs (loop6): Directory bread(block 72) failed [ 181.157660][T14654] FAT-fs (loop6): Directory bread(block 73) failed [ 181.166266][T14657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.194099][T14657] ext4 filesystem being mounted at /916/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.194659][T14654] syz.6.4496: attempt to access beyond end of device [ 181.194659][T14654] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 181.296554][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4489'. [ 181.309018][T14670] bridge0: port 3(bond0) entered blocking state [ 181.313716][T14672] loop0: detected capacity change from 0 to 1024 [ 181.315368][T14670] bridge0: port 3(bond0) entered disabled state [ 181.330196][T14670] bond0: entered allmulticast mode [ 181.347379][T14672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.352925][T14670] bond0: entered promiscuous mode [ 181.382243][T14676] bond0: left allmulticast mode [ 181.387510][T14676] bond0: left promiscuous mode [ 181.392440][T14676] bridge0: port 3(bond0) entered disabled state [ 181.404080][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.413605][T14672] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 181.475228][T14678] loop3: detected capacity change from 0 to 128 [ 181.534742][T14678] syz.3.4493: attempt to access beyond end of device [ 181.534742][T14678] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 181.552316][T14682] netlink: 'syz.4.4495': attribute type 10 has an invalid length. [ 181.561448][T14678] syz.3.4493: attempt to access beyond end of device [ 181.561448][T14678] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 181.565727][T14684] loop6: detected capacity change from 0 to 512 [ 181.583178][T14682] netlink: 'syz.4.4495': attribute type 10 has an invalid length. [ 181.584259][T14678] syz.3.4493: attempt to access beyond end of device [ 181.584259][T14678] loop3: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 181.591233][T14682] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4495'. [ 181.617846][T14682] team0: entered promiscuous mode [ 181.618083][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.622989][T14682] team_slave_0: entered promiscuous mode [ 181.637972][T14682] team_slave_1: entered promiscuous mode [ 181.658173][T14682] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.666507][T14682] bridge0: port 3(team0) entered blocking state [ 181.672881][T14682] bridge0: port 3(team0) entered disabled state [ 181.682108][T14684] EXT4-fs (loop6): 1 orphan inode deleted [ 181.688943][T14684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.702997][T14684] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.713568][T14682] team0: entered allmulticast mode [ 181.718775][T14682] team_slave_0: entered allmulticast mode [ 181.724535][T14682] team_slave_1: entered allmulticast mode [ 181.754443][ T5146] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:60: Failed to release dquot type 1 [ 181.799636][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.921461][T14703] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4505'. [ 181.962983][T14707] bridge0: port 3(bond0) entered blocking state [ 181.969485][T14707] bridge0: port 3(bond0) entered disabled state [ 181.984195][T14707] bond0: entered allmulticast mode [ 181.989375][T14707] bond_slave_0: entered allmulticast mode [ 181.995173][T14707] bond_slave_1: entered allmulticast mode [ 182.009570][T14707] bond0: entered promiscuous mode [ 182.014719][T14707] bond_slave_0: entered promiscuous mode [ 182.020418][T14707] bond_slave_1: entered promiscuous mode [ 182.055323][T14707] bridge0: port 3(bond0) entered blocking state [ 182.061670][T14707] bridge0: port 3(bond0) entered forwarding state [ 182.069377][T14716] bond0: left allmulticast mode [ 182.074394][T14716] bond_slave_0: left allmulticast mode [ 182.080126][T14716] bond_slave_1: left allmulticast mode [ 182.085752][T14716] bond0: left promiscuous mode [ 182.090578][T14716] bond_slave_0: left promiscuous mode [ 182.096115][T14716] bond_slave_1: left promiscuous mode [ 182.101706][T14716] bridge0: port 3(bond0) entered disabled state [ 182.158218][T14720] netlink: 'syz.6.4513': attribute type 10 has an invalid length. [ 182.182607][T14720] batman_adv: batadv0: Adding interface: team0 [ 182.188993][T14720] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.214303][T14720] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 182.236740][T14722] netlink: 'syz.6.4513': attribute type 10 has an invalid length. [ 182.244723][T14722] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4513'. [ 182.254120][T14722] team0: entered promiscuous mode [ 182.259193][T14722] team_slave_0: entered promiscuous mode [ 182.265035][T14722] team_slave_1: entered promiscuous mode [ 182.272022][T14722] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.315595][T14722] batman_adv: batadv0: Interface activated: team0 [ 182.322173][T14722] batman_adv: batadv0: Interface deactivated: team0 [ 182.328902][T14722] batman_adv: batadv0: Removing interface: team0 [ 182.338050][T14724] xt_hashlimit: size too large, truncated to 1048576 [ 182.425546][T14722] bridge0: port 3(team0) entered blocking state [ 182.431898][T14722] bridge0: port 3(team0) entered disabled state [ 182.443267][T14722] team0: entered allmulticast mode [ 182.448569][T14722] team_slave_0: entered allmulticast mode [ 182.454538][T14722] team_slave_1: entered allmulticast mode [ 182.465326][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4526'. [ 182.485520][T14722] bridge0: port 3(team0) entered blocking state [ 182.491928][T14722] bridge0: port 3(team0) entered forwarding state [ 182.901099][T14766] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 182.963475][T14771] loop0: detected capacity change from 0 to 2048 [ 182.975161][T14775] cgroup: fork rejected by pids controller in /syz3 [ 182.984632][T14771] loop0: p1 < > p4 [ 182.988977][T14771] loop0: p4 size 8388608 extends beyond EOD, truncated [ 183.142358][T14788] bridge0: port 4(bond0) entered blocking state [ 183.148808][T14788] bridge0: port 4(bond0) entered disabled state [ 183.174151][T14788] bond0: entered allmulticast mode [ 183.180176][T14788] bond0: entered promiscuous mode [ 183.185330][T14788] gretap1: entered promiscuous mode [ 183.204498][T14790] bond0: left allmulticast mode [ 183.209485][T14790] bond0: left promiscuous mode [ 183.214427][T14790] gretap1: left promiscuous mode [ 183.219634][T14790] bridge0: port 4(bond0) entered disabled state [ 183.268672][T14792] loop0: detected capacity change from 0 to 512 [ 183.306397][T14792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.334603][T14792] ext4 filesystem being mounted at /887/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.494088][T14793] chnl_net:caif_netlink_parms(): no params data found [ 183.560607][T14793] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.567920][T14793] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.587308][T14793] bridge_slave_0: entered allmulticast mode [ 183.594185][T14793] bridge_slave_0: entered promiscuous mode [ 183.601136][T14793] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.608252][T14793] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.615569][T14793] bridge_slave_1: entered allmulticast mode [ 183.621987][T14793] bridge_slave_1: entered promiscuous mode [ 183.666075][T14793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.689065][T14793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.709351][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.764646][T14818] netlink: 'syz.0.4541': attribute type 10 has an invalid length. [ 183.791323][T14818] batman_adv: batadv0: Adding interface: team0 [ 183.797595][T14818] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.822806][T14818] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 183.844537][T14793] team0: Port device team_slave_0 added [ 183.851425][T14793] team0: Port device team_slave_1 added [ 183.865670][T14818] netlink: 'syz.0.4541': attribute type 10 has an invalid length. [ 183.873663][T14818] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4541'. [ 183.915621][T14818] team0: entered promiscuous mode [ 183.920800][T14818] team_slave_0: entered promiscuous mode [ 183.926703][T14818] team_slave_1: entered promiscuous mode [ 183.944620][T14818] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.956419][T14818] batman_adv: batadv0: Interface activated: team0 [ 183.962987][T14818] batman_adv: batadv0: Interface deactivated: team0 [ 183.969706][T14818] batman_adv: batadv0: Removing interface: team0 [ 184.006116][T14818] bridge0: port 4(team0) entered blocking state [ 184.012469][T14818] bridge0: port 4(team0) entered disabled state [ 184.034349][T14818] team0: entered allmulticast mode [ 184.039538][T14818] team_slave_0: entered allmulticast mode [ 184.045371][T14818] team_slave_1: entered allmulticast mode [ 184.104933][T14793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.112109][T14793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.138084][T14793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.185960][T14827] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 184.212124][T14793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.219180][T14793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.245238][T14793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.322045][T14834] cgroup: fork rejected by pids controller in /syz4 [ 184.346404][T14793] hsr_slave_0: entered promiscuous mode [ 184.352724][T14793] hsr_slave_1: entered promiscuous mode [ 184.373606][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4551'. [ 184.374700][T14793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.393103][T14793] Cannot create hsr debugfs directory [ 184.416998][T14838] vlan2: entered allmulticast mode [ 184.711313][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 184.711333][ T29] audit: type=1326 audit(1745224251.195:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14859 comm="syz.0.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 184.741088][ T29] audit: type=1326 audit(1745224251.195:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14859 comm="syz.0.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 184.770333][ T29] audit: type=1326 audit(1745224251.255:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14862 comm="syz.0.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8947b30a25 code=0x7ffc0000 [ 184.794142][ T29] audit: type=1326 audit(1745224251.255:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14859 comm="syz.0.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 184.817728][ T29] audit: type=1326 audit(1745224251.255:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14859 comm="syz.0.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 184.848333][ T29] audit: type=1326 audit(1745224251.335:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14859 comm="syz.0.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 184.872088][ T29] audit: type=1326 audit(1745224251.335:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14859 comm="syz.0.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 184.895608][ T29] audit: type=1326 audit(1745224251.335:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14859 comm="syz.0.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 184.919226][ T29] audit: type=1326 audit(1745224251.335:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14859 comm="syz.0.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 184.951256][ T29] audit: type=1326 audit(1745224251.435:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14862 comm="syz.0.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 184.989134][T14844] chnl_net:caif_netlink_parms(): no params data found [ 185.009028][T14869] loop6: detected capacity change from 0 to 128 [ 185.042480][T14793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.052686][T14869] syz.6.4561: attempt to access beyond end of device [ 185.052686][T14869] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 185.066383][T14869] syz.6.4561: attempt to access beyond end of device [ 185.066383][T14869] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 185.085605][T14793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.109193][T14793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.142486][T14793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.152186][T14844] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.159575][T14844] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.180478][T14844] bridge_slave_0: entered allmulticast mode [ 185.189620][T14844] bridge_slave_0: entered promiscuous mode [ 185.196818][T14844] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.203899][T14844] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.211492][T14844] bridge_slave_1: entered allmulticast mode [ 185.255787][T14844] bridge_slave_1: entered promiscuous mode [ 185.282374][T14885] __nla_validate_parse: 2 callbacks suppressed [ 185.282392][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4566'. [ 185.290458][T14844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.310794][T14887] bridge0: port 4(bond0) entered blocking state [ 185.317180][T14887] bridge0: port 4(bond0) entered disabled state [ 185.323854][T14887] bond0: entered allmulticast mode [ 185.329102][T14887] bond_slave_0: entered allmulticast mode [ 185.334970][T14887] bond_slave_1: entered allmulticast mode [ 185.343772][T14887] bond0: entered promiscuous mode [ 185.348948][T14887] bond_slave_0: entered promiscuous mode [ 185.354710][T14887] bond_slave_1: entered promiscuous mode [ 185.362606][T14887] bridge0: port 4(bond0) entered blocking state [ 185.368996][T14887] bridge0: port 4(bond0) entered forwarding state [ 185.375749][T14888] bond0: left allmulticast mode [ 185.380687][T14888] bond_slave_0: left allmulticast mode [ 185.386319][T14888] bond_slave_1: left allmulticast mode [ 185.391801][T14888] bond0: left promiscuous mode [ 185.396611][T14888] bond_slave_0: left promiscuous mode [ 185.402077][T14888] bond_slave_1: left promiscuous mode [ 185.407766][T14888] bridge0: port 4(bond0) entered disabled state [ 185.425922][T14844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.453742][T14844] team0: Port device team_slave_0 added [ 185.460769][T14844] team0: Port device team_slave_1 added [ 185.489811][T14844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.496861][T14844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.523244][T14844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.563453][T14844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.570587][T14844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.596633][T14844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.638071][T14844] hsr_slave_0: entered promiscuous mode [ 185.644807][T14844] hsr_slave_1: entered promiscuous mode [ 185.650746][T14844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.658468][T14844] Cannot create hsr debugfs directory [ 185.680453][T14793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.725529][T14793] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.742570][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.749725][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.768363][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.775559][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.808644][T14793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.883743][T14793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.954831][T14793] veth0_vlan: entered promiscuous mode [ 185.963194][T14793] veth1_vlan: entered promiscuous mode [ 185.988512][T14793] veth0_macvtap: entered promiscuous mode [ 185.996944][T14793] veth1_macvtap: entered promiscuous mode [ 186.007393][T14844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.017171][T14844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.026857][T14844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.037398][T14844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.048582][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.059259][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.069216][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.079719][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.091055][T14793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.107566][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.118219][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.128200][T14793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.138742][T14793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.151713][T14793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.172166][T14793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.181130][T14793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.190028][T14793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.198942][T14793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.247976][T14844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.253812][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4538'. [ 186.266091][T14844] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.278513][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.285678][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.304301][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4538'. [ 186.304362][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.304408][ T5120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.368907][T14928] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4578'. [ 186.401737][T14844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.420632][T14934] netlink: 'syz.3.4579': attribute type 10 has an invalid length. [ 186.431381][T14934] batman_adv: batadv0: Adding interface: team0 [ 186.437790][T14934] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.462987][T14934] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 186.475079][T14938] netlink: 'syz.3.4579': attribute type 10 has an invalid length. [ 186.482964][T14938] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4579'. [ 186.560142][T14938] team0: entered promiscuous mode [ 186.565331][T14938] team_slave_0: entered promiscuous mode [ 186.571409][T14938] team_slave_1: entered promiscuous mode [ 186.579476][T14938] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.588904][T14938] batman_adv: batadv0: Interface activated: team0 [ 186.595579][T14938] batman_adv: batadv0: Interface deactivated: team0 [ 186.602319][T14938] batman_adv: batadv0: Removing interface: team0 [ 186.611323][T14938] bridge0: port 3(team0) entered blocking state [ 186.617789][T14938] bridge0: port 3(team0) entered disabled state [ 186.627975][T14938] team0: entered allmulticast mode [ 186.633161][T14938] team_slave_0: entered allmulticast mode [ 186.638966][T14938] team_slave_1: entered allmulticast mode [ 186.646525][T14938] bridge0: port 3(team0) entered blocking state [ 186.652853][T14938] bridge0: port 3(team0) entered forwarding state [ 186.659845][T14949] bridge0: port 5(bond0) entered blocking state [ 186.666479][T14949] bridge0: port 5(bond0) entered disabled state [ 186.674180][T14949] bond0: entered allmulticast mode [ 186.684104][T14949] bond0: entered promiscuous mode [ 186.689193][T14949] gretap1: entered promiscuous mode [ 186.725113][T14956] serio: Serial port ptm0 [ 186.735435][T14950] bond0: left allmulticast mode [ 186.740371][T14950] bond0: left promiscuous mode [ 186.745297][T14950] gretap1: left promiscuous mode [ 186.750575][T14950] bridge0: port 5(bond0) entered disabled state [ 186.771709][T14844] veth0_vlan: entered promiscuous mode [ 186.798796][T14844] veth1_vlan: entered promiscuous mode [ 186.819198][T14844] veth0_macvtap: entered promiscuous mode [ 186.827530][T14844] veth1_macvtap: entered promiscuous mode [ 186.840801][T14844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.851512][T14844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.861452][T14844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.867754][T14969] loop6: detected capacity change from 0 to 2048 [ 186.871939][T14844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.888288][T14844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.898716][T14844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.909488][T14844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.918217][T14844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.928832][T14844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.938714][T14844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.949175][T14844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.959015][T14844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.969497][T14844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.980391][T14844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.998209][T14844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.007122][T14844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.008620][T14969] loop6: p1 < > p4 [ 187.016045][T14844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.028668][T14844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.030187][T14969] loop6: p4 size 8388608 extends beyond EOD, truncated [ 187.090835][T14975] loop4: detected capacity change from 0 to 512 [ 187.111460][T14975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.124295][T14975] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.277928][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.301759][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4594'. [ 187.318687][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4594'. [ 187.370492][T15001] loop4: detected capacity change from 0 to 512 [ 187.409516][T15001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.426401][T15001] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.443015][T15011] loop6: detected capacity change from 0 to 1024 [ 187.460412][T15011] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 187.569972][T15017] SELinux: security_context_str_to_sid () failed with errno=-22 [ 187.613746][T15021] loop6: detected capacity change from 0 to 2048 [ 187.623743][T15023] loop3: detected capacity change from 0 to 164 [ 187.627787][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.639830][T15023] ISOFS: unable to read i-node block [ 187.645273][T15023] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 187.669496][T15021] loop6: p1 < > p4 [ 187.675569][T15021] loop6: p4 size 8388608 extends beyond EOD, truncated [ 187.763445][T15038] netlink: 'syz.3.4613': attribute type 10 has an invalid length. [ 187.773091][T15038] bridge0: port 3(team0) entered disabled state [ 187.786364][T15041] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.4612'. [ 187.792761][T15038] team0: left allmulticast mode [ 187.795740][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4612'. [ 187.800538][T15038] team_slave_0: left allmulticast mode [ 187.800569][T15038] team_slave_1: left allmulticast mode [ 187.820636][T15038] team0: left promiscuous mode [ 187.825539][T15038] team_slave_0: left promiscuous mode [ 187.831138][T15038] team_slave_1: left promiscuous mode [ 187.836827][T15038] bridge0: port 3(team0) entered disabled state [ 187.863687][T15038] batman_adv: batadv0: Adding interface: team0 [ 187.869882][T15045] netlink: 'syz.3.4613': attribute type 10 has an invalid length. [ 187.869903][T15045] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4613'. [ 187.886837][T15038] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.912374][T15038] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 187.929068][T15044] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.941402][T15045] team0: entered promiscuous mode [ 187.946541][T15045] team_slave_0: entered promiscuous mode [ 187.952327][T15045] team_slave_1: entered promiscuous mode [ 187.966300][T15045] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.973603][T15045] batman_adv: batadv0: Interface activated: team0 [ 187.980270][T15045] batman_adv: batadv0: Interface deactivated: team0 [ 187.987099][T15045] batman_adv: batadv0: Removing interface: team0 [ 187.994842][T15045] bridge0: port 3(team0) entered blocking state [ 188.001186][T15045] bridge0: port 3(team0) entered disabled state [ 188.007948][T15045] team0: entered allmulticast mode [ 188.013092][T15045] team_slave_0: entered allmulticast mode [ 188.018930][T15045] team_slave_1: entered allmulticast mode [ 188.025748][T15045] bridge0: port 3(team0) entered blocking state [ 188.032153][T15045] bridge0: port 3(team0) entered forwarding state [ 188.047352][T15044] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.079062][T15051] geneve0: entered allmulticast mode [ 188.117596][T15044] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.187024][T15044] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.232122][T15044] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.243559][T15044] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.255322][T15044] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.266845][T15044] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.319164][T15064] loop3: detected capacity change from 0 to 1024 [ 188.329642][T15067] loop4: detected capacity change from 0 to 164 [ 188.339642][T15067] ISOFS: unable to read i-node block [ 188.345010][T15067] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 188.345786][T15064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.383695][T15070] loop6: detected capacity change from 0 to 512 [ 188.397277][T14793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.408123][T15070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.420791][T15070] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.502552][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.547352][T15083] pim6reg1: entered promiscuous mode [ 188.552741][T15083] pim6reg1: entered allmulticast mode [ 188.685681][T15088] cgroup2: Unknown parameter 'def' [ 188.825436][T15094] loop6: detected capacity change from 0 to 8192 [ 188.892242][T15102] loop4: detected capacity change from 0 to 512 [ 188.894519][T15094] loop6: p1 p2 [ 188.919885][T15102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.933039][T15102] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.029986][T15116] wireguard0: entered promiscuous mode [ 189.035723][T15116] wireguard0: entered allmulticast mode [ 189.077160][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.208060][T15135] loop4: detected capacity change from 0 to 8192 [ 189.256647][T15135] loop4: p1 p2 [ 189.351098][T15155] loop6: detected capacity change from 0 to 512 [ 189.370774][T15155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.389454][T15155] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.476098][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.494752][ C1] vcan0: j1939_tp_rxtimer: 0xffff888193714400: rx timeout, send abort [ 190.503057][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888193714400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 191.044122][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4663'. [ 191.119935][T15178] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.190793][T15178] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.259969][T15178] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.336934][T15178] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.386905][T15218] bridge0: port 4(bond0) entered blocking state [ 191.393271][T15218] bridge0: port 4(bond0) entered disabled state [ 191.401361][T15218] bond0: entered allmulticast mode [ 191.406601][T15218] bond_slave_0: entered allmulticast mode [ 191.412388][T15218] bond_slave_1: entered allmulticast mode [ 191.418865][T15218] bond0: entered promiscuous mode [ 191.423962][T15218] bond_slave_0: entered promiscuous mode [ 191.429747][T15218] bond_slave_1: entered promiscuous mode [ 191.436641][T15218] bridge0: port 4(bond0) entered blocking state [ 191.442978][T15218] bridge0: port 4(bond0) entered forwarding state [ 191.461490][T15178] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.470866][T15218] bond0: left allmulticast mode [ 191.475980][T15218] bond_slave_0: left allmulticast mode [ 191.481732][T15218] bond_slave_1: left allmulticast mode [ 191.487444][T15218] bond0: left promiscuous mode [ 191.492232][T15218] bond_slave_0: left promiscuous mode [ 191.497813][T15218] bond_slave_1: left promiscuous mode [ 191.503451][T15218] bridge0: port 4(bond0) entered disabled state [ 191.516573][T15178] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.535466][T15178] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.551765][T15178] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.637012][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 191.637030][ T29] audit: type=1326 audit(1745224258.125:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15243 comm="syz.4.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 191.667823][ T29] audit: type=1326 audit(1745224258.135:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15243 comm="syz.4.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 191.691557][ T29] audit: type=1326 audit(1745224258.135:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15243 comm="syz.4.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 191.715120][ T29] audit: type=1326 audit(1745224258.135:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15243 comm="syz.4.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 191.738717][ T29] audit: type=1326 audit(1745224258.135:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15243 comm="syz.4.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 191.762597][ T29] audit: type=1326 audit(1745224258.135:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15243 comm="syz.4.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 191.797977][ T29] audit: type=1326 audit(1745224258.225:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15243 comm="syz.4.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 191.821639][ T29] audit: type=1326 audit(1745224258.225:5464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15243 comm="syz.4.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 191.845541][ T29] audit: type=1326 audit(1745224258.255:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15243 comm="syz.4.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 191.869376][ T29] audit: type=1326 audit(1745224258.255:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15243 comm="syz.4.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 192.156409][T15273] SELinux: failed to load policy [ 192.208742][T15282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4708'. [ 192.216813][T15284] loop6: detected capacity change from 0 to 512 [ 192.224816][T15284] EXT4-fs: dax option not supported [ 192.274539][T15291] loop6: detected capacity change from 0 to 1024 [ 192.307317][T15291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.328367][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4713'. [ 192.358654][T15291] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 192.381919][T15304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.403042][T15307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4716'. [ 192.412863][T15308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.421855][T15308] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 192.462537][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.482807][T15308] bond2: (slave vti0): Error -95 calling set_mac_address [ 192.549836][T15315] loop6: detected capacity change from 0 to 2048 [ 192.597488][T15315] EXT4-fs error (device loop6): ext4_orphan_get:1416: comm syz.6.4718: bad orphan inode 8192 [ 192.626395][T15315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.665363][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.682092][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4723'. [ 192.698937][T15327] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4724'. [ 192.716940][T15325] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 192.802372][T15336] vlan2: entered allmulticast mode [ 193.028664][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4733'. [ 193.066035][T15351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.071920][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4736'. [ 193.100954][T15355] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.133554][T15351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.150485][T15351] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 193.166791][T15351] bond2: (slave vti0): Error -95 calling set_mac_address [ 193.182472][T15358] bond2: (slave dummy0): Error -99 calling set_mac_address [ 193.195092][T15355] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.276165][T15355] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.300929][T15365] loop4: detected capacity change from 0 to 2048 [ 193.333293][T15365] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.4740: bad orphan inode 8192 [ 193.351988][T15355] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.363584][T15365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.404125][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.473419][T15381] vlan2: entered allmulticast mode [ 193.696840][T15394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4749'. [ 193.828571][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4752'. [ 193.843789][T15401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.865864][T15399] wg2: entered promiscuous mode [ 193.870792][T15399] wg2: entered allmulticast mode [ 193.902111][T15401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.917380][T15401] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 193.928562][T15401] bond3: (slave vti0): Error -95 calling set_mac_address [ 193.939231][T15406] bond3: (slave dummy0): Error -99 calling set_mac_address [ 193.970676][T15413] netlink: 'syz.1.4768': attribute type 10 has an invalid length. [ 193.981722][T15413] team0: left promiscuous mode [ 193.986823][T15413] team_slave_0: left promiscuous mode [ 193.992432][T15413] team_slave_1: left promiscuous mode [ 194.004754][T15413] batman_adv: batadv0: Adding interface: team0 [ 194.011079][T15413] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.036309][T15413] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 194.038684][T15414] netlink: 'syz.1.4768': attribute type 10 has an invalid length. [ 194.057607][T15416] loop0: detected capacity change from 0 to 256 [ 194.058371][T15414] team0: entered promiscuous mode [ 194.069069][T15414] team_slave_0: entered promiscuous mode [ 194.074911][T15414] team_slave_1: entered promiscuous mode [ 194.082457][T15414] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.093664][T15414] batman_adv: batadv0: Interface activated: team0 [ 194.100334][T15414] batman_adv: batadv0: Interface deactivated: team0 [ 194.107090][T15414] batman_adv: batadv0: Removing interface: team0 [ 194.108314][T15416] syz.0.4757: attempt to access beyond end of device [ 194.108314][T15416] loop0: rw=0, sector=256, nr_sectors = 20 limit=256 [ 194.262218][T15428] netlink: 'syz.4.4776': attribute type 10 has an invalid length. [ 194.284390][T15428] batman_adv: batadv0: Adding interface: team0 [ 194.290597][T15428] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.315949][T15428] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 194.331091][T15428] netlink: 'syz.4.4776': attribute type 10 has an invalid length. [ 194.342265][T15428] team0: entered promiscuous mode [ 194.347452][T15428] team_slave_0: entered promiscuous mode [ 194.353183][T15428] team_slave_1: entered promiscuous mode [ 194.363078][T15428] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.370719][T15428] batman_adv: batadv0: Interface activated: team0 [ 194.377288][T15428] batman_adv: batadv0: Interface deactivated: team0 [ 194.384097][T15428] batman_adv: batadv0: Removing interface: team0 [ 194.395599][T15428] bridge0: port 3(team0) entered blocking state [ 194.401942][T15428] bridge0: port 3(team0) entered disabled state [ 194.422728][T15428] team0: entered allmulticast mode [ 194.428153][T15428] team_slave_0: entered allmulticast mode [ 194.433959][T15428] team_slave_1: entered allmulticast mode [ 194.454295][T15428] bridge0: port 3(team0) entered blocking state [ 194.460690][T15428] bridge0: port 3(team0) entered forwarding state [ 194.564979][T15437] infiniband syz1: set active [ 194.569751][T15437] infiniband syz1: added syz_tun [ 194.617955][T15437] RDS/IB: syz1: added [ 194.637517][T15437] smc: adding ib device syz1 with port count 1 [ 194.666549][T15437] smc: ib device syz1 port 1 has pnetid [ 194.785883][T15451] loop0: detected capacity change from 0 to 512 [ 194.864476][T15451] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.4770: corrupted in-inode xattr: invalid ea_ino [ 194.880101][T15451] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.4770: couldn't read orphan inode 15 (err -117) [ 194.893027][T15451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.912303][T15451] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 194.936043][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.842416][T15355] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.855874][T15355] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.867532][T15355] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.879065][T15355] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.085252][T15481] loop0: detected capacity change from 0 to 2048 [ 196.118741][T15481] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.4782: bad orphan inode 8192 [ 196.133465][T15481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.158931][T15492] loop3: detected capacity change from 0 to 256 [ 196.196022][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.245471][T15492] syz.3.4788: attempt to access beyond end of device [ 196.245471][T15492] loop3: rw=0, sector=256, nr_sectors = 20 limit=256 [ 196.410326][T15503] __nla_validate_parse: 2 callbacks suppressed [ 196.410370][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4796'. [ 196.518687][T15515] loop3: detected capacity change from 0 to 164 [ 196.532464][T15515] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 196.542801][T15515] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 196.589956][T15527] loop4: detected capacity change from 0 to 256 [ 196.627713][T15527] syz.4.4806: attempt to access beyond end of device [ 196.627713][T15527] loop4: rw=0, sector=256, nr_sectors = 20 limit=256 [ 196.652074][T15529] loop3: detected capacity change from 0 to 512 [ 196.677684][T15529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.690790][T15529] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.705892][T15529] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.4807: corrupted inode contents [ 196.719825][T15529] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.4807: mark_inode_dirty error [ 196.731469][T15529] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.4807: corrupted inode contents [ 196.754969][T15529] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.4807: mark_inode_dirty error [ 196.795121][T14793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.847167][T15541] loop4: detected capacity change from 0 to 128 [ 196.870412][T15541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 196.882889][T15541] System zones: 1-3, 19-19, 35-36 [ 196.906192][T15541] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.928619][T15541] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.023698][T14844] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.120408][T15564] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4821'. [ 197.132261][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 197.132298][ T29] audit: type=1400 audit(1745224263.611:5728): avc: denied { unmount } for pid=14844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 197.163552][ T29] audit: type=1326 audit(1745224263.641:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15566 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 197.189451][ T29] audit: type=1326 audit(1745224263.641:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15566 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 197.213093][ T29] audit: type=1326 audit(1745224263.641:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15566 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c9b49e1a3 code=0x7ffc0000 [ 197.236463][ T29] audit: type=1326 audit(1745224263.651:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15566 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3c9b49cc1f code=0x7ffc0000 [ 197.281649][ T29] audit: type=1326 audit(1745224263.681:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15566 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3c9b49e1f7 code=0x7ffc0000 [ 197.305215][ T29] audit: type=1326 audit(1745224263.681:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15566 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c9b49cad0 code=0x7ffc0000 [ 197.328782][ T29] audit: type=1326 audit(1745224263.681:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15566 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3c9b49cdca code=0x7ffc0000 [ 197.352211][ T29] audit: type=1326 audit(1745224263.681:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15566 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 197.375849][ T29] audit: type=1326 audit(1745224263.681:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15566 comm="syz.1.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 197.399691][T15575] ref_ctr_offset mismatch. inode: 0x151d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 197.421996][T15569] netlink: 'syz.4.4824': attribute type 21 has an invalid length. [ 197.452864][T15569] netlink: 'syz.4.4824': attribute type 1 has an invalid length. [ 197.460734][T15569] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4824'. [ 197.484516][T15581] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 197.610818][T15594] loop8: detected capacity change from 0 to 7 [ 197.646660][T15599] netlink: 'syz.0.4837': attribute type 178 has an invalid length. [ 197.677197][T15603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4839'. [ 197.705171][T15604] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.782444][T15604] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.835680][T15604] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.885979][T15604] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.940546][T15604] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.952066][T15604] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.963482][T15604] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.975391][T15604] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.507290][T15614] loop0: detected capacity change from 0 to 512 [ 198.516664][T15614] EXT4-fs: Ignoring removed nobh option [ 198.522380][T15610] loop4: detected capacity change from 0 to 1024 [ 198.522710][T15614] EXT4-fs: journaled quota format not specified [ 198.551702][T15614] loop0: detected capacity change from 0 to 512 [ 198.586293][T15614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 198.604439][T15610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.624132][T15614] ext4 filesystem being mounted at /943/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.685059][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.702174][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 198.780486][T15635] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4851'. [ 199.740265][T15659] bridge: RTM_NEWNEIGH with invalid ether address [ 199.802484][T15663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4863'. [ 200.068993][T15698] sd 0:0:1:0: device reset [ 200.124671][T15703] tipc: Started in network mode [ 200.129629][T15703] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 200.138673][T15703] tipc: Enabling of bearer rejected, failed to enable media [ 200.996117][T15806] bond0: entered promiscuous mode [ 201.001296][T15806] bond_slave_0: entered promiscuous mode [ 201.007241][T15806] bond_slave_1: entered promiscuous mode [ 201.015693][T15806] batadv0: entered promiscuous mode [ 201.021676][T15806] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 201.031780][T15806] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 201.043711][T15806] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 201.069297][T15806] bond0: left promiscuous mode [ 201.074208][T15806] bond_slave_0: left promiscuous mode [ 201.079672][T15806] bond_slave_1: left promiscuous mode [ 201.093322][T15806] batadv0: left promiscuous mode [ 201.563829][T15811] Set syz1 is full, maxelem 65536 reached [ 201.606697][T15849] loop0: detected capacity change from 0 to 1764 [ 201.616455][T15848] loop3: detected capacity change from 0 to 512 [ 201.639552][T15848] EXT4-fs: Ignoring removed orlov option [ 201.648508][T15848] EXT4-fs: inline encryption not supported [ 201.677185][T15848] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.4907: corrupted in-inode xattr: invalid ea_ino [ 201.718720][T15864] loop0: detected capacity change from 0 to 256 [ 201.727565][T15848] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4907: couldn't read orphan inode 15 (err -117) [ 201.749035][T15848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.782506][T15848] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4907: bg 0: block 411: padding at end of block bitmap is not set [ 201.802813][T15872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4918'. [ 201.808157][T15848] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 201.823654][T15872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4918'. [ 201.833213][T15848] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4907: invalid indirect mapped block 234881024 (level 0) [ 201.911339][T14793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.064781][T15908] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 202.236461][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 202.236481][ T29] audit: type=1326 audit(1745224268.721:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15924 comm="syz.4.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 202.269010][ T29] audit: type=1326 audit(1745224268.721:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15924 comm="syz.4.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 202.292798][ T29] audit: type=1326 audit(1745224268.721:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15924 comm="syz.4.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 202.316495][ T29] audit: type=1326 audit(1745224268.721:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15924 comm="syz.4.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 202.340264][ T29] audit: type=1326 audit(1745224268.721:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15924 comm="syz.4.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 202.363889][ T29] audit: type=1326 audit(1745224268.721:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15924 comm="syz.4.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 202.365927][T15931] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:0 [ 202.387726][ T29] audit: type=1326 audit(1745224268.721:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15924 comm="syz.4.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 202.387764][ T29] audit: type=1326 audit(1745224268.721:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15924 comm="syz.4.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 202.387794][ T29] audit: type=1326 audit(1745224268.721:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15924 comm="syz.4.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 202.465477][ T29] audit: type=1326 audit(1745224268.721:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15924 comm="syz.4.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b4a2e169 code=0x7ffc0000 [ 202.564186][T15941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4949'. [ 202.596224][T15943] loop4: detected capacity change from 0 to 1024 [ 202.607408][T15943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.620522][T15943] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.692729][ T5089] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:16: bg 0: block 393: padding at end of block bitmap is not set [ 202.711499][T15951] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 202.731526][ T5089] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 202.744447][ T5089] EXT4-fs (loop4): This should not happen!! Data will be lost [ 202.744447][ T5089] [ 202.766796][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.800121][T15957] loop4: detected capacity change from 0 to 128 [ 202.807386][T15957] vfat: Unknown parameter '@' [ 202.816881][T15961] loop3: detected capacity change from 0 to 512 [ 202.824120][T15961] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.859922][T15961] EXT4-fs (loop3): 1 truncate cleaned up [ 202.874049][T15961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.005743][T14793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.191172][T15995] @: renamed from vlan0 [ 203.208004][T15997] bridge: RTM_NEWNEIGH with invalid ether address [ 203.480869][T16021] tipc: Started in network mode [ 203.485927][T16021] tipc: Node identity ac14140f, cluster identity 4711 [ 203.494862][T16021] tipc: New replicast peer: 255.255.255.255 [ 203.501069][T16021] tipc: Enabled bearer , priority 10 [ 203.507694][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4983'. [ 203.516776][T16021] tipc: Disabling bearer [ 203.605000][T16032] loop0: detected capacity change from 0 to 512 [ 203.686675][T16032] EXT4-fs (loop0): 1 orphan inode deleted [ 203.698546][T16032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.737610][T16032] ext4 filesystem being mounted at /975/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.766512][ T5149] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:63: Failed to release dquot type 1 [ 203.807042][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.122352][T16051] loop3: detected capacity change from 0 to 512 [ 204.157546][T16051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.182597][T16051] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.228856][T14793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.243743][T16055] loop4: detected capacity change from 0 to 512 [ 204.258959][T16055] EXT4-fs (loop4): too many log groups per flexible block group [ 204.266878][T16055] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 204.276207][T16055] EXT4-fs (loop4): mount failed [ 204.413914][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5001'. [ 204.425840][T16068] IPVS: Error joining to the multicast group [ 204.522646][T16084] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5007'. [ 204.920303][T16134] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5031'. [ 204.929369][T16134] netem: unknown loss type 13 [ 204.934120][T16134] netem: change failed [ 205.025424][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5037'. [ 205.036180][T16150] ALSA: seq fatal error: cannot create timer (-22) [ 205.082575][T16155] loop0: detected capacity change from 0 to 128 [ 205.101837][T16159] loop6: detected capacity change from 0 to 764 [ 205.109711][T16159] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 205.126356][T16155] syz.0.5041: attempt to access beyond end of device [ 205.126356][T16155] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 205.185428][T16165] netlink: 'syz.6.5046': attribute type 12 has an invalid length. [ 205.193403][T16165] netlink: 'syz.6.5046': attribute type 29 has an invalid length. [ 205.201324][T16165] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5046'. [ 205.210472][T16165] netlink: 'syz.6.5046': attribute type 2 has an invalid length. [ 205.218261][T16165] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5046'. [ 205.312825][T16178] loop4: detected capacity change from 0 to 1024 [ 205.323591][T16178] EXT4-fs: Ignoring removed bh option [ 205.368291][T16178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.388872][T16178] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.5052: Abort forced by user [ 205.409062][T16178] EXT4-fs (loop4): Remounting filesystem read-only [ 205.415717][T16178] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 205.436739][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.485156][T16185] loop6: detected capacity change from 0 to 512 [ 205.505826][T16185] EXT4-fs (loop6): too many log groups per flexible block group [ 205.513701][T16185] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 205.521501][T16185] EXT4-fs (loop6): mount failed [ 205.577409][T16205] loop6: detected capacity change from 0 to 128 [ 205.658642][T16205] syz.6.5062: attempt to access beyond end of device [ 205.658642][T16205] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 205.719937][T16212] IPVS: Error joining to the multicast group [ 205.889749][T16223] loop0: detected capacity change from 0 to 512 [ 205.918872][T16223] EXT4-fs (loop0): too many log groups per flexible block group [ 205.926688][T16223] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 205.949237][T16223] EXT4-fs (loop0): mount failed [ 206.109761][T16243] IPVS: Error joining to the multicast group [ 206.312071][T16255] loop3: detected capacity change from 0 to 128 [ 206.359008][T16255] syz.3.5083: attempt to access beyond end of device [ 206.359008][T16255] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 206.492651][T16265] ALSA: seq fatal error: cannot create timer (-22) [ 206.633382][T16281] netem: unknown loss type 13 [ 206.638213][T16281] netem: change failed [ 206.687811][T16287] loop4: detected capacity change from 0 to 128 [ 206.730314][T16287] syz.4.5099: attempt to access beyond end of device [ 206.730314][T16287] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 207.248607][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 207.248621][ T29] audit: type=1326 audit(1745224273.731:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 207.289207][ T29] audit: type=1326 audit(1745224273.751:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c9b43a359 code=0x7ffc0000 [ 207.312807][ T29] audit: type=1326 audit(1745224273.751:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c9b495127 code=0x7ffc0000 [ 207.336287][ T29] audit: type=1326 audit(1745224273.751:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c9b43a359 code=0x7ffc0000 [ 207.360030][ T29] audit: type=1326 audit(1745224273.751:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c9b495127 code=0x7ffc0000 [ 207.383645][ T29] audit: type=1326 audit(1745224273.751:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c9b43a359 code=0x7ffc0000 [ 207.407334][ T29] audit: type=1326 audit(1745224273.751:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c9b495127 code=0x7ffc0000 [ 207.430984][ T29] audit: type=1326 audit(1745224273.751:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c9b43a359 code=0x7ffc0000 [ 207.454526][ T29] audit: type=1326 audit(1745224273.751:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c9b495127 code=0x7ffc0000 [ 207.478041][ T29] audit: type=1326 audit(1745224273.751:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.1.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c9b43a359 code=0x7ffc0000 [ 207.620699][T16339] loop0: detected capacity change from 0 to 764 [ 207.637665][T16339] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 207.760466][T16356] ALSA: seq fatal error: cannot create timer (-22) [ 207.770501][T16354] serio: Serial port ptm0 [ 207.855445][T16364] __nla_validate_parse: 5 callbacks suppressed [ 207.855504][T16364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5127'. [ 207.907169][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5127'. [ 207.968162][T16380] loop4: detected capacity change from 0 to 764 [ 207.977154][T16380] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 208.071439][T16388] loop3: detected capacity change from 0 to 128 [ 208.128205][T16388] syz.3.5144: attempt to access beyond end of device [ 208.128205][T16388] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 208.152286][T16393] ALSA: seq fatal error: cannot create timer (-22) [ 208.162032][T16395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5156'. [ 208.342245][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5154'. [ 208.366664][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5154'. [ 208.453608][T16430] ALSA: seq fatal error: cannot create timer (-22) [ 208.851409][T16464] SELinux: security_context_str_to_sid () failed with errno=-22 [ 208.895110][T16468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5177'. [ 208.935777][T16473] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5192'. [ 208.953610][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5177'. [ 209.580980][T16512] loop6: detected capacity change from 0 to 1024 [ 209.615404][T16512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.646155][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.956905][T16524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5201'. [ 209.976488][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5201'. [ 210.025207][T16532] cgroup2: Unknown parameter 'def' [ 210.409360][T16558] loop6: detected capacity change from 0 to 1024 [ 210.419231][T16558] EXT4-fs: Ignoring removed bh option [ 210.439010][T16558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.459324][T16558] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.5226: Abort forced by user [ 210.470542][T16558] EXT4-fs (loop6): Remounting filesystem read-only [ 210.477287][T16558] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 210.503388][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.523834][T16567] loop0: detected capacity change from 0 to 512 [ 210.535705][T16568] cgroup2: Unknown parameter 'def' [ 210.552036][T16567] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 210.580527][T16567] EXT4-fs (loop0): mount failed [ 210.990190][T16586] pim6reg1: entered promiscuous mode [ 210.995636][T16586] pim6reg1: entered allmulticast mode [ 211.382918][T16612] loop3: detected capacity change from 0 to 512 [ 211.409778][T16612] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.425823][T16610] wireguard0: entered promiscuous mode [ 211.431408][T16610] wireguard0: entered allmulticast mode [ 211.443527][T16612] EXT4-fs (loop3): mount failed [ 211.987073][T16677] wireguard0: entered promiscuous mode [ 211.992740][T16677] wireguard0: entered allmulticast mode [ 212.288370][ T29] kauditd_printk_skb: 551 callbacks suppressed [ 212.288387][ T29] audit: type=1326 audit(1745224278.771:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16685 comm="syz.1.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 212.319365][ T29] audit: type=1326 audit(1745224278.811:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16685 comm="syz.1.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 212.343008][ T29] audit: type=1326 audit(1745224278.811:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16685 comm="syz.1.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 212.366500][ T29] audit: type=1326 audit(1745224278.811:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16685 comm="syz.1.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 212.390080][ T29] audit: type=1326 audit(1745224278.811:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16685 comm="syz.1.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 212.413636][ T29] audit: type=1326 audit(1745224278.811:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16685 comm="syz.1.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 212.437385][ T29] audit: type=1326 audit(1745224278.811:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16685 comm="syz.1.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 213.589731][T16720] futex_wake_op: syz.4.5286 tries to shift op by -1; fix this program [ 213.717239][T16741] loop9: detected capacity change from 0 to 7 [ 213.724194][T16741] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.732370][T16741] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.740398][T16741] loop9: unable to read partition table [ 213.746803][T16741] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 213.746803][T16741] U) failed (rc=-5) [ 213.835167][T16752] wireguard2: entered promiscuous mode [ 213.840762][T16752] wireguard2: entered allmulticast mode [ 213.843791][T16755] __nla_validate_parse: 2 callbacks suppressed [ 213.843808][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5291'. [ 213.886651][T16755] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 213.896557][T16753] wg2: entered promiscuous mode [ 213.901497][T16753] wg2: entered allmulticast mode [ 213.961796][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5307'. [ 213.971161][T16767] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 214.136361][T16788] wg2: entered promiscuous mode [ 214.141279][T16788] wg2: entered allmulticast mode [ 214.142500][T16793] futex_wake_op: syz.0.5309 tries to shift op by -1; fix this program [ 214.226068][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5314'. [ 214.238198][T16803] wireguard0: entered promiscuous mode [ 214.243716][T16803] wireguard0: entered allmulticast mode [ 214.271388][T16800] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 214.576400][T16834] wg2: entered promiscuous mode [ 214.581329][T16834] wg2: entered allmulticast mode [ 214.816662][T16845] wireguard2: entered promiscuous mode [ 214.822250][T16845] wireguard2: entered allmulticast mode [ 214.881290][T16848] loop9: detected capacity change from 0 to 7 [ 214.887893][T16848] Buffer I/O error on dev loop9, logical block 0, async page read [ 214.897515][T16848] Buffer I/O error on dev loop9, logical block 0, async page read [ 214.905418][T16848] loop9: unable to read partition table [ 214.911230][T16848] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 214.911230][T16848] U) failed (rc=-5) [ 215.429730][T16880] wireguard0: entered promiscuous mode [ 215.435318][T16880] wireguard0: entered allmulticast mode [ 215.518629][T16885] futex_wake_op: syz.1.5344 tries to shift op by -1; fix this program [ 215.625955][T16892] wg2: entered promiscuous mode [ 215.630864][T16892] wg2: entered allmulticast mode [ 215.635501][T16894] loop3: detected capacity change from 0 to 2048 [ 215.664428][T16894] loop3: p1 < > p4 [ 215.668791][T16894] loop3: p4 size 8388608 extends beyond EOD, truncated [ 215.765948][T16902] wireguard0: entered promiscuous mode [ 215.771485][T16902] wireguard0: entered allmulticast mode [ 215.863930][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811f737000: rx timeout, send abort [ 215.872249][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811f737000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 216.110806][T16928] wireguard0: entered promiscuous mode [ 216.116386][T16928] wireguard0: entered allmulticast mode [ 216.338409][T16950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.359582][T16950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.519296][T16960] netlink: 204 bytes leftover after parsing attributes in process `syz.6.5378'. [ 216.909585][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5384'. [ 216.956273][T16973] wireguard0: entered promiscuous mode [ 216.961898][T16973] wireguard0: entered allmulticast mode [ 217.066835][ T29] audit: type=1326 audit(1745224283.551:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16977 comm="syz.1.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 217.090413][ T29] audit: type=1326 audit(1745224283.551:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16977 comm="syz.1.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 217.134050][ T29] audit: type=1326 audit(1745224283.551:6596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16977 comm="syz.1.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c9b49e169 code=0x7ffc0000 [ 217.294554][T16989] loop4: detected capacity change from 0 to 164 [ 217.296035][T16991] loop3: detected capacity change from 0 to 128 [ 217.312621][T16989] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 217.324959][T16989] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 217.334878][T16991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 217.343007][T16991] System zones: 1-3, 19-19, 35-36 [ 217.370629][T16991] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.391044][T16991] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 217.538929][T14793] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.582238][T17003] netlink: 'syz.1.5396': attribute type 178 has an invalid length. [ 217.633383][T17007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5398'. [ 217.756574][T17018] wireguard0: entered promiscuous mode [ 217.762123][T17018] wireguard0: entered allmulticast mode [ 217.949993][T17036] loop0: detected capacity change from 0 to 2048 [ 218.026716][T17036] loop0: p1 < > p4 [ 218.034390][T17036] loop0: p4 size 8388608 extends beyond EOD, truncated [ 218.196536][T17051] netlink: 'syz.1.5410': attribute type 21 has an invalid length. [ 218.206509][T17051] netlink: 'syz.1.5410': attribute type 1 has an invalid length. [ 218.214324][T17051] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5410'. [ 218.362096][T17058] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5418'. [ 218.466675][T17063] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 218.548682][T17072] sd 0:0:1:0: device reset [ 218.597907][T17077] rdma_rxe: rxe_newlink: failed to add syz_tun [ 218.633807][T17083] loop6: detected capacity change from 0 to 128 [ 218.641820][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 218.641836][ T29] audit: type=1326 audit(1745224285.121:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17079 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 218.674534][ T29] audit: type=1326 audit(1745224285.121:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17079 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 218.698070][ T29] audit: type=1326 audit(1745224285.121:6615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17079 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 218.721665][ T29] audit: type=1326 audit(1745224285.121:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17079 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 218.745186][ T29] audit: type=1326 audit(1745224285.121:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17079 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 218.768839][ T29] audit: type=1326 audit(1745224285.121:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17079 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 218.792286][ T29] audit: type=1326 audit(1745224285.121:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17079 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 218.815819][ T29] audit: type=1326 audit(1745224285.121:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17079 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 218.839389][ T29] audit: type=1326 audit(1745224285.121:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17079 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2bdae15127 code=0x7ffc0000 [ 218.862879][ T29] audit: type=1326 audit(1745224285.121:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17079 comm="syz.3.5440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2bdadba359 code=0x7ffc0000 [ 218.888673][T17083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 218.905607][T17083] System zones: 1-3, 19-19, 35-36 [ 218.955276][T17083] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.006376][T17083] ext4 filesystem being mounted at /215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 219.097273][T14055] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.162513][T17092] loop6: detected capacity change from 0 to 1024 [ 219.216249][T17092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.274899][T17103] loop4: detected capacity change from 0 to 2048 [ 219.307592][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.324636][T17103] loop4: p1 < > p4 [ 219.329087][T17103] loop4: p4 size 8388608 extends beyond EOD, truncated [ 219.410947][T17121] bridge: RTM_NEWNEIGH with invalid ether address [ 219.480837][T17131] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5448'. [ 219.541393][T17139] loop3: detected capacity change from 0 to 1024 [ 219.576801][T17139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.626297][T14793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.756409][T17154] bond0: entered promiscuous mode [ 219.761516][T17154] bond_slave_0: entered promiscuous mode [ 219.767516][T17154] bond_slave_1: entered promiscuous mode [ 219.787256][T17154] batadv0: entered promiscuous mode [ 219.793398][T17154] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 219.806640][T17154] bond0: left promiscuous mode [ 219.811439][T17154] bond_slave_0: left promiscuous mode [ 219.816969][T17154] bond_slave_1: left promiscuous mode [ 219.831944][T17154] batadv0: left promiscuous mode [ 220.070737][T17181] bridge: RTM_NEWNEIGH with invalid ether address [ 220.097505][T17184] rdma_rxe: rxe_newlink: failed to add syz_tun [ 220.351257][T17197] bond0: entered promiscuous mode [ 220.356402][T17197] bond_slave_0: entered promiscuous mode [ 220.362121][T17197] bond_slave_1: entered promiscuous mode [ 220.375794][T17197] batadv0: entered promiscuous mode [ 220.382049][T17197] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 220.394035][T17197] bond0: left promiscuous mode [ 220.398838][T17197] bond_slave_0: left promiscuous mode [ 220.404446][T17197] bond_slave_1: left promiscuous mode [ 220.429780][T17201] sd 0:0:1:0: device reset [ 220.438639][T17197] batadv0: left promiscuous mode [ 220.835288][T17237] loop3: detected capacity change from 0 to 512 [ 220.846592][T17237] EXT4-fs: Ignoring removed nobh option [ 220.852558][T17237] EXT4-fs: journaled quota format not specified [ 220.871652][T17237] loop3: detected capacity change from 0 to 512 [ 220.925384][T17237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 220.947629][T17237] ext4 filesystem being mounted at /159/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.033806][T14793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 221.201530][T17262] sd 0:0:1:0: device reset [ 221.359448][T17277] loop4: detected capacity change from 0 to 512 [ 221.378253][T17277] EXT4-fs: Ignoring removed nobh option [ 221.410417][T17277] EXT4-fs: journaled quota format not specified [ 221.440550][T17277] loop4: detected capacity change from 0 to 512 [ 221.477569][T17277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 221.505898][T17277] ext4 filesystem being mounted at /196/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.582096][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 221.606197][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5515'. [ 221.829246][T17330] bridge: RTM_NEWNEIGH with invalid ether address [ 221.899461][T17336] @: renamed from vlan0 (while UP) [ 221.982379][T17341] loop0: detected capacity change from 0 to 512 [ 222.010795][T17341] EXT4-fs: Ignoring removed orlov option [ 222.038181][T17341] EXT4-fs: inline encryption not supported [ 222.053272][T17344] loop6: detected capacity change from 0 to 1764 [ 222.095642][T17341] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.5534: corrupted in-inode xattr: invalid ea_ino [ 222.122601][T17341] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.5534: couldn't read orphan inode 15 (err -117) [ 222.196254][T17341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.242995][T17341] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5534: bg 0: block 411: padding at end of block bitmap is not set [ 222.278824][T17341] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 222.359673][T17341] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5534: invalid indirect mapped block 234881024 (level 0) [ 222.551310][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.043877][T17380] loop4: detected capacity change from 0 to 1764 [ 223.141843][T17354] Set syz1 is full, maxelem 65536 reached [ 223.227730][T17384] loop6: detected capacity change from 0 to 256 [ 223.333175][T17394] loop6: detected capacity change from 0 to 512 [ 223.340111][T17394] EXT4-fs: Ignoring removed orlov option [ 223.346167][T17394] EXT4-fs: inline encryption not supported [ 223.353316][T17394] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.5555: corrupted in-inode xattr: invalid ea_ino [ 223.367382][T17394] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.5555: couldn't read orphan inode 15 (err -117) [ 223.379974][T17394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.395159][T17394] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5555: bg 0: block 411: padding at end of block bitmap is not set [ 223.409813][T17394] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 223.418743][T17394] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.5555: invalid indirect mapped block 234881024 (level 0) [ 223.443860][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.486114][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5560'. [ 223.495977][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5560'. [ 223.815435][T17411] Set syz1 is full, maxelem 65536 reached [ 223.877880][T17429] loop4: detected capacity change from 0 to 512 [ 223.884737][T17429] EXT4-fs: Ignoring removed orlov option [ 223.890530][T17429] EXT4-fs: inline encryption not supported [ 223.902018][T17433] bond0: entered promiscuous mode [ 223.907263][T17433] bond_slave_0: entered promiscuous mode [ 223.913256][T17433] bond_slave_1: entered promiscuous mode [ 223.933371][T17433] batadv0: entered promiscuous mode [ 223.939461][T17433] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 223.972109][T17433] bond0: left promiscuous mode [ 223.972223][T17429] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.5572: corrupted in-inode xattr: invalid ea_ino [ 223.976955][T17433] bond_slave_0: left promiscuous mode [ 223.977082][T17433] bond_slave_1: left promiscuous mode [ 224.002377][T17429] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.5572: couldn't read orphan inode 15 (err -117) [ 224.014460][T17433] batadv0: left promiscuous mode [ 224.015078][T17429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.044561][T17429] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5572: bg 0: block 411: padding at end of block bitmap is not set [ 224.060200][T17429] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 224.069921][T17429] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5572: invalid indirect mapped block 234881024 (level 0) [ 224.134587][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.196300][T17444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5575'. [ 224.219087][T17444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5575'. [ 224.269778][T17431] Set syz1 is full, maxelem 65536 reached [ 224.421163][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 224.421191][ T29] audit: type=1400 audit(1745224290.901:6678): avc: denied { module_load } for pid=17462 comm="syz.4.5588" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 224.463472][T17467] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:0 [ 224.503512][T17474] loop3: detected capacity change from 0 to 128 [ 224.510647][T17474] vfat: Unknown parameter '@' [ 224.579517][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5594'. [ 224.596464][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5594'. [ 224.765594][T17502] loop0: detected capacity change from 0 to 1024 [ 224.808784][T17502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.824013][T17502] ext4 filesystem being mounted at /1102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.945556][ T29] audit: type=1326 audit(1745224291.431:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a106e169 code=0x7ffc0000 [ 224.969205][ T29] audit: type=1326 audit(1745224291.431:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a106e169 code=0x7ffc0000 [ 224.992881][ T29] audit: type=1326 audit(1745224291.431:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94a106e169 code=0x7ffc0000 [ 225.016693][ T29] audit: type=1326 audit(1745224291.431:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a106e169 code=0x7ffc0000 [ 225.040282][ T29] audit: type=1326 audit(1745224291.431:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a106e169 code=0x7ffc0000 [ 225.063881][ T29] audit: type=1326 audit(1745224291.431:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94a106e169 code=0x7ffc0000 [ 225.087564][ T29] audit: type=1326 audit(1745224291.431:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a106e169 code=0x7ffc0000 [ 225.111454][ T29] audit: type=1326 audit(1745224291.431:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a106e169 code=0x7ffc0000 [ 225.134956][ T29] audit: type=1326 audit(1745224291.431:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.6.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94a106e169 code=0x7ffc0000 [ 225.194873][ T31] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 393: padding at end of block bitmap is not set [ 225.218354][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 225.231134][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 225.231134][ T31] [ 225.259474][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.337038][T17528] @: renamed from vlan0 (while UP) [ 225.375459][T17533] loop4: detected capacity change from 0 to 512 [ 225.401053][T17533] EXT4-fs (loop4): 1 orphan inode deleted [ 225.407225][T17533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.423252][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 225.432976][T17533] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.466478][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.551737][T17550] loop6: detected capacity change from 0 to 512 [ 225.559275][T17553] tipc: Started in network mode [ 225.564257][T17553] tipc: Node identity ac14140f, cluster identity 4711 [ 225.573302][T17553] tipc: New replicast peer: 255.255.255.255 [ 225.579598][T17553] tipc: Enabled bearer , priority 10 [ 225.589143][T17553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5624'. [ 225.598285][T17553] tipc: Disabling bearer [ 225.606525][T17550] EXT4-fs (loop6): 1 orphan inode deleted [ 225.612731][T17550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.627174][T17550] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.638180][ T56] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 225.663306][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.228709][T17560] loop6: detected capacity change from 0 to 1024 [ 226.268015][T17560] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.280388][T17560] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.424184][ T5148] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:62: bg 0: block 393: padding at end of block bitmap is not set [ 226.445225][ T5148] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 226.457928][ T5148] EXT4-fs (loop6): This should not happen!! Data will be lost [ 226.457928][ T5148] [ 226.481206][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.633562][T17607] futex_wake_op: syz.6.5648 tries to shift op by -1; fix this program [ 226.666623][T17613] loop9: detected capacity change from 0 to 7 [ 226.673062][T17613] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.681768][T17613] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.689695][T17613] loop9: unable to read partition table [ 226.696355][T17613] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 226.696355][T17613] U) failed (rc=-5) [ 226.739758][T17618] loop3: detected capacity change from 0 to 512 [ 226.794440][T17618] EXT4-fs (loop3): 1 orphan inode deleted [ 226.814189][ T5148] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:62: Failed to release dquot type 1 [ 226.829468][T17618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.870440][T17618] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.944436][T14793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.985697][T17637] loop3: detected capacity change from 0 to 2048 [ 226.992447][T17637] EXT4-fs: Ignoring removed orlov option [ 226.998176][T17637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.018675][T17637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.032382][T17637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5660'. [ 227.079713][T14793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.121042][T17709] loop4: detected capacity change from 0 to 1024 [ 228.134857][T17709] EXT4-fs: Ignoring removed nobh option [ 228.164362][T17709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.236822][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.322961][T17740] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 228.552719][T17771] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 228.690124][T17787] loop3: detected capacity change from 0 to 1024 [ 228.719720][T17787] EXT4-fs: Ignoring removed nobh option [ 228.774597][T17787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.915042][T14793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.938484][T17813] loop0: detected capacity change from 0 to 512 [ 228.947334][T17813] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 228.960290][T17813] EXT4-fs (loop0): 1 truncate cleaned up [ 228.968801][T17813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.095543][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.115371][T17841] loop6: detected capacity change from 0 to 1024 [ 229.122339][T17841] EXT4-fs: Ignoring removed nobh option [ 229.145379][T17841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.210809][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.284038][ T5123] unregister_netdevice: waiting for lo to become free. Usage count = 29 [ 229.292829][ T5123] ref_tracker: lo@ffff888107c87548 has 27/28 users at [ 229.292829][ T5123] dst_init+0xac/0x260 [ 229.292829][ T5123] dst_alloc+0xe2/0x100 [ 229.292829][ T5123] rt_dst_clone+0x3b/0x2f0 [ 229.292829][ T5123] NF_HOOK+0x6a/0x210 [ 229.292829][ T5123] ip_mc_output+0x21e/0x370 [ 229.292829][ T5123] ip_local_out+0xc1/0xd0 [ 229.292829][ T5123] iptunnel_xmit+0x354/0x490 [ 229.292829][ T5123] udp_tunnel_xmit_skb+0x1b3/0x1f0 [ 229.292829][ T5123] tipc_udp_xmit+0x327/0x410 [ 229.292829][ T5123] tipc_udp_send_msg+0x17d/0x200 [ 229.292829][ T5123] tipc_bearer_xmit_skb+0x197/0x200 [ 229.292829][ T5123] tipc_disc_timeout+0x42b/0x460 [ 229.292829][ T5123] call_timer_fn+0x3a/0x300 [ 229.292829][ T5123] __run_timer_base+0x41e/0x640 [ 229.292829][ T5123] run_timer_softirq+0x31/0x70 [ 229.292829][ T5123] handle_softirqs+0xbf/0x280 [ 229.292829][ T5123] [ 229.378697][ T5123] ref_tracker: lo@ffff888107c87548 has 1/28 users at [ 229.378697][ T5123] dst_init+0xac/0x260 [ 229.378697][ T5123] dst_alloc+0xe2/0x100 [ 229.378697][ T5123] rt_dst_clone+0x3b/0x2f0 [ 229.378697][ T5123] NF_HOOK+0x6a/0x210 [ 229.378697][ T5123] ip_mc_output+0x21e/0x370 [ 229.378697][ T5123] ip_local_out+0xc1/0xd0 [ 229.378697][ T5123] iptunnel_xmit+0x354/0x490 [ 229.378697][ T5123] udp_tunnel_xmit_skb+0x1b3/0x1f0 [ 229.378697][ T5123] tipc_udp_xmit+0x327/0x410 [ 229.378697][ T5123] tipc_udp_send_msg+0x17d/0x200 [ 229.378697][ T5123] tipc_bearer_xmit_skb+0x197/0x200 [ 229.378697][ T5123] __tipc_nl_bearer_enable+0xc94/0xe00 [ 229.378697][ T5123] tipc_nl_bearer_enable+0x22/0x40 [ 229.378697][ T5123] genl_rcv_msg+0x69b/0x6f0 [ 229.378697][ T5123] netlink_rcv_skb+0x12f/0x230 [ 229.378697][ T5123] genl_rcv+0x28/0x40 [ 229.378697][ T5123] [ 229.502149][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 229.502166][ T29] audit: type=1326 audit(1745224295.981:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17847 comm="syz.0.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 229.566183][ T29] audit: type=1326 audit(1745224296.021:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17847 comm="syz.0.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 229.631854][ T29] audit: type=1326 audit(1745224296.111:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17847 comm="syz.0.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 229.655452][ T29] audit: type=1326 audit(1745224296.111:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17847 comm="syz.0.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 229.679149][ T29] audit: type=1326 audit(1745224296.111:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17847 comm="syz.0.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 229.791588][T17867] loop6: detected capacity change from 0 to 2048 [ 229.800240][T17867] EXT4-fs: Ignoring removed orlov option [ 229.806045][T17867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.816984][T17867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.838116][T17867] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5760'. [ 229.862667][T17877] loop4: detected capacity change from 0 to 512 [ 229.871299][T17877] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 229.891547][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.902691][T17877] EXT4-fs (loop4): 1 truncate cleaned up [ 229.909076][T17877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.004454][ T29] audit: type=1326 audit(1745224296.491:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.3.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 230.043460][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.047850][ T29] audit: type=1326 audit(1745224296.491:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.3.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 230.116098][T17899] loop6: detected capacity change from 0 to 512 [ 230.125464][T17899] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 230.174801][T17899] EXT4-fs (loop6): 1 truncate cleaned up [ 230.184480][T17899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.210678][T17912] loop4: detected capacity change from 0 to 2048 [ 230.231147][T17912] EXT4-fs: Ignoring removed orlov option [ 230.236881][T17912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.276661][T17912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.277167][ T29] audit: type=1326 audit(1745224296.761:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.3.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 230.312766][ T29] audit: type=1326 audit(1745224296.761:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.3.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 230.346323][T17912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5779'. [ 230.377564][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.395714][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.493981][ T29] audit: type=1326 audit(1745224296.971:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.3.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2bdae1e169 code=0x7ffc0000 [ 230.595035][T17939] loop0: detected capacity change from 0 to 1024 [ 230.602044][T17939] EXT4-fs: Ignoring removed nobh option [ 230.644617][T17939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.716932][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.841072][T17974] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5804'. [ 231.036412][T17993] uprobe: syz.4.5806:17993 failed to unregister, leaking uprobe [ 231.960634][T18159] loop6: detected capacity change from 0 to 1024 [ 231.972673][T18159] EXT4-fs: Ignoring removed nobh option [ 231.995647][T18159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.047446][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.069084][T18172] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5841'. [ 232.417512][T18208] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5858'. [ 232.518768][T18211] loop3: detected capacity change from 0 to 128 [ 232.668999][ T31] kworker/u8:1: attempt to access beyond end of device [ 232.668999][ T31] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 232.695918][ T31] kworker/u8:1: attempt to access beyond end of device [ 232.695918][ T31] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 232.731282][ T31] kworker/u8:1: attempt to access beyond end of device [ 232.731282][ T31] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 232.755235][ T31] kworker/u8:1: attempt to access beyond end of device [ 232.755235][ T31] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 232.779098][ T31] kworker/u8:1: attempt to access beyond end of device [ 232.779098][ T31] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 232.796695][ T31] kworker/u8:1: attempt to access beyond end of device [ 232.796695][ T31] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 232.810848][ T31] kworker/u8:1: attempt to access beyond end of device [ 232.810848][ T31] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 232.826328][ T31] kworker/u8:1: attempt to access beyond end of device [ 232.826328][ T31] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 232.839900][ T31] kworker/u8:1: attempt to access beyond end of device [ 232.839900][ T31] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 232.853533][ T31] kworker/u8:1: attempt to access beyond end of device [ 232.853533][ T31] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 232.896496][T18237] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5873'. [ 233.070699][T18261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5882'. [ 233.153469][T18270] loop0: detected capacity change from 0 to 2048 [ 233.207823][T18280] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5890'. [ 233.235097][T18270] loop0: p1 < > p4 [ 233.240011][T18270] loop0: p4 size 8388608 extends beyond EOD, truncated [ 233.264640][T18286] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 233.311704][T18292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5897'. [ 233.360090][T18302] loop4: detected capacity change from 0 to 512 [ 233.376538][T18302] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 233.391008][T18302] EXT4-fs (loop4): 1 truncate cleaned up [ 233.397884][T18302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.435115][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.451376][T18316] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5904'. [ 233.511103][T18318] loop4: detected capacity change from 0 to 8192 [ 233.622214][T18332] loop0: detected capacity change from 0 to 128 [ 233.995277][T18336] loop3: detected capacity change from 0 to 32768 [ 234.044385][T18336] loop3: p1 p2 p3 < p5 p6 > [ 234.049149][T18336] loop3: p1 size 242222080 extends beyond EOD, truncated [ 234.057094][T18336] loop3: p2 start 589823 is beyond EOD, truncated [ 234.268686][T18362] loop3: detected capacity change from 0 to 512 [ 234.275832][T18362] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 234.285113][T18362] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 234.295794][T18362] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 234.305253][T18362] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 234.313268][T18362] System zones: 0-2, 18-18, 34-35 [ 234.319151][T18362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.365502][T14793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.430471][T18375] loop6: detected capacity change from 0 to 128 [ 234.457959][T18377] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 234.528642][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 234.528676][ T29] audit: type=1326 audit(1745224301.011:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18387 comm="syz.0.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 234.566674][ T29] audit: type=1326 audit(1745224301.041:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18387 comm="syz.0.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 234.590346][ T29] audit: type=1326 audit(1745224301.041:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18387 comm="syz.0.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 234.613901][ T29] audit: type=1326 audit(1745224301.051:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18387 comm="syz.0.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 234.637648][ T29] audit: type=1326 audit(1745224301.051:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18387 comm="syz.0.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 234.661357][ T29] audit: type=1326 audit(1745224301.051:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18387 comm="syz.0.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 234.684938][ T29] audit: type=1326 audit(1745224301.051:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18387 comm="syz.0.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 234.708506][ T29] audit: type=1326 audit(1745224301.051:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18387 comm="syz.0.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 234.732056][ T29] audit: type=1326 audit(1745224301.051:6865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18387 comm="syz.0.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 234.755569][ T29] audit: type=1326 audit(1745224301.051:6866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18387 comm="syz.0.5945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8947afe169 code=0x7ffc0000 [ 234.802820][T18390] loop4: detected capacity change from 0 to 2048 [ 234.854288][T18390] loop4: p1 < > p4 [ 234.860096][T18390] loop4: p4 size 8388608 extends beyond EOD, truncated [ 234.888313][T18398] __nla_validate_parse: 3 callbacks suppressed [ 234.888327][T18398] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5937'. [ 235.076533][T18425] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5949'. [ 235.091353][T18423] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 235.203198][T18432] loop4: detected capacity change from 0 to 128 [ 235.245511][T18436] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 235.297725][T18441] loop6: detected capacity change from 0 to 2048 [ 235.355694][T18441] loop6: p1 < > p4 [ 235.363115][T18441] loop6: p4 size 8388608 extends beyond EOD, truncated [ 235.375115][T18446] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5955'. [ 235.440439][T18455] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 235.480644][T18464] netlink: 332 bytes leftover after parsing attributes in process `syz.3.5962'. [ 235.515947][T18467] loop6: detected capacity change from 0 to 1024 [ 235.526749][T18467] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 235.536561][T18467] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 235.546285][T18467] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 235.560108][T18467] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #5: comm syz.6.5960: unexpected bad inode w/o EXT4_IGET_BAD [ 235.585588][T18467] EXT4-fs (loop6): no journal found [ 235.590901][T18467] EXT4-fs (loop6): can't get journal size [ 235.597554][T18467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.623807][T14055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.658718][T18477] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 235.718778][T18482] netlink: 332 bytes leftover after parsing attributes in process `syz.6.5981'. [ 235.794515][T18488] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5973'. [ 235.872628][T18492] loop3: detected capacity change from 0 to 2048 [ 235.964914][T18492] loop3: p1 < > p4 [ 236.032490][T18492] loop3: p4 size 8388608 extends beyond EOD, truncated [ 236.058904][T18497] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18497 comm=syz.6.5979 [ 236.071742][T18497] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18497 comm=syz.6.5979 [ 236.171709][T18509] netem: incorrect ge model size [ 236.176731][T18509] netem: change failed [ 236.213740][T18513] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.229664][T18515] loop0: detected capacity change from 0 to 8192 [ 236.276245][T18513] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.337243][T18513] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.395768][T18513] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.453306][T18513] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.465363][T18513] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.484814][T18513] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.498123][T18513] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.964282][T18515] ================================================================== [ 236.972425][T18515] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 236.980376][T18515] [ 236.982715][T18515] write to 0xffff888106729628 of 4 bytes by task 18517 on cpu 1: [ 236.990452][T18515] __mark_inode_dirty+0x24e/0x7e0 [ 236.995501][T18515] fat_update_time+0x1e8/0x200 [ 237.000290][T18515] touch_atime+0x14f/0x350 [ 237.004728][T18515] filemap_splice_read+0x8cb/0x930 [ 237.009866][T18515] splice_direct_to_actor+0x26c/0x680 [ 237.015270][T18515] do_splice_direct+0xd9/0x150 [ 237.020059][T18515] do_sendfile+0x40a/0x690 [ 237.024506][T18515] __x64_sys_sendfile64+0x113/0x160 [ 237.029721][T18515] x64_sys_call+0xfc3/0x2e10 [ 237.034339][T18515] do_syscall_64+0xc9/0x1a0 [ 237.038865][T18515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.044778][T18515] [ 237.047112][T18515] read to 0xffff888106729628 of 4 bytes by task 18515 on cpu 0: [ 237.054764][T18515] __mark_inode_dirty+0x58/0x7e0 [ 237.059723][T18515] fat_update_time+0x1e8/0x200 [ 237.064515][T18515] touch_atime+0x14f/0x350 [ 237.068940][T18515] filemap_splice_read+0x8cb/0x930 [ 237.074082][T18515] splice_direct_to_actor+0x26c/0x680 [ 237.079489][T18515] do_splice_direct+0xd9/0x150 [ 237.084278][T18515] do_sendfile+0x40a/0x690 [ 237.088718][T18515] __x64_sys_sendfile64+0x113/0x160 [ 237.093941][T18515] x64_sys_call+0xfc3/0x2e10 [ 237.098561][T18515] do_syscall_64+0xc9/0x1a0 [ 237.103092][T18515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.109010][T18515] [ 237.111347][T18515] value changed: 0x00000000 -> 0x00000038 [ 237.117078][T18515] [ 237.119411][T18515] Reported by Kernel Concurrency Sanitizer on: [ 237.125579][T18515] CPU: 0 UID: 0 PID: 18515 Comm: syz.0.5985 Tainted: G W 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 237.139658][T18515] Tainted: [W]=WARN [ 237.143474][T18515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.153544][T18515] ================================================================== [ 244.224077][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!