last executing test programs: 1m16.625281547s ago: executing program 3 (id=412): creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000300)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m16.51385167s ago: executing program 3 (id=413): socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xfffffffe, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m16.293692664s ago: executing program 3 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m16.211483016s ago: executing program 3 (id=419): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1m16.149690767s ago: executing program 3 (id=420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) close(r1) 1m15.767562775s ago: executing program 3 (id=424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000003080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1m15.767354844s ago: executing program 32 (id=424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000003080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 5.216828579s ago: executing program 5 (id=1343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00'}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 3.146747919s ago: executing program 5 (id=1350): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x18b3, &(0x7f0000000180)={0x0, 0x2de4, 0x8, 0x3, 0x326}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) setregid(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 2.802574285s ago: executing program 1 (id=1354): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x20, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2a5c0, 0x1c1}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r2, 0x25, 0x4, @val=@perf_event={0x8001}}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) 2.713743057s ago: executing program 1 (id=1356): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200000000000006}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r1, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x40000000009, r1, 0x30, 0x0, @ib={0x1b, 0x8000, 0xfff, {"3f8c0d6cf777d4a6ace6d3ec00ed4771"}, 0x500e, 0x0, 0x5}}}, 0xa0) 2.713304078s ago: executing program 1 (id=1357): timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x1a1301) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.165634937s ago: executing program 5 (id=1369): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x20006}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") timerfd_gettime(0xffffffffffffffff, 0x0) 1.859810274s ago: executing program 1 (id=1372): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) clock_gettime(0x4, 0x0) clock_settime(0x0, &(0x7f0000000040)) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) 1.828112375s ago: executing program 1 (id=1374): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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") syz_usb_connect(0x0, 0x34c, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x35, 0x9d, 0x54, 0x40, 0x19d2, 0xff63, 0x9c9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33a, 0x1, 0x2, 0x2, 0x80, 0x8, [{{0x9, 0x4, 0x81, 0x4, 0xf, 0xff, 0xff, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x7ff, 0x9}}], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x5, 0xa, 0x0, [@generic={0x16, 0x24, "f3ee48a2e1fbf72245685e7405d2dc65c28ce43f"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x7f, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0xd135a03d9491f6fa, 0x7f, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xdf46}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7ff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xa4, 0xff, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x8, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf, 0xed}, @generic={0xe4, 0x6, "d7e8ed759da55089d271cc2b089471fe5b034ab25847f2941e3b3736f29db1887723410134fa95841caec42945712555ed21bf3595f38cec2709c586e06656541e5b50311488b99256500713cb9975fbaab47befee9771d45085226b95ed8815b88bc4f6a176c3f9029723652f5681d59b52d36af7f88f14cb1ab7da6952bd755054852dd477cb8a93b7679f98865e38cb1d0dde2370f4bb0ba6c8daa7d9a73d6ed7bbaa2b8a4317ffec10a1a27fd3f3bf82198fc53476abe8dfe3be6b39002da0cedc8e15ad7ccd0818a2fa1318a537b77a6eb4db16bf2e6b023611182354194cca"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x16, 0x0, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0xadfe54ea2dfd7c33, 0x0, 0x52, 0x80}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x0, 0xe1, 0x9, [@generic={0x9, 0x7, "fde2981571252e"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x81, 0x90, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x2}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xe7, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf5, 0xf512}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x86, 0xfe, 0xf8, [@generic={0xc6, 0x9, "435d1b8f72b562e2da3c19a001e4a3d350467feb0951c0b8d2a592ae84024b0fab2a98974ed5bdafec6c651bf0cd822593428e177fd97cc7b762128d9b4b2a3d74e1267a6ea9baefadfd4cf39b11ae5c9ef26d557b35736512141041c3f6d1508f7413985a415330084ae12bb2de63dd83aa02a4ba15b0e376efc25c0140192828d9646e6baa997699276855774d9e2702858ea699344f5a4b23f2db6280c11260f1de74a949507ce57533b3325e9957543c239f730bfd2e9a3caa609fe39d5e0019ebab"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x7f, 0x89, 0x40}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x6, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1b, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x10, 0x81, 0x3, [@generic={0x89, 0x31, "b6294664b9ee38072756de5ea3c19a75e5f4cc33587779f236dd4c0e3c7fffdf984938e43ce590cdc874c93840c2f4dd6570c370f8044c7a7a08933f2108a6627610679cfbd677eaabed28a57cf9636be2da688c318b0a4c96683a15b80c8118d5a461a113e1ba741c82aa7cc3279d48d516800aa8c9f1ecdae01e4392d180d4f74d2287576bda"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x240, 0x3, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x9, 0x8, 0x3, 0x20, 0x4}, 0x101, &(0x7f0000000600)={0x5, 0xf, 0x101, 0x1, [@generic={0xfc, 0x10, 0xb, "a9fcf89d12dcae326591be3f6bb32e63e2f1119c1459efe66140f3f852afcb9b2ce39fae079a48c3164ace7268d03524cd7aeba201dc2ae79a57ae0d959019f31b81205f83feeae8ea0af0b7e1773f51cac0d8e46b5b8b2b3a2d725c6569686a488ab8d26396bee24f8c2e535ee90585f717651a5e1fddda8b9457392ed7fde7a81796b3ab7ad6940a17c7b327f1fc371254fb0c373a35a21669b112f2aa1c9fb943fbc63cd4258f0dfe05fe472e36916669a9c32ad2efce7fa7aee045bc785b04315f0fed87702688abcbf7341b313f6c0b3c6f949e1abaab6ce0f586e3cc0d26b75d12b017b68b409b821cda642b507b96bccf62e00b2a34"}]}, 0x4, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x2a}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x46b}}, {0xd3, &(0x7f00000007c0)=@string={0xd3, 0x3, "efb643864961a22a71f9c1ddc2ee7bcb2ba9f706328bf7c39c1224330b31e78c998835dfcf3e659fb2d297fa380c5501355060f0a6bf49b675f10cdf240ae4af41ed3cccbf5fe6ec860f3afdc2813d0d4de729b4461c8c65105c6456bb27b4d304d2a6bfeccfb2210edb34b75315b28a1220ccef54ac43f4ba71014b94bd00159fa6658662b55f6d252533f864046d9f4b35f6aaf9dc7631da23b90be5a32796b5c9360cd93aea9153e09619ea6c90055d148829beacb2a938b3e9e8cf630ddc73303bb515a9e672bdac2c6a492f92840f"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x803cc0f319bc725b}}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) newfstatat(0xffffffffffffff9c, &(0x7f0000000b40)='./bus\x00', &(0x7f0000000b80), 0x1000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240080cb) 1.666394407s ago: executing program 5 (id=1376): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x0, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.663735228s ago: executing program 2 (id=1377): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x114, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") lseek(r3, 0xfffffffffffff800, 0x2) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 1.483008181s ago: executing program 2 (id=1379): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0xe0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 1.476611341s ago: executing program 5 (id=1380): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r1 = syz_usbip_server_init(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$usbip_server(r1, &(0x7f0000004040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x7f}, 0x0, 0x20, 0x200, 0x0, 0xa0, 0x0, "530bc40f842f474721237576179f1bf15227c27b96e84a2e9e601380e5d71476"}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 1.350390874s ago: executing program 2 (id=1382): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001cc0)={&(0x7f0000001d00)='netfs_rreq\x00', r1, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2014008, &(0x7f0000000540)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'f2fs_shutdown\x00'}}, {@uid_gt}, {@dont_measure}]}, 0x0, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") sendmsg$key(0xffffffffffffffff, 0x0, 0xc016) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$eJzs2z9I22kYB/A31lBohw7XqVPbocPRpaVjM7QlSVsqhKiL3KCgiJgpghC5gKAHmkExgzi6iJDFP5Mxg5Oi4Czi4CE4uNyhi+BiDvG97e7wUI8rfD7w48n75vu+T54h4y/wXWsJvzebzUQIofnwrxPNfzjdWUtnvjzPfch3xMvCfPWXH64+Jv48HW99GdeHcb0w/6gxefY5WTtoP3/VvVlpid+PxufxYr3zDsbjni2ltp6MjRezU6XUwH62fDyxt9u2fJrO179Vqitfk596Y2471tZYh0IpjITB0BMKoRD6QvGO+s/Vjt5cPsvW1vrfX2Qa0xtvYy53yzlv2n/4xUxXtfzx9erT2Xel9Z38yYPrXOFv/l0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPy/LKW2noyNF7NTpdTAfrZ8PLG327Z8ms7Xv1WqK1+Tn3pjbjvW1liHQimMhMHQEwohEfpC8Y76z9WO3lw+y9bW+t9fZBrTG29jLnfLOW/af/jFTFe1/PH16tPZd6X1nfzJg+tc4eE9/QAAAAAAAAAAAAAAAAAAAAAIIaQzX57nPuQ7QkiEn0Jr+PG3n1uu9pvxffdEzL2M9TDuL8w/akyefU7WDtrPX3VvVn6N+6PxebxY7/zPh+Ff+yMAAP//17OV3g==") ioperm(0x1, 0x9, 0xfffffffffffffff6) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x10) 1.125641578s ago: executing program 4 (id=1383): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00'}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 735.377545ms ago: executing program 0 (id=1384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00'}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 735.220576ms ago: executing program 1 (id=1385): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) 735.094556ms ago: executing program 2 (id=1386): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x5000) 636.990987ms ago: executing program 2 (id=1387): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTuZ206bmWmSJjPV+XzgZs65907O+c79cc7MPdwbQN8aT//kIg5HxLtJxGhjfhIRQ/XUYMTJjfVura0W0ymJ9fWXf0nq69xcWy1G03tSBxuZ/0fEN29FHMltLre6vDJXKJdLi438ZG3+wmR1eeXo+fnCbGm2tHB8anr62ImnThzfvVh/+37l0LX3Xnj885N/vPm/q+98m8TJONRY1hzHbhmP8cZnMpR+hHd5frcL67Gk1xVgR9JDc2DjKI/DMRoD9RQA8E/2ekSsAwB9JtH+A0CfyX4HuLm2Wsym3v4i0V3Xn4uI/RvxZ9c3N5YMNq7Z7a9fBx25mdx1ZSSJiLFdKH88Ij7+8tVP0yn26DokQCtvXI6Is2Pjm8//yaYxC9v1RIdl+xqv4/fMd/6D7vkq7f883ar/l7vd/4kW/Z/hFsfuTtz3+D+wC4V0kPb/nm0a23arKf6GsYFG7l/1Pt9Qcu58uZSe2/4dERMxNJzmpzqUMXHjzxvtljX3/359/7VP0vLT1ztr5H4aHL77PTOFWuFBYm52/XLEI4Ot4k9ub/+kTf/39BbLePGZtz9qtyyNP403mzbHH43RSXtj/UrEYy23/50RbUnH8YmT9d1hMtspWvjihw9H2pXfvP3TKS0/+y7QDen2H+kc/1jSPF6zuv0yvrsy+nW7ZfePv/X+vy95pZ7O+hGXCrXa4lTEvuSlzfOP3Xlvls/WT+OfeLT18d9p/0+/E57dYvyD137+bOfx7600/pltbf/tJ67emhtoV/7Wtv90PTXRmLOV899WK/ggnx0AAAAAAAAAAAAAAAAAAAAAAAAAbFUuIg5FksvfTudy+fzGM7z/GyO5cqVaO3KusrQwE/VnZY/FUC671eVo0/1Qpxr3w8/yx+7JPxkR/4mID4YPJNl9FGd6HDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZA62ef5/6sfhXtcOANgz+3tdAQCg67T/ANB/tP8A0H+0/wDQf7T/ANB/tP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADssdOnTqXT+u9rq8U0P3NxeWmucvHoTKk6l59fKuaLlcUL+dlKZbZcyhcr8/f7f+VK5cJ0LCxdmqyVqrXJ6vLKmfnK0kLtzPn5wmzpTGmoK1EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPZUl1fmCuVyaVFiB4n1h6MavU8MNHanh6U+XU0kD0c1djnR6ayR687JCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBv4K8AAAD//8yLIwE=") 544.204869ms ago: executing program 2 (id=1388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x2088c400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r2) 512.2509ms ago: executing program 0 (id=1389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bc21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008}, 0x20004804) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x5e3171053baea80f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) 438.678601ms ago: executing program 0 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x114, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") lseek(r3, 0xfffffffffffff800, 0x2) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 375.253713ms ago: executing program 4 (id=1391): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@printk={@ld}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) 260.389685ms ago: executing program 5 (id=1392): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$eJzs28tvG8UfAPDvbuz2lz5+MVV59AEECqLikTRpKT1wAAQSB5CQ4FCOIUmrUrdBTZBoVUFBqBxRJe6IIxJ/ASe4IOCExBU4o0oV6qUtJ6O1dxvbtdPW2HWoPx9p45ndsWa+nh17dicbwMiazP4kEVsi4reImGhkWwtMNl6uXj47f+3y2fkkarU3/0rq5a5cPjtfFC3et7nIlCLST5PY1aHe5dNnjs9Vq4un8vz0yon3ppfHzzxz7MTc0cWjiydnDx06sH/muYOzz/YlziyuKzs/XNq949W3L7w+f/jCOz99kxTxt8XRJ5Md95YaL4/Xan2ubri2NqWT0hAbwm0Zy0/Jcn38T8RYrHbeRLzyyVAbBwxUrVar3df98LkacBdLYtgtAIaj+KHPrn+L7Q5NPdaFSy82LoCyuK/mW+NIKdK8TLnt+rafJiPi8Lm/v8y2aL8PMT6gSgGAkfZdNv95utP8L43m+0L/z9dQKhFxT0Rsi4iDEbE9Iu6NqJe9PyIeuGmNl1py7YskN84/04s9B3cLsvnf8/naVuv8r5j9RWUsz22tx19OjhyrLu7LP5O9Ud6Y5WfWqOP7l3/9vNux5vlftmX1F3PBvB0XSxtb37MwtzL3b2JudunjiJ2lTvEn11cCkojYEREv9FjHsSe/3t3tWJf4W9cgu+nDOlPtq4gnGv1/LtriLyTX1ydPd1qfnP5fVBf3TRdnxY1+/uX8G93qv3n/D1bW/5s6nv9F/H9Ukub12uXbr+P87591vabs9fzfkLzVsu+DuZWVUzMRG5LX6vlK8/7ZtnKzq+Wz+Pfu6Tz+t8XqJ7ErIrKT+MGIeCgiHs7b/khEPBoRe9aI/8eXHnu39/gHK4t/Yc3+j7b+X01siPY9nRNjx3/4tqXSyu3En/X/gXpqb77nVr7/bqVdvZ3NAAAA8N+TRsSWSNKp6+k0nZpq/A//9tiUVpeWV546svT+yYXGMwKVKKfFna6JpvuhM/llfZGfbcvvz+8bfzE2Xs9PzS9VF4YdPIy4zV3Gf+bPsWG3Dhg4z2vB6DL+YXQZ/zCarrU9CASMlg6//x49gxHRaf7/0RDaAdx5beN/zWU/EwO4u7j/B6PL+IfRZfzDSFoej5s/JH93JNKIWAfNaE2UI2IdNKOHRKTrohkSA0oM+5sJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgP/4JAAD//5nH7E0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee", 0xf) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 260.178725ms ago: executing program 4 (id=1393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0xce) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 259.603115ms ago: executing program 0 (id=1394): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x2c}}, 0x24000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 219.617865ms ago: executing program 0 (id=1395): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket$kcm(0xa, 0x3, 0x87) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526", 0x5d}, {&(0x7f0000000900)}], 0x2}}], 0x1, 0xd0) read(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 131.999247ms ago: executing program 4 (id=1396): bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 65.587668ms ago: executing program 4 (id=1397): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0xf9b0c0e}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open(&(0x7f0000000040)='./file0\x00', 0x145142, 0x1f6) 61.995189ms ago: executing program 4 (id=1398): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) 0s ago: executing program 0 (id=1399): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000008c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e22, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x4000}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x5}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) kernel console output (not intermixed with test programs): ptions ignored when QUOTA feature is enabled [ 73.824092][ T5218] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.568: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.858645][ T5215] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.567: corrupted in-inode xattr: overlapping e_value [ 73.877132][ T5215] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.567: couldn't read orphan inode 15 (err -117) [ 73.889112][ T5218] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.568: Failed to acquire dquot type 0 [ 73.902877][ T5215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.916159][ T5218] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.568: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.940842][ T5218] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.568: Invalid inode bitmap blk 0 in block_group 0 [ 73.953918][ T4349] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.961990][ T5218] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 73.978211][ T5218] EXT4-fs (loop0): 1 orphan inode deleted [ 73.984072][ T4349] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:43: Failed to release dquot type 0 [ 73.984403][ T5218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.021974][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.032084][ T5218] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.095801][ T5222] netlink: 'syz.4.569': attribute type 4 has an invalid length. [ 74.183263][ T5226] loop1: detected capacity change from 0 to 1024 [ 74.212655][ T5226] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.237865][ T5226] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.580: lblock 1 mapped to illegal pblock 1 (length 1) [ 74.273423][ T5226] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.580: Failed to acquire dquot type 0 [ 74.294986][ T5226] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.580: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.322565][ T5230] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.342900][ T5226] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.580: Invalid inode bitmap blk 0 in block_group 0 [ 74.356535][ T5226] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 74.366005][ T12] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 74.391196][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 74.410179][ T5230] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.422749][ T5226] EXT4-fs (loop1): 1 orphan inode deleted [ 74.429081][ T5226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.467407][ T5226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.483288][ T5230] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.554062][ T5230] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.610329][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.650146][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.686088][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.694812][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.750896][ T5268] netlink: 'syz.2.578': attribute type 4 has an invalid length. [ 74.763744][ T5265] lo speed is unknown, defaulting to 1000 [ 74.775259][ T5268] netlink: 'syz.2.578': attribute type 4 has an invalid length. [ 74.811563][ T4441] lo speed is unknown, defaulting to 1000 [ 74.817363][ T4441] syz0: Port: 1 Link ACTIVE [ 74.898534][ T5290] netlink: 'syz.2.583': attribute type 4 has an invalid length. [ 75.134801][ T5311] loop4: detected capacity change from 0 to 1024 [ 75.155192][ T5311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.197248][ T5311] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.591: Allocating blocks 449-513 which overlap fs metadata [ 75.221825][ T5311] EXT4-fs (loop4): pa ffff8881006893f0: logic 48, phys. 177, len 21 [ 75.229942][ T5311] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 75.264776][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.529175][ T5321] lo speed is unknown, defaulting to 1000 [ 75.998866][ T5338] netlink: 'syz.5.596': attribute type 4 has an invalid length. [ 76.015770][ T5338] netlink: 'syz.5.596': attribute type 4 has an invalid length. [ 76.058045][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 76.058075][ T29] audit: type=1326 audit(1757449903.910:9926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 76.096659][ T29] audit: type=1326 audit(1757449903.940:9927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 76.120129][ T29] audit: type=1326 audit(1757449903.940:9928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 76.143561][ T29] audit: type=1326 audit(1757449903.940:9929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f547344ec23 code=0x7ffc0000 [ 76.166896][ T29] audit: type=1326 audit(1757449903.940:9930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f547344ec23 code=0x7ffc0000 [ 76.190268][ T29] audit: type=1326 audit(1757449903.940:9931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 76.200865][ T5351] loop1: detected capacity change from 0 to 512 [ 76.213655][ T29] audit: type=1326 audit(1757449903.950:9932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 76.243223][ T29] audit: type=1326 audit(1757449903.950:9933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 76.266639][ T29] audit: type=1326 audit(1757449903.950:9934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 76.289987][ T29] audit: type=1326 audit(1757449903.950:9935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 76.408379][ T5351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.421982][ T5351] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.437840][ T5351] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.608: corrupted xattr block 19: overlapping e_value [ 76.461964][ T5351] EXT4-fs (loop1): Remounting filesystem read-only [ 76.468573][ T5351] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 76.481695][ T5363] loop4: detected capacity change from 0 to 1024 [ 76.489507][ T5363] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.501627][ T5351] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 76.514591][ T5363] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.598: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.528916][ T5351] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 76.539039][ T5363] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.598: Failed to acquire dquot type 0 [ 76.555832][ T5363] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.598: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.571003][ T5363] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.598: Invalid inode bitmap blk 0 in block_group 0 [ 76.586207][ T51] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.600770][ T5363] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 76.612537][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 76.612536][ T5363] EXT4-fs (loop4): 1 orphan inode deleted [ 76.614056][ T5363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.652779][ T5363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.762804][ T5391] loop4: detected capacity change from 0 to 2048 [ 76.774149][ T5391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 76.789465][ T5391] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 76.805714][ T5391] __nla_validate_parse: 9 callbacks suppressed [ 76.805725][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 76.820722][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 76.829757][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 76.847231][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 76.856071][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 76.865059][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 76.890883][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 76.899740][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 76.908740][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 76.930557][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 76.977249][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.249402][ T5427] loop1: detected capacity change from 0 to 512 [ 78.271210][ T5427] msdos: Unknown parameter '€' [ 78.288143][ T5441] loop4: detected capacity change from 0 to 512 [ 78.313321][ T5441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.339615][ T5442] loop5: detected capacity change from 0 to 1024 [ 78.341223][ T5441] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.365241][ T5442] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.373502][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 78.384628][ T5441] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.617: corrupted xattr block 19: overlapping e_value [ 78.404903][ T5441] EXT4-fs (loop4): Remounting filesystem read-only [ 78.410548][ T5442] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.618: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.411485][ T5441] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 78.412931][ T5441] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 78.426268][ T5446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.434881][ T5441] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 78.445564][ T5442] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.618: Failed to acquire dquot type 0 [ 78.485346][ T5451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.492770][ T5451] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 78.504637][ T5451] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 78.508633][ T5442] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.618: Freeing blocks not in datazone - block = 0, count = 4096 [ 78.526652][ T5442] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.618: Invalid inode bitmap blk 0 in block_group 0 [ 78.541482][ T5442] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 78.550069][ T58] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.553174][ T5442] EXT4-fs (loop5): 1 orphan inode deleted [ 78.570504][ T5442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.570857][ T5446] macvlan2: entered promiscuous mode [ 78.588411][ T5446] macvlan2: entered allmulticast mode [ 78.596692][ T58] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 78.597673][ T5446] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 78.619412][ T5442] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.650035][ T5458] syz_tun: entered allmulticast mode [ 78.660420][ T5458] dvmrp6: entered allmulticast mode [ 78.668930][ T5457] syz_tun: left allmulticast mode [ 78.674953][ T5457] dvmrp6: left allmulticast mode [ 78.737444][ T5460] netlink: '+}[@': attribute type 6 has an invalid length. [ 79.071176][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.134813][ T5485] loop5: detected capacity change from 0 to 2048 [ 79.171649][ T5485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.283419][ T5498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.316629][ T5498] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 79.338302][ T5501] netlink: '+}[@': attribute type 6 has an invalid length. [ 79.347259][ T5498] netlink: 'syz.1.652': attribute type 10 has an invalid length. [ 79.355274][ T5498] dummy0: entered promiscuous mode [ 79.362889][ T5498] bond1: (slave dummy0): Releasing backup interface [ 79.372135][ T4718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.565287][ T5511] loop2: detected capacity change from 0 to 2048 [ 79.572726][ T5511] EXT4-fs: Ignoring removed orlov option [ 79.594888][ T5511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.678547][ T5517] lo speed is unknown, defaulting to 1000 [ 79.956754][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.296626][ T5539] netlink: 'syz.4.655': attribute type 4 has an invalid length. [ 80.315386][ T5539] netlink: 'syz.4.655': attribute type 4 has an invalid length. [ 80.460929][ T5550] loop0: detected capacity change from 0 to 512 [ 80.473198][ T5547] vhci_hcd: default hub control req: 4009 v0f00 i0001 l0 [ 80.475269][ T5548] netlink: '+}[@': attribute type 6 has an invalid length. [ 80.489263][ T5550] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.532843][ T5550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.567565][ T5550] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.659: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 80.593510][ T5550] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 12: comm syz.0.659: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 80.617070][ T5550] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.659: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 80.639034][ T5550] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 14: comm syz.0.659: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 80.662836][ T5550] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 15: comm syz.0.659: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 80.683440][ T5550] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.659: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 80.704985][ T5550] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 17: comm syz.0.659: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 80.727423][ T5550] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.659: lblock 23 mapped to illegal pblock 18 (length 1) [ 80.743187][ T5550] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 19: comm syz.0.659: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 80.765706][ T5550] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 20: comm syz.0.659: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 80.988247][ T5571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=5571 comm=syz.4.676 [ 81.008652][ T5571] macvtap0: refused to change device tx_queue_len [ 81.207901][ T5583] loop1: detected capacity change from 0 to 1024 [ 81.216503][ T5583] EXT4-fs: dax option not supported [ 81.235454][ T5583] netlink: 'syz.1.671': attribute type 7 has an invalid length. [ 81.275393][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 81.275408][ T29] audit: type=1400 audit(1757449909.130:10155): avc: denied { append } for pid=5586 comm="syz.5.673" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.363939][ T3302] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 81.386466][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.573969][ T5592] bridge0: entered promiscuous mode [ 81.579380][ T5592] macsec1: entered promiscuous mode [ 81.586249][ T5592] bridge0: left promiscuous mode [ 81.861453][ T5598] __nla_validate_parse: 7 callbacks suppressed [ 81.861470][ T5598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 81.916412][ T29] audit: type=1326 audit(1757449909.760:10156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 81.939991][ T29] audit: type=1326 audit(1757449909.760:10157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 81.963456][ T29] audit: type=1326 audit(1757449909.760:10158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f80d18dec23 code=0x7ffc0000 [ 81.986797][ T29] audit: type=1326 audit(1757449909.760:10159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f80d18dec23 code=0x7ffc0000 [ 82.010034][ T29] audit: type=1326 audit(1757449909.760:10160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 82.033598][ T29] audit: type=1326 audit(1757449909.760:10161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 82.057016][ T29] audit: type=1326 audit(1757449909.770:10162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 82.080457][ T29] audit: type=1326 audit(1757449909.770:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 82.103905][ T29] audit: type=1326 audit(1757449909.770:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 82.197665][ T5608] loop2: detected capacity change from 0 to 512 [ 82.241761][ T5608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.255866][ T5608] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.268657][ T5608] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.675: corrupted xattr block 19: overlapping e_value [ 82.284445][ T5608] EXT4-fs (loop2): Remounting filesystem read-only [ 82.290974][ T5608] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 82.302194][ T5608] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 82.311240][ T5608] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 82.781635][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.190719][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 83.194428][ T5632] netlink: 'syz.5.684': attribute type 1 has an invalid length. [ 83.224742][ T5632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.242193][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.684'. [ 83.253207][ T5632] bond1 (unregistering): Released all slaves [ 83.318298][ T5636] pim6reg1: entered promiscuous mode [ 83.323750][ T5636] pim6reg1: entered allmulticast mode [ 83.329286][ T5638] loop0: detected capacity change from 0 to 2048 [ 83.383770][ T5638] loop0: p1 < > p4 [ 83.389901][ T5638] loop0: p4 size 8388608 extends beyond EOD, truncated [ 83.427256][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 83.438755][ T3696] udevd[3696]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.042353][ T5650] netlink: 36 bytes leftover after parsing attributes in process `syz.5.694'. [ 84.051273][ T5650] netlink: 16 bytes leftover after parsing attributes in process `syz.5.694'. [ 84.060333][ T5650] netlink: 36 bytes leftover after parsing attributes in process `syz.5.694'. [ 84.069654][ T5650] netlink: 36 bytes leftover after parsing attributes in process `syz.5.694'. [ 84.356703][ T5664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.701'. [ 84.365805][ T5664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.701'. [ 84.374748][ T5664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 84.396958][ T5665] macsec1: entered promiscuous mode [ 84.402261][ T5665] bridge0: entered promiscuous mode [ 84.417315][ T5665] bridge0: left promiscuous mode [ 84.493735][ T5668] loop5: detected capacity change from 0 to 2048 [ 84.503943][ T5668] EXT4-fs: Ignoring removed orlov option [ 84.544766][ T5668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.854667][ T4718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.094762][ T5697] tipc: Started in network mode [ 85.099675][ T5697] tipc: Node identity ac14140f, cluster identity 4711 [ 85.122760][ T5697] tipc: New replicast peer: 255.255.255.255 [ 85.128983][ T5697] tipc: Enabled bearer , priority 10 [ 85.144961][ T5700] tipc: Disabling bearer [ 85.270985][ T5712] loop1: detected capacity change from 0 to 512 [ 85.280977][ T5712] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.330581][ T5712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.346908][ T5712] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.718: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 85.380264][ T5712] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.718: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 85.426797][ T5712] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.718: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 85.521803][ T5730] lo speed is unknown, defaulting to 1000 [ 85.597641][ T5712] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.718: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 85.894539][ T5712] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.718: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 86.047305][ T5712] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.718: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 86.325921][ T3312] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 86.367447][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.598206][ T5756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.605538][ T5756] IPv6: NLM_F_CREATE should be set when creating new route [ 86.644953][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 86.644969][ T29] audit: type=1326 audit(1757449914.480:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 86.674755][ T29] audit: type=1326 audit(1757449914.480:10296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 86.698176][ T29] audit: type=1326 audit(1757449914.480:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 86.725999][ T29] audit: type=1326 audit(1757449914.580:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 86.749591][ T29] audit: type=1326 audit(1757449914.580:10299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 86.772994][ T29] audit: type=1326 audit(1757449914.580:10300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 86.796382][ T29] audit: type=1326 audit(1757449914.580:10301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 86.819777][ T29] audit: type=1326 audit(1757449914.580:10302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 86.843243][ T29] audit: type=1326 audit(1757449914.580:10303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 86.866701][ T29] audit: type=1326 audit(1757449914.580:10304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5757 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 86.964123][ T5761] loop5: detected capacity change from 0 to 512 [ 87.043058][ T5761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.057205][ T5761] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.242209][ T5754] Set syz1 is full, maxelem 65536 reached [ 87.416299][ T5774] loop4: detected capacity change from 0 to 512 [ 87.423397][ T5774] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.443175][ T5774] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.467133][ T5774] EXT4-fs (loop4): 1 truncate cleaned up [ 87.474204][ T5774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.583301][ T5787] loop2: detected capacity change from 0 to 512 [ 87.590363][ T5787] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.687221][ T5790] lo speed is unknown, defaulting to 1000 [ 87.918448][ T5787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.973468][ T4718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.038960][ T5787] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.738: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 88.062269][ T5787] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.738: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 88.083380][ T5787] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.738: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 88.106783][ T5787] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 14: comm syz.2.738: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 88.128210][ T5787] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 15: comm syz.2.738: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 88.148829][ T5787] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.738: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 88.170234][ T5787] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 17: comm syz.2.738: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 88.190942][ T5787] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.738: lblock 23 mapped to illegal pblock 18 (length 1) [ 88.205643][ T5787] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 19: comm syz.2.738: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 88.226341][ T5787] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 20: comm syz.2.738: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 88.259311][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.346230][ T5796] netlink: 'syz.5.751': attribute type 7 has an invalid length. [ 88.353936][ T5796] __nla_validate_parse: 6 callbacks suppressed [ 88.353951][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.751'. [ 88.425020][ T5798] loop4: detected capacity change from 0 to 2048 [ 88.468130][ T5798] EXT4-fs: Ignoring removed orlov option [ 88.475819][ T5802] netlink: 32 bytes leftover after parsing attributes in process `syz.0.741'. [ 88.492070][ T5801] loop5: detected capacity change from 0 to 2048 [ 88.522370][ T3293] loop5: p1 < > p4 [ 88.527979][ T3293] loop5: p4 size 8388608 extends beyond EOD, truncated [ 88.536277][ T5798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.563738][ T5801] loop5: p1 < > p4 [ 88.573581][ T5801] loop5: p4 size 8388608 extends beyond EOD, truncated [ 88.580832][ T3304] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 88.616544][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.628273][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 88.659044][ T3696] udevd[3696]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 88.705005][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 88.706916][ T3696] udevd[3696]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 88.809876][ T5828] vhci_hcd: invalid port number 96 [ 88.815074][ T5828] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 88.825465][ T4460] Process accounting resumed [ 88.840902][ T5835] netlink: 36 bytes leftover after parsing attributes in process `syz.1.752'. [ 88.849923][ T5835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'. [ 88.858890][ T5835] netlink: 36 bytes leftover after parsing attributes in process `syz.1.752'. [ 88.871583][ T5835] netlink: 36 bytes leftover after parsing attributes in process `syz.1.752'. [ 88.871989][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.965941][ T5846] loop4: detected capacity change from 0 to 512 [ 88.976982][ T5846] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.999833][ T5846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.035267][ T5846] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.759: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 89.068091][ T5846] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.759: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 89.091057][ T5846] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.759: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 89.117516][ T5846] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.759: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 89.139205][ T5846] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 15: comm syz.4.759: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 89.160677][ T5846] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.759: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 89.182109][ T5846] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 17: comm syz.4.759: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 89.202726][ T5846] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.759: lblock 23 mapped to illegal pblock 18 (length 1) [ 89.217402][ T5846] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 19: comm syz.4.759: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 89.237930][ T5846] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 20: comm syz.4.759: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 89.610080][ T5857] loop1: detected capacity change from 0 to 2048 [ 89.643029][ T5857] loop1: p1 < > p4 [ 89.648653][ T5857] loop1: p4 size 8388608 extends beyond EOD, truncated [ 89.667535][ T2994] loop1: p1 < > p4 [ 89.673872][ T2994] loop1: p4 size 8388608 extends beyond EOD, truncated [ 89.694996][ T5866] netlink: 'syz.0.764': attribute type 7 has an invalid length. [ 89.702688][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 89.780921][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 89.790306][ T5871] loop1: detected capacity change from 0 to 2048 [ 89.811991][ T5871] EXT4-fs: Ignoring removed orlov option [ 89.812859][ T3696] udevd[3696]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 89.866763][ T5871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.911266][ T5877] loop0: detected capacity change from 0 to 512 [ 89.951887][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 89.968816][ T3696] udevd[3696]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 89.984621][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 90.009054][ T5877] EXT4-fs (loop0): orphan cleanup on readonly fs [ 90.016787][ T3308] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 90.032343][ T5885] loop2: detected capacity change from 0 to 764 [ 90.041819][ T5875] vhci_hcd: invalid port number 96 [ 90.046948][ T5875] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 90.047422][ T5877] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.769: bg 0: block 248: padding at end of block bitmap is not set [ 90.070917][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.103442][ T5877] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.769: Failed to acquire dquot type 1 [ 90.120850][ T5877] EXT4-fs (loop0): 1 truncate cleaned up [ 90.153503][ T5877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.168615][ T5892] netlink: 36 bytes leftover after parsing attributes in process `syz.4.774'. [ 90.177545][ T5892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.774'. [ 90.204993][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.234674][ T5877] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 90.245999][ T5877] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 0 [ 90.421799][ T5877] syz.0.769 (5877) used greatest stack depth: 9280 bytes left [ 90.426092][ T5908] lo speed is unknown, defaulting to 1000 [ 90.496781][ T5911] lo speed is unknown, defaulting to 1000 [ 90.629771][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.842060][ T5918] loop5: detected capacity change from 0 to 512 [ 90.875663][ T5918] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 90.979735][ T5918] EXT4-fs (loop5): failed to open journal device unknown-block(4,3) -6 [ 91.300832][ T5924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.319058][ T5924] macvlan2: entered promiscuous mode [ 91.324518][ T5924] macvlan2: entered allmulticast mode [ 91.332877][ T5924] bond2: entered promiscuous mode [ 91.338182][ T5924] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.347684][ T5924] bond2: left promiscuous mode [ 91.493312][ T5930] loop5: detected capacity change from 0 to 764 [ 91.685084][ T5944] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.756652][ T5944] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.856509][ T5944] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.956249][ T5949] loop4: detected capacity change from 0 to 512 [ 91.979288][ T5949] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.987039][ T5949] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.007033][ T5949] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 92.022176][ T5949] System zones: 1-12 [ 92.031586][ T5944] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.048709][ T5949] EXT4-fs (loop4): 1 truncate cleaned up [ 92.055088][ T5949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.193329][ T5945] Set syz1 is full, maxelem 65536 reached [ 92.204977][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.227077][ T4354] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.245928][ T4354] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.271516][ T4354] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.384647][ T5969] loop2: detected capacity change from 0 to 2048 [ 92.482607][ T5969] loop2: p1 < > p4 [ 92.487035][ T5969] loop2: p4 size 8388608 extends beyond EOD, truncated [ 92.635055][ T5976] loop1: detected capacity change from 0 to 764 [ 92.638061][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 92.638079][ T29] audit: type=1400 audit(1757449920.490:10465): avc: denied { create } for pid=5972 comm="syz.5.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 92.680071][ T29] audit: type=1326 audit(1757449920.530:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 92.703761][ T29] audit: type=1326 audit(1757449920.530:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 92.727225][ T29] audit: type=1326 audit(1757449920.530:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 92.750652][ T29] audit: type=1326 audit(1757449920.530:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 92.774222][ T29] audit: type=1326 audit(1757449920.530:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 92.797686][ T29] audit: type=1326 audit(1757449920.530:10471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 92.821233][ T29] audit: type=1326 audit(1757449920.530:10472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 92.861127][ T29] audit: type=1326 audit(1757449920.530:10473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 92.884750][ T29] audit: type=1326 audit(1757449920.530:10474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f547344ebe9 code=0x7ffc0000 [ 93.016563][ T5985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.048939][ T5985] macvlan2: entered promiscuous mode [ 93.054305][ T5985] macvlan2: entered allmulticast mode [ 93.065075][ T5985] bond2: entered promiscuous mode [ 93.070366][ T5985] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 93.082371][ T5985] bond2: left promiscuous mode [ 93.129191][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.282098][ T6002] loop0: detected capacity change from 0 to 512 [ 93.289928][ T6002] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 93.315049][ T6002] EXT4-fs (loop0): failed to open journal device unknown-block(4,3) -6 [ 93.424127][ T6012] __nla_validate_parse: 19 callbacks suppressed [ 93.424146][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 93.439607][ T6011] loop4: detected capacity change from 0 to 2048 [ 93.463083][ T3696] loop4: p1 < > p4 [ 93.467489][ T3696] loop4: p4 size 8388608 extends beyond EOD, truncated [ 93.485686][ T6011] loop4: p1 < > p4 [ 93.491211][ T6011] loop4: p4 size 8388608 extends beyond EOD, truncated [ 93.493565][ T6017] serio: Serial port ptm0 [ 93.525842][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 93.526599][ T3696] udevd[3696]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 93.599662][ T6025] loop0: detected capacity change from 0 to 764 [ 93.673081][ T6030] netlink: 'syz.0.821': attribute type 4 has an invalid length. [ 93.685114][ T6030] netlink: 'syz.0.821': attribute type 4 has an invalid length. [ 93.714115][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 93.728739][ T6032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.744056][ T6032] macvlan2: entered promiscuous mode [ 93.749401][ T6032] macvlan2: entered allmulticast mode [ 93.755914][ T6032] bond2: entered promiscuous mode [ 93.761177][ T6032] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 93.768700][ T6032] bond2: left promiscuous mode [ 94.347134][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 94.356680][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 94.474695][ T6052] tipc: Enabled bearer , priority 0 [ 94.483772][ T6051] tipc: Resetting bearer [ 94.507339][ T6051] tipc: Disabling bearer [ 94.605703][ T6059] loop4: detected capacity change from 0 to 764 [ 94.719875][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.839'. [ 94.778147][ T6065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.795751][ T6070] netlink: 'syz.5.840': attribute type 1 has an invalid length. [ 94.819944][ T6073] macvlan2: entered promiscuous mode [ 94.825372][ T6073] macvlan2: entered allmulticast mode [ 94.847006][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.840'. [ 94.869185][ T6073] bond1: entered promiscuous mode [ 94.897095][ T6073] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.906798][ T6073] bond1: left promiscuous mode [ 94.934055][ T6070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.944923][ T6075] bond1 (unregistering): Released all slaves [ 95.220718][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 95.333915][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 95.374847][ T6099] loop2: detected capacity change from 0 to 764 [ 95.447228][ T6103] loop2: detected capacity change from 0 to 512 [ 95.645257][ T6103] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.681603][ T6103] EXT4-fs (loop2): mount failed [ 95.710383][ T6112] lo speed is unknown, defaulting to 1000 [ 97.107343][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.855'. [ 97.176083][ T6120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.229776][ T6130] macvlan0: entered promiscuous mode [ 97.235353][ T6130] macvlan0: entered allmulticast mode [ 97.253020][ T6130] bond1: entered promiscuous mode [ 97.258403][ T6130] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 97.309725][ T6130] bond1: left promiscuous mode [ 97.343356][ T6137] loop2: detected capacity change from 0 to 764 [ 97.358941][ T6139] loop1: detected capacity change from 0 to 764 [ 97.406227][ T6139] rock: directory entry would overflow storage [ 97.412469][ T6139] rock: sig=0x4f50, size=4, remaining=3 [ 97.418160][ T6139] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 97.442992][ T6139] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.577049][ T6145] lo speed is unknown, defaulting to 1000 [ 97.666293][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 97.666309][ T29] audit: type=1400 audit(1757449925.520:10735): avc: denied { setopt } for pid=6157 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.745236][ T6160] lo speed is unknown, defaulting to 1000 [ 98.096879][ T6166] loop2: detected capacity change from 0 to 1024 [ 98.156310][ T6166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.277931][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'. [ 98.313424][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.518714][ T6178] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.571209][ T6183] loop0: detected capacity change from 0 to 764 [ 98.594960][ T29] audit: type=1326 audit(1757449926.450:10736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98409ebe9 code=0x7ffc0000 [ 98.618523][ T29] audit: type=1326 audit(1757449926.450:10737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc98409ebe9 code=0x7ffc0000 [ 98.642036][ T29] audit: type=1326 audit(1757449926.450:10738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98409ebe9 code=0x7ffc0000 [ 98.716408][ T29] audit: type=1326 audit(1757449926.520:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc98409ebe9 code=0x7ffc0000 [ 98.739990][ T29] audit: type=1326 audit(1757449926.520:10740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98409ebe9 code=0x7ffc0000 [ 98.763456][ T29] audit: type=1326 audit(1757449926.520:10741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98409ebe9 code=0x7ffc0000 [ 98.786993][ T29] audit: type=1326 audit(1757449926.520:10742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc98409ebe9 code=0x7ffc0000 [ 98.810453][ T29] audit: type=1326 audit(1757449926.520:10743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98409ebe9 code=0x7ffc0000 [ 98.833916][ T29] audit: type=1326 audit(1757449926.520:10744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6182 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98409ebe9 code=0x7ffc0000 [ 99.006506][ T6191] loop2: detected capacity change from 0 to 764 [ 99.457567][ T6191] rock: directory entry would overflow storage [ 99.463828][ T6191] rock: sig=0x4f50, size=4, remaining=3 [ 99.469427][ T6191] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 99.501508][ T6196] serio: Serial port ptm0 [ 99.510138][ T6191] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.606612][ T6200] lo speed is unknown, defaulting to 1000 [ 99.744941][ T6214] loop2: detected capacity change from 0 to 128 [ 99.786785][ T6214] syz.2.890: attempt to access beyond end of device [ 99.786785][ T6214] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 99.800435][ T6214] syz.2.890: attempt to access beyond end of device [ 99.800435][ T6214] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 99.822652][ T6216] netlink: 'syz.0.894': attribute type 4 has an invalid length. [ 99.839771][ T6214] syz.2.890: attempt to access beyond end of device [ 99.839771][ T6214] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 99.853357][ T6214] syz.2.890: attempt to access beyond end of device [ 99.853357][ T6214] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 99.867152][ T6214] syz.2.890: attempt to access beyond end of device [ 99.867152][ T6214] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 99.880900][ T6219] netlink: 'syz.0.894': attribute type 4 has an invalid length. [ 99.881852][ T6218] syzkaller0: entered promiscuous mode [ 99.891013][ T6214] syz.2.890: attempt to access beyond end of device [ 99.891013][ T6214] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 99.894054][ T6218] syzkaller0: entered allmulticast mode [ 99.910569][ T6220] syz.2.890: attempt to access beyond end of device [ 99.910569][ T6220] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 99.926295][ T6220] syz.2.890: attempt to access beyond end of device [ 99.926295][ T6220] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 99.928883][ T6214] syz.2.890: attempt to access beyond end of device [ 99.928883][ T6214] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 99.964571][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.893'. [ 99.981120][ T6214] syz.2.890: attempt to access beyond end of device [ 99.981120][ T6214] loop2: rw=2049, sector=297, nr_sectors = 1 limit=128 [ 99.997785][ T6223] ip6gre1: entered allmulticast mode [ 100.104615][ T6227] syzkaller0: entered promiscuous mode [ 100.110142][ T6227] syzkaller0: entered allmulticast mode [ 100.213378][ T6240] loop5: detected capacity change from 0 to 1024 [ 100.253681][ T6240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.266390][ T6247] random: crng reseeded on system resumption [ 100.300443][ T6240] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.378710][ T6252] tipc: Enabled bearer , priority 0 [ 100.414466][ T6251] tipc: Disabling bearer [ 100.541791][ T6240] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.902: bg 0: block 393: padding at end of block bitmap is not set [ 100.562635][ T6240] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 100.575394][ T6240] EXT4-fs (loop5): This should not happen!! Data will be lost [ 100.575394][ T6240] [ 100.621316][ T6270] syzkaller0: entered promiscuous mode [ 100.626868][ T6270] syzkaller0: entered allmulticast mode [ 100.706010][ T4718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.726394][ T6279] netlink: 'syz.5.913': attribute type 1 has an invalid length. [ 100.749368][ T6279] bond2: entered promiscuous mode [ 100.754765][ T6279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.766798][ T6284] serio: Serial port ptm0 [ 100.772404][ T6282] netlink: 'syz.2.915': attribute type 4 has an invalid length. [ 100.788902][ T4442] lo speed is unknown, defaulting to 1000 [ 100.794720][ T4442] syz0: Port: 1 Link DOWN [ 100.806901][ T6282] netlink: 'syz.2.915': attribute type 4 has an invalid length. [ 100.847059][ T6285] lo speed is unknown, defaulting to 1000 [ 100.994588][ T6279] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.006343][ T6279] bond2: (slave bond3): making interface the new active one [ 101.013798][ T6279] bond3: entered promiscuous mode [ 101.020834][ T6279] bond2: (slave bond3): Enslaving as an active interface with an up link [ 101.038779][ T4442] lo speed is unknown, defaulting to 1000 [ 101.044570][ T4442] syz0: Port: 1 Link ACTIVE [ 101.158209][ T6293] netlink: 96 bytes leftover after parsing attributes in process `syz.2.917'. [ 101.449243][ T6304] tipc: Enabled bearer , priority 0 [ 101.465577][ T4329] tipc: Resetting bearer [ 101.473946][ T6303] tipc: Resetting bearer [ 101.491211][ T6303] tipc: Disabling bearer [ 101.897357][ T6330] netlink: 'syz.4.932': attribute type 1 has an invalid length. [ 101.930491][ T6330] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.947407][ T6330] bond2: (slave bond3): making interface the new active one [ 101.965680][ T6330] bond2: (slave bond3): Enslaving as an active interface with an up link [ 101.970586][ T6335] loop2: detected capacity change from 0 to 128 [ 101.985002][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.934'. [ 102.006665][ T6330] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 102.010197][ T6335] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.024081][ T6330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.932'. [ 102.048493][ T6335] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.071035][ T6330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.077671][ T6335] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.278821][ T6361] netlink: 52 bytes leftover after parsing attributes in process `syz.4.942'. [ 102.488827][ T6375] loop1: detected capacity change from 0 to 1024 [ 102.497825][ T6375] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 102.517632][ T6375] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 102.528630][ T6375] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 102.548691][ T6375] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 102.559903][ T6375] EXT4-fs error (device loop1): ext4_get_journal_inode:5800: inode #17: comm syz.1.948: iget: bad i_size value: 4398046511204 [ 102.575278][ T6375] EXT4-fs (loop1): no journal found [ 102.837503][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 102.924523][ T6389] netlink: 'gtp': attribute type 1 has an invalid length. [ 102.931825][ T6389] netlink: 180900 bytes leftover after parsing attributes in process `gtp'. [ 103.013451][ T6391] tmpfs: Bad value for 'mpol' [ 103.062925][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 103.062941][ T29] audit: type=1400 audit(1757449930.870:10863): avc: denied { mounton } for pid=6390 comm="syz.2.954" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 103.153342][ T6393] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.234458][ T6393] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.255777][ T6398] loop5: detected capacity change from 0 to 764 [ 103.294891][ T29] audit: type=1326 audit(1757449931.150:10864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.5.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129020ebe9 code=0x7ffc0000 [ 103.318659][ T29] audit: type=1326 audit(1757449931.150:10865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.5.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129020ebe9 code=0x7ffc0000 [ 103.355544][ T6393] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.366221][ T29] audit: type=1326 audit(1757449931.150:10866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.5.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f129020ebe9 code=0x7ffc0000 [ 103.389711][ T29] audit: type=1326 audit(1757449931.150:10867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.5.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129020ebe9 code=0x7ffc0000 [ 103.413210][ T29] audit: type=1326 audit(1757449931.150:10868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.5.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129020ebe9 code=0x7ffc0000 [ 103.436654][ T29] audit: type=1326 audit(1757449931.150:10869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.5.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f129020ebe9 code=0x7ffc0000 [ 103.460099][ T29] audit: type=1326 audit(1757449931.150:10870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.5.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129020ebe9 code=0x7ffc0000 [ 103.483598][ T29] audit: type=1326 audit(1757449931.150:10871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.5.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129020ebe9 code=0x7ffc0000 [ 103.507059][ T29] audit: type=1326 audit(1757449931.150:10872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.5.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f129020ebe9 code=0x7ffc0000 [ 103.572059][ T6404] netfs: Couldn't get user pages (rc=-14) [ 103.579047][ T6393] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.659332][ T4329] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.686219][ T4329] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.702007][ T4351] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.721092][ T4351] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.805991][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.814889][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.842169][ T6420] netlink: 'syz.4.967': attribute type 1 has an invalid length. [ 103.889726][ T6420] 8021q: adding VLAN 0 to HW filter on device bond4 [ 103.897857][ T6423] netlink: 52 bytes leftover after parsing attributes in process `syz.5.968'. [ 103.964018][ T6420] macvlan2: entered promiscuous mode [ 103.969371][ T6420] macvlan2: entered allmulticast mode [ 103.977922][ T6420] bond4: entered promiscuous mode [ 103.983796][ T6420] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.005861][ T6420] bond4: left promiscuous mode [ 104.111847][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.974'. [ 104.171629][ T6443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.976'. [ 104.238957][ T6447] loop2: detected capacity change from 0 to 8192 [ 104.253184][ T6450] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.979' sets config #0 [ 104.352356][ T6459] netlink: 'syz.5.983': attribute type 4 has an invalid length. [ 104.643276][ T6478] bond4: entered promiscuous mode [ 104.648364][ T6478] bond4: entered allmulticast mode [ 104.669435][ T6478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 104.680016][ T6478] bond4 (unregistering): Released all slaves [ 104.828138][ T6484] lo speed is unknown, defaulting to 1000 [ 105.492871][ T6503] loop4: detected capacity change from 0 to 128 [ 105.505161][ T6503] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.534958][ T6503] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.548151][ T6503] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.602701][ T6510] netlink: 'syz.2.1000': attribute type 4 has an invalid length. [ 105.612167][ T3640] lo speed is unknown, defaulting to 1000 [ 105.618190][ T3640] syz0: Port: 1 Link DOWN [ 105.625456][ T6510] netlink: 'syz.2.1000': attribute type 4 has an invalid length. [ 105.635105][ T3640] lo speed is unknown, defaulting to 1000 [ 105.640846][ T3640] syz0: Port: 1 Link ACTIVE [ 105.700513][ T6520] __nla_validate_parse: 2 callbacks suppressed [ 105.700530][ T6520] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1004'. [ 105.735622][ T6522] netlink: 'syz.1.1005': attribute type 4 has an invalid length. [ 105.774127][ T6527] tipc: Started in network mode [ 105.779116][ T6527] tipc: Node identity ac14140f, cluster identity 4711 [ 105.797755][ T6527] tipc: New replicast peer: 255.255.255.83 [ 105.803818][ T6527] tipc: Enabled bearer , priority 10 [ 106.122861][ T6542] loop5: detected capacity change from 0 to 8192 [ 106.280924][ T6552] netfs: Couldn't get user pages (rc=-14) [ 106.358611][ T6550] tipc: Enabled bearer , priority 0 [ 106.370024][ T6556] loop2: detected capacity change from 0 to 1024 [ 106.377742][ T6556] EXT4-fs: Ignoring removed bh option [ 106.383182][ T6556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.391308][ T6549] tipc: Resetting bearer [ 106.428143][ T6549] tipc: Disabling bearer [ 106.435038][ T6556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.786881][ T6565] loop5: detected capacity change from 0 to 2048 [ 106.902853][ T6565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.921433][ T2957] tipc: Node number set to 2886997007 [ 107.022741][ T4718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.337023][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.400453][ T6585] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 107.415308][ T6585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.428495][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 107.445779][ T6585] bond3 (unregistering): Released all slaves [ 107.596709][ T6609] loop2: detected capacity change from 0 to 2048 [ 107.606314][ T6609] EXT4-fs: inline encryption not supported [ 107.623226][ T6609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.647205][ T6609] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.1046: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 107.682105][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.701046][ T6618] loop1: detected capacity change from 0 to 1024 [ 107.708347][ T6618] EXT4-fs: Ignoring removed bh option [ 107.713894][ T6618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.729340][ T6618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.762094][ T6622] loop2: detected capacity change from 0 to 2048 [ 107.790626][ T6622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 107.881755][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 108.422091][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1045'. [ 108.435410][ T6642] loop5: detected capacity change from 0 to 128 [ 108.452787][ T6642] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.489029][ T6642] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.517020][ T6642] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.676547][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.764680][ T6664] lo speed is unknown, defaulting to 1000 [ 108.894360][ T6677] loop4: detected capacity change from 0 to 1024 [ 108.929801][ T6677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.976278][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.016436][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 109.016450][ T29] audit: type=1326 audit(1757449936.870:11083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 109.046238][ T29] audit: type=1326 audit(1757449936.870:11084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 109.088461][ T29] audit: type=1326 audit(1757449936.930:11085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 109.112215][ T29] audit: type=1326 audit(1757449936.930:11086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 109.135879][ T29] audit: type=1326 audit(1757449936.930:11087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 109.159386][ T29] audit: type=1326 audit(1757449936.930:11088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 109.182998][ T29] audit: type=1326 audit(1757449936.930:11089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 109.423687][ T6694] loop5: detected capacity change from 0 to 1024 [ 109.439183][ T6694] EXT4-fs: Ignoring removed bh option [ 109.444758][ T6694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.493205][ T6694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.704413][ T6699] loop1: detected capacity change from 0 to 256 [ 110.290876][ T6717] loop1: detected capacity change from 0 to 512 [ 110.426015][ T6717] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1073: bg 0: block 393: padding at end of block bitmap is not set [ 110.443547][ T6717] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 110.453406][ T6717] EXT4-fs (loop1): 2 truncates cleaned up [ 110.460359][ T6717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.151637][ T6720] tipc: Enabled bearer , priority 0 [ 111.199686][ T6719] tipc: Disabling bearer [ 111.487766][ T4718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.650892][ T6737] sctp: [Deprecated]: syz.4.1081 (pid 6737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.650892][ T6737] Use struct sctp_sack_info instead [ 111.742124][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.788322][ T6741] loop4: detected capacity change from 0 to 1024 [ 111.815639][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 111.827099][ T6746] ip6gre1: entered allmulticast mode [ 111.861864][ T6749] netlink: 'syz.1.1084': attribute type 4 has an invalid length. [ 111.871413][ T6749] netlink: 'syz.1.1084': attribute type 4 has an invalid length. [ 111.942808][ T6741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.053874][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.134708][ T6768] netlink: 'syz.4.1091': attribute type 3 has an invalid length. [ 112.166655][ T29] audit: type=1400 audit(1757449940.020:11090): avc: denied { ioctl } for pid=6764 comm="syz.5.1094" path="socket:[17841]" dev="sockfs" ino=17841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.331590][ T6771] syzkaller0: entered promiscuous mode [ 112.337126][ T6771] syzkaller0: entered allmulticast mode [ 112.392208][ T6779] netlink: 'syz.5.1096': attribute type 1 has an invalid length. [ 112.419016][ T6779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.481716][ T6786] netlink: 'syz.4.1100': attribute type 4 has an invalid length. [ 112.503139][ T6779] macvlan0: entered promiscuous mode [ 112.508585][ T6779] macvlan0: entered allmulticast mode [ 112.518405][ T29] audit: type=1326 audit(1757449940.370:11091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 112.542218][ T29] audit: type=1326 audit(1757449940.370:11092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 112.567813][ T6779] bond4: entered promiscuous mode [ 112.574620][ T6779] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 112.583628][ T6790] netlink: 'syz.4.1100': attribute type 4 has an invalid length. [ 112.594361][ T6779] bond4: left promiscuous mode [ 112.850604][ T6812] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 113.266663][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1115'. [ 113.357434][ T6830] tipc: Enabled bearer , priority 0 [ 113.364884][ T6829] tipc: Resetting bearer [ 113.376062][ T6829] tipc: Disabling bearer [ 113.463858][ T6838] loop5: detected capacity change from 0 to 2048 [ 113.483127][ T6838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 113.513907][ T4718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 113.561359][ T6847] netlink: 'syz.5.1122': attribute type 13 has an invalid length. [ 113.680390][ T6852] loop2: detected capacity change from 0 to 512 [ 113.735378][ T6852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.756268][ T6852] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.770723][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'. [ 113.800529][ T6852] team0 (unregistering): Port device .` removed [ 114.024635][ T6871] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 114.027201][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.118543][ T6880] loop1: detected capacity change from 0 to 2048 [ 114.194551][ T3696] loop1: unable to read partition table [ 114.200344][ T3696] loop1: partition table beyond EOD, truncated [ 114.262729][ T6887] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 114.323997][ T6891] bridge3: entered allmulticast mode [ 114.471044][ T6880] loop1: unable to read partition table [ 114.482539][ T6880] loop1: partition table beyond EOD, truncated [ 114.488742][ T6880] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 114.532745][ T6899] loop2: detected capacity change from 0 to 128 [ 114.584762][ T6899] loop2: detected capacity change from 0 to 512 [ 114.591870][ T6901] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 114.598414][ T6901] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.605986][ T6901] vhci_hcd vhci_hcd.0: Device attached [ 114.634882][ T6899] EXT4-fs: Ignoring removed nobh option [ 114.675160][ T6899] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1145: corrupted inode contents [ 114.726140][ T6899] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1145: mark_inode_dirty error [ 114.856652][ T6899] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1145: corrupted inode contents [ 114.872987][ T6899] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1145: mark_inode_dirty error [ 114.901437][ T4456] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 114.916067][ T6899] __quota_error: 60 callbacks suppressed [ 114.916083][ T6899] Quota error (device loop2): write_blk: dquota write failed [ 114.938573][ T6899] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 114.973847][ T6899] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1145: Failed to acquire dquot type 0 [ 114.986137][ T6910] lo speed is unknown, defaulting to 1000 [ 115.000338][ T6899] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1145: corrupted inode contents [ 115.089839][ T6899] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1145: mark_inode_dirty error [ 115.097241][ T6913] tipc: Enabled bearer , priority 0 [ 115.108015][ T6899] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1145: corrupted inode contents [ 115.126650][ T6913] syzkaller0: entered promiscuous mode [ 115.132247][ T6913] syzkaller0: entered allmulticast mode [ 115.147380][ T6913] tipc: Resetting bearer [ 115.153888][ T6912] tipc: Resetting bearer [ 115.160949][ T6912] tipc: Disabling bearer [ 115.176034][ T6902] vhci_hcd: connection reset by peer [ 115.181442][ T6899] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1145: mark_inode_dirty error [ 115.198550][ T4354] vhci_hcd: stop threads [ 115.202934][ T4354] vhci_hcd: release socket [ 115.207380][ T4354] vhci_hcd: disconnect device [ 115.213301][ T6899] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1145: corrupted inode contents [ 115.242406][ T6899] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 115.251079][ T6899] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1145: corrupted inode contents [ 115.264374][ T6899] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1145: mark_inode_dirty error [ 115.276253][ T6899] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 115.349795][ T6920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6920 comm=syz.5.1150 [ 115.393237][ T6899] EXT4-fs (loop2): 1 truncate cleaned up [ 115.399473][ T6899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.413930][ T6899] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.442620][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.504471][ T6927] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.528113][ T4460] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 115.543176][ T6927] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.545664][ T4460] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.571461][ T29] audit: type=1400 audit(1757449943.420:11153): avc: denied { setopt } for pid=6929 comm="syz.5.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.654063][ T6927] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.722932][ T6927] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.779788][ T4329] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.792076][ T4329] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.838089][ T4329] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.869036][ T6939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1157'. [ 115.869046][ T4329] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.921215][ T6947] loop0: detected capacity change from 0 to 256 [ 116.246647][ T29] audit: type=1400 audit(1757449944.100:11154): avc: denied { ioctl } for pid=6966 comm="syz.0.1166" path="socket:[18707]" dev="sockfs" ino=18707 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.271491][ T29] audit: type=1400 audit(1757449944.100:11155): avc: denied { create } for pid=6966 comm="syz.0.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.434104][ T6979] SELinux: Context Ü is not valid (left unmapped). [ 116.443171][ T6981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6981 comm=syz.2.1171 [ 116.562897][ T6946] Set syz1 is full, maxelem 65536 reached [ 116.604942][ T6991] netlink: 'syz.4.1175': attribute type 1 has an invalid length. [ 116.645793][ T6992] wireguard0: entered promiscuous mode [ 116.651305][ T6992] wireguard0: entered allmulticast mode [ 116.688434][ T6991] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 116.706805][ T6991] veth5: entered promiscuous mode [ 116.713704][ T6991] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 116.755194][ T7005] loop0: detected capacity change from 0 to 512 [ 116.767552][ T7008] loop4: detected capacity change from 0 to 512 [ 116.782893][ T7008] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1180: casefold flag without casefold feature [ 116.797029][ T7005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.807278][ T7008] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1180: couldn't read orphan inode 15 (err -117) [ 116.822036][ T7008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.834870][ T7005] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.857701][ T29] audit: type=1400 audit(1757449944.710:11156): avc: denied { setopt } for pid=7004 comm="syz.0.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.903787][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.954289][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.954421][ T29] audit: type=1400 audit(1757449944.750:11157): avc: denied { remove_name } for pid=7004 comm="syz.0.1181" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.986095][ T29] audit: type=1400 audit(1757449944.750:11158): avc: denied { unlink } for pid=7004 comm="syz.0.1181" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.012245][ T7013] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 117.023642][ T7013] SELinux: failed to load policy [ 117.037008][ T7018] loop4: detected capacity change from 0 to 1024 [ 117.049735][ T29] audit: type=1400 audit(1757449944.870:11159): avc: denied { load_policy } for pid=7012 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 117.072968][ T7023] netlink: 'syz.0.1185': attribute type 4 has an invalid length. [ 117.097776][ T7022] syzkaller0: entered promiscuous mode [ 117.103411][ T7022] syzkaller0: entered allmulticast mode [ 117.113862][ T7018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.150951][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1182'. [ 117.160008][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1182'. [ 117.174336][ T7029] tipc: Enabling of bearer rejected, failed to enable media [ 117.188967][ T7027] loop0: detected capacity change from 0 to 2048 [ 117.213698][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.238632][ T7027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.263619][ T29] audit: type=1400 audit(1757449945.120:11160): avc: denied { ioctl } for pid=7032 comm="syz.5.1191" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.313335][ T3302] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 117.334567][ T3302] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 117.349092][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1190'. [ 117.350063][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.431013][ T7045] loop1: detected capacity change from 0 to 1024 [ 117.444247][ T7045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.461234][ T7047] lo speed is unknown, defaulting to 1000 [ 117.494862][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.514224][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 117.534399][ T7060] loop1: detected capacity change from 0 to 512 [ 117.600745][ T7060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.636522][ T7060] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.685851][ T7060] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1199: corrupted inode contents [ 117.751847][ T7060] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1199: mark_inode_dirty error [ 117.763917][ T7076] random: crng reseeded on system resumption [ 117.803265][ T7060] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1199: corrupted inode contents [ 117.857306][ T7060] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1199: mark_inode_dirty error [ 117.890869][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.893416][ T7085] netlink: 'syz.2.1209': attribute type 10 has an invalid length. [ 117.907723][ T7085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1209'. [ 117.920399][ T7085] veth1_vlan: left promiscuous mode [ 117.931670][ T7088] loop5: detected capacity change from 0 to 1024 [ 117.946157][ T7085] batman_adv: batadv0: Adding interface: veth1_vlan [ 117.952859][ T7085] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.993835][ T7085] batman_adv: batadv0: Interface activated: veth1_vlan [ 118.001805][ T7088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.014203][ T7088] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.084761][ T7104] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.1210: lblock 0 mapped to illegal pblock 0 (length 6) [ 118.117103][ T7104] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 118.129580][ T7104] EXT4-fs (loop5): This should not happen!! Data will be lost [ 118.129580][ T7104] [ 118.155780][ T7103] tipc: Enabled bearer , priority 0 [ 118.172545][ T7102] tipc: Resetting bearer [ 118.184673][ T7102] tipc: Disabling bearer [ 118.248420][ T7111] lo speed is unknown, defaulting to 1000 [ 118.412822][ T7123] netlink: 'syz.1.1220': attribute type 30 has an invalid length. [ 118.730693][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'. [ 118.744736][ T4355] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:49: lblock 8 mapped to illegal pblock 8 (length 8) [ 118.775848][ T4355] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 118.788171][ T4355] EXT4-fs (loop5): This should not happen!! Data will be lost [ 118.788171][ T4355] [ 118.811327][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 118.836308][ T4348] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 118.865821][ T4348] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 118.878591][ T4348] EXT4-fs (loop5): This should not happen!! Data will be lost [ 118.878591][ T4348] [ 118.888320][ T4348] EXT4-fs (loop5): Total free blocks count 0 [ 118.894352][ T4348] EXT4-fs (loop5): Free/Dirty block details [ 118.900251][ T4348] EXT4-fs (loop5): free_blocks=4293918720 [ 119.205942][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 119.261226][ T7149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1230'. [ 119.273037][ T7151] program ¬í is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.374822][ T7159] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.416664][ T7164] netlink: 'syz.5.1238': attribute type 1 has an invalid length. [ 119.445210][ T7164] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 119.455849][ T7159] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.473510][ T7164] veth1: entered promiscuous mode [ 119.480246][ T7164] bond5: (slave veth1): Enslaving as a backup interface with a down link [ 119.492056][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1233'. [ 119.514601][ T7159] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.528203][ T7169] loop5: detected capacity change from 0 to 512 [ 119.544867][ T7169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.557792][ T7169] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.620777][ T7159] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.620926][ T4718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.773793][ T4351] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.791524][ T4351] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.827353][ T4351] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.847759][ T4351] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.919490][ T7184] lo speed is unknown, defaulting to 1000 [ 119.997949][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 119.997965][ T29] audit: type=1400 audit(1757449947.850:11272): avc: denied { read write } for pid=7179 comm="syz.1.1242" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.999841][ T7190] program syz.1.1242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.007844][ T29] audit: type=1400 audit(1757449947.850:11273): avc: denied { open } for pid=7179 comm="syz.1.1242" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.418088][ T29] audit: type=1326 audit(1757449947.890:11274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 120.441763][ T29] audit: type=1326 audit(1757449947.890:11275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 120.465293][ T29] audit: type=1326 audit(1757449947.890:11276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 120.488866][ T29] audit: type=1326 audit(1757449947.890:11277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 120.512573][ T29] audit: type=1326 audit(1757449947.890:11278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 120.535985][ T29] audit: type=1326 audit(1757449947.890:11279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 120.559530][ T29] audit: type=1326 audit(1757449947.890:11280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 120.583129][ T29] audit: type=1326 audit(1757449947.890:11281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d18debe9 code=0x7ffc0000 [ 121.014283][ T4456] usb 9-1: enqueue for inactive port 0 [ 121.091708][ T4456] vhci_hcd: vhci_device speed not set [ 121.112407][ T7199] tipc: Enabled bearer , priority 0 [ 121.121645][ T7199] syzkaller0: entered promiscuous mode [ 121.127146][ T7199] syzkaller0: entered allmulticast mode [ 121.149587][ T7199] tipc: Resetting bearer [ 121.161888][ T7198] tipc: Resetting bearer [ 121.174082][ T7198] tipc: Disabling bearer [ 121.207788][ T7203] lo speed is unknown, defaulting to 1000 [ 121.351337][ T7219] loop2: detected capacity change from 0 to 1024 [ 121.382596][ T7221] loop4: detected capacity change from 0 to 512 [ 121.450902][ T7219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.542626][ T7221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.131191][ T7221] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.157805][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.314789][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.453527][ T7246] netlink: 'syz.0.1263': attribute type 13 has an invalid length. [ 122.832846][ T4380] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.853583][ T4380] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.868492][ T7252] macsec1: entered promiscuous mode [ 122.873829][ T7252] bridge0: entered promiscuous mode [ 122.905721][ T7252] bridge0: left promiscuous mode [ 122.933305][ T7253] loop4: detected capacity change from 0 to 4096 [ 122.946803][ T4380] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.996658][ T4380] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.011923][ T7253] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 123.055007][ T7253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.183715][ T7259] loop0: detected capacity change from 0 to 512 [ 123.213959][ T7259] EXT4-fs (loop0): orphan cleanup on readonly fs [ 123.235904][ T7259] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1267: bad orphan inode 13 [ 123.307130][ T7259] ext4_test_bit(bit=12, block=18) = 1 [ 123.312612][ T7259] is_bad_inode(inode)=0 [ 123.316784][ T7259] NEXT_ORPHAN(inode)=2130706432 [ 123.321689][ T7259] max_ino=32 [ 123.324960][ T7259] i_nlink=1 [ 123.402097][ T7259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.472569][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.511244][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.139943][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.215371][ T7270] loop2: detected capacity change from 0 to 512 [ 124.245993][ T7274] syz_tun: entered allmulticast mode [ 124.272094][ T7274] __nla_validate_parse: 16 callbacks suppressed [ 124.272111][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1274'. [ 124.273510][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'. [ 124.296704][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.308050][ T7274] syz_tun (unregistering): left allmulticast mode [ 124.316527][ T7270] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.350781][ T7270] EXT4-fs (loop2): mount failed [ 124.434195][ T7280] syzkaller0: entered promiscuous mode [ 124.439716][ T7280] syzkaller0: entered allmulticast mode [ 124.574196][ T7287] loop5: detected capacity change from 0 to 512 [ 124.600633][ T7287] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.624911][ T7289] loop4: detected capacity change from 0 to 512 [ 124.655209][ T7289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.681528][ T7289] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.707759][ T7287] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1278: Failed to acquire dquot type 1 [ 124.730092][ T7289] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1279: corrupted inode contents [ 124.747827][ T7287] EXT4-fs (loop5): 1 truncate cleaned up [ 124.760715][ T7287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.779674][ T7289] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1279: mark_inode_dirty error [ 124.838135][ T7289] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1279: corrupted inode contents [ 124.839852][ T7287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.861544][ T7289] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1279: mark_inode_dirty error [ 124.901750][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.040354][ T7297] tipc: Enabled bearer , priority 0 [ 125.065104][ T7297] syzkaller0: entered promiscuous mode [ 125.070636][ T7297] syzkaller0: entered allmulticast mode [ 125.080128][ T7297] tipc: Resetting bearer [ 125.105771][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 125.105833][ T29] audit: type=1400 audit(1757449952.960:11407): avc: denied { setattr } for pid=7300 comm="syz.1.1282" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.148874][ T7296] tipc: Resetting bearer [ 125.165269][ T7285] Set syz1 is full, maxelem 65536 reached [ 125.175666][ T7303] netlink: 568 bytes leftover after parsing attributes in process `syz.4.1284'. [ 125.188750][ T7296] tipc: Disabling bearer [ 125.221362][ T29] audit: type=1400 audit(1757449953.070:11408): avc: denied { create } for pid=7304 comm="syz.2.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 125.234189][ T7305] lo speed is unknown, defaulting to 1000 [ 125.249810][ T29] audit: type=1400 audit(1757449953.080:11409): avc: denied { sys_admin } for pid=7304 comm="syz.2.1285" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 125.324075][ T7313] serio: Serial port ptm0 [ 125.343916][ T29] audit: type=1400 audit(1757449953.190:11410): avc: denied { mount } for pid=7314 comm="syz.5.1288" name="/" dev="configfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 125.368648][ T29] audit: type=1400 audit(1757449953.200:11411): avc: denied { search } for pid=7314 comm="syz.5.1288" name="/" dev="configfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.390985][ T29] audit: type=1400 audit(1757449953.220:11412): avc: denied { search } for pid=7314 comm="syz.5.1288" name="/" dev="configfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.413382][ T29] audit: type=1400 audit(1757449953.220:11413): avc: denied { read open } for pid=7314 comm="syz.5.1288" path="/" dev="configfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.439793][ T29] audit: type=1400 audit(1757449953.290:11414): avc: denied { search } for pid=7314 comm="syz.5.1288" name="/" dev="configfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.462219][ T29] audit: type=1400 audit(1757449953.290:11415): avc: denied { lock } for pid=7314 comm="syz.5.1288" path="/" dev="configfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.484435][ T29] audit: type=1400 audit(1757449953.290:11416): avc: denied { search } for pid=7314 comm="syz.5.1288" name="/" dev="configfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.576499][ T7326] loop0: detected capacity change from 0 to 1024 [ 125.606272][ T7326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.640480][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.878137][ T7328] loop4: detected capacity change from 0 to 512 [ 125.903947][ T7343] loop2: detected capacity change from 0 to 512 [ 125.964500][ T7343] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1295: bg 0: block 393: padding at end of block bitmap is not set [ 125.979617][ T7343] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 125.990251][ T7343] EXT4-fs (loop2): 2 truncates cleaned up [ 125.996938][ T7343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.059345][ T7342] loop0: detected capacity change from 0 to 8192 [ 126.838621][ T7354] loop5: detected capacity change from 0 to 512 [ 126.854012][ T7328] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.883973][ T7354] EXT4-fs (loop5): orphan cleanup on readonly fs [ 126.895234][ T7354] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1298: bg 0: block 248: padding at end of block bitmap is not set [ 126.915422][ T7328] EXT4-fs (loop4): mount failed [ 126.921199][ T7354] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1298: Failed to acquire dquot type 1 [ 126.935197][ T7354] EXT4-fs (loop5): 1 truncate cleaned up [ 126.941928][ T7354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.962271][ T7354] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 126.992886][ T7354] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 0 [ 127.011417][ T7357] netlink: 'syz.5.1298': attribute type 13 has an invalid length. [ 127.045962][ T7354] syz.5.1298 (7354) used greatest stack depth: 9208 bytes left [ 127.119062][ T7360] tipc: Enabled bearer , priority 0 [ 127.136583][ T7360] syzkaller0: entered promiscuous mode [ 127.142171][ T7360] syzkaller0: entered allmulticast mode [ 127.179339][ T7360] tipc: Resetting bearer [ 127.196385][ T7359] tipc: Resetting bearer [ 127.212237][ T7359] tipc: Disabling bearer [ 127.939447][ T7366] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 128.040938][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'. [ 128.634179][ T7400] loop4: detected capacity change from 0 to 512 [ 128.911122][ T7400] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1313: bg 0: block 393: padding at end of block bitmap is not set [ 128.926418][ T7400] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 128.936514][ T7400] EXT4-fs (loop4): 2 truncates cleaned up [ 128.995424][ T7399] lo speed is unknown, defaulting to 1000 [ 129.639981][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 129.799899][ T7413] loop0: detected capacity change from 0 to 512 [ 129.815162][ T7415] random: crng reseeded on system resumption [ 129.846364][ T7413] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.864361][ T7415] Restarting kernel threads ... [ 129.879614][ T7415] Done restarting kernel threads. [ 129.892769][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 129.901776][ T7413] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1318'. [ 129.910804][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 129.919684][ T7413] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1318'. [ 129.971449][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 130.121577][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 130.121596][ T29] audit: type=1400 audit(1757449957.880:11484): avc: denied { execmem } for pid=7404 comm="syz.2.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 130.184823][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 130.193864][ T7413] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1318'. [ 130.202969][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 130.211856][ T7413] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1318'. [ 130.232496][ T29] audit: type=1400 audit(1757449958.000:11485): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 130.294585][ T7424] loop5: detected capacity change from 0 to 512 [ 130.301478][ T29] audit: type=1326 audit(1757449958.110:11486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.4.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 130.325155][ T29] audit: type=1326 audit(1757449958.110:11487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.4.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 130.348716][ T29] audit: type=1326 audit(1757449958.120:11488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.4.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 130.372411][ T29] audit: type=1326 audit(1757449958.120:11489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.4.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 130.395949][ T29] audit: type=1326 audit(1757449958.120:11490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.4.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 130.419534][ T29] audit: type=1326 audit(1757449958.120:11491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.4.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9dbe3ebe9 code=0x7ffc0000 [ 130.443050][ T29] audit: type=1400 audit(1757449958.120:11492): avc: denied { prog_load } for pid=7421 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 130.462179][ T29] audit: type=1400 audit(1757449958.120:11493): avc: denied { bpf } for pid=7421 comm="syz.4.1321" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.504234][ T7424] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 130.529606][ T7427] lo speed is unknown, defaulting to 1000 [ 130.591953][ T3302] EXT4-fs unmount: 5 callbacks suppressed [ 130.591971][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.637292][ T7424] EXT4-fs (loop5): mount failed [ 130.717654][ T7435] loop0: detected capacity change from 0 to 512 [ 130.753975][ T7435] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.829952][ T7435] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.862744][ T7435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 130.892786][ T7435] System zones: 1-12 [ 130.913914][ T7435] EXT4-fs (loop0): 1 truncate cleaned up [ 130.920121][ T7435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.053849][ T7443] loop4: detected capacity change from 0 to 1024 [ 131.115980][ T7443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.150942][ T7443] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.250229][ T7451] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.1327: lblock 0 mapped to illegal pblock 0 (length 6) [ 131.294084][ T7451] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 131.306491][ T7451] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.306491][ T7451] [ 131.381584][ T7453] Falling back ldisc for ttyS3. [ 131.743211][ T7473] loop2: detected capacity change from 0 to 512 [ 131.833611][ T7473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.915623][ T7473] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.943490][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.956000][ T4380] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:65: lblock 8 mapped to illegal pblock 8 (length 8) [ 131.987587][ T4380] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 131.999918][ T4380] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.999918][ T4380] [ 132.018571][ T7473] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1332: corrupted inode contents [ 132.020183][ T4340] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 132.032080][ T7473] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1332: mark_inode_dirty error [ 132.059082][ T7473] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1332: corrupted inode contents [ 132.076986][ T7495] netlink: 'syz.5.1338': attribute type 30 has an invalid length. [ 132.085911][ T7473] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1332: mark_inode_dirty error [ 132.109343][ T4340] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 132.122216][ T4340] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.122216][ T4340] [ 132.131927][ T4340] EXT4-fs (loop4): Total free blocks count 0 [ 132.137988][ T4340] EXT4-fs (loop4): Free/Dirty block details [ 132.143901][ T4340] EXT4-fs (loop4): free_blocks=4293918720 [ 132.201028][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.312119][ T7508] lo speed is unknown, defaulting to 1000 [ 132.335169][ T7514] atomic_op ffff88810ca59528 conn xmit_atomic 0000000000000000 [ 132.409853][ T7519] syzkaller0: entered promiscuous mode [ 132.415489][ T7519] syzkaller0: entered allmulticast mode [ 132.766409][ T7530] lo speed is unknown, defaulting to 1000 [ 133.908563][ T7539] loop0: detected capacity change from 0 to 1024 [ 133.966147][ T7539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.979678][ T7539] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.056703][ T7543] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1348: lblock 0 mapped to illegal pblock 0 (length 6) [ 134.112107][ T7543] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 134.124491][ T7543] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.124491][ T7543] [ 134.578133][ T4340] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:34: lblock 8 mapped to illegal pblock 8 (length 8) [ 134.602386][ T4340] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 134.614687][ T4340] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.614687][ T4340] [ 134.637868][ T4340] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 134.654228][ T4340] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 134.667058][ T4340] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.667058][ T4340] [ 134.676793][ T4340] EXT4-fs (loop0): Total free blocks count 0 [ 134.682805][ T4340] EXT4-fs (loop0): Free/Dirty block details [ 134.688732][ T4340] EXT4-fs (loop0): free_blocks=4293918720 [ 134.769466][ T7558] all: renamed from bridge_slave_0 [ 134.833516][ T7564] netlink: 'syz.4.1366': attribute type 10 has an invalid length. [ 135.201011][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 135.201026][ T29] audit: type=1400 audit(1757449963.030:11622): avc: denied { kexec_image_load } for pid=7587 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 135.227372][ T29] audit: type=1400 audit(1757449963.050:11623): avc: denied { bind } for pid=7586 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.247815][ T29] audit: type=1400 audit(1757449963.050:11624): avc: denied { setopt } for pid=7586 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.338801][ T29] audit: type=1400 audit(1757449963.190:11625): avc: denied { create } for pid=7586 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.358616][ T29] audit: type=1400 audit(1757449963.190:11626): avc: denied { connect } for pid=7586 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.406585][ T7588] loop0: detected capacity change from 0 to 8192 [ 135.433921][ T29] audit: type=1400 audit(1757449963.290:11627): avc: denied { mount } for pid=7587 comm="syz.0.1367" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 135.507738][ T29] audit: type=1400 audit(1757449963.360:11628): avc: denied { create } for pid=7593 comm="syz.2.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.527413][ T29] audit: type=1400 audit(1757449963.360:11629): avc: denied { bind } for pid=7593 comm="syz.2.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.671952][ T7592] loop5: detected capacity change from 0 to 8192 [ 135.678844][ T29] audit: type=1400 audit(1757449963.420:11630): avc: denied { setopt } for pid=7593 comm="syz.2.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.698576][ T29] audit: type=1400 audit(1757449963.420:11631): avc: denied { write } for pid=7593 comm="syz.2.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.779122][ T7603] loop1: detected capacity change from 0 to 512 [ 135.803220][ T7572] Set syz1 is full, maxelem 65536 reached [ 135.816877][ T7603] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.823804][ T7603] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1374: bad orphan inode 13 [ 135.853317][ T7603] ext4_test_bit(bit=12, block=18) = 1 [ 135.858751][ T7603] is_bad_inode(inode)=0 [ 135.863020][ T7603] NEXT_ORPHAN(inode)=2130706432 [ 135.867875][ T7603] max_ino=32 [ 135.871099][ T7603] i_nlink=1 [ 135.874686][ T7603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.893011][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.902053][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.968682][ T7610] loop2: detected capacity change from 0 to 512 [ 135.992034][ T7608] Falling back ldisc for ttyS3. [ 136.002450][ T7610] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.034294][ T7610] EXT4-fs (loop2): mount failed [ 136.052600][ T7616] __nla_validate_parse: 9 callbacks suppressed [ 136.052616][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1378'. [ 136.067872][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1378'. [ 136.123933][ T7627] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 136.130493][ T7627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.138100][ T7627] vhci_hcd vhci_hcd.0: Device attached [ 136.146029][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 136.169377][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'. [ 136.261250][ T7641] loop2: detected capacity change from 0 to 512 [ 136.288165][ T7641] ext4: Unknown parameter 'smackfstransmute' [ 136.326790][ T7641] loop2: detected capacity change from 0 to 2048 [ 136.381434][ T4440] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 136.405995][ T7641] Alternate GPT is invalid, using primary GPT. [ 136.412357][ T7641] loop2: p1 p2 p3 [ 136.452586][ T2994] Alternate GPT is invalid, using primary GPT. [ 136.458900][ T2994] loop2: p1 p2 p3 [ 136.475971][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.526018][ T3696] udevd[3696]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 136.526046][ T3601] udevd[3601]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 136.549991][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 136.590554][ T7655] loop4: detected capacity change from 0 to 8192 [ 136.606016][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 136.612716][ T3601] udevd[3601]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 136.626620][ T3696] udevd[3696]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 136.729713][ T7628] vhci_hcd: connection reset by peer [ 136.736798][ T4329] vhci_hcd: stop threads [ 136.741081][ T4329] vhci_hcd: release socket [ 136.745582][ T4329] vhci_hcd: disconnect device [ 136.928115][ T7666] syzkaller0: entered promiscuous mode [ 136.933697][ T7666] syzkaller0: entered allmulticast mode [ 136.971660][ T7670] loop2: detected capacity change from 0 to 2048 [ 136.993492][ T7670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.007615][ T7670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.169330][ T7681] loop0: detected capacity change from 0 to 512 [ 137.195491][ T7681] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 137.243086][ T7681] EXT4-fs (loop0): mount failed [ 137.264266][ T2957] Process accounting resumed [ 137.356107][ T7691] loop5: detected capacity change from 0 to 512 [ 137.375058][ T7691] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.385974][ T7691] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 137.397230][ T7691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 137.407935][ T7691] System zones: 1-12 [ 137.412501][ T7691] EXT4-fs (loop5): 1 truncate cleaned up [ 137.419047][ T7691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.011840][ T7700] ================================================================== [ 138.019983][ T7700] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 138.027313][ T7700] [ 138.029637][ T7700] read to 0xffff8881072d3148 of 4 bytes by task 7691 on cpu 1: [ 138.037181][ T7700] atime_needs_update+0x25f/0x3e0 [ 138.042234][ T7700] touch_atime+0x4a/0x340 [ 138.046601][ T7700] filemap_splice_read+0x6ba/0x740 [ 138.051720][ T7700] ext4_file_splice_read+0x8f/0xb0 [ 138.056867][ T7700] splice_direct_to_actor+0x26c/0x680 [ 138.062255][ T7700] do_splice_direct+0xda/0x150 [ 138.067045][ T7700] do_sendfile+0x380/0x650 [ 138.071487][ T7700] __x64_sys_sendfile64+0x105/0x150 [ 138.076715][ T7700] x64_sys_call+0x2bb0/0x2ff0 [ 138.081416][ T7700] do_syscall_64+0xd2/0x200 [ 138.085961][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.091883][ T7700] [ 138.094218][ T7700] write to 0xffff8881072d3148 of 4 bytes by task 7700 on cpu 0: [ 138.101861][ T7700] touch_atime+0x1e8/0x340 [ 138.106301][ T7700] filemap_splice_read+0x6ba/0x740 [ 138.111433][ T7700] ext4_file_splice_read+0x8f/0xb0 [ 138.116585][ T7700] splice_direct_to_actor+0x26c/0x680 [ 138.121994][ T7700] do_splice_direct+0xda/0x150 [ 138.126821][ T7700] do_sendfile+0x380/0x650 [ 138.131261][ T7700] __x64_sys_sendfile64+0x105/0x150 [ 138.136487][ T7700] x64_sys_call+0x2bb0/0x2ff0 [ 138.141189][ T7700] do_syscall_64+0xd2/0x200 [ 138.145729][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.151647][ T7700] [ 138.153979][ T7700] value changed: 0x3350fc3b -> 0x33e992bb [ 138.159704][ T7700] [ 138.162039][ T7700] Reported by Kernel Concurrency Sanitizer on: [ 138.168208][ T7700] CPU: 0 UID: 0 PID: 7700 Comm: syz.5.1392 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.177933][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.188142][ T7700] ================================================================== [ 138.344701][ T4718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.711487][ T4440] usb 11-1: enqueue for inactive port 0 [ 141.781430][ T4440] vhci_hcd: vhci_device speed not set