last executing test programs: 1m19.011381666s ago: executing program 1 (id=19): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r1}, 0x18) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1m18.540787442s ago: executing program 1 (id=26): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000140)={0x1, 0x80, 0x1, 'queue0\x00', 0x3}) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{0x0, 0x88}, {&(0x7f0000004900)=""/4083, 0xff3}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x40000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m17.743976843s ago: executing program 1 (id=37): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==") r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x115) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$incfs(r0, &(0x7f0000000580)='.log\x00', 0x2582, 0x11c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}}, 0x20000800) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0xfffe, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000400)={0x14, 0x14, 0x211, 0x0, 0x25dfdbfc, {0x1}}, 0x14}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r9}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getegid() sendto$inet6(r0, &(0x7f0000000740)="77dd68aa984ee6e74eea4187b1eb61ec050f1b0b078a9e2c80743e9a0e2d29fa6ec71bfb29badf9a78c2af740788259f5e65097d479b5528fee631479f252b2816f454efd45935c1d6509e4cd2943e0dac309baf72de17f687093d317945b8c12ade59f3ed074f9485eea78a631966ad2884d719f6f44fe8cd8de876239c83e7d77315fb95b4", 0x86, 0x20000144, &(0x7f00000006c0)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) write$qrtrtun(r0, &(0x7f0000000640)="0ff55ab216676a9802f6a662efcf570197a16941f25d422f33a1f419e231bfb8e81887797e7723e4aa6b78475fe1d5e1a85070fbb5e87ecdd677c6c30c592e710ee50b1bc04e5a0821f4616cbbb7bdb3eae48545930c3f79bf6fc8b83837f857b1b4eba7b6785472d36d3a7a93b1dc4eaf123cc3ea266af92e3d4411", 0x7c) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m17.363919148s ago: executing program 1 (id=41): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 32) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (rerun: 32) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) r2 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) (async) ioctl$TCSETSW2(r3, 0x5435, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000040000000000000000000010080000000000000000000009010000000000000001000004040000080000000002"], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (rerun: 64) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000003c0)={0x0, 0x1, 0x1, "cd"}, 0x9) (async) close(r5) (async) unlink(&(0x7f0000000180)='./file1\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 1m16.136715095s ago: executing program 1 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getgroups(0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0x4a) socket(0xa, 0x5, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) migrate_pages(0x0, 0x4421, &(0x7f00000003c0)=0xff, &(0x7f0000000400)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) getgid() 1m15.673188182s ago: executing program 1 (id=61): creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) 1m15.660874022s ago: executing program 32 (id=61): creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) 6.61701175s ago: executing program 0 (id=791): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\xacC\x1f9\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x18f, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = semget$private(0x0, 0x2, 0xa) semtimedop(r5, &(0x7f0000000280)=[{0x4, 0x104}], 0x1, &(0x7f0000000380)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000040)='eth0\x00\xdd\xad4=2k\xf1\x05\x9bG\xeb\x85\xe6u*\x03\xb6J\x91y\xe1;F\xa2\x8df\xe6\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xa1\v\x00\x00\x00\x00\x00\x00\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0@\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15\x05\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8OF\xa7^\x8c\xaf\fu\xb7w\x9eF', 0x1, 0x0, 0x0) 5.725177533s ago: executing program 0 (id=798): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x201, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fallocate(r3, 0x17, 0x2, 0x2000402) lseek(r4, 0x0, 0x3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x3, 0x40000121, 0x0) 4.847927694s ago: executing program 0 (id=806): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440)=0xcf7f, 0x4) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x5, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0xcf0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0xb, 0x400, 0x40, @dev={0xfe, 0x80, '\x00', 0x30}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10, 0x1, 0x4, 0x12000000}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x2000000002ffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000180)=""/13, 0xd, 0x0, &(0x7f0000000380)=""/253, 0xfd}}, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000580), 0x80) 3.991615236s ago: executing program 0 (id=814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x81e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x5453, 0x7cb7562f2d67) 3.971561987s ago: executing program 0 (id=815): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) fcntl$lock(r0, 0x24, &(0x7f0000000180)={0x1, 0x4, 0x2, 0x7fffffffffffffff, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = dup2(r0, r2) write$P9_RSTATu(r3, &(0x7f0000000580)={0x2ea, 0x7d, 0x2, {{0x500, 0x1a9, 0x1, 0x0, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x8, 0x200, 0x5, 0xec, '\x04nodev{evoo~\x05E\xab\xd0\x97\a\xdc\x84Y\xe9\x8b\x92\x00\x00\x00\xbd\xa3\x05\x1f\x9b*\x0e\x97\xadQD|,4}\x0eim\xb8\xee!\xb1\xf8\xfa\x80\xbfO\x7f\fL-e\x9eX\x1c\x8c\x81=+\xc9pjv\xe3\xfb\xb9d\xf0#\x04|\xb0\xa1M\xff?\xbf\xd63/\xa3\xf2C\xef\xee\xa0\xc2k\x1b\xdf\xc5O\x87\xfax\x9b{\xcf\xa1m\x8fF\xe6\xear\xe5\xf9\xcd\xe9\x99\x14\xb8\xddj\xaf\x966\xed\xed\x87*\x0eL\x02\x99\x9f+\xee\xa5\x97\xb6\xb6(\xbdL\x15}\xca\xd3\xf8c\x92\xfe8\xa4\xdd\xeb\x1c\xf4\xb3\xd7\x8b;\x8a\x85Z\xaa\x91\xb4\xa7\xfb\xe8B\x88\xeb\xb47\xd6\xf6\x150\xa0\xf0\xb8V\xfeMv\xe7\xc0\x02T\x1aF\x023\xf4H!?zE\xfeL\a=*\xa0\xb4\x18\xbe\x0eR3\xaf\x8f\xfc\xb3K]\xd6\xfcK\xee\x18]1\xd8x\xec\x91\\\x9c\xde\xc7\xad\x00Y\xf9', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x2ea) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) wait4(0x0, 0x0, 0x4, 0x0) syz_clone3(&(0x7f0000000280)={0x80000000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), 0x0, {0x25}, &(0x7f0000000140)=""/97, 0x61, &(0x7f00000001c0)=""/70, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0xbfd1, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r11, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x4}) r12 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) write$rfkill(r12, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) accept4$packet(r6, 0x0, 0x0, 0x800) waitid$P_PIDFD(0x3, r4, 0x0, 0x1, &(0x7f0000000380)) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010040, &(0x7f0000000440)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@clone_children}]}) 3.671946641s ago: executing program 2 (id=818): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x3) pselect6(0x40, &(0x7f0000000300)={0x0, 0x7e8d, 0x0, 0x1ff, 0x0, 0x36bb, 0x800000}, &(0x7f0000000000)={0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x100000000000000}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r8, 0x10, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x1, 0x0, &(0x7f0000000400)=[0x9], 0x388}}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0xd, 0x2000, 0xffffffffffffffff, @value=r10, @void, @void, @void, r9}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r7, 0x2f, 0x4, 0x0, @void, @value=r5, @void, @void, r9}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=r1, r4, 0x2b, 0x0, 0x0, @void, @value=r2, @void, @void, r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r11, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 3.065668698s ago: executing program 0 (id=824): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440)=0xcf7f, 0x4) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x5, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0xcf0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0xb, 0x400, 0x40, @dev={0xfe, 0x80, '\x00', 0x30}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10, 0x1, 0x4, 0x12000000}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x2000000002ffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000180)=""/13, 0xd, 0x0, &(0x7f0000000380)=""/253, 0xfd}}, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000580), 0x80) 2.925806371s ago: executing program 4 (id=829): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=@newtaction={0x6c, 0x30, 0x300, 0x0, 0x25dfdbff, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x6c}}, 0x4048851) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6002adf70006000000880000000000000000000000000001fe8000000000000000000000000000aa020090780000000060fd906300003a0000000000000000000000ffffac1414bb00000000000000000000ffffac1414aa1e520b4c951ee12e"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x0, 0x2}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x0, 0x7ff}}], 0x90}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) 2.820037312s ago: executing program 2 (id=830): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x201, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fallocate(r3, 0x17, 0x2, 0x2000402) lseek(r4, 0x0, 0x3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/65, 0x41}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 2.645345284s ago: executing program 3 (id=831): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0xa) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x58}, 0x1, 0x7}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005240)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xa2}, {{0x2, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd84b}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) sendfile(r10, r9, &(0x7f0000000000)=0x9, 0x3fffff) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0xffff, 0xb2bea392, 0x2000, r3, 0x0, '\x00', r8, r9, 0x3, 0x5, 0x4, 0x6, @void, @value, @void, @value}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r12}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r11}, &(0x7f0000000040), &(0x7f0000000080)=r12}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x202088, &(0x7f0000000240)={[{@dioread_lock}, {@nombcache}, {@usrjquota}, {@nouid32}, {@noinit_itable}, {@noinit_itable}], [{@fsmagic}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") 2.546370726s ago: executing program 4 (id=832): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x3) pselect6(0x40, &(0x7f0000000300)={0x0, 0x7e8d, 0x0, 0x1ff, 0x0, 0x36bb, 0x800000}, &(0x7f0000000000)={0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x100000000000000}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r7, 0x10, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x1, 0x0, &(0x7f0000000400)=[0x9], 0x388}}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0xd, 0x2000, 0xffffffffffffffff, @value=r9, @void, @void, @void, r8}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r6, 0x2f, 0x4, 0x0, @void, @value=r4, @void, @void, r8}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=r1, 0xffffffffffffffff, 0x2b, 0x0, 0x0, @void, @value=r2, @void, @void, r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.708939767s ago: executing program 3 (id=834): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x115) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$incfs(r0, &(0x7f0000000580)='.log\x00', 0x2582, 0x11c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}}, 0x20000800) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0xfffe, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000400)={0x14, 0x14, 0x211, 0x0, 0x25dfdbfc, {0x1}}, 0x14}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r9}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getegid() sendto$inet6(r0, &(0x7f0000000740)="77dd68aa984ee6e74eea4187b1eb61ec050f1b0b078a9e2c80743e9a0e2d29fa6ec71bfb29badf9a78c2af740788259f5e65097d479b5528fee631479f252b2816f454efd45935c1d6509e4cd2943e0dac309baf72de17f687093d317945b8c12ade59f3ed074f9485eea78a631966ad2884d719f6f44fe8cd8de876239c83e7d77315fb95b4", 0x86, 0x20000144, &(0x7f00000006c0)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.646596288s ago: executing program 4 (id=835): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendto$packet(r3, 0x0, 0x0, 0x4, &(0x7f0000000a80)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095", @ANYRES16=r1, @ANYRES16=0x0, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='ufshcd_clk_scaling\x00', r8}, 0x18) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000900)={{0x0, 0x98, 0xc5, 0x368, 0x4d, 0x6, 0xce, 0x5}, "b86f69724147798b7ea1c819a10ad582ea642c4ce9f032ac5cf926cfdaca18c772de6b22bfa3f33889715e605bc834b2fd8669c6bd03224980f2f3a70e1b9b9c7b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa61) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="037766646e6f3d", @ANYRESHEX=r10, @ANYBLOB=',version=9p2000,\x00']) 1.570158749s ago: executing program 2 (id=836): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 1.302905043s ago: executing program 2 (id=837): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff8e, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b33200000000000000015000000100037800c00008008000d80"], 0x24}}, 0x0) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040), 0x5000) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 1.184847814s ago: executing program 3 (id=838): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0x300, 0xe0, 0x0, 0x0, 0x0}) (fail_nth: 2) 1.082390166s ago: executing program 2 (id=839): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x8, 0x4, 0x10000}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e20, 0x96, @local, 0x81}}, [0x7, 0x9, 0x9, 0xa1, 0xfffffffffffffff2, 0x2eb, 0x8, 0x5c0, 0x80, 0x6, 0x0, 0x6099, 0x1, 0x53b, 0xa5a]}, &(0x7f0000000200)=0x100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x4000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fcntl$dupfd(r3, 0x406, r0) (async) r6 = fcntl$dupfd(r3, 0x406, r0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000240), &(0x7f00000002c0)=0x30) (async) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000240), &(0x7f00000002c0)=0x30) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x2400c080) 774.55861ms ago: executing program 2 (id=840): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x3) pselect6(0x40, &(0x7f0000000300)={0x0, 0x7e8d, 0x0, 0x1ff, 0x0, 0x36bb, 0x800000}, &(0x7f0000000000)={0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x100000000000000}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r8, 0x10, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x1, 0x0, &(0x7f0000000400)=[0x9], 0x388}}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0xd, 0x2000, 0xffffffffffffffff, @value=r10, @void, @void, @void, r9}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r7, 0x2f, 0x4, 0x0, @void, @value=r5, @void, @void, r9}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=r1, r4, 0x2b, 0x0, 0x0, @void, @value=r2, @void, @void, r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r11, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 736.780061ms ago: executing program 3 (id=841): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r6 = syz_io_uring_setup(0x3bbd, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x6, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) io_uring_enter(r6, 0x61da, 0x875b, 0x8, 0x0, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) 574.025572ms ago: executing program 3 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) (fail_nth: 2) 525.632023ms ago: executing program 3 (id=843): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\xacC\x1f9\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x18f, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = semget$private(0x0, 0x2, 0xa) semtimedop(r5, &(0x7f0000000280)=[{0x4, 0x104}], 0x1, &(0x7f0000000380)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000040)='eth0\x00\xdd\xad4=2k\xf1\x05\x9bG\xeb\x85\xe6u*\x03\xb6J\x91y\xe1;F\xa2\x8df\xe6\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xa1\v\x00\x00\x00\x00\x00\x00\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0@\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15\x05\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8OF\xa7^\x8c\xaf\fu\xb7w\x9eF', 0x1, 0x0, 0x0) 505.947584ms ago: executing program 4 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x7c42273793ca46ce) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) (fail_nth: 3) 430.315494ms ago: executing program 4 (id=845): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x7, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4000800) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xc55}, @TCA_FW_CLASSID={0x8, 0x1, {0xa, 0xfff2}}]}}]}, 0x40}}, 0x4000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 430.029794ms ago: executing program 4 (id=846): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x201, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fallocate(r3, 0x17, 0x2, 0x2000402) lseek(r4, 0x0, 0x3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/65, 0x41}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 327.476516ms ago: executing program 5 (id=847): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="c9ff577ff4f7f04c93e08f6b628b602ce58d196f8e8f66add55ea926a091f73fc827d8bb928f0207f69a43c1da8dfa1befda099c750bab0033b00ec38304250eeb62b409fd59c9531c25ddeb5f0d11663e5781bf87c4ffdf28021e8a4c9b90a99c1f50a825d389602887fd224c712aab3287215664544819b47ffac6aa35a23fa7d04a61f4dd8755f5b93e1387fe7c9ed6124fca0f8455f58dda913893c6bd1f271608b03f016a5fb78adcfae6c8969c804abc028d0c7688", @ANYRESHEX, @ANYRES32, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() tkill(r2, 0x11) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r4 = socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r5}, 0x10) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0xfffffffd, 0x2}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000001580)={[{@debug}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@errors_continue}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@noload}, {@noload}, {@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}], [], 0x2c}, 0x0, 0x4bf, &(0x7f0000001000)="$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") r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, 0x0, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x1, 0x9, [@dev={0xac, 0x14, 0x14, 0x34}, @loopback, @multicast1, @remote, @loopback, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @empty]}, 0x34) close(r1) capset(&(0x7f00000003c0)={0x19971634, r2}, &(0x7f00000004c0)={0x9, 0x7f, 0x3, 0x2, 0x200, 0x2}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="160008d20010", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0802}]}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x7c42273793ca46ce) 241.654097ms ago: executing program 5 (id=848): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r1, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x1c, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20002002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) mq_notify(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0xcc}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x840) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private1, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) getuid() 212.476627ms ago: executing program 5 (id=849): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 135.082008ms ago: executing program 5 (id=850): unshare(0x2040400) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x40085) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)=',[^!])\x00', 0x7, 0x3) 73.698609ms ago: executing program 5 (id=851): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0)={0x0, 0x989680}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private}}) socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x4, 0x7de, 0x10002, 0xc8, 0x4, 0x5, 0x6, 0x110004, 0x20003d}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x1abd800, 0x0, 0x0, 0xfffffffd}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200a41, 0x13, 0x23}, 0x18) futimesat(r7, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) 0s ago: executing program 5 (id=852): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x3) pselect6(0x40, &(0x7f0000000300)={0x0, 0x7e8d, 0x0, 0x1ff, 0x0, 0x36bb, 0x800000}, &(0x7f0000000000)={0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x100000000000000}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r7, 0x10, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x1, 0x0, &(0x7f0000000400)=[0x9], 0x388}}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0xd, 0x2000, 0xffffffffffffffff, @value=r9, @void, @void, @void, r8}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r6, 0x2f, 0x4, 0x0, @void, @value=r4, @void, @void, r8}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=r1, 0xffffffffffffffff, 0x2b, 0x0, 0x0, @void, @value=r2, @void, @void, r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) kernel console output (not intermixed with test programs): t=0 ip=0x7fc25366ab39 code=0x7ffc0000 [ 63.455931][ T29] audit: type=1326 audit(1747342759.336:9317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2536ce969 code=0x7ffc0000 [ 63.479350][ T29] audit: type=1326 audit(1747342759.336:9318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2536c5927 code=0x7ffc0000 [ 63.502673][ T29] audit: type=1326 audit(1747342759.336:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc25366ab39 code=0x7ffc0000 [ 63.525948][ T29] audit: type=1326 audit(1747342759.336:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2536c5927 code=0x7ffc0000 [ 63.549307][ T29] audit: type=1326 audit(1747342759.336:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc25366ab39 code=0x7ffc0000 [ 63.572795][ T29] audit: type=1326 audit(1747342759.336:9322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2536c5927 code=0x7ffc0000 [ 63.596137][ T29] audit: type=1326 audit(1747342759.336:9323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc25366ab39 code=0x7ffc0000 [ 63.619556][ T29] audit: type=1326 audit(1747342759.336:9324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2536c5927 code=0x7ffc0000 [ 63.696996][ T4363] xt_hashlimit: max too large, truncated to 1048576 [ 63.871230][ T2969] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 63.894642][ T2969] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.984093][ T4384] hub 2-0:1.0: USB hub found [ 63.987623][ T51] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 63.992458][ T4384] hub 2-0:1.0: 8 ports detected [ 64.019091][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 64.031805][ T51] EXT4-fs (loop5): This should not happen!! Data will be lost [ 64.031805][ T51] [ 64.052434][ T4391] syzkaller1: entered promiscuous mode [ 64.052454][ T4391] syzkaller1: entered allmulticast mode [ 64.115668][ T379] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 64.115701][ T379] EXT4-fs (loop5): This should not happen!! Data will be lost [ 64.115701][ T379] [ 64.115727][ T379] EXT4-fs (loop5): Total free blocks count 0 [ 64.115738][ T379] EXT4-fs (loop5): Free/Dirty block details [ 64.115749][ T379] EXT4-fs (loop5): free_blocks=0 [ 64.115759][ T379] EXT4-fs (loop5): dirty_blocks=2048 [ 64.115792][ T379] EXT4-fs (loop5): Block reservation details [ 64.394789][ T4389] xt_hashlimit: max too large, truncated to 1048576 [ 64.533011][ T4414] __nla_validate_parse: 12 callbacks suppressed [ 64.533029][ T4414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 64.570658][ T4416] loop2: detected capacity change from 0 to 128 [ 64.577297][ T4416] EXT4-fs: Ignoring removed nobh option [ 64.585480][ T4416] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.597722][ T4416] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.621388][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.642409][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.650266][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.658009][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.665805][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.673665][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.681412][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.689156][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.696895][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.704754][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.712567][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.720325][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.728143][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.735966][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.743729][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.751485][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.759239][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.766996][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.774729][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.782579][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.790352][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.798101][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.805900][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.813650][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.821475][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 64.829230][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: item fetching failed at offset 24/43 [ 64.838445][ T3389] hid-generic 0000:007F:FFFFFFFE.000D: probe with driver hid-generic failed with error -22 [ 64.911527][ T4425] netlink: 48 bytes leftover after parsing attributes in process `syz.3.290'. [ 64.920758][ T4425] netlink: 44 bytes leftover after parsing attributes in process `syz.3.290'. [ 64.934070][ T4421] hub 2-0:1.0: USB hub found [ 64.945257][ T4421] hub 2-0:1.0: 8 ports detected [ 64.961442][ T4427] netlink: 48 bytes leftover after parsing attributes in process `syz.3.291'. [ 64.970731][ T4427] netlink: 44 bytes leftover after parsing attributes in process `syz.3.291'. [ 64.981220][ T2969] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 64.988996][ T2969] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.020128][ T4429] netlink: 48 bytes leftover after parsing attributes in process `syz.3.292'. [ 65.029235][ T4429] netlink: 44 bytes leftover after parsing attributes in process `syz.3.292'. [ 65.063052][ T4431] syzkaller1: entered promiscuous mode [ 65.068575][ T4431] syzkaller1: entered allmulticast mode [ 65.090982][ T4434] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.131879][ T4434] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.183653][ T4434] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.204847][ T4439] hub 2-0:1.0: USB hub found [ 65.209553][ T4439] hub 2-0:1.0: 8 ports detected [ 65.231905][ T4434] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.320837][ T4434] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.333426][ T4434] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.337939][ T4434] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.354226][ T4434] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.551738][ T4441] xt_hashlimit: max too large, truncated to 1048576 [ 65.825187][ T4454] loop2: detected capacity change from 0 to 128 [ 65.831820][ T4454] EXT4-fs: Ignoring removed nobh option [ 65.851966][ T4454] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.855306][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 65.877650][ T4454] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.905489][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.931886][ T4461] netlink: 48 bytes leftover after parsing attributes in process `syz.4.301'. [ 65.942349][ T4461] netlink: 44 bytes leftover after parsing attributes in process `syz.4.301'. [ 65.963892][ T2969] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 65.978103][ T2969] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.017743][ T4469] syzkaller1: entered promiscuous mode [ 66.023322][ T4469] syzkaller1: entered allmulticast mode [ 66.369393][ T4475] xt_hashlimit: max too large, truncated to 1048576 [ 66.542714][ T4482] hub 2-0:1.0: USB hub found [ 66.547711][ T4482] hub 2-0:1.0: 8 ports detected [ 67.036888][ T4496] loop3: detected capacity change from 0 to 128 [ 67.043959][ T4496] EXT4-fs: Ignoring removed nobh option [ 67.052943][ T4496] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.073721][ T4496] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.099074][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.138717][ T3391] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 67.147011][ T4506] hub 2-0:1.0: USB hub found [ 67.151890][ T4506] hub 2-0:1.0: 8 ports detected [ 67.156828][ T3391] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.472384][ T4510] xt_hashlimit: max too large, truncated to 1048576 [ 68.124287][ T4533] loop4: detected capacity change from 0 to 128 [ 68.131383][ T4533] EXT4-fs: Ignoring removed nobh option [ 68.149183][ T4533] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.173740][ T4533] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.195866][ T3390] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 68.204575][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.215047][ T3390] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.228782][ T4540] loop5: detected capacity change from 0 to 2048 [ 68.262471][ T4540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.275365][ T4540] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.294316][ T4547] hub 2-0:1.0: USB hub found [ 68.294438][ T4547] hub 2-0:1.0: 8 ports detected [ 68.312203][ T4550] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.342118][ T4550] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.392269][ T4550] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.432396][ T4550] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.451770][ T29] kauditd_printk_skb: 2163 callbacks suppressed [ 68.451782][ T29] audit: type=1326 audit(1747342764.406:11488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 68.452075][ T29] audit: type=1326 audit(1747342764.406:11489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b910cab39 code=0x7ffc0000 [ 68.452316][ T29] audit: type=1326 audit(1747342764.406:11490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9112e969 code=0x7ffc0000 [ 68.452648][ T29] audit: type=1326 audit(1747342764.406:11491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 68.452984][ T29] audit: type=1326 audit(1747342764.406:11492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b910cab39 code=0x7ffc0000 [ 68.453265][ T29] audit: type=1326 audit(1747342764.406:11493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2b9112e969 code=0x7ffc0000 [ 68.454081][ T29] audit: type=1326 audit(1747342764.406:11494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 68.454745][ T29] audit: type=1326 audit(1747342764.406:11495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b910cab39 code=0x7ffc0000 [ 68.455641][ T29] audit: type=1326 audit(1747342764.406:11496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9112e969 code=0x7ffc0000 [ 68.456548][ T29] audit: type=1326 audit(1747342764.406:11497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 68.483713][ T4550] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.485804][ T4559] loop3: detected capacity change from 0 to 2048 [ 68.492288][ T4559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.492457][ T4559] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.495164][ T4550] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.502663][ T4550] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.510354][ T4550] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.661798][ T4551] xt_hashlimit: max too large, truncated to 1048576 [ 69.035951][ T59] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 69.052844][ T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 69.065699][ T59] EXT4-fs (loop5): This should not happen!! Data will be lost [ 69.065699][ T59] [ 69.110109][ T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 69.122933][ T59] EXT4-fs (loop5): This should not happen!! Data will be lost [ 69.122933][ T59] [ 69.132711][ T59] EXT4-fs (loop5): Total free blocks count 0 [ 69.138708][ T59] EXT4-fs (loop5): Free/Dirty block details [ 69.144728][ T59] EXT4-fs (loop5): free_blocks=0 [ 69.149988][ T59] EXT4-fs (loop5): dirty_blocks=2048 [ 69.155485][ T59] EXT4-fs (loop5): Block reservation details [ 69.273908][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 69.302957][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 69.315681][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.315681][ T37] [ 69.374292][ T4570] hub 2-0:1.0: USB hub found [ 69.378974][ T4570] hub 2-0:1.0: 8 ports detected [ 69.385122][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 69.397882][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.397882][ T37] [ 69.407533][ T37] EXT4-fs (loop3): Total free blocks count 0 [ 69.413550][ T37] EXT4-fs (loop3): Free/Dirty block details [ 69.419534][ T37] EXT4-fs (loop3): free_blocks=0 [ 69.424500][ T37] EXT4-fs (loop3): dirty_blocks=2048 [ 69.429801][ T37] EXT4-fs (loop3): Block reservation details [ 69.546628][ T4580] __nla_validate_parse: 14 callbacks suppressed [ 69.546675][ T4580] netlink: 48 bytes leftover after parsing attributes in process `syz.2.342'. [ 69.562283][ T4580] netlink: 44 bytes leftover after parsing attributes in process `syz.2.342'. [ 69.571519][ T4581] loop3: detected capacity change from 0 to 128 [ 69.572714][ T2969] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 69.578297][ T4581] EXT4-fs: Ignoring removed nobh option [ 69.585770][ T2969] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.602602][ T4581] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.614835][ T4581] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.636717][ T4584] netlink: 48 bytes leftover after parsing attributes in process `syz.2.343'. [ 69.645814][ T4584] netlink: 44 bytes leftover after parsing attributes in process `syz.2.343'. [ 69.655504][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.028967][ T4591] loop4: detected capacity change from 0 to 2048 [ 70.056218][ T4591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.069989][ T4591] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.302396][ T4599] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.382277][ T4599] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.422291][ T4599] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.462325][ T4599] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.511816][ T4599] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.535690][ T4599] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.572984][ T4595] xt_hashlimit: max too large, truncated to 1048576 [ 70.578302][ T4599] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.599148][ T4599] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.615022][ T4603] hub 2-0:1.0: USB hub found [ 70.630597][ T4603] hub 2-0:1.0: 8 ports detected [ 70.697910][ T4611] netlink: 48 bytes leftover after parsing attributes in process `syz.0.353'. [ 70.708663][ T4611] netlink: 44 bytes leftover after parsing attributes in process `syz.0.353'. [ 70.720970][ T36] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 70.730289][ T36] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.755092][ T4613] netlink: 48 bytes leftover after parsing attributes in process `syz.3.354'. [ 70.765740][ T4613] netlink: 44 bytes leftover after parsing attributes in process `syz.3.354'. [ 70.866503][ T4624] syzkaller1: entered promiscuous mode [ 70.872131][ T4624] syzkaller1: entered allmulticast mode [ 70.903058][ T379] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 70.920428][ T379] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 70.933178][ T379] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.933178][ T379] [ 70.972706][ T379] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 70.985545][ T379] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.985545][ T379] [ 70.995236][ T379] EXT4-fs (loop4): Total free blocks count 0 [ 71.001242][ T379] EXT4-fs (loop4): Free/Dirty block details [ 71.007171][ T379] EXT4-fs (loop4): free_blocks=0 [ 71.012218][ T379] EXT4-fs (loop4): dirty_blocks=2048 [ 71.017514][ T379] EXT4-fs (loop4): Block reservation details [ 71.078062][ T4631] loop4: detected capacity change from 0 to 2048 [ 71.092347][ T4631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.104498][ T4631] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.648181][ T4641] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.691942][ T4641] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.741944][ T4641] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.802590][ T4641] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.861414][ T4641] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.866176][ T4641] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.889841][ T4641] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.894298][ T4641] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.954082][ T59] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 71.959856][ T59] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 71.986635][ T59] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.986635][ T59] [ 72.002662][ T4649] netlink: 48 bytes leftover after parsing attributes in process `syz.3.366'. [ 72.002709][ T4649] netlink: 44 bytes leftover after parsing attributes in process `syz.3.366'. [ 72.009731][ T36] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 72.014944][ T36] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.024246][ T59] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 72.024276][ T59] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.024276][ T59] [ 72.024287][ T59] EXT4-fs (loop4): Total free blocks count 0 [ 72.024298][ T59] EXT4-fs (loop4): Free/Dirty block details [ 72.024309][ T59] EXT4-fs (loop4): free_blocks=0 [ 72.024399][ T59] EXT4-fs (loop4): dirty_blocks=2048 [ 72.024411][ T59] EXT4-fs (loop4): Block reservation details [ 72.184403][ T4656] loop3: detected capacity change from 0 to 2048 [ 72.201293][ T4644] xt_hashlimit: max too large, truncated to 1048576 [ 72.220878][ T4656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.235182][ T4656] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.533048][ T4671] hub 2-0:1.0: USB hub found [ 72.541492][ T4671] hub 2-0:1.0: 8 ports detected [ 72.597444][ T4676] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.651762][ T4676] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.701694][ T4676] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.741663][ T4676] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.014171][ T59] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 73.028977][ T59] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 73.041737][ T59] EXT4-fs (loop3): This should not happen!! Data will be lost [ 73.041737][ T59] [ 73.067468][ T379] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 73.080233][ T379] EXT4-fs (loop3): This should not happen!! Data will be lost [ 73.080233][ T379] [ 73.089907][ T379] EXT4-fs (loop3): Total free blocks count 0 [ 73.095892][ T379] EXT4-fs (loop3): Free/Dirty block details [ 73.101826][ T379] EXT4-fs (loop3): free_blocks=0 [ 73.106776][ T379] EXT4-fs (loop3): dirty_blocks=2048 [ 73.112101][ T379] EXT4-fs (loop3): Block reservation details [ 73.194302][ T23] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 73.206898][ T23] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.311987][ T4690] loop3: detected capacity change from 0 to 128 [ 73.318711][ T4690] EXT4-fs: Ignoring removed nobh option [ 73.328402][ T4690] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.348974][ T4690] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.376203][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.543130][ T29] kauditd_printk_skb: 2466 callbacks suppressed [ 73.543228][ T29] audit: type=1107 audit(1747342769.496:13964): pid=4702 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='æ' [ 73.666475][ T29] audit: type=1326 audit(1747342769.616:13965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee14c4e969 code=0x7ffc0000 [ 73.672577][ T4709] syzkaller1: entered promiscuous mode [ 73.690299][ T29] audit: type=1326 audit(1747342769.616:13966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee14c4e969 code=0x7ffc0000 [ 73.695471][ T4709] syzkaller1: entered allmulticast mode [ 73.724673][ T29] audit: type=1326 audit(1747342769.616:13967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fee14c4e969 code=0x7ffc0000 [ 73.748173][ T29] audit: type=1326 audit(1747342769.616:13968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee14c4e969 code=0x7ffc0000 [ 73.771693][ T29] audit: type=1326 audit(1747342769.616:13969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee14c4e969 code=0x7ffc0000 [ 73.795077][ T29] audit: type=1326 audit(1747342769.626:13970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee14c4e969 code=0x7ffc0000 [ 73.818468][ T29] audit: type=1326 audit(1747342769.626:13971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee14c4e969 code=0x7ffc0000 [ 73.841902][ T29] audit: type=1326 audit(1747342769.626:13972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee14c4e969 code=0x7ffc0000 [ 73.865314][ T29] audit: type=1326 audit(1747342769.626:13973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee14c4e969 code=0x7ffc0000 [ 74.095295][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 74.103234][ T23] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.347831][ T4726] loop4: detected capacity change from 0 to 128 [ 74.354403][ T4726] EXT4-fs: Ignoring removed nobh option [ 74.371754][ T4726] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.384557][ T4726] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.407413][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.424230][ T4729] hub 2-0:1.0: USB hub found [ 74.428944][ T4729] hub 2-0:1.0: 8 ports detected [ 74.667365][ T4748] loop4: detected capacity change from 0 to 2048 [ 74.691812][ T4748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.704070][ T4748] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.981173][ T4676] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.999136][ T4676] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.012899][ T4676] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.024475][ T4676] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.234330][ T4753] xt_hashlimit: max too large, truncated to 1048576 [ 75.359040][ T4769] loop2: detected capacity change from 0 to 128 [ 75.365670][ T4769] EXT4-fs: Ignoring removed nobh option [ 75.374065][ T4769] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.387734][ T4769] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.417082][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.445537][ T4777] loop2: detected capacity change from 0 to 2048 [ 75.481596][ T4777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.493883][ T4777] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.534132][ T37] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 75.549028][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 75.557244][ T4787] __nla_validate_parse: 4 callbacks suppressed [ 75.557262][ T4787] netlink: 48 bytes leftover after parsing attributes in process `syz.0.414'. [ 75.561818][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 75.561818][ T37] [ 75.569555][ T4787] netlink: 44 bytes leftover after parsing attributes in process `syz.0.414'. [ 75.598992][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 75.611781][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 75.611781][ T37] [ 75.621536][ T37] EXT4-fs (loop4): Total free blocks count 0 [ 75.627607][ T37] EXT4-fs (loop4): Free/Dirty block details [ 75.633566][ T37] EXT4-fs (loop4): free_blocks=0 [ 75.638536][ T37] EXT4-fs (loop4): dirty_blocks=2048 [ 75.643947][ T37] EXT4-fs (loop4): Block reservation details [ 75.693969][ T4791] hub 2-0:1.0: USB hub found [ 75.698828][ T4791] hub 2-0:1.0: 8 ports detected [ 76.148469][ T4798] xt_hashlimit: max too large, truncated to 1048576 [ 76.266101][ T4806] loop5: detected capacity change from 0 to 128 [ 76.272720][ T4806] EXT4-fs: Ignoring removed nobh option [ 76.290151][ T4806] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.303607][ T4806] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.314473][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 76.329369][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 76.342111][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.342111][ T37] [ 76.365767][ T3700] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.371939][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 76.387473][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.387473][ T37] [ 76.397141][ T37] EXT4-fs (loop2): Total free blocks count 0 [ 76.403260][ T37] EXT4-fs (loop2): Free/Dirty block details [ 76.409165][ T37] EXT4-fs (loop2): free_blocks=0 [ 76.414157][ T37] EXT4-fs (loop2): dirty_blocks=2048 [ 76.419491][ T37] EXT4-fs (loop2): Block reservation details [ 76.524262][ T4818] loop5: detected capacity change from 0 to 2048 [ 76.553414][ T4818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.567058][ T4818] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.739379][ T4836] loop4: detected capacity change from 0 to 2048 [ 76.755198][ T4836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.770966][ T4836] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.977769][ T4834] xt_hashlimit: max too large, truncated to 1048576 [ 77.219921][ T51] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 77.234782][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 77.247555][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 77.247555][ T51] [ 77.257425][ T4842] Invalid logical block size (-1) [ 77.272847][ T37] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 77.290246][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 77.294227][ T4844] netlink: 'syz.2.434': attribute type 2 has an invalid length. [ 77.302922][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 77.302922][ T37] [ 77.322497][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 77.335278][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 77.335278][ T51] [ 77.344942][ T51] EXT4-fs (loop4): Total free blocks count 0 [ 77.350972][ T51] EXT4-fs (loop4): Free/Dirty block details [ 77.357042][ T51] EXT4-fs (loop4): free_blocks=0 [ 77.362026][ T51] EXT4-fs (loop4): dirty_blocks=2048 [ 77.363258][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 77.367318][ T51] EXT4-fs (loop4): Block reservation details [ 77.386260][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 77.386260][ T37] [ 77.395959][ T37] EXT4-fs (loop5): Total free blocks count 0 [ 77.401960][ T37] EXT4-fs (loop5): Free/Dirty block details [ 77.407855][ T37] EXT4-fs (loop5): free_blocks=0 [ 77.412896][ T37] EXT4-fs (loop5): dirty_blocks=2048 [ 77.418256][ T37] EXT4-fs (loop5): Block reservation details [ 77.477621][ T4855] hub 2-0:1.0: USB hub found [ 77.482773][ T4855] hub 2-0:1.0: 8 ports detected [ 77.503713][ T4856] loop4: detected capacity change from 0 to 128 [ 77.510434][ T4856] EXT4-fs: Ignoring removed nobh option [ 77.522898][ T4856] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.556672][ T4856] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.568581][ T4864] netlink: 48 bytes leftover after parsing attributes in process `syz.3.440'. [ 77.577631][ T4864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.440'. [ 77.620227][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.651979][ T4869] loop3: detected capacity change from 0 to 2048 [ 77.677153][ T4869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.677216][ T4869] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.927882][ T4881] hub 2-0:1.0: USB hub found [ 77.930286][ T4881] hub 2-0:1.0: 8 ports detected [ 78.078396][ T4873] xt_hashlimit: max too large, truncated to 1048576 [ 78.207146][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 78.222207][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 78.234909][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.234909][ T37] [ 78.261648][ T386] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 78.274567][ T386] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.274567][ T386] [ 78.284253][ T386] EXT4-fs (loop3): Total free blocks count 0 [ 78.290344][ T386] EXT4-fs (loop3): Free/Dirty block details [ 78.296339][ T4886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.448'. [ 78.296343][ T386] EXT4-fs (loop3): free_blocks=0 [ 78.296359][ T386] EXT4-fs (loop3): dirty_blocks=2048 [ 78.307280][ T4886] netlink: 44 bytes leftover after parsing attributes in process `syz.4.448'. [ 78.310168][ T386] EXT4-fs (loop3): Block reservation details [ 78.442373][ T4898] loop2: detected capacity change from 0 to 128 [ 78.449403][ T4898] EXT4-fs: Ignoring removed nobh option [ 78.457357][ T4898] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.469982][ T4898] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.474630][ T4901] netlink: 48 bytes leftover after parsing attributes in process `syz.5.452'. [ 78.489746][ T4901] netlink: 44 bytes leftover after parsing attributes in process `syz.5.452'. [ 78.512333][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.541711][ T4907] netlink: 48 bytes leftover after parsing attributes in process `syz.5.455'. [ 78.551153][ T4907] netlink: 44 bytes leftover after parsing attributes in process `syz.5.455'. [ 78.563284][ T4909] netlink: 'syz.2.456': attribute type 2 has an invalid length. [ 78.564022][ T9] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 78.590726][ T9] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.636639][ T4913] loop5: detected capacity change from 0 to 2048 [ 78.642120][ T4913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.656667][ T4913] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.973834][ T29] kauditd_printk_skb: 2159 callbacks suppressed [ 78.973849][ T29] audit: type=1326 audit(1747342774.926:16133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2536c5927 code=0x7ffc0000 [ 79.052493][ T29] audit: type=1326 audit(1747342774.926:16134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc25366ab39 code=0x7ffc0000 [ 79.075905][ T29] audit: type=1326 audit(1747342774.926:16135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2536c5927 code=0x7ffc0000 [ 79.099234][ T29] audit: type=1326 audit(1747342774.926:16136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc25366ab39 code=0x7ffc0000 [ 79.122675][ T29] audit: type=1326 audit(1747342774.926:16137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2536ce969 code=0x7ffc0000 [ 79.146150][ T29] audit: type=1326 audit(1747342774.926:16138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2536c5927 code=0x7ffc0000 [ 79.169531][ T29] audit: type=1326 audit(1747342774.926:16139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc25366ab39 code=0x7ffc0000 [ 79.192875][ T29] audit: type=1326 audit(1747342774.926:16140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2536ce969 code=0x7ffc0000 [ 79.216373][ T29] audit: type=1326 audit(1747342774.926:16141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2536c5927 code=0x7ffc0000 [ 79.239706][ T29] audit: type=1326 audit(1747342774.926:16142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4910 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc25366ab39 code=0x7ffc0000 [ 79.326610][ T4911] xt_hashlimit: max too large, truncated to 1048576 [ 79.452002][ T37] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 79.501860][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 79.514864][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.514864][ T37] [ 79.537624][ T36] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 79.545760][ T36] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.582250][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 79.595180][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.595180][ T37] [ 79.600153][ T4940] hub 2-0:1.0: USB hub found [ 79.604879][ T37] EXT4-fs (loop5): Total free blocks count 0 [ 79.609615][ T4940] hub 2-0:1.0: 8 ports detected [ 79.615452][ T37] EXT4-fs (loop5): Free/Dirty block details [ 79.615467][ T37] EXT4-fs (loop5): free_blocks=0 [ 79.615480][ T37] EXT4-fs (loop5): dirty_blocks=2048 [ 79.615494][ T37] EXT4-fs (loop5): Block reservation details [ 79.699533][ T4947] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.721747][ T4947] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.781914][ T4947] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.821848][ T4947] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.869466][ T4947] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.881345][ T4947] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.893463][ T4947] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.904900][ T4947] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.289993][ T4960] loop3: detected capacity change from 0 to 2048 [ 80.302201][ T4960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.314787][ T4960] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.766343][ T4976] __nla_validate_parse: 10 callbacks suppressed [ 80.766369][ T4976] netlink: 48 bytes leftover after parsing attributes in process `syz.5.480'. [ 80.766465][ T4976] netlink: 44 bytes leftover after parsing attributes in process `syz.5.480'. [ 80.770022][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 80.776891][ T23] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.920447][ T4971] xt_hashlimit: max too large, truncated to 1048576 [ 81.012596][ T4991] loop2: detected capacity change from 0 to 2048 [ 81.032468][ T4991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.044736][ T4991] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.115100][ T4998] hub 2-0:1.0: USB hub found [ 81.119850][ T4998] hub 2-0:1.0: 8 ports detected [ 81.136105][ T5000] hub 2-0:1.0: USB hub found [ 81.140993][ T5000] hub 2-0:1.0: 8 ports detected [ 81.164952][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 81.179975][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 81.192755][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.192755][ T37] [ 81.222837][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 81.235606][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.235606][ T51] [ 81.245272][ T51] EXT4-fs (loop3): Total free blocks count 0 [ 81.251307][ T51] EXT4-fs (loop3): Free/Dirty block details [ 81.257206][ T51] EXT4-fs (loop3): free_blocks=0 [ 81.262172][ T51] EXT4-fs (loop3): dirty_blocks=2048 [ 81.267461][ T51] EXT4-fs (loop3): Block reservation details [ 81.364178][ T5004] netlink: 48 bytes leftover after parsing attributes in process `syz.3.489'. [ 81.374944][ T5004] netlink: 44 bytes leftover after parsing attributes in process `syz.3.489'. [ 81.404705][ T5006] hub 2-0:1.0: USB hub found [ 81.409617][ T5006] hub 2-0:1.0: 8 ports detected [ 81.869886][ T51] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 81.885523][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 81.898377][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.898377][ T51] [ 81.924350][ T5010] netlink: 48 bytes leftover after parsing attributes in process `syz.5.493'. [ 81.929363][ T379] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 81.933455][ T5010] netlink: 44 bytes leftover after parsing attributes in process `syz.5.493'. [ 81.946071][ T379] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.946071][ T379] [ 81.946145][ T379] EXT4-fs (loop2): Total free blocks count 0 [ 81.970643][ T379] EXT4-fs (loop2): Free/Dirty block details [ 81.976549][ T379] EXT4-fs (loop2): free_blocks=0 [ 81.976692][ T23] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 81.981501][ T379] EXT4-fs (loop2): dirty_blocks=2048 [ 81.981535][ T379] EXT4-fs (loop2): Block reservation details [ 82.030878][ T23] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.059108][ T5013] syzkaller1: entered promiscuous mode [ 82.064695][ T5013] syzkaller1: entered allmulticast mode [ 82.172745][ T5025] netlink: 'syz.2.497': attribute type 2 has an invalid length. [ 82.394071][ T5032] loop3: detected capacity change from 0 to 2048 [ 82.396593][ T5034] loop2: detected capacity change from 0 to 2048 [ 82.434198][ T5032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.434644][ T5032] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.437823][ T5034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.437927][ T5034] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.486877][ T5024] xt_hashlimit: max too large, truncated to 1048576 [ 82.596128][ T5022] xt_hashlimit: max too large, truncated to 1048576 [ 82.936182][ T5047] netlink: 48 bytes leftover after parsing attributes in process `syz.4.504'. [ 82.990332][ T5047] netlink: 44 bytes leftover after parsing attributes in process `syz.4.504'. [ 83.071953][ T23] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 83.114113][ T23] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.148618][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 83.154520][ T5052] syzkaller1: entered promiscuous mode [ 83.168895][ T5052] syzkaller1: entered allmulticast mode [ 83.170638][ T5050] hub 2-0:1.0: USB hub found [ 83.189639][ T5050] hub 2-0:1.0: 8 ports detected [ 83.199802][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 83.212564][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.212564][ T12] [ 83.243109][ T379] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 83.250605][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 83.255967][ T379] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.255967][ T379] [ 83.271828][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 83.280102][ T379] EXT4-fs (loop2): Total free blocks count 0 [ 83.280118][ T379] EXT4-fs (loop2): Free/Dirty block details [ 83.280127][ T379] EXT4-fs (loop2): free_blocks=0 [ 83.280140][ T379] EXT4-fs (loop2): dirty_blocks=2048 [ 83.280154][ T379] EXT4-fs (loop2): Block reservation details [ 83.321051][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 83.321051][ T12] [ 83.348384][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 83.361150][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 83.361150][ T12] [ 83.371086][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 83.377170][ T12] EXT4-fs (loop3): Free/Dirty block details [ 83.382932][ T5058] netlink: 48 bytes leftover after parsing attributes in process `syz.4.510'. [ 83.383164][ T12] EXT4-fs (loop3): free_blocks=0 [ 83.392327][ T5058] netlink: 44 bytes leftover after parsing attributes in process `syz.4.510'. [ 83.396982][ T12] EXT4-fs (loop3): dirty_blocks=2048 [ 83.397001][ T12] EXT4-fs (loop3): Block reservation details [ 83.478723][ T5068] hub 2-0:1.0: USB hub found [ 83.483785][ T5068] hub 2-0:1.0: 8 ports detected [ 83.873320][ T5073] xt_hashlimit: max too large, truncated to 1048576 [ 83.914243][ T5083] loop5: detected capacity change from 0 to 2048 [ 83.942989][ T5083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.962836][ T5083] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.987805][ T29] kauditd_printk_skb: 2618 callbacks suppressed [ 83.987821][ T29] audit: type=1326 audit(1747342779.936:18761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 84.026521][ T29] audit: type=1326 audit(1747342779.976:18762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b910cab39 code=0x7ffc0000 [ 84.050127][ T29] audit: type=1326 audit(1747342779.976:18763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9112e969 code=0x7ffc0000 [ 84.073616][ T29] audit: type=1326 audit(1747342779.976:18764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 84.097135][ T29] audit: type=1326 audit(1747342779.976:18765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b910cab39 code=0x7ffc0000 [ 84.120631][ T29] audit: type=1326 audit(1747342779.976:18766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2b9112e969 code=0x7ffc0000 [ 84.144060][ T29] audit: type=1326 audit(1747342779.976:18767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 84.151539][ T5088] xt_hashlimit: max too large, truncated to 1048576 [ 84.167483][ T29] audit: type=1326 audit(1747342779.976:18768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b910cab39 code=0x7ffc0000 [ 84.167532][ T29] audit: type=1326 audit(1747342779.976:18769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9112e969 code=0x7ffc0000 [ 84.167562][ T29] audit: type=1326 audit(1747342779.976:18770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 84.299423][ T5094] syzkaller1: entered promiscuous mode [ 84.305082][ T5094] syzkaller1: entered allmulticast mode [ 84.612213][ T12] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 84.632172][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 84.632206][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.632206][ T12] [ 84.665960][ T386] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 84.678804][ T386] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.678804][ T386] [ 84.678824][ T386] EXT4-fs (loop5): Total free blocks count 0 [ 84.678845][ T386] EXT4-fs (loop5): Free/Dirty block details [ 84.678858][ T386] EXT4-fs (loop5): free_blocks=0 [ 84.678870][ T386] EXT4-fs (loop5): dirty_blocks=2048 [ 84.678882][ T386] EXT4-fs (loop5): Block reservation details [ 84.863812][ T5128] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.902061][ T5128] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.953310][ T5128] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.992055][ T5128] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.055324][ T5122] xt_hashlimit: max too large, truncated to 1048576 [ 85.104814][ T5128] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.124466][ T5128] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.156957][ T5128] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.183290][ T5128] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.202603][ T5133] hub 2-0:1.0: USB hub found [ 85.207272][ T5133] hub 2-0:1.0: 8 ports detected [ 85.496075][ T5140] hub 2-0:1.0: USB hub found [ 85.496221][ T5140] hub 2-0:1.0: 8 ports detected [ 85.781445][ T5145] syzkaller1: entered promiscuous mode [ 85.786955][ T5145] syzkaller1: entered allmulticast mode [ 85.811186][ T5135] xt_hashlimit: max too large, truncated to 1048576 [ 86.076514][ T5157] __nla_validate_parse: 6 callbacks suppressed [ 86.076581][ T5157] netlink: 48 bytes leftover after parsing attributes in process `syz.3.539'. [ 86.091929][ T5157] netlink: 44 bytes leftover after parsing attributes in process `syz.3.539'. [ 86.148660][ T5162] hub 2-0:1.0: USB hub found [ 86.153396][ T5162] hub 2-0:1.0: 8 ports detected [ 87.120259][ T5175] Invalid logical block size (-1) [ 87.146354][ T5179] netlink: 48 bytes leftover after parsing attributes in process `syz.0.547'. [ 87.155485][ T5179] netlink: 44 bytes leftover after parsing attributes in process `syz.0.547'. [ 87.166284][ T3389] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 87.175446][ T3389] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.493082][ T5181] xt_hashlimit: max too large, truncated to 1048576 [ 87.546124][ T5203] loop3: detected capacity change from 0 to 2048 [ 87.562815][ T5203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.579529][ T5203] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.272869][ T5212] hub 2-0:1.0: USB hub found [ 88.277629][ T5212] hub 2-0:1.0: 8 ports detected [ 88.334938][ T5214] loop4: detected capacity change from 0 to 2048 [ 88.352266][ T5214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.364448][ T5214] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.399595][ T51] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 88.414522][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 88.427201][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 88.427201][ T51] [ 88.497446][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 88.510266][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 88.510266][ T51] [ 88.519947][ T51] EXT4-fs (loop3): Total free blocks count 0 [ 88.526064][ T51] EXT4-fs (loop3): Free/Dirty block details [ 88.532010][ T51] EXT4-fs (loop3): free_blocks=0 [ 88.536959][ T51] EXT4-fs (loop3): dirty_blocks=2048 [ 88.542326][ T51] EXT4-fs (loop3): Block reservation details [ 88.622400][ T5222] netlink: 48 bytes leftover after parsing attributes in process `syz.3.559'. [ 88.640610][ T5222] netlink: 44 bytes leftover after parsing attributes in process `syz.3.559'. [ 88.654127][ T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 88.661983][ T23] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.196749][ T51] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 89.211606][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 89.224307][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 89.224307][ T51] [ 89.249976][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 89.262849][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 89.262849][ T12] [ 89.272659][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 89.272678][ T12] EXT4-fs (loop4): Free/Dirty block details [ 89.272689][ T12] EXT4-fs (loop4): free_blocks=0 [ 89.272726][ T12] EXT4-fs (loop4): dirty_blocks=2048 [ 89.272738][ T12] EXT4-fs (loop4): Block reservation details [ 89.349101][ T5248] netlink: 'syz.4.569': attribute type 2 has an invalid length. [ 89.404381][ T5252] netlink: 48 bytes leftover after parsing attributes in process `syz.5.572'. [ 89.414227][ T5252] netlink: 44 bytes leftover after parsing attributes in process `syz.5.572'. [ 89.424862][ T36] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 89.433054][ T5253] Invalid logical block size (-1) [ 89.449533][ T36] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.502508][ T5260] netlink: 48 bytes leftover after parsing attributes in process `syz.5.575'. [ 89.502532][ T5260] netlink: 44 bytes leftover after parsing attributes in process `syz.5.575'. [ 89.524310][ T5258] hub 2-0:1.0: USB hub found [ 89.524420][ T5258] hub 2-0:1.0: 8 ports detected [ 89.563080][ T5265] loop5: detected capacity change from 0 to 2048 [ 89.583936][ T5265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.584089][ T5265] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.748913][ T29] kauditd_printk_skb: 2279 callbacks suppressed [ 89.748927][ T29] audit: type=1326 audit(1747342785.696:21050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5255 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 89.779011][ T29] audit: type=1326 audit(1747342785.696:21051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5255 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b910cab39 code=0x7ffc0000 [ 89.802512][ T29] audit: type=1326 audit(1747342785.696:21052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5255 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 89.825898][ T29] audit: type=1326 audit(1747342785.696:21053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5255 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b910cab39 code=0x7ffc0000 [ 89.849317][ T29] audit: type=1326 audit(1747342785.696:21054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5255 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 89.872912][ T29] audit: type=1326 audit(1747342785.696:21055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5255 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b910cab39 code=0x7ffc0000 [ 89.896328][ T29] audit: type=1326 audit(1747342785.696:21056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5255 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9112e969 code=0x7ffc0000 [ 89.919852][ T29] audit: type=1326 audit(1747342785.696:21057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5255 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 89.943747][ T29] audit: type=1326 audit(1747342785.696:21058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5255 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b910cab39 code=0x7ffc0000 [ 89.967438][ T29] audit: type=1326 audit(1747342785.696:21059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5255 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b91125927 code=0x7ffc0000 [ 90.061547][ T5273] loop3: detected capacity change from 0 to 2048 [ 90.074591][ T12] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 90.096144][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 90.108891][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 90.108891][ T12] [ 90.124918][ T5273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.151225][ T5256] xt_hashlimit: max too large, truncated to 1048576 [ 90.159369][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 90.172262][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 90.172262][ T12] [ 90.182085][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 90.188423][ T12] EXT4-fs (loop5): Free/Dirty block details [ 90.194472][ T12] EXT4-fs (loop5): free_blocks=0 [ 90.199435][ T12] EXT4-fs (loop5): dirty_blocks=2048 [ 90.204775][ T12] EXT4-fs (loop5): Block reservation details [ 90.207256][ T5273] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.323455][ T5285] netlink: 'syz.4.583': attribute type 2 has an invalid length. [ 90.428947][ T23] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 90.443460][ T23] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.909864][ T379] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 90.910415][ T379] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 90.937154][ T379] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.937154][ T379] [ 90.959063][ T379] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 90.959096][ T379] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.959096][ T379] [ 90.959137][ T379] EXT4-fs (loop3): Total free blocks count 0 [ 90.959148][ T379] EXT4-fs (loop3): Free/Dirty block details [ 90.959157][ T379] EXT4-fs (loop3): free_blocks=0 [ 90.959167][ T379] EXT4-fs (loop3): dirty_blocks=2048 [ 90.959244][ T379] EXT4-fs (loop3): Block reservation details [ 91.051387][ T5311] netlink: 'syz.3.594': attribute type 2 has an invalid length. [ 91.177763][ T5318] hub 2-0:1.0: USB hub found [ 91.187247][ T5318] hub 2-0:1.0: 8 ports detected [ 91.194239][ T5308] xt_hashlimit: max too large, truncated to 1048576 [ 91.476856][ T5339] netlink: 'syz.5.607': attribute type 2 has an invalid length. [ 91.528522][ T5345] hub 2-0:1.0: USB hub found [ 91.533556][ T5345] hub 2-0:1.0: 8 ports detected [ 91.669670][ T5347] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.701920][ T5347] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.772188][ T5347] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.821560][ T5347] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.867221][ T5347] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.878402][ T5347] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.889796][ T5347] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.901510][ T5347] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.044963][ T5353] syzkaller1: entered promiscuous mode [ 92.050530][ T5353] syzkaller1: entered allmulticast mode [ 92.163791][ T5359] loop3: detected capacity change from 0 to 2048 [ 92.181933][ T5359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.194102][ T5359] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.490807][ T5372] 9pnet_fd: Insufficient options for proto=fd [ 92.554920][ T5377] __nla_validate_parse: 6 callbacks suppressed [ 92.554939][ T5377] netlink: 48 bytes leftover after parsing attributes in process `syz.0.620'. [ 92.554983][ T5377] netlink: 44 bytes leftover after parsing attributes in process `syz.0.620'. [ 92.604481][ T5379] hub 2-0:1.0: USB hub found [ 92.604601][ T5379] hub 2-0:1.0: 8 ports detected [ 92.897438][ T5370] xt_hashlimit: max too large, truncated to 1048576 [ 92.982305][ T5385] syzkaller1: entered promiscuous mode [ 92.987906][ T5385] syzkaller1: entered allmulticast mode [ 93.039529][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 93.054677][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 93.067384][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.067384][ T12] [ 93.128600][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 93.141578][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.141578][ T12] [ 93.151340][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 93.157341][ T12] EXT4-fs (loop3): Free/Dirty block details [ 93.163313][ T12] EXT4-fs (loop3): free_blocks=0 [ 93.168281][ T12] EXT4-fs (loop3): dirty_blocks=2048 [ 93.173708][ T12] EXT4-fs (loop3): Block reservation details [ 93.267656][ T5399] netlink: 'syz.3.625': attribute type 2 has an invalid length. [ 93.298043][ T5401] hub 2-0:1.0: USB hub found [ 93.303050][ T5401] hub 2-0:1.0: 8 ports detected [ 93.309181][ T5403] 9pnet_fd: Insufficient options for proto=fd [ 93.349453][ T5407] netlink: 48 bytes leftover after parsing attributes in process `syz.2.632'. [ 93.358602][ T5407] netlink: 44 bytes leftover after parsing attributes in process `syz.2.632'. [ 93.486150][ T5412] lo speed is unknown, defaulting to 1000 [ 93.723277][ T5409] xt_hashlimit: max too large, truncated to 1048576 [ 93.817820][ T5418] loop2: detected capacity change from 0 to 2048 [ 93.834126][ T5418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.846534][ T5418] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.853395][ T5420] syzkaller1: entered promiscuous mode [ 93.862532][ T5420] syzkaller1: entered allmulticast mode [ 94.002900][ T5433] netlink: 'syz.5.640': attribute type 2 has an invalid length. [ 94.028789][ T5435] 9pnet_fd: Insufficient options for proto=fd [ 94.205326][ T5441] netlink: 48 bytes leftover after parsing attributes in process `syz.5.644'. [ 94.214460][ T5441] netlink: 44 bytes leftover after parsing attributes in process `syz.5.644'. [ 94.233825][ T5443] hub 2-0:1.0: USB hub found [ 94.238570][ T5443] hub 2-0:1.0: 8 ports detected [ 94.542034][ T5445] xt_hashlimit: max too large, truncated to 1048576 [ 94.613628][ T5449] hub 2-0:1.0: USB hub found [ 94.618348][ T5449] hub 2-0:1.0: 8 ports detected [ 94.667353][ T51] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 94.682390][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 94.695167][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 94.695167][ T51] [ 94.721868][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 94.734694][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 94.734694][ T12] [ 94.744411][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 94.750415][ T12] EXT4-fs (loop2): Free/Dirty block details [ 94.756308][ T12] EXT4-fs (loop2): free_blocks=0 [ 94.761277][ T12] EXT4-fs (loop2): dirty_blocks=2048 [ 94.766586][ T12] EXT4-fs (loop2): Block reservation details [ 95.127977][ T5463] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.182058][ T5463] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.231657][ T5463] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.281944][ T5463] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.358168][ T5463] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.369671][ T5463] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.380908][ T5463] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.392377][ T5463] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.523585][ T5467] hub 2-0:1.0: USB hub found [ 95.528292][ T5467] hub 2-0:1.0: 8 ports detected [ 95.847300][ T5481] netlink: 48 bytes leftover after parsing attributes in process `syz.4.661'. [ 95.856348][ T5481] netlink: 44 bytes leftover after parsing attributes in process `syz.4.661'. [ 95.899630][ T5487] netlink: 48 bytes leftover after parsing attributes in process `syz.4.663'. [ 95.908647][ T5487] netlink: 44 bytes leftover after parsing attributes in process `syz.4.663'. [ 96.057504][ T29] kauditd_printk_skb: 4141 callbacks suppressed [ 96.057519][ T29] audit: type=1107 audit(1747342792.006:25201): pid=5488 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='æ' [ 96.672116][ T29] audit: type=1326 audit(1747342792.626:25202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88312e969 code=0x7ffc0000 [ 96.676180][ T5510] syzkaller1: entered promiscuous mode [ 96.701221][ T5510] syzkaller1: entered allmulticast mode [ 96.723688][ T29] audit: type=1326 audit(1747342792.626:25203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fc88312e969 code=0x7ffc0000 [ 96.747446][ T29] audit: type=1326 audit(1747342792.626:25204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88312e969 code=0x7ffc0000 [ 96.771056][ T29] audit: type=1326 audit(1747342792.626:25205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc88312e969 code=0x7ffc0000 [ 96.794499][ T29] audit: type=1326 audit(1747342792.626:25206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88312e969 code=0x7ffc0000 [ 96.817977][ T29] audit: type=1326 audit(1747342792.626:25207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc88312e969 code=0x7ffc0000 [ 96.841407][ T29] audit: type=1326 audit(1747342792.626:25208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88312e969 code=0x7ffc0000 [ 96.864888][ T29] audit: type=1326 audit(1747342792.626:25209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc88312e969 code=0x7ffc0000 [ 96.888300][ T29] audit: type=1326 audit(1747342792.656:25210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88312e969 code=0x7ffc0000 [ 96.952575][ T5524] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.992426][ T5524] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.034227][ T5524] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.082331][ T5524] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.241793][ T5524] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.273893][ T5524] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.277895][ T5524] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.376780][ T5524] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.409791][ T5546] lo speed is unknown, defaulting to 1000 [ 97.714269][ T5533] xt_hashlimit: max too large, truncated to 1048576 [ 97.881761][ T5563] __nla_validate_parse: 4 callbacks suppressed [ 97.881776][ T5563] netlink: 48 bytes leftover after parsing attributes in process `syz.2.687'. [ 97.898535][ T5563] netlink: 44 bytes leftover after parsing attributes in process `syz.2.687'. [ 97.911863][ T5565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.688'. [ 97.920965][ T5565] netlink: 44 bytes leftover after parsing attributes in process `syz.0.688'. [ 97.936900][ T5567] syzkaller1: entered promiscuous mode [ 97.942476][ T5567] syzkaller1: entered allmulticast mode [ 98.195727][ T5589] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.244711][ T5589] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.283125][ T5589] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.315500][ T5583] xt_hashlimit: max too large, truncated to 1048576 [ 98.332494][ T5589] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.402918][ T5589] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.415342][ T5589] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.427367][ T5589] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.439790][ T5589] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.639535][ T5599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.699'. [ 98.655390][ T5599] netlink: 44 bytes leftover after parsing attributes in process `syz.3.699'. [ 98.693012][ T5605] netlink: 48 bytes leftover after parsing attributes in process `syz.2.701'. [ 98.704559][ T5603] loop3: detected capacity change from 0 to 2048 [ 98.711331][ T5605] netlink: 44 bytes leftover after parsing attributes in process `syz.2.701'. [ 98.742832][ T5603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.760896][ T5603] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.784354][ T5612] syzkaller1: entered promiscuous mode [ 98.789947][ T5612] syzkaller1: entered allmulticast mode [ 98.856816][ T5613] FAULT_INJECTION: forcing a failure. [ 98.856816][ T5613] name failslab, interval 1, probability 0, space 0, times 0 [ 98.869634][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz.5.700 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 98.869666][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 98.869682][ T5613] Call Trace: [ 98.869690][ T5613] [ 98.869699][ T5613] __dump_stack+0x1d/0x30 [ 98.869724][ T5613] dump_stack_lvl+0xe8/0x140 [ 98.869749][ T5613] dump_stack+0x15/0x1b [ 98.869769][ T5613] should_fail_ex+0x265/0x280 [ 98.869803][ T5613] should_failslab+0x8c/0xb0 [ 98.869839][ T5613] kmem_cache_alloc_noprof+0x50/0x310 [ 98.869858][ T5613] ? vm_area_alloc+0x2c/0xb0 [ 98.869887][ T5613] vm_area_alloc+0x2c/0xb0 [ 98.869914][ T5613] mmap_region+0x81f/0x1470 [ 98.869981][ T5613] do_mmap+0x9de/0xc20 [ 98.870013][ T5613] vm_mmap_pgoff+0x17a/0x2e0 [ 98.870043][ T5613] ksys_mmap_pgoff+0xc2/0x310 [ 98.870080][ T5613] ? __x64_sys_mmap+0x49/0x70 [ 98.870106][ T5613] x64_sys_call+0x1602/0x2fb0 [ 98.870127][ T5613] do_syscall_64+0xd0/0x1a0 [ 98.870167][ T5613] ? clear_bhb_loop+0x40/0x90 [ 98.870193][ T5613] ? clear_bhb_loop+0x40/0x90 [ 98.870219][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.870244][ T5613] RIP: 0033:0x7fc88312e9a3 [ 98.870262][ T5613] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 98.870283][ T5613] RSP: 002b:00007fc881775e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 98.870305][ T5613] RAX: ffffffffffffffda RBX: 0000000000000436 RCX: 00007fc88312e9a3 [ 98.870316][ T5613] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 98.870328][ T5613] RBP: 0000200000000d82 R08: 00000000ffffffff R09: 0000000000000000 [ 98.870339][ T5613] R10: 0000000000000022 R11: 0000000000000246 R12: 000000000000000b [ 98.870350][ T5613] R13: 00007fc881775ef0 R14: 00007fc881775eb0 R15: 0000200000000100 [ 98.870374][ T5613] [ 99.224386][ T5636] netlink: 48 bytes leftover after parsing attributes in process `syz.4.712'. [ 99.234960][ T5636] netlink: 44 bytes leftover after parsing attributes in process `syz.4.712'. [ 99.429246][ T5649] syzkaller1: entered promiscuous mode [ 99.435075][ T5649] syzkaller1: entered allmulticast mode [ 99.548090][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 99.563261][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 99.575966][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.575966][ T12] [ 99.579274][ T5658] hub 2-0:1.0: USB hub found [ 99.593451][ T5658] hub 2-0:1.0: 8 ports detected [ 99.607971][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 99.620789][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.620789][ T12] [ 99.630484][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 99.636497][ T12] EXT4-fs (loop3): Free/Dirty block details [ 99.642418][ T12] EXT4-fs (loop3): free_blocks=0 [ 99.647446][ T12] EXT4-fs (loop3): dirty_blocks=2048 [ 99.652771][ T12] EXT4-fs (loop3): Block reservation details [ 99.717090][ T5667] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.751911][ T5667] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.811818][ T5667] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.862128][ T5667] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.908657][ T5667] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.920706][ T5667] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.932424][ T5667] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.944321][ T5667] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.429256][ T5684] syzkaller1: entered promiscuous mode [ 100.434939][ T5684] syzkaller1: entered allmulticast mode [ 100.451224][ T5686] loop4: detected capacity change from 0 to 2048 [ 100.463280][ T5686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.475469][ T5686] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.525780][ T5693] loop2: detected capacity change from 0 to 159 [ 100.534942][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.546657][ T5693] loop2: detected capacity change from 0 to 159 [ 100.555302][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.566399][ T5693] loop2: detected capacity change from 0 to 159 [ 100.574379][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.585584][ T5693] loop2: detected capacity change from 0 to 159 [ 100.594001][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.605282][ T5693] loop2: detected capacity change from 0 to 159 [ 100.613581][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.624870][ T5693] loop2: detected capacity change from 0 to 159 [ 100.633270][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.646083][ T5693] loop2: detected capacity change from 0 to 159 [ 100.690588][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.704284][ T5693] loop2: detected capacity change from 0 to 159 [ 100.714563][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.727240][ T5693] loop2: detected capacity change from 0 to 159 [ 100.751211][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.766083][ T5693] loop2: detected capacity change from 0 to 159 [ 100.776429][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.787832][ T5693] loop2: detected capacity change from 0 to 159 [ 100.797050][ T5711] hub 2-0:1.0: USB hub found [ 100.802133][ T5711] hub 2-0:1.0: 8 ports detected [ 100.818781][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.829367][ T5693] loop2: detected capacity change from 0 to 159 [ 100.839115][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.849859][ T5693] loop2: detected capacity change from 0 to 159 [ 100.859871][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.871477][ T5693] loop2: detected capacity change from 0 to 159 [ 100.880122][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.892348][ T5693] loop2: detected capacity change from 0 to 159 [ 100.926249][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.937905][ T5693] loop2: detected capacity change from 0 to 159 [ 100.946297][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.958004][ T5693] loop2: detected capacity change from 0 to 159 [ 100.967038][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.977498][ T5693] loop2: detected capacity change from 0 to 159 [ 100.987201][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 100.989986][ T5693] loop2: detected capacity change from 0 to 159 [ 101.005968][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 101.015691][ T5693] loop2: detected capacity change from 0 to 159 [ 101.019723][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 101.032810][ T5693] loop2: detected capacity change from 0 to 159 [ 101.036449][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 101.051281][ T5693] loop2: detected capacity change from 0 to 159 [ 101.055223][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 101.068400][ T5693] loop2: detected capacity change from 0 to 159 [ 101.088224][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 101.096702][ T5693] loop2: detected capacity change from 0 to 159 [ 101.117590][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 101.140385][ T5693] loop2: detected capacity change from 0 to 159 [ 101.161738][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 101.170036][ T5693] loop2: detected capacity change from 0 to 159 [ 101.190861][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 101.207488][ T5693] loop2: detected capacity change from 0 to 159 [ 101.218849][ T29] kauditd_printk_skb: 1120 callbacks suppressed [ 101.218865][ T29] audit: type=1326 audit(1747342797.166:26331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4f4bd5927 code=0x7ffc0000 [ 101.218934][ T29] audit: type=1326 audit(1747342797.166:26332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4f4b7ab39 code=0x7ffc0000 [ 101.218981][ T29] audit: type=1326 audit(1747342797.166:26333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f4bde969 code=0x7ffc0000 [ 101.219012][ T29] audit: type=1326 audit(1747342797.166:26334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4f4bd5927 code=0x7ffc0000 [ 101.219035][ T29] audit: type=1326 audit(1747342797.166:26335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4f4b7ab39 code=0x7ffc0000 [ 101.219142][ T29] audit: type=1326 audit(1747342797.166:26336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4f4bd5927 code=0x7ffc0000 [ 101.219227][ T29] audit: type=1326 audit(1747342797.166:26337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4f4b7ab39 code=0x7ffc0000 [ 101.219265][ T29] audit: type=1326 audit(1747342797.166:26338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4f4bd5927 code=0x7ffc0000 [ 101.219702][ T29] audit: type=1326 audit(1747342797.166:26339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4f4b7ab39 code=0x7ffc0000 [ 101.219846][ T29] audit: type=1326 audit(1747342797.166:26340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5713 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff4f4bde969 code=0x7ffc0000 [ 101.239008][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 101.410195][ T5715] xt_hashlimit: max too large, truncated to 1048576 [ 101.438391][ T5693] loop2: detected capacity change from 0 to 159 [ 101.466240][ T5693] isofs_fill_super: bread failed, dev=loop2, iso_blknum=40, block=160 [ 101.560587][ T51] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 101.587823][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 101.600635][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 101.600635][ T51] [ 101.640950][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 101.653868][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 101.653868][ T51] [ 101.663726][ T51] EXT4-fs (loop4): Total free blocks count 0 [ 101.669911][ T51] EXT4-fs (loop4): Free/Dirty block details [ 101.675878][ T51] EXT4-fs (loop4): free_blocks=0 [ 101.680876][ T51] EXT4-fs (loop4): dirty_blocks=2048 [ 101.686235][ T51] EXT4-fs (loop4): Block reservation details [ 101.727913][ T5726] syzkaller1: entered promiscuous mode [ 101.733664][ T5726] syzkaller1: entered allmulticast mode [ 101.823471][ T5730] hub 2-0:1.0: USB hub found [ 101.828426][ T5730] hub 2-0:1.0: 8 ports detected [ 101.902522][ T5733] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.963259][ T5733] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.000611][ T36] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 102.008539][ T36] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.021306][ T5733] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.055442][ T5746] loop2: detected capacity change from 0 to 2048 [ 102.071874][ T5746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.084292][ T5746] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.095826][ T5733] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.137310][ T5733] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.149000][ T5733] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.161647][ T5733] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.173612][ T5733] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.482548][ T5753] loop3: detected capacity change from 0 to 2048 [ 102.502045][ T5753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.514358][ T5753] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.753833][ T5765] hub 2-0:1.0: USB hub found [ 102.753916][ T5765] hub 2-0:1.0: 8 ports detected [ 102.922045][ T51] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 102.922376][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 102.949638][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.949638][ T51] [ 102.971659][ T386] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 102.971692][ T386] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.971692][ T386] [ 102.971707][ T386] EXT4-fs (loop2): Total free blocks count 0 [ 102.971723][ T386] EXT4-fs (loop2): Free/Dirty block details [ 102.971757][ T386] EXT4-fs (loop2): free_blocks=0 [ 102.971844][ T386] EXT4-fs (loop2): dirty_blocks=2048 [ 102.971858][ T386] EXT4-fs (loop2): Block reservation details [ 103.068071][ T5769] syzkaller1: entered promiscuous mode [ 103.073664][ T5769] syzkaller1: entered allmulticast mode [ 103.082725][ T5763] xt_hashlimit: max too large, truncated to 1048576 [ 103.209332][ T5782] __nla_validate_parse: 6 callbacks suppressed [ 103.209351][ T5782] netlink: 48 bytes leftover after parsing attributes in process `syz.2.759'. [ 103.225461][ T5782] netlink: 44 bytes leftover after parsing attributes in process `syz.2.759'. [ 103.236081][ T3464] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 103.245104][ T3464] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.343557][ T51] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 103.364859][ T5788] hub 2-0:1.0: USB hub found [ 103.369694][ T5788] hub 2-0:1.0: 8 ports detected [ 103.375288][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 103.388164][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.388164][ T51] [ 103.416713][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 103.429530][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.429530][ T51] [ 103.439242][ T51] EXT4-fs (loop3): Total free blocks count 0 [ 103.445263][ T51] EXT4-fs (loop3): Free/Dirty block details [ 103.451227][ T51] EXT4-fs (loop3): free_blocks=0 [ 103.456184][ T51] EXT4-fs (loop3): dirty_blocks=2048 [ 103.461513][ T51] EXT4-fs (loop3): Block reservation details [ 103.535871][ T5795] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.571780][ T5795] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.621673][ T5795] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.621870][ T5798] loop5: detected capacity change from 0 to 2048 [ 103.641879][ T5798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.654136][ T5798] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.671797][ T5795] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.847782][ T5795] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.859599][ T5795] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.871460][ T5795] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.883591][ T5795] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.337435][ T5809] syzkaller1: entered promiscuous mode [ 104.343091][ T5809] syzkaller1: entered allmulticast mode [ 104.458986][ T5815] lo speed is unknown, defaulting to 1000 [ 104.610221][ T5815] loop2: detected capacity change from 0 to 512 [ 104.692975][ T51] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 104.693979][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 104.721538][ T51] EXT4-fs (loop5): This should not happen!! Data will be lost [ 104.721538][ T51] [ 104.797031][ T5823] loop4: detected capacity change from 0 to 2048 [ 104.797388][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 104.816361][ T51] EXT4-fs (loop5): This should not happen!! Data will be lost [ 104.816361][ T51] [ 104.826175][ T51] EXT4-fs (loop5): Total free blocks count 0 [ 104.832362][ T51] EXT4-fs (loop5): Free/Dirty block details [ 104.838266][ T51] EXT4-fs (loop5): free_blocks=0 [ 104.843256][ T51] EXT4-fs (loop5): dirty_blocks=2048 [ 104.848769][ T51] EXT4-fs (loop5): Block reservation details [ 104.859885][ T5823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.910424][ T5823] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.924381][ T5807] xt_hashlimit: max too large, truncated to 1048576 [ 104.965404][ T5828] netlink: 48 bytes leftover after parsing attributes in process `syz.5.770'. [ 104.974679][ T5828] netlink: 44 bytes leftover after parsing attributes in process `syz.5.770'. [ 105.022351][ T3391] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 105.079211][ T3391] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.198473][ T5837] hub 2-0:1.0: USB hub found [ 105.211296][ T5837] hub 2-0:1.0: 8 ports detected [ 105.365887][ T37] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 105.380963][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 105.393791][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 105.393791][ T37] [ 105.422198][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 105.435111][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 105.435111][ T37] [ 105.444779][ T37] EXT4-fs (loop4): Total free blocks count 0 [ 105.450822][ T37] EXT4-fs (loop4): Free/Dirty block details [ 105.456768][ T37] EXT4-fs (loop4): free_blocks=0 [ 105.461826][ T37] EXT4-fs (loop4): dirty_blocks=2048 [ 105.467122][ T37] EXT4-fs (loop4): Block reservation details [ 105.487655][ T5843] hub 2-0:1.0: USB hub found [ 105.492490][ T5843] hub 2-0:1.0: 8 ports detected [ 105.549178][ T5849] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.611878][ T5849] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.651970][ T5849] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.691960][ T5849] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.042057][ T5856] syzkaller1: entered promiscuous mode [ 106.047677][ T5856] syzkaller1: entered allmulticast mode [ 106.281634][ T5861] loop5: detected capacity change from 0 to 2048 [ 106.291960][ T5861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.304234][ T5861] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.517970][ T5874] netlink: 48 bytes leftover after parsing attributes in process `syz.4.786'. [ 106.540290][ T5874] netlink: 44 bytes leftover after parsing attributes in process `syz.4.786'. [ 106.548206][ T3391] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 106.569518][ T3391] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.619679][ T5876] loop4: detected capacity change from 0 to 2048 [ 106.632954][ T5876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.633017][ T5876] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.933621][ T5870] xt_hashlimit: max too large, truncated to 1048576 [ 107.004630][ T29] kauditd_printk_skb: 2082 callbacks suppressed [ 107.004646][ T29] audit: type=1326 audit(1747342802.856:28423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4f4bd5927 code=0x7ffc0000 [ 107.034454][ T29] audit: type=1326 audit(1747342802.856:28424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4f4b7ab39 code=0x7ffc0000 [ 107.057841][ T29] audit: type=1326 audit(1747342802.856:28425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f4bde969 code=0x7ffc0000 [ 107.081418][ T29] audit: type=1326 audit(1747342802.856:28426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4f4bd5927 code=0x7ffc0000 [ 107.104797][ T29] audit: type=1326 audit(1747342802.856:28427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4f4b7ab39 code=0x7ffc0000 [ 107.128194][ T29] audit: type=1326 audit(1747342802.856:28428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff4f4bde969 code=0x7ffc0000 [ 107.151686][ T29] audit: type=1326 audit(1747342802.866:28429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4f4bd5927 code=0x7ffc0000 [ 107.175135][ T29] audit: type=1326 audit(1747342802.866:28430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4f4b7ab39 code=0x7ffc0000 [ 107.198651][ T29] audit: type=1326 audit(1747342802.866:28431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f4bde969 code=0x7ffc0000 [ 107.222067][ T29] audit: type=1326 audit(1747342802.876:28432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f4bde969 code=0x7ffc0000 [ 107.281826][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 107.306777][ T37] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 107.322565][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 107.335320][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 107.335320][ T12] [ 107.346467][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 107.359200][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 107.359200][ T37] [ 107.389650][ T5887] syzkaller1: entered promiscuous mode [ 107.395204][ T5887] syzkaller1: entered allmulticast mode [ 107.413382][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 107.420375][ T5885] hub 2-0:1.0: USB hub found [ 107.426141][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 107.426141][ T12] [ 107.440446][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 107.440932][ T5885] hub 2-0:1.0: 8 ports detected [ 107.446427][ T12] EXT4-fs (loop4): Free/Dirty block details [ 107.457204][ T12] EXT4-fs (loop4): free_blocks=0 [ 107.462172][ T12] EXT4-fs (loop4): dirty_blocks=2048 [ 107.467463][ T12] EXT4-fs (loop4): Block reservation details [ 107.479782][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 107.492653][ T51] EXT4-fs (loop5): This should not happen!! Data will be lost [ 107.492653][ T51] [ 107.502328][ T51] EXT4-fs (loop5): Total free blocks count 0 [ 107.508328][ T51] EXT4-fs (loop5): Free/Dirty block details [ 107.514287][ T51] EXT4-fs (loop5): free_blocks=0 [ 107.519244][ T51] EXT4-fs (loop5): dirty_blocks=2048 [ 107.524561][ T51] EXT4-fs (loop5): Block reservation details [ 107.682980][ T5899] hub 2-0:1.0: USB hub found [ 107.687756][ T5899] hub 2-0:1.0: 8 ports detected [ 108.086446][ T5849] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.098075][ T5849] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.109750][ T5849] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.121084][ T5849] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.255559][ T5907] lo speed is unknown, defaulting to 1000 [ 108.452709][ T5915] loop3: detected capacity change from 0 to 2048 [ 108.484125][ T5915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.503703][ T5915] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.842215][ T5931] loop5: detected capacity change from 0 to 2048 [ 108.853460][ T5931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.853542][ T5931] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.993180][ T5936] loop4: detected capacity change from 0 to 2048 [ 109.025874][ T5936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.041574][ T5864] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 109.070393][ T5936] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.081159][ T5923] xt_hashlimit: max too large, truncated to 1048576 [ 109.099135][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 109.111890][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 109.111890][ T51] [ 109.166437][ T5941] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.296064][ T5941] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.324738][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 1282 with error 28 [ 109.337648][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 109.337648][ T51] [ 109.347357][ T51] EXT4-fs (loop3): Total free blocks count 0 [ 109.353398][ T51] EXT4-fs (loop3): Free/Dirty block details [ 109.359318][ T51] EXT4-fs (loop3): free_blocks=0 [ 109.364367][ T51] EXT4-fs (loop3): dirty_blocks=1296 [ 109.370083][ T51] EXT4-fs (loop3): Block reservation details [ 109.401813][ T5941] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.443306][ T5945] hub 2-0:1.0: USB hub found [ 109.443903][ T5941] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.448033][ T5945] hub 2-0:1.0: 8 ports detected [ 109.458169][ T5864] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 109.531465][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1783 with error 117 [ 109.544328][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.544328][ T51] [ 109.562025][ T5941] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.573936][ T5941] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.585883][ T5941] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.598368][ T5941] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.649261][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.694971][ T379] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 109.710546][ T379] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 109.723330][ T379] EXT4-fs (loop5): This should not happen!! Data will be lost [ 109.723330][ T379] [ 109.750065][ T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 109.763016][ T59] EXT4-fs (loop5): This should not happen!! Data will be lost [ 109.763016][ T59] [ 109.772798][ T59] EXT4-fs (loop5): Total free blocks count 0 [ 109.772820][ T59] EXT4-fs (loop5): Free/Dirty block details [ 109.772834][ T59] EXT4-fs (loop5): free_blocks=0 [ 109.772849][ T59] EXT4-fs (loop5): dirty_blocks=2048 [ 109.772861][ T59] EXT4-fs (loop5): Block reservation details [ 109.870352][ T5955] Invalid logical block size (-1) [ 109.895232][ T5957] hub 2-0:1.0: USB hub found [ 109.900091][ T5957] hub 2-0:1.0: 8 ports detected [ 110.327122][ T5970] loop2: detected capacity change from 0 to 2048 [ 110.362132][ T5970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.374429][ T5970] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.407444][ T5974] hub 2-0:1.0: USB hub found [ 110.412242][ T5974] hub 2-0:1.0: 8 ports detected [ 110.639647][ T5977] loop4: detected capacity change from 0 to 512 [ 110.646680][ T5977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.656778][ T5977] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.820: invalid block [ 110.669015][ T5977] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.820: invalid indirect mapped block 4294967295 (level 1) [ 110.683204][ T5977] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.820: invalid indirect mapped block 4294967295 (level 1) [ 110.697589][ T5977] EXT4-fs (loop4): 2 truncates cleaned up [ 110.703946][ T5977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.723860][ T5977] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.820: path /176/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 110.756805][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.777249][ T5982] loop4: detected capacity change from 0 to 512 [ 110.784217][ T5982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.793964][ T5982] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.821: invalid block [ 110.806075][ T5982] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.821: invalid indirect mapped block 4294967295 (level 1) [ 110.820083][ T5982] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.821: invalid indirect mapped block 4294967295 (level 1) [ 110.834572][ T5982] EXT4-fs (loop4): 2 truncates cleaned up [ 110.840755][ T5982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.858419][ T5982] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.821: path /177/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 110.889689][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.923718][ T5986] lo speed is unknown, defaulting to 1000 [ 110.938993][ T5990] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.959798][ T5992] SELinux: syz.5.825 (5992) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 110.997773][ T5996] hub 2-0:1.0: USB hub found [ 111.002933][ T5996] hub 2-0:1.0: 8 ports detected [ 111.008876][ T5990] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.021947][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.092229][ T5990] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.171958][ T5990] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.193031][ T379] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 111.208320][ T379] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 111.221427][ T379] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.221427][ T379] [ 111.251483][ T59] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 111.264309][ T59] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.264309][ T59] [ 111.274048][ T59] EXT4-fs (loop2): Total free blocks count 0 [ 111.280033][ T59] EXT4-fs (loop2): Free/Dirty block details [ 111.286020][ T59] EXT4-fs (loop2): free_blocks=0 [ 111.290985][ T59] EXT4-fs (loop2): dirty_blocks=2048 [ 111.296310][ T59] EXT4-fs (loop2): Block reservation details [ 111.412084][ T6010] loop4: detected capacity change from 0 to 2048 [ 111.428738][ T6010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.441560][ T6010] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.660926][ T6019] loop3: detected capacity change from 0 to 512 [ 112.132147][ T6025] loop5: detected capacity change from 0 to 1024 [ 112.141114][ T6025] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 112.150892][ T6025] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.161086][ T6025] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 112.318677][ T6027] loop3: detected capacity change from 0 to 512 [ 112.361187][ T6027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.379989][ T37] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 112.435215][ T6027] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.834: invalid block [ 112.460451][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 112.473144][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.473144][ T37] [ 112.490084][ T6027] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.834: invalid indirect mapped block 4294967295 (level 1) [ 112.506149][ T6027] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.834: invalid indirect mapped block 4294967295 (level 1) [ 112.550044][ T6027] EXT4-fs (loop3): 2 truncates cleaned up [ 112.560556][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 112.573997][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.573997][ T37] [ 112.583719][ T37] EXT4-fs (loop4): Total free blocks count 0 [ 112.589710][ T37] EXT4-fs (loop4): Free/Dirty block details [ 112.595628][ T37] EXT4-fs (loop4): free_blocks=0 [ 112.600596][ T37] EXT4-fs (loop4): dirty_blocks=2048 [ 112.605910][ T37] EXT4-fs (loop4): Block reservation details [ 112.615204][ T6027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.635506][ T6027] netlink: 64 bytes leftover after parsing attributes in process `gtp'. [ 112.657206][ T6027] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm gtp: path /158/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 112.697239][ T6032] netlink: 'syz.2.837': attribute type 55 has an invalid length. [ 112.718583][ T6032] SELinux: syz.2.837 (6032) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 112.803434][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.853313][ T29] kauditd_printk_skb: 1199 callbacks suppressed [ 112.853330][ T29] audit: type=1400 audit(1747342808.806:29632): avc: denied { mount } for pid=6035 comm="syz.2.839" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 112.881621][ T29] audit: type=1400 audit(1747342808.806:29633): avc: denied { watch watch_reads } for pid=6035 comm="syz.2.839" path="/178/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 112.914355][ T6036] team0: Device gtp0 is of different type [ 112.921614][ T6038] FAULT_INJECTION: forcing a failure. [ 112.921614][ T6038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.934708][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.3.838 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 112.934735][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 112.934747][ T6038] Call Trace: [ 112.934753][ T6038] [ 112.934760][ T6038] __dump_stack+0x1d/0x30 [ 112.934784][ T6038] dump_stack_lvl+0xe8/0x140 [ 112.934882][ T6038] dump_stack+0x15/0x1b [ 112.934902][ T6038] should_fail_ex+0x265/0x280 [ 112.934993][ T6038] should_fail+0xb/0x20 [ 112.935096][ T6038] should_fail_usercopy+0x1a/0x20 [ 112.935115][ T6038] _copy_from_user+0x1c/0xb0 [ 112.935140][ T6038] kstrtouint_from_user+0x69/0xf0 [ 112.935215][ T6038] ? avc_policy_seqno+0x15/0x30 [ 112.935242][ T6038] proc_fail_nth_write+0x50/0x160 [ 112.935275][ T6038] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 112.935306][ T6038] vfs_write+0x266/0x8d0 [ 112.935338][ T6038] ? vfs_read+0x47f/0x6f0 [ 112.935367][ T6038] ? __rcu_read_unlock+0x4f/0x70 [ 112.935389][ T6038] ? __fget_files+0x184/0x1c0 [ 112.935441][ T6038] ksys_write+0xda/0x1a0 [ 112.935474][ T6038] __x64_sys_write+0x40/0x50 [ 112.935499][ T6038] x64_sys_call+0x2cdd/0x2fb0 [ 112.935557][ T6038] do_syscall_64+0xd0/0x1a0 [ 112.935587][ T6038] ? clear_bhb_loop+0x40/0x90 [ 112.935610][ T6038] ? clear_bhb_loop+0x40/0x90 [ 112.935646][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.935666][ T6038] RIP: 0033:0x7fee14c4d41f [ 112.935697][ T6038] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 112.935744][ T6038] RSP: 002b:00007fee13296030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 112.935767][ T6038] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee14c4d41f [ 112.935782][ T6038] RDX: 0000000000000001 RSI: 00007fee132960a0 RDI: 0000000000000004 [ 112.935796][ T6038] RBP: 00007fee13296090 R08: 0000000000000000 R09: 0000000000000000 [ 112.935806][ T6038] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 112.935877][ T6038] R13: 0000000000000000 R14: 00007fee14e76080 R15: 00007ffd09bf3b68 [ 112.935910][ T6038] [ 113.190566][ T29] audit: type=1400 audit(1747342809.146:29634): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 113.238709][ T6044] loop2: detected capacity change from 0 to 2048 [ 113.276770][ T29] audit: type=1400 audit(1747342809.216:29635): avc: denied { read } for pid=6047 comm="syz.3.841" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.299940][ T29] audit: type=1400 audit(1747342809.216:29636): avc: denied { open } for pid=6047 comm="syz.3.841" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.326384][ T6040] 9pnet_fd: Insufficient options for proto=fd [ 113.341987][ T29] audit: type=1400 audit(1747342809.276:29637): avc: denied { mounton } for pid=6039 comm="syz.4.835" path="/183/file0" dev="tmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.364653][ T29] audit: type=1400 audit(1747342809.286:29638): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.389138][ T29] audit: type=1400 audit(1747342809.286:29639): avc: denied { open } for pid=3322 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.398736][ T6051] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 113.413537][ T29] audit: type=1400 audit(1747342809.286:29640): avc: denied { ioctl } for pid=3322 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.484685][ T6044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.514724][ T6044] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.544782][ T6055] hub 2-0:1.0: USB hub found [ 113.552160][ T6055] hub 2-0:1.0: 8 ports detected [ 113.708616][ T6067] loop5: detected capacity change from 0 to 512 [ 113.717280][ T6067] ext4: Unknown parameter '€' [ 113.999301][ T6080] loop5: detected capacity change from 0 to 2048 [ 114.011647][ T6080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.023834][ T6080] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.054461][ T6042] ================================================================== [ 114.062565][ T6042] BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async [ 114.070292][ T6042] [ 114.072610][ T6042] write to 0xffff8881005a4398 of 8 bytes by task 6044 on cpu 1: [ 114.080238][ T6042] fasync_remove_entry+0xcc/0x120 [ 114.085283][ T6042] fasync_helper+0x97/0xc0 [ 114.089698][ T6042] sock_fasync+0x58/0xc0 [ 114.093944][ T6042] __fput+0x5e6/0x650 [ 114.098007][ T6042] ____fput+0x1c/0x30 [ 114.101983][ T6042] task_work_run+0x131/0x1a0 [ 114.106574][ T6042] resume_user_mode_work+0x6a/0x70 [ 114.111715][ T6042] syscall_exit_to_user_mode+0x77/0xb0 [ 114.117172][ T6042] do_syscall_64+0xdd/0x1a0 [ 114.121678][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.127587][ T6042] [ 114.129907][ T6042] read to 0xffff8881005a4398 of 8 bytes by task 6042 on cpu 0: [ 114.137482][ T6042] sock_wake_async+0x29/0x110 [ 114.142277][ T6042] unix_write_space+0x13b/0x140 [ 114.147144][ T6042] sock_wfree+0x14b/0x3c0 [ 114.151479][ T6042] unix_destruct_scm+0xc3/0xf0 [ 114.156251][ T6042] skb_release_head_state+0xb7/0x1a0 [ 114.161534][ T6042] __kfree_skb+0x18/0x150 [ 114.165869][ T6042] sk_skb_reason_drop+0xbd/0x270 [ 114.170803][ T6042] unix_release_sock+0x5d3/0x720 [ 114.175743][ T6042] unix_release+0x58/0x80 [ 114.180068][ T6042] sock_close+0x6b/0x150 [ 114.184313][ T6042] __fput+0x29b/0x650 [ 114.188291][ T6042] ____fput+0x1c/0x30 [ 114.192267][ T6042] task_work_run+0x131/0x1a0 [ 114.196854][ T6042] resume_user_mode_work+0x6a/0x70 [ 114.201967][ T6042] syscall_exit_to_user_mode+0x77/0xb0 [ 114.207437][ T6042] do_syscall_64+0xdd/0x1a0 [ 114.211963][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.217849][ T6042] [ 114.220173][ T6042] value changed: 0xffff88811925f2a0 -> 0x0000000000000000 [ 114.227292][ T6042] [ 114.229625][ T6042] Reported by Kernel Concurrency Sanitizer on: [ 114.235777][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.2.840 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 114.248118][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 114.258182][ T6042] ================================================================== [ 114.293667][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 114.309308][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 114.322127][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.322127][ T12] [ 114.352779][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 114.365529][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.365529][ T37] [ 114.375275][ T37] EXT4-fs (loop2): Total free blocks count 0 [ 114.381279][ T37] EXT4-fs (loop2): Free/Dirty block details [ 114.387173][ T37] EXT4-fs (loop2): free_blocks=0 [ 114.392144][ T37] EXT4-fs (loop2): dirty_blocks=2048 [ 114.397506][ T37] EXT4-fs (loop2): Block reservation details [ 114.685718][ T5990] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.696676][ T5990] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.708060][ T5990] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.719320][ T5990] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.850256][ T37] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 114.865224][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 114.877897][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 114.877897][ T37] [ 114.903968][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 114.916721][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 114.916721][ T12] [ 114.926396][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 114.932424][ T12] EXT4-fs (loop5): Free/Dirty block details [ 114.938395][ T12] EXT4-fs (loop5): free_blocks=0 [ 114.943340][ T12] EXT4-fs (loop5): dirty_blocks=2048 [ 114.948699][ T12] EXT4-fs (loop5): Block reservation details