last executing test programs: 2m30.762170331s ago: executing program 32 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x240401, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x1f2) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 1m39.58722234s ago: executing program 3 (id=1259): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket(0x1e, 0x4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.506758166s ago: executing program 3 (id=1260): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.264012626s ago: executing program 3 (id=1269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0xa37, &(0x7f0000000240)={0x0, 0x6dde, 0x1, 0x2, 0x3b6}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3b3d, 0x75d1, 0x40, 0x0, 0x0) 1m38.941543722s ago: executing program 3 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 1m38.883121187s ago: executing program 3 (id=1281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001", @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x2122}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m38.435040833s ago: executing program 3 (id=1284): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1m38.379270298s ago: executing program 33 (id=1284): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1m36.37953306s ago: executing program 0 (id=1326): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) open(&(0x7f0000000280)='.\x00', 0x0, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 1m36.265064539s ago: executing program 0 (id=1336): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x100804, 0x0, 0xa, 0x10001, 0x0, 0x4, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xe}) 1m36.242626521s ago: executing program 0 (id=1328): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={[{@fat=@check_strict}, {@nodots}, {@fat=@usefree}, {@nodots}, {@fat=@usefree}, {@dots}, {@dots}, {@dots}, {@nodots}, {@fat=@showexec}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xf}}, {@nodots}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x200) sendfile(r2, r2, 0x0, 0x800000009) 1m36.135886949s ago: executing program 0 (id=1332): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1m36.058816496s ago: executing program 0 (id=1335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1m35.822976275s ago: executing program 0 (id=1344): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000980)="9f", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) 1m35.822657534s ago: executing program 34 (id=1344): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000980)="9f", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) 57.254601047s ago: executing program 5 (id=2357): r0 = socket(0x11, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29"], 0xdd12}], 0x1}, 0x0) 57.190264432s ago: executing program 5 (id=2359): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 57.160160285s ago: executing program 5 (id=2360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000240)=r1) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x80, 0x20000007}) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) mq_timedreceive(r1, 0x0, 0x0, 0x2, 0x0) 57.144136846s ago: executing program 5 (id=2362): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) mkdir(&(0x7f0000000140)='./control\x00', 0x191) rmdir(&(0x7f0000000100)='./control\x00') sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) 57.082586311s ago: executing program 5 (id=2365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31830000000000000000190000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x40010) 56.545141274s ago: executing program 5 (id=2377): r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 56.524347266s ago: executing program 35 (id=2377): r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 54.041324515s ago: executing program 8 (id=2378): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x901) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x31a1802, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 54.002051928s ago: executing program 8 (id=2427): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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") setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 52.951024932s ago: executing program 8 (id=2460): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x4004801) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") truncate(&(0x7f0000001080)='./file1\x00', 0x0) 52.950824152s ago: executing program 36 (id=2460): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x4004801) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") truncate(&(0x7f0000001080)='./file1\x00', 0x0) 45.720024892s ago: executing program 9 (id=2700): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x1}}}}}}, 0x0) 45.699746114s ago: executing program 9 (id=2701): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, 0x0, 0x0) 45.658666927s ago: executing program 9 (id=2702): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) 44.834073214s ago: executing program 9 (id=2747): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x901) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x31a1802, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 44.820738664s ago: executing program 9 (id=2748): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe3e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 44.632800559s ago: executing program 9 (id=2750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 44.6322954s ago: executing program 37 (id=2750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1.095929472s ago: executing program 6 (id=3729): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file7\x00', 0x4) 1.075188344s ago: executing program 6 (id=3730): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1b7}], 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x3, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x7fffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.029438978s ago: executing program 6 (id=3732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001700)={[{@discard}, {@auto_da_alloc}], [{@euid_gt}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x69, 0x30, 0x65, 0x5e, 0x39, 0x36, 0x32, 0x36], 0x2d, [0x62, 0x64, 0x63, 0x32], 0x2d, [0xe3d7eca6065efdbe, 0x39, 0x39, 0x62], 0x2d, [0x38, 0x38, 0x30, 0x38], 0x2d, [0x38, 0x37, 0x35, 0x9c, 0x63, 0x31, 0x64, 0x35]}}}]}, 0x1, 0x53b, &(0x7f00000011c0)="$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") ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) open_by_handle_at(r1, &(0x7f0000000040)=@ocfs2={0xc, 0x1, {0x2, 0x3, 0x7}}, 0x200) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a010200"], 0x44}}, 0x0) 952.293203ms ago: executing program 6 (id=3735): r0 = syz_create_resource$binfmt(&(0x7f0000000c80)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) pwritev(r1, 0x0, 0x0, 0x6, 0x0) 640.053979ms ago: executing program 7 (id=3751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 607.348571ms ago: executing program 7 (id=3752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)=0x400, 0x12) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 578.400514ms ago: executing program 2 (id=3754): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x2, 0x80805, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 577.952194ms ago: executing program 7 (id=3755): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc68, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r2, 0x0, r5, 0x0, 0x8, 0x0) 554.517426ms ago: executing program 2 (id=3756): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1088aa, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x8, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 497.98104ms ago: executing program 4 (id=3757): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 497.61347ms ago: executing program 7 (id=3758): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x97) close_range(r1, 0xffffffffffffffff, 0x0) 495.84725ms ago: executing program 2 (id=3759): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0x9, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) 471.166963ms ago: executing program 4 (id=3760): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r3, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 467.895823ms ago: executing program 2 (id=3761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0xd, 0x2, 0x0, 0xffffffffffffffff, 0xfffb}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 425.379186ms ago: executing program 4 (id=3762): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 424.589306ms ago: executing program 6 (id=3763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400), 0x1, 0xbaf, &(0x7f00000017c0)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 390.282849ms ago: executing program 1 (id=3764): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1d3, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x9, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001380)="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", 0x57b, 0x1, &(0x7f0000000400)={0xa, 0x4e23, 0x9, @remote, 0x5}, 0x1c) 375.2897ms ago: executing program 7 (id=3765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473fec988ca58e8001d75d38e0d369bd7c50580", 0x1c}, {&(0x7f0000000380)="9c74dfbf7757d9c4135f04770d56", 0xe}], 0x2) 287.098197ms ago: executing program 7 (id=3766): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 286.586387ms ago: executing program 2 (id=3767): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 244.12549ms ago: executing program 4 (id=3768): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) 243.57797ms ago: executing program 1 (id=3769): r0 = socket(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r0, r1, 0x0) 243.307471ms ago: executing program 4 (id=3770): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 158.886767ms ago: executing program 1 (id=3771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xe, r3, 0xfffffffe}, 0x10) 101.133962ms ago: executing program 2 (id=3772): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 89.528243ms ago: executing program 1 (id=3773): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r1) 68.925015ms ago: executing program 6 (id=3774): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @broadcast}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 57.887035ms ago: executing program 4 (id=3775): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) getrlimit(0x1, 0x0) setreuid(0xee00, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) unshare(0x64000600) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 39.760317ms ago: executing program 1 (id=3776): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r2, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4000) close(r2) 0s ago: executing program 1 (id=3777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) kernel console output (not intermixed with test programs): id=12357 comm="syz.5.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 125.001227][T12344] EXT4-fs (loop4): 1 orphan inode deleted [ 125.007457][T12344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.011445][T12359] loop5: detected capacity change from 0 to 512 [ 125.033461][ T5906] EXT4-fs (loop4): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 125.044070][ T5906] Quota error (device loop4): write_blk: dquota write failed [ 125.051547][ T5906] Quota error (device loop4): free_dqentry: Can't move quota data block (2) to free list [ 125.061595][ T29] audit: type=1326 audit(1755471100.000:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd145285ba7 code=0x7ffc0000 [ 125.086023][ T29] audit: type=1326 audit(1755471100.000:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd14522add9 code=0x7ffc0000 [ 125.109682][ T29] audit: type=1326 audit(1755471100.000:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd145285ba7 code=0x7ffc0000 [ 125.133258][ T29] audit: type=1326 audit(1755471100.000:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd14522add9 code=0x7ffc0000 [ 125.156838][ T29] audit: type=1326 audit(1755471100.000:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd145285ba7 code=0x7ffc0000 [ 125.180264][ T29] audit: type=1326 audit(1755471100.000:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd14522add9 code=0x7ffc0000 [ 125.189699][T12359] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 125.231768][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.244745][T12358] 9pnet_fd: Insufficient options for proto=fd [ 125.247578][T12359] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.269447][T12359] EXT4-fs (loop5): mount failed [ 125.575306][T12408] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2291'. [ 125.643954][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2293'. [ 125.672048][T12416] loop4: detected capacity change from 0 to 1024 [ 125.680238][T12416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.697417][T12416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.773343][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.442745][T12467] 9pnet_fd: Insufficient options for proto=fd [ 126.449552][T12467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.457598][T12467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.465836][T12467] batman_adv: batadv0: Interface deactivated: macvlan0 [ 126.472763][T12467] batman_adv: batadv0: Removing interface: macvlan0 [ 126.514554][T12473] loop5: detected capacity change from 0 to 1024 [ 126.524911][T12473] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.541981][T12473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.574450][ T3651] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.595990][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2309'. [ 126.689387][T12500] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2313'. [ 126.799426][T12503] lo speed is unknown, defaulting to 1000 [ 126.836043][T12509] loop5: detected capacity change from 0 to 256 [ 126.872779][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2318'. [ 126.893955][T12532] team0: entered promiscuous mode [ 126.899188][T12532] team0: entered allmulticast mode [ 126.947540][T12569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12569 comm=syz.6.2321 [ 126.961883][T12570] loop2: detected capacity change from 0 to 1024 [ 126.973065][T12570] EXT4-fs: Ignoring removed bh option [ 126.984073][T12570] EXT4-fs: inline encryption not supported [ 126.991987][T12570] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.007886][T12570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 127.016904][T12570] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2323: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.032085][T12570] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2323: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.048209][T12570] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2323: Failed to acquire dquot type 0 [ 127.060234][T12570] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 127.071667][T12570] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2323: mark_inode_dirty error [ 127.084397][T12570] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 127.110203][T12570] EXT4-fs (loop2): 1 orphan inode deleted [ 127.116931][T12570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.129652][ T5952] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:53: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.154620][ T5952] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:53: Failed to release dquot type 0 [ 127.161721][T12570] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.2323: lblock 0 mapped to illegal pblock 16 (length 1) [ 127.166340][T12594] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2329'. [ 127.227067][T12602] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2332'. [ 127.237394][T12602] hsr_slave_0: left promiscuous mode [ 127.243660][T12602] hsr_slave_1: left promiscuous mode [ 127.249792][T12570] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.2323: lblock 0 mapped to illegal pblock 16 (length 1) [ 127.270487][T12570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.281420][T12570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.294936][T12608] vlan2: entered allmulticast mode [ 127.302627][T12608] dummy0: entered allmulticast mode [ 127.373282][T12619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12619 comm=syz.6.2337 [ 127.452774][T12626] lo speed is unknown, defaulting to 1000 [ 127.483833][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.504761][ T3301] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 127.528777][T12626] netlink: 'syz.4.2340': attribute type 4 has an invalid length. [ 127.533948][ T3301] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 127.563374][ T3301] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 127.575213][T12653] IPv6: Can't replace route, no match found [ 127.892046][T12701] loop5: detected capacity change from 0 to 512 [ 127.914499][T12701] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2355: bg 0: block 248: padding at end of block bitmap is not set [ 127.934665][T12701] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2355: Failed to acquire dquot type 1 [ 127.949545][T12701] EXT4-fs (loop5): 1 truncate cleaned up [ 127.958329][T12701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.971301][T12701] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.998257][T12699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.004335][T12708] lo speed is unknown, defaulting to 1000 [ 128.039880][T12732] loop2: detected capacity change from 0 to 256 [ 128.140779][T12753] loop5: detected capacity change from 0 to 128 [ 128.159841][T12753] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.171884][T12753] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.196584][ T3651] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 128.204267][ T3651] FAT-fs (loop5): Filesystem has been set read-only [ 128.235279][ T3651] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 128.278085][T12760] veth1: entered promiscuous mode [ 128.640922][ T3651] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.999168][T12809] lo speed is unknown, defaulting to 1000 [ 129.171012][T12809] chnl_net:caif_netlink_parms(): no params data found [ 129.296125][T12809] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.303315][T12809] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.330088][T12809] bridge_slave_0: entered allmulticast mode [ 129.347165][T12809] bridge_slave_0: entered promiscuous mode [ 129.371703][T12809] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.379002][T12809] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.408518][T12809] bridge_slave_1: entered allmulticast mode [ 129.415673][T12809] bridge_slave_1: entered promiscuous mode [ 129.462067][T12990] lo speed is unknown, defaulting to 1000 [ 129.470224][T12809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.490211][T12809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.596578][T12809] team0: Port device team_slave_0 added [ 129.612996][T12809] team0: Port device team_slave_1 added [ 129.657074][T13091] loop4: detected capacity change from 0 to 1024 [ 129.664719][T12809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.669057][T13091] EXT4-fs: Ignoring removed bh option [ 129.671671][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.671708][T12809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.702006][T13091] EXT4-fs: inline encryption not supported [ 129.721239][T13049] lo speed is unknown, defaulting to 1000 [ 129.727492][T12809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.734506][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.760461][T12809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.772051][T13091] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.788874][T13091] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 129.797885][T13091] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2395: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.833858][T13091] __quota_error: 269 callbacks suppressed [ 129.833874][T13091] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 129.855724][T13091] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2395: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.878100][T12809] hsr_slave_0: entered promiscuous mode [ 129.905333][T12809] hsr_slave_1: entered promiscuous mode [ 129.939832][T13091] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 129.948734][T13091] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2395: Failed to acquire dquot type 0 [ 129.980646][T13091] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 130.009628][T13091] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2395: mark_inode_dirty error [ 130.054272][T13091] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 130.071522][T13091] EXT4-fs (loop4): 1 orphan inode deleted [ 130.077232][T12809] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 130.087657][T13091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.102959][T12809] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 130.109911][ T5952] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:53: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.129064][T12809] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 130.141513][T12809] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 130.145716][T13091] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.2395: lblock 0 mapped to illegal pblock 16 (length 1) [ 130.164930][ T5952] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 130.173461][ T5952] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:53: Failed to release dquot type 0 [ 130.222925][T13091] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.2395: lblock 0 mapped to illegal pblock 16 (length 1) [ 130.239627][T13091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.252248][T13091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.290532][T12809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.306598][T12809] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.316327][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.323442][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.355629][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.356867][T12809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.375046][T12809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.388036][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.395206][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.405049][ T3302] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 130.464958][ T3302] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 130.483155][ T3302] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 130.537046][T12809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.795617][T12809] veth0_vlan: entered promiscuous mode [ 130.869050][T12809] veth1_vlan: entered promiscuous mode [ 130.930075][T12809] veth0_macvtap: entered promiscuous mode [ 130.950715][T12809] veth1_macvtap: entered promiscuous mode [ 130.957049][T13313] netlink: 'syz.7.2420': attribute type 1 has an invalid length. [ 130.991992][T13313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.021701][T12809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.050747][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2420'. [ 131.067036][T12809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.088814][T13313] bond1 (unregistering): Released all slaves [ 131.118066][ T5964] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.171205][ T5964] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.205822][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2424'. [ 131.215423][ T5964] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.241200][ T5964] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.661762][T13422] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2438'. [ 131.670757][T13422] xt_policy: neither incoming nor outgoing policy selected [ 131.721693][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2439'. [ 131.746295][T13426] team0: entered promiscuous mode [ 131.751479][T13426] team0: entered allmulticast mode [ 131.844161][ T29] audit: type=1326 audit(1755471107.161:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.4.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 131.895764][ T29] audit: type=1326 audit(1755471107.161:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.4.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 131.919322][ T29] audit: type=1326 audit(1755471107.161:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.4.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 131.942882][ T29] audit: type=1326 audit(1755471107.161:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.4.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 131.966206][ T29] audit: type=1326 audit(1755471107.192:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.4.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 131.989813][ T29] audit: type=1326 audit(1755471107.192:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.4.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 132.013633][ T29] audit: type=1326 audit(1755471107.245:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13471 comm="syz.4.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 132.081434][T13480] 9pnet: p9_errstr2errno: server reported unknown error [ 132.206444][T13499] loop2: detected capacity change from 0 to 512 [ 132.221978][T13499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.257768][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.305617][ T5964] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.495556][T13513] lo speed is unknown, defaulting to 1000 [ 132.595396][T13513] chnl_net:caif_netlink_parms(): no params data found [ 132.654126][T13513] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.661596][T13513] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.669804][T13513] bridge_slave_0: entered allmulticast mode [ 132.676521][T13513] bridge_slave_0: entered promiscuous mode [ 132.683934][T13513] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.691027][T13513] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.698284][T13513] bridge_slave_1: entered allmulticast mode [ 132.705310][T13513] bridge_slave_1: entered promiscuous mode [ 132.732183][T13513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.743543][T13513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.770354][T13513] team0: Port device team_slave_0 added [ 132.777212][T13513] team0: Port device team_slave_1 added [ 132.805088][T13513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.812122][T13513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.838093][T13513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.850901][T13513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.857928][T13513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.883949][T13513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.927992][T13513] hsr_slave_0: entered promiscuous mode [ 132.934619][T13513] hsr_slave_1: entered promiscuous mode [ 132.940537][T13513] debugfs: 'hsr0' already exists in 'hsr' [ 132.946273][T13513] Cannot create hsr debugfs directory [ 133.097465][T13513] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 133.110563][T13513] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 133.124124][T13513] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 133.134494][T13513] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 133.185699][T13935] loop2: detected capacity change from 0 to 128 [ 133.235940][T13513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.255136][T13513] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.287195][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.294315][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.330320][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.337533][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.357816][ T5964] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.380458][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 133.438324][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 133.462545][T13957] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2494'. [ 133.523261][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2497'. [ 133.526788][T13513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.670110][T13981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.679655][T13981] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.689797][T13981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.793455][ T5964] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.836240][T13513] veth0_vlan: entered promiscuous mode [ 133.854086][T13513] veth1_vlan: entered promiscuous mode [ 133.885870][ T5964] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.912455][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'. [ 133.932327][T13513] veth0_macvtap: entered promiscuous mode [ 133.939566][T13513] veth1_macvtap: entered promiscuous mode [ 133.976994][T13513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.996946][T13513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.009759][ T5964] bridge_slave_1: left allmulticast mode [ 134.015519][ T5964] bridge_slave_1: left promiscuous mode [ 134.021388][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.031874][ T5964] bridge_slave_0: left allmulticast mode [ 134.037646][ T5964] bridge_slave_0: left promiscuous mode [ 134.043413][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.220113][ T5964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.233402][ T5964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.244180][ T5964] bond0 (unregistering): Released all slaves [ 134.256868][T14029] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.270656][ T5960] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.285512][ T5960] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.305518][ T5964] hsr_slave_0: left promiscuous mode [ 134.311311][ T5964] hsr_slave_1: left promiscuous mode [ 134.319324][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.326841][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.335796][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.343468][ T5964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.356547][ T5964] veth1_macvtap: left promiscuous mode [ 134.362314][ T5964] veth0_macvtap: left promiscuous mode [ 134.367967][ T5964] veth1_vlan: left promiscuous mode [ 134.380033][ T5964] veth0_vlan: left promiscuous mode [ 134.457516][ T5964] team0 (unregistering): Port device team_slave_1 removed [ 134.466917][ T5964] team0 (unregistering): Port device team_slave_0 removed [ 134.499243][ T5960] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.511082][T14029] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.533036][T14047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.548651][T14049] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2520'. [ 134.574042][ T5960] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.588856][T14029] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.612500][T14062] netlink: 'syz.2.2522': attribute type 3 has an invalid length. [ 134.657055][T14029] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.742609][ T5952] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.765689][ T5952] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.791978][ T5952] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.810106][ T5952] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.302296][T14129] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 135.310423][T14129] 0ªî{X¹¦: entered allmulticast mode [ 135.316489][T14129] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 135.407895][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 135.407913][ T29] audit: type=1400 audit(1755471110.909:6105): avc: denied { read } for pid=14139 comm="syz.9.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.430756][T14143] netlink: 'syz.6.2553': attribute type 1 has an invalid length. [ 135.450755][T14143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.470709][T14143] bond1 (unregistering): Released all slaves [ 135.572547][ T29] audit: type=1326 audit(1755471111.077:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14225 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 135.598750][ T29] audit: type=1326 audit(1755471111.077:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14225 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 135.622387][ T29] audit: type=1326 audit(1755471111.077:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14225 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 135.645948][ T29] audit: type=1326 audit(1755471111.108:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14225 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 135.669461][ T29] audit: type=1326 audit(1755471111.108:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14225 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 135.696524][ T29] audit: type=1326 audit(1755471111.108:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14225 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 135.720165][ T29] audit: type=1326 audit(1755471111.108:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14225 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 135.743894][ T29] audit: type=1326 audit(1755471111.108:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14225 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 135.767413][ T29] audit: type=1326 audit(1755471111.108:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14225 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 136.052115][T14253] lo speed is unknown, defaulting to 1000 [ 136.089764][T14262] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 136.240536][T14288] vlan2: entered allmulticast mode [ 136.509367][T14297] loop2: detected capacity change from 0 to 512 [ 136.531543][T14297] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 136.567952][T14297] EXT4-fs (loop2): 1 truncate cleaned up [ 136.574149][T14297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.627413][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.259136][T14341] __nla_validate_parse: 3 callbacks suppressed [ 137.259155][T14341] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2597'. [ 137.561560][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2602'. [ 137.673974][T14364] openvswitch: netlink: Message has 6 unknown bytes. [ 137.689379][T14368] unsupported nla_type 52263 [ 137.691180][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2609'. [ 137.913246][T14402] ªªªªª: renamed from vlan1 (while UP) [ 138.081387][T14437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2629'. [ 138.193409][T14462] loop4: detected capacity change from 0 to 128 [ 138.275480][T14462] syz.4.2636: attempt to access beyond end of device [ 138.275480][T14462] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 138.399711][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 138.446172][ T4713] hid_parser_main: 43 callbacks suppressed [ 138.446201][ T4713] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 138.473574][ T4713] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.622415][T14510] loop4: detected capacity change from 0 to 764 [ 138.636872][T14510] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 138.662267][T14510] Symlink component flag not implemented [ 138.674167][T14510] Symlink component flag not implemented (7) [ 138.741302][T14527] ªªªªª: renamed from vlan1 [ 138.806100][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'. [ 138.945031][T14546] pim6reg1: entered promiscuous mode [ 138.950448][T14546] pim6reg1: entered allmulticast mode [ 139.191204][T14585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14585 comm=syz.9.2681 [ 139.380034][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2693'. [ 139.389160][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2693'. [ 139.416076][T14621] wireguard1: entered promiscuous mode [ 139.421689][T14621] wireguard1: entered allmulticast mode [ 139.442426][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2695'. [ 139.454072][T14628] loop9: detected capacity change from 0 to 512 [ 139.461166][T14628] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 139.471157][T14628] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 139.483995][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2695'. [ 140.074538][T14701] netlink: 'syz.4.2725': attribute type 1 has an invalid length. [ 140.170903][T14718] sch_fq: defrate 0 ignored. [ 140.179142][T14721] netlink: 'syz.6.2733': attribute type 1 has an invalid length. [ 140.195036][T14721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.213873][T14721] bond1 (unregistering): Released all slaves [ 140.426095][T14816] vlan1: entered allmulticast mode [ 140.618996][ T3983] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.677928][ T3983] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.724625][ T3983] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.744890][T14836] lo speed is unknown, defaulting to 1000 [ 140.773879][ T3983] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.833065][T14836] chnl_net:caif_netlink_parms(): no params data found [ 140.893884][T14836] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.901122][T14836] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.908581][T14836] bridge_slave_0: entered allmulticast mode [ 140.915049][T14836] bridge_slave_0: entered promiscuous mode [ 140.922058][ T3983] bridge_slave_1: left allmulticast mode [ 140.927770][ T3983] bridge_slave_1: left promiscuous mode [ 140.933572][ T3983] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.941476][ T3983] bridge_slave_0: left promiscuous mode [ 140.947118][ T3983] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.054594][ T3983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.074024][ T3983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.097040][ T3983] bond0 (unregistering): Released all slaves [ 141.110925][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 141.110942][ T29] audit: type=1400 audit(1755471116.883:6263): avc: denied { map } for pid=15026 comm="syz.6.2762" path="socket:[32547]" dev="sockfs" ino=32547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 141.140659][T14836] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.147884][T14836] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.162266][T14836] bridge_slave_1: entered allmulticast mode [ 141.176870][T14836] bridge_slave_1: entered promiscuous mode [ 141.219454][ T29] audit: type=1326 audit(1755471116.998:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15037 comm="syz.4.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 141.243356][ T3983] hsr_slave_0: left promiscuous mode [ 141.250736][ T29] audit: type=1326 audit(1755471117.009:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15037 comm="syz.4.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 141.274421][ T29] audit: type=1326 audit(1755471117.040:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15037 comm="syz.4.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 141.297941][ T29] audit: type=1326 audit(1755471117.040:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15037 comm="syz.4.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 141.321795][ T3983] hsr_slave_1: left promiscuous mode [ 141.327506][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.334990][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.336539][ T29] audit: type=1326 audit(1755471117.082:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15037 comm="syz.4.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 141.365688][ T29] audit: type=1326 audit(1755471117.082:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15037 comm="syz.4.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 141.389259][ T29] audit: type=1326 audit(1755471117.082:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15037 comm="syz.4.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 141.413026][ T29] audit: type=1326 audit(1755471117.082:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15037 comm="syz.4.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 141.436592][ T29] audit: type=1326 audit(1755471117.082:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15037 comm="syz.4.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 141.460673][ T3983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.468192][ T3983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.496821][ T3983] veth1_macvtap: left promiscuous mode [ 141.508083][ T3983] veth0_macvtap: left promiscuous mode [ 141.510081][T15052] loop4: detected capacity change from 0 to 1024 [ 141.519181][ T3983] veth1_vlan: left promiscuous mode [ 141.521826][T15052] EXT4-fs: Ignoring removed orlov option [ 141.530980][T15052] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.531926][ T3983] veth0_vlan: left promiscuous mode [ 141.544731][T15052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.580190][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.616864][T15062] netlink: 'syz.4.2770': attribute type 13 has an invalid length. [ 141.624824][T15062] netlink: 'syz.4.2770': attribute type 17 has an invalid length. [ 141.633033][ T3983] team0 (unregistering): Port device team_slave_1 removed [ 141.642524][ T3983] team0 (unregistering): Port device team_slave_0 removed [ 141.677900][T14836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.753007][T15062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.762412][T15062] tipc: Resetting bearer [ 141.768548][T15062] tipc: Resetting bearer [ 141.776936][T15062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.795351][T14836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.807497][T15082] geneve2: entered promiscuous mode [ 141.814567][ T5910] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.860845][ T5910] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.872807][T14836] team0: Port device team_slave_0 added [ 141.880478][T15114] loop2: detected capacity change from 0 to 128 [ 141.888858][ T5910] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.898520][T14836] team0: Port device team_slave_1 added [ 141.900238][T15114] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 141.912009][T15114] FAT-fs (loop2): Filesystem has been set read-only [ 141.926014][T15114] ¬í: attempt to access beyond end of device [ 141.926014][T15114] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 141.939677][T15114] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 141.947608][T15114] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 141.966480][ T5910] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.975346][T14836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.982372][T14836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.989783][T15114] ¬í: attempt to access beyond end of device [ 141.989783][T15114] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 142.008347][T14836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.022262][T15114] ¬í: attempt to access beyond end of device [ 142.022262][T15114] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 142.045667][T15142] syz.2.2776: attempt to access beyond end of device [ 142.045667][T15142] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 142.059001][T15142] Buffer I/O error on dev loop2, logical block 2065, async page read [ 142.067824][T15142] syz.2.2776: attempt to access beyond end of device [ 142.067824][T15142] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 142.081244][T15142] Buffer I/O error on dev loop2, logical block 2066, async page read [ 142.090337][T14836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.097343][T14836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.123397][T14836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.135634][T15142] syz.2.2776: attempt to access beyond end of device [ 142.135634][T15142] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 142.148998][T15142] Buffer I/O error on dev loop2, logical block 2067, async page read [ 142.187372][T14836] hsr_slave_0: entered promiscuous mode [ 142.188816][T15142] syz.2.2776: attempt to access beyond end of device [ 142.188816][T15142] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 142.193769][T14836] hsr_slave_1: entered promiscuous mode [ 142.206205][T15142] Buffer I/O error on dev loop2, logical block 2068, async page read [ 142.229863][T15142] syz.2.2776: attempt to access beyond end of device [ 142.229863][T15142] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 142.243202][T15142] Buffer I/O error on dev loop2, logical block 2069, async page read [ 142.256095][T15142] syz.2.2776: attempt to access beyond end of device [ 142.256095][T15142] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 142.269446][T15142] Buffer I/O error on dev loop2, logical block 2070, async page read [ 142.279718][T15142] Buffer I/O error on dev loop2, logical block 2071, async page read [ 142.289256][T15142] Buffer I/O error on dev loop2, logical block 2072, async page read [ 142.319406][T15114] Buffer I/O error on dev loop2, logical block 2065, async page read [ 142.334607][T15193] loop4: detected capacity change from 0 to 1024 [ 142.341549][T15193] EXT4-fs: Ignoring removed orlov option [ 142.347299][T15193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.355629][T15114] Buffer I/O error on dev loop2, logical block 2066, async page read [ 142.381166][T15193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.446284][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.721417][T15286] __nla_validate_parse: 4 callbacks suppressed [ 142.721436][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2784'. [ 142.779294][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2784'. [ 142.794158][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 142.823677][T15300] team2: entered promiscuous mode [ 142.829091][T15300] team2: entered allmulticast mode [ 142.879087][T15356] netlink: 'syz.2.2786': attribute type 4 has an invalid length. [ 142.897758][T14836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.915765][ T4698] lo speed is unknown, defaulting to 1000 [ 142.921548][ T4698] syz0: Port: 1 Link ACTIVE [ 142.932501][T14836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.968542][T14836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.987179][T14836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.062408][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2795'. [ 143.087302][T15413] tipc: Enabling of bearer rejected, failed to enable media [ 143.131872][T14836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.174081][T14836] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.188082][ T2643] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.195185][ T2643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.212939][ T3983] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.220107][ T3983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.351012][T14836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.370972][T15458] loop4: detected capacity change from 0 to 256 [ 143.431709][T15471] netlink: 'syz.6.2807': attribute type 4 has an invalid length. [ 143.505769][T15486] IPv6: Can't replace route, no match found [ 143.525531][T14836] veth0_vlan: entered promiscuous mode [ 143.566267][T15494] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 143.584655][T14836] veth1_vlan: entered promiscuous mode [ 143.618326][T14836] veth0_macvtap: entered promiscuous mode [ 143.639456][T14836] veth1_macvtap: entered promiscuous mode [ 143.670879][T14836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.703728][T14836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.732234][ T2643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.766648][ T2643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.776996][ T2643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.786499][ T2643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.868841][T15527] loop4: detected capacity change from 0 to 2048 [ 143.888000][T15530] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2820'. [ 143.900878][T15527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.980970][T15546] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 144.092729][T15562] netlink: 'syz.1.2827': attribute type 13 has an invalid length. [ 144.101387][T15558] loop2: detected capacity change from 0 to 1024 [ 144.139402][T15562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.139466][T15558] EXT4-fs: Ignoring removed orlov option [ 144.200489][T15558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.431470][T15548] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.452084][T15548] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 144.464682][T15548] EXT4-fs (loop4): This should not happen!! Data will be lost [ 144.464682][T15548] [ 144.474351][T15548] EXT4-fs (loop4): Total free blocks count 0 [ 144.480409][T15548] EXT4-fs (loop4): Free/Dirty block details [ 144.486342][T15548] EXT4-fs (loop4): free_blocks=2415919104 [ 144.492242][T15548] EXT4-fs (loop4): dirty_blocks=8208 [ 144.497598][T15548] EXT4-fs (loop4): Block reservation details [ 144.503672][T15548] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 144.564802][T15607] netlink: 'syz.7.2836': attribute type 13 has an invalid length. [ 144.572778][T15607] netlink: 'syz.7.2836': attribute type 17 has an invalid length. [ 144.629265][ T2643] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 144.696246][T15607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.812097][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.909022][T15644] loop2: detected capacity change from 0 to 512 [ 144.918815][T15644] EXT4-fs: Ignoring removed bh option [ 144.928819][T15644] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.938035][T15644] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 144.953831][T15648] loop4: detected capacity change from 0 to 128 [ 144.976531][T15644] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 144.989688][T15648] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 144.997608][T15648] FAT-fs (loop4): Filesystem has been set read-only [ 145.016661][T15644] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 145.018144][T15648] bio_check_eod: 28242 callbacks suppressed [ 145.018159][T15648] ¬í: attempt to access beyond end of device [ 145.018159][T15648] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 145.026241][T15644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.067181][T15648] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 145.075182][T15648] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 145.084532][T15648] ¬í: attempt to access beyond end of device [ 145.084532][T15648] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.107976][T15648] ¬í: attempt to access beyond end of device [ 145.107976][T15648] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.121065][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.131009][T15648] ¬í: attempt to access beyond end of device [ 145.131009][T15648] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.159657][T15648] ¬í: attempt to access beyond end of device [ 145.159657][T15648] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.225441][T15680] syz.4.2847: attempt to access beyond end of device [ 145.225441][T15680] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 145.244736][T15676] siw: device registration error -23 [ 145.251550][T15680] syz.4.2847: attempt to access beyond end of device [ 145.251550][T15680] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 145.265268][T15680] syz.4.2847: attempt to access beyond end of device [ 145.265268][T15680] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 145.308945][T15691] IPv4: Oversized IP packet from 127.202.26.0 [ 145.328869][T15680] syz.4.2847: attempt to access beyond end of device [ 145.328869][T15680] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 145.344479][T15680] syz.4.2847: attempt to access beyond end of device [ 145.344479][T15680] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 145.506228][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2872'. [ 145.534596][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2872'. [ 145.613062][T15713] SELinux: failed to load policy [ 145.655924][T15728] netlink: 1276 bytes leftover after parsing attributes in process `syz.6.2865'. [ 145.692158][T15733] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.772588][T15740] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2875'. [ 145.787552][T15740] hsr_slave_0: left promiscuous mode [ 145.793601][T15740] hsr_slave_1: left promiscuous mode [ 146.407689][T15756] tipc: Enabled bearer , priority 0 [ 146.410339][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2888'. [ 146.424738][T15756] tipc: Disabling bearer [ 146.450702][T15766] ip6gre1: entered allmulticast mode [ 146.515572][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 146.515590][ T29] audit: type=1400 audit(1755471122.563:6463): avc: denied { create } for pid=15774 comm="syz.4.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 146.673200][T15797] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 146.681727][T15797] tipc: Enabled bearer , priority 10 [ 146.758658][T15805] tipc: Resetting bearer [ 146.774064][ T29] audit: type=1326 audit(1755471122.836:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.6.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c4b1ebe9 code=0x7ffc0000 [ 146.797856][ T29] audit: type=1326 audit(1755471122.836:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.6.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4c4b1d550 code=0x7ffc0000 [ 146.821565][ T29] audit: type=1326 audit(1755471122.836:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.6.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c4b1ebe9 code=0x7ffc0000 [ 146.845369][ T29] audit: type=1326 audit(1755471122.836:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.6.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa4c4b1ebe9 code=0x7ffc0000 [ 146.868917][ T29] audit: type=1326 audit(1755471122.836:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.6.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c4b1ebe9 code=0x7ffc0000 [ 146.892586][ T29] audit: type=1326 audit(1755471122.836:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.6.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa4c4b1ebe9 code=0x7ffc0000 [ 146.916290][ T29] audit: type=1326 audit(1755471122.836:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.6.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c4b1ebe9 code=0x7ffc0000 [ 146.939975][ T29] audit: type=1326 audit(1755471122.836:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.6.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa4c4b1ebe9 code=0x7ffc0000 [ 146.963718][ T29] audit: type=1326 audit(1755471122.836:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.6.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c4b1ebe9 code=0x7ffc0000 [ 146.990015][T15805] bond0: (slave team0): Releasing backup interface [ 146.997596][T15805] tipc: Resetting bearer [ 147.004647][T15805] tipc: Disabling bearer [ 147.011333][T15805] team0 (unregistering): Port device team_slave_0 removed [ 147.019425][T15805] team0 (unregistering): Port device team_slave_1 removed [ 147.033637][T15806] tipc: Enabled bearer , priority 0 [ 147.041416][T15812] tipc: Disabling bearer [ 147.110402][T15857] vlan2: entered allmulticast mode [ 147.165327][T15867] 0ªî{X¹¦: renamed from gretap0 [ 147.172679][T15867] 0ªî{X¹¦: entered allmulticast mode [ 147.178801][T15867] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 147.201596][T15870] IPv6: Can't replace route, no match found [ 147.248158][T15872] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.306260][T15872] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.355422][T15872] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.410982][T15872] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.486967][ T5938] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.506883][ T5938] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.535899][ T5938] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.547874][ T5938] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.556601][T15916] __nla_validate_parse: 2 callbacks suppressed [ 147.556619][T15916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2922'. [ 147.669019][T11126] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 147.677516][T11126] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.733346][T15945] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 147.925386][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2937'. [ 148.034039][T15977] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2941'. [ 148.134561][T15991] veth5: entered promiscuous mode [ 148.467347][T16012] vlan2: entered allmulticast mode [ 148.472510][T16012] dummy0: entered allmulticast mode [ 148.668936][T16034] loop4: detected capacity change from 0 to 1024 [ 148.688119][T16034] EXT4-fs: Ignoring removed orlov option [ 148.704422][T16034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.844463][T16048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16048 comm=syz.7.2961 [ 149.077103][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.091180][T16061] loop1: detected capacity change from 0 to 512 [ 149.124474][T16061] EXT4-fs (loop1): too many log groups per flexible block group [ 149.132306][T16061] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 149.171449][T16061] EXT4-fs (loop1): mount failed [ 149.250315][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'. [ 149.259637][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'. [ 149.300748][T16087] netlink: 'syz.2.2974': attribute type 30 has an invalid length. [ 149.383665][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2981'. [ 149.412846][T16103] ªªªªª: renamed from vlan1 (while UP) [ 149.422949][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2981'. [ 149.444101][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2981'. [ 149.454696][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2981'. [ 149.645580][T16119] team0 (unregistering): Port device team_slave_0 removed [ 149.670783][T16119] team0 (unregistering): Port device team_slave_1 removed [ 149.704144][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2990'. [ 149.713428][T16125] netlink: 'syz.7.2991': attribute type 1 has an invalid length. [ 150.029730][T16199] bridge_slave_0: left allmulticast mode [ 150.035436][T16199] bridge_slave_0: left promiscuous mode [ 150.041170][T16199] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.068099][T16199] bridge_slave_1: left allmulticast mode [ 150.073850][T16199] bridge_slave_1: left promiscuous mode [ 150.079800][T16199] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.092344][T16199] bond0: (slave bond_slave_0): Releasing backup interface [ 150.101903][T16199] bond0: (slave bond_slave_1): Releasing backup interface [ 150.115396][T16199] bond1: (slave batadv1): Releasing active interface [ 150.122312][T16199] bond1: (slave batadv1): the permanent HWaddr of slave - ba:bc:c9:a5:c3:60 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 150.136149][T16207] loop1: detected capacity change from 0 to 2368 [ 150.140820][T16199] bond1: (slave batadv2): making interface the new active one [ 150.173657][T16199] bond1: (slave batadv2): Releasing active interface [ 150.214505][T16203] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 150.258987][T16220] loop1: detected capacity change from 0 to 2048 [ 150.276970][T16220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.294398][T16220] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.3013: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 150.326932][T16220] EXT4-fs (loop1): Remounting filesystem read-only [ 150.371309][T14836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.432939][T16276] loop1: detected capacity change from 0 to 764 [ 150.465642][T16276] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 150.493380][T16276] Symlink component flag not implemented [ 150.512038][T16276] Symlink component flag not implemented (7) [ 150.624115][T16292] lo speed is unknown, defaulting to 1000 [ 150.713325][T16324] loop1: detected capacity change from 0 to 256 [ 150.791757][T16311] lo speed is unknown, defaulting to 1000 [ 150.919140][T16360] wireguard1: entered promiscuous mode [ 150.924845][T16360] wireguard1: entered allmulticast mode [ 150.953903][T16370] netlink: 'syz.2.3034': attribute type 3 has an invalid length. [ 150.962355][T16370] netlink: 'syz.2.3034': attribute type 3 has an invalid length. [ 151.433696][T16397] netlink: 'syz.2.3044': attribute type 13 has an invalid length. [ 151.512072][T16397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.548418][T16397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.711179][T16416] wireguard1: entered promiscuous mode [ 151.716882][T16416] wireguard1: entered allmulticast mode [ 152.040901][T16440] lo speed is unknown, defaulting to 1000 [ 152.245603][T16485] bridge_slave_0: left allmulticast mode [ 152.251547][T16485] bridge_slave_0: left promiscuous mode [ 152.257293][T16485] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.268153][T16485] bridge_slave_1: left allmulticast mode [ 152.274022][T16485] bridge_slave_1: left promiscuous mode [ 152.279937][T16485] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.289917][T16485] bond0: (slave bond_slave_0): Releasing backup interface [ 152.299793][T16485] bond0: (slave bond_slave_1): Releasing backup interface [ 152.312537][T16485] team0: Port device team_slave_0 removed [ 152.321718][T16485] team0: Port device team_slave_1 removed [ 152.328865][T16485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.336296][T16485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.344897][T16485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.352334][T16485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.498455][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 152.498475][ T29] audit: type=1326 audit(1755471128.852:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 152.539317][ T29] audit: type=1326 audit(1755471128.852:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 152.562921][ T29] audit: type=1326 audit(1755471128.852:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 152.586399][ T29] audit: type=1326 audit(1755471128.852:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 152.609943][ T29] audit: type=1326 audit(1755471128.852:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 152.633590][ T29] audit: type=1326 audit(1755471128.852:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 152.657148][ T29] audit: type=1326 audit(1755471128.852:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 152.680624][ T29] audit: type=1326 audit(1755471128.852:6670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 152.704143][ T29] audit: type=1326 audit(1755471128.852:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 152.727580][ T29] audit: type=1326 audit(1755471128.852:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.4.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 152.815794][T16507] loop4: detected capacity change from 0 to 512 [ 152.861350][T16515] wireguard0: entered promiscuous mode [ 152.866937][T16515] wireguard0: entered allmulticast mode [ 152.876877][T16507] EXT4-fs (loop4): too many log groups per flexible block group [ 152.884848][T16507] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 152.896539][T16507] EXT4-fs (loop4): mount failed [ 152.900863][T16522] __nla_validate_parse: 5 callbacks suppressed [ 152.900881][T16522] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3071'. [ 152.933402][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3071'. [ 153.343535][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3073'. [ 154.029444][T16614] lo speed is unknown, defaulting to 1000 [ 154.596822][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 154.652479][T16660] loop1: detected capacity change from 0 to 32768 [ 154.705958][T16679] loop2: detected capacity change from 0 to 1024 [ 154.712987][T16679] EXT4-fs: Ignoring removed orlov option [ 154.733047][T16683] lo speed is unknown, defaulting to 1000 [ 154.744074][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3100'. [ 154.744279][T16679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.792226][T16704] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.835803][T16704] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.952925][T16704] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.025386][T16704] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.091812][ T3983] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.126744][ T2643] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.152491][ T2643] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.169651][ T2643] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.346699][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.436209][T16778] lo speed is unknown, defaulting to 1000 [ 155.548919][T16827] siw: device registration error -23 [ 155.604512][T16829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3122'. [ 155.626229][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 155.639592][T16843] bridge_slave_0: left promiscuous mode [ 155.645285][T16843] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.655114][T16843] bridge_slave_1: left allmulticast mode [ 155.660855][T16843] bridge_slave_1: left promiscuous mode [ 155.666630][T16843] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.675993][T16843] bond0: (slave bond_slave_0): Releasing backup interface [ 155.685203][T16843] bond0: (slave bond_slave_1): Releasing backup interface [ 155.919334][T16863] loop1: detected capacity change from 0 to 1024 [ 155.953393][T16863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.005847][T16863] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 156.085712][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3132'. [ 156.145251][T16890] netlink: 'syz.7.3136': attribute type 3 has an invalid length. [ 156.153845][T16890] netlink: 'syz.7.3136': attribute type 3 has an invalid length. [ 156.171444][T16891] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.185379][T14836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.204412][T16897] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3140'. [ 156.227635][T16897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3140'. [ 156.242704][T16891] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.291278][T16922] netem: change failed [ 156.305726][T16891] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.327283][T16927] netlink: 'gtp': attribute type 30 has an invalid length. [ 156.345352][T16891] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.454157][ T3991] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.489666][ T3991] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.533246][ T3991] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.542983][ T2643] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.574391][T16959] netlink: 'syz.6.3148': attribute type 3 has an invalid length. [ 156.583191][T16959] netlink: 'syz.6.3148': attribute type 3 has an invalid length. [ 156.615148][T16962] loop2: detected capacity change from 0 to 1024 [ 156.638583][T16962] EXT4-fs: Ignoring removed orlov option [ 156.677500][T16962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.730078][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.773201][T16973] C: renamed from team_slave_0 [ 156.917449][T17006] lo speed is unknown, defaulting to 1000 [ 157.228911][T17043] netlink: 'syz.1.3165': attribute type 21 has an invalid length. [ 157.421252][ T3382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 157.431626][ T3382] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.581144][T17061] bridge0: entered allmulticast mode [ 157.593504][T17061] bridge0 (unregistering): left allmulticast mode [ 157.879270][T17077] __nla_validate_parse: 5 callbacks suppressed [ 157.879350][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'. [ 157.982710][T17084] loop4: detected capacity change from 0 to 128 [ 158.023636][T17084] bio_check_eod: 21163 callbacks suppressed [ 158.023656][T17084] syz.4.3178: attempt to access beyond end of device [ 158.023656][T17084] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 158.210401][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 158.210419][ T29] audit: type=1326 audit(1755471134.847:6689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17099 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 158.273969][ T29] audit: type=1326 audit(1755471134.878:6690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17099 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 158.297538][ T29] audit: type=1326 audit(1755471134.878:6691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17099 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 158.321219][ T29] audit: type=1326 audit(1755471134.878:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17099 comm="syz.2.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 158.366204][T17108] lo speed is unknown, defaulting to 1000 [ 158.459745][T17108] uprobe: syz.4.3186:17108 failed to unregister, leaking uprobe [ 158.595738][ T29] audit: type=1400 audit(1755471135.246:6693): avc: denied { create } for pid=17180 comm="syz.2.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 158.629883][T17182] netlink: 'syz.2.3202': attribute type 1 has an invalid length. [ 158.637685][ T29] audit: type=1400 audit(1755471135.288:6694): avc: denied { write } for pid=17180 comm="syz.2.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 158.645471][T17184] loop4: detected capacity change from 0 to 128 [ 158.684269][T17184] EXT4-fs: Ignoring removed nobh option [ 158.759065][T17182] 8021q: adding VLAN 0 to HW filter on device bond6 [ 158.767340][T17182] bond5: (slave bond6): making interface the new active one [ 158.771897][T17184] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.775148][T17182] bond5: (slave bond6): Enslaving as an active interface with an up link [ 158.810885][T17184] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.936683][ T29] audit: type=1326 audit(1755471135.592:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17268 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81730ebe9 code=0x7ffc0000 [ 158.960275][ T29] audit: type=1326 audit(1755471135.592:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17268 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81730ebe9 code=0x7ffc0000 [ 158.985616][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.008263][T17182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3202'. [ 159.044540][T17182] bond5: entered promiscuous mode [ 159.049690][T17182] bond6: entered promiscuous mode [ 159.055240][T17182] bond5: entered allmulticast mode [ 159.060484][T17182] bond6: entered allmulticast mode [ 159.066940][ T29] audit: type=1326 audit(1755471135.666:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17268 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd81730ebe9 code=0x7ffc0000 [ 159.090694][ T29] audit: type=1326 audit(1755471135.666:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17268 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81730ebe9 code=0x7ffc0000 [ 159.115457][T17182] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.190307][T17290] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3209'. [ 159.372615][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3221'. [ 159.462613][T17353] netlink: 'syz.7.3225': attribute type 30 has an invalid length. [ 159.494852][T17360] syz_tun: entered allmulticast mode [ 159.505776][T17360] dvmrp1: entered allmulticast mode [ 159.514008][T17359] syz_tun: left allmulticast mode [ 159.532779][T17365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3228'. [ 159.690747][T17391] loop4: detected capacity change from 0 to 1024 [ 159.697910][T17391] EXT4-fs: Ignoring removed oldalloc option [ 159.704470][T17391] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 159.729890][T17384] loop1: detected capacity change from 0 to 512 [ 159.738351][T17384] EXT4-fs (loop1): orphan cleanup on readonly fs [ 159.738405][T17391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.745277][T17384] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3232: bad orphan inode 13 [ 159.767314][T17384] ext4_test_bit(bit=12, block=18) = 1 [ 159.772925][T17384] is_bad_inode(inode)=0 [ 159.777122][T17384] NEXT_ORPHAN(inode)=2130706432 [ 159.782031][T17384] max_ino=32 [ 159.785286][T17384] i_nlink=1 [ 159.790309][T17384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.811051][T17384] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 159.825899][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.834101][T17384] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3232: bg 0: block 248: padding at end of block bitmap is not set [ 159.849540][T17384] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3232: Failed to acquire dquot type 1 [ 159.865087][T17384] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 159.924435][T14836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.960953][T17410] loop1: detected capacity change from 0 to 1024 [ 159.968225][T17410] EXT4-fs: Ignoring removed orlov option [ 160.011309][T17412] loop4: detected capacity change from 0 to 512 [ 160.018408][T17412] EXT4-fs: Ignoring removed orlov option [ 160.024125][T17412] EXT4-fs: Ignoring removed i_version option [ 160.198681][T17417] $Hÿ: renamed from bond0 (while UP) [ 160.206713][T17417] $Hÿ: entered promiscuous mode [ 160.211866][T17417] bond_slave_0: entered promiscuous mode [ 160.217641][T17417] bond_slave_1: entered promiscuous mode [ 161.616464][T17410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.981662][T17412] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 162.981699][T17412] EXT4-fs: failed to create workqueue [ 162.996691][T17412] EXT4-fs (loop4): mount failed [ 163.257979][T14836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.295571][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 163.295588][ T29] audit: type=1326 audit(1755471140.181:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17481 comm="syz.1.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81730ebe9 code=0x7ffc0000 [ 163.325228][ T29] audit: type=1326 audit(1755471140.181:6780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17481 comm="syz.1.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81730ebe9 code=0x7ffc0000 [ 163.354330][ T29] audit: type=1326 audit(1755471140.191:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17480 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 163.377930][ T29] audit: type=1326 audit(1755471140.191:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17480 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cd4eebe9 code=0x7ffc0000 [ 163.401581][ T29] audit: type=1326 audit(1755471140.244:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17481 comm="syz.1.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd81730ebe9 code=0x7ffc0000 [ 163.425148][ T29] audit: type=1326 audit(1755471140.244:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17481 comm="syz.1.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81730ebe9 code=0x7ffc0000 [ 163.448744][ T29] audit: type=1326 audit(1755471140.244:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17481 comm="syz.1.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81730ebe9 code=0x7ffc0000 [ 163.472290][ T29] audit: type=1326 audit(1755471140.244:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17481 comm="syz.1.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd81730ebe9 code=0x7ffc0000 [ 163.495802][ T29] audit: type=1326 audit(1755471140.244:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17481 comm="syz.1.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81730ebe9 code=0x7ffc0000 [ 163.519401][ T29] audit: type=1326 audit(1755471140.244:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17481 comm="syz.1.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81730ebe9 code=0x7ffc0000 [ 163.549245][T17483] tipc: New replicast peer: 255.255.255.83 [ 163.555266][T17483] tipc: Enabled bearer , priority 10 [ 163.645662][T17498] loop1: detected capacity change from 0 to 128 [ 164.163467][T17530] loop2: detected capacity change from 0 to 2048 [ 164.242219][T17523] lo speed is unknown, defaulting to 1000 [ 164.249386][T17530] loop2: p3 p4 < > [ 164.253251][T17530] loop2: p3 size 57344 extends beyond EOD, truncated [ 164.346936][T17558] loop4: detected capacity change from 0 to 1024 [ 164.385919][T17558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.468624][T17558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.493852][T17523] chnl_net:caif_netlink_parms(): no params data found [ 164.505572][ T4713] tipc: Node number set to 494295591 [ 164.625721][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.734144][T17523] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.741351][T17523] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.780079][T17523] bridge_slave_0: entered allmulticast mode [ 164.786777][T17523] bridge_slave_0: entered promiscuous mode [ 164.793721][T17523] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.801017][T17523] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.808799][T17523] bridge_slave_1: entered allmulticast mode [ 164.815335][T17523] bridge_slave_1: entered promiscuous mode [ 164.967581][T17523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.982750][T17523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.006768][T17523] team0: Port device team_slave_0 added [ 165.013596][T17523] team0: Port device team_slave_1 added [ 165.042535][T17523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.049678][T17523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.077033][T17523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.088598][T17784] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.101869][T17523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.109017][T17523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.135448][T17523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.164845][T17523] hsr_slave_0: entered promiscuous mode [ 165.179045][T17523] hsr_slave_1: entered promiscuous mode [ 165.185950][T17523] debugfs: 'hsr0' already exists in 'hsr' [ 165.191860][T17523] Cannot create hsr debugfs directory [ 165.198722][T17784] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.240498][T17784] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.299748][T17784] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.335128][T17523] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.374323][ T5938] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.398266][T17523] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.416966][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3295'. [ 165.431564][ T2643] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.443203][ T2643] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.458724][ T3983] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.468576][T17523] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.539352][T17947] wireguard1: entered promiscuous mode [ 165.547215][T17947] wireguard1: entered allmulticast mode [ 165.582489][T17523] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.657249][T17523] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.666499][T17523] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.677706][T17523] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.687169][T17523] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.755769][T17523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.773325][T17523] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.784453][ T2643] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.791574][ T2643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.817983][ T2643] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.825116][ T2643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.916811][T17523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.960264][T17986] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3300'. [ 166.033484][T17523] veth0_vlan: entered promiscuous mode [ 166.042825][T17523] veth1_vlan: entered promiscuous mode [ 166.061482][T17523] veth0_macvtap: entered promiscuous mode [ 166.069610][T17523] veth1_macvtap: entered promiscuous mode [ 166.084372][T17523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.100524][T17523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.135308][ T2643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.153151][ T2643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.163871][ T2643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.174360][ T2643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.240742][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3306'. [ 166.440078][T18035] lo speed is unknown, defaulting to 1000 [ 166.543181][T18063] netlink: 'syz.6.3316': attribute type 13 has an invalid length. [ 166.565225][T18061] netlink: 'syz.2.3315': attribute type 1 has an invalid length. [ 166.591626][T18063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.636434][T18102] bond0: entered promiscuous mode [ 166.641571][T18102] bond0: entered allmulticast mode [ 166.651748][T18102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.685142][T18061] ip6gretap1: entered promiscuous mode [ 166.690931][T18061] ip6gretap1: entered allmulticast mode [ 166.700365][T18061] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 166.733585][ T31] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 166.736957][T18110] loop2: detected capacity change from 0 to 512 [ 166.765223][T18110] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3321: Invalid inode bitmap blk 4 in block_group 0 [ 166.791837][T18110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.859972][ T5936] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 166.883622][T18122] loop1: detected capacity change from 0 to 128 [ 166.891947][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.941960][T18122] syz.1.3324: attempt to access beyond end of device [ 166.941960][T18122] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 166.972413][T18122] syz.1.3324: attempt to access beyond end of device [ 166.972413][T18122] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 166.989426][T18122] syz.1.3324: attempt to access beyond end of device [ 166.989426][T18122] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 167.008588][T18122] syz.1.3324: attempt to access beyond end of device [ 167.008588][T18122] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 167.032877][T18122] syz.1.3324: attempt to access beyond end of device [ 167.032877][T18122] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 167.047302][T18122] syz.1.3324: attempt to access beyond end of device [ 167.047302][T18122] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 167.062135][T18122] syz.1.3324: attempt to access beyond end of device [ 167.062135][T18122] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 167.079272][T18122] syz.1.3324: attempt to access beyond end of device [ 167.079272][T18122] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 167.097889][T18122] syz.1.3324: attempt to access beyond end of device [ 167.097889][T18122] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 167.221808][T18122] syz.1.3324: attempt to access beyond end of device [ 167.221808][T18122] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 167.428379][T18140] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3329'. [ 167.690149][T18156] lo speed is unknown, defaulting to 1000 [ 168.000160][T18199] $Hÿ: renamed from bond0 (while UP) [ 168.017106][T18199] $Hÿ: entered promiscuous mode [ 168.171831][T18213] tipc: Enabling of bearer rejected, failed to enable media [ 168.210130][T18217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3350'. [ 168.219333][T18217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3350'. [ 168.324977][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 168.325073][ T29] audit: type=1400 audit(1755471145.472:6897): avc: denied { create } for pid=18227 comm="syz.2.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 168.380221][ T29] audit: type=1400 audit(1755471145.514:6898): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.404697][ T29] audit: type=1400 audit(1755471145.514:6899): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.429003][ T29] audit: type=1400 audit(1755471145.514:6900): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.465853][ T29] audit: type=1400 audit(1755471145.609:6901): avc: denied { prog_load } for pid=18231 comm="syz.2.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.485170][ T29] audit: type=1400 audit(1755471145.609:6902): avc: denied { bpf } for pid=18231 comm="syz.2.3357" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.505963][ T29] audit: type=1400 audit(1755471145.609:6903): avc: denied { perfmon } for pid=18231 comm="syz.2.3357" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.527068][ T29] audit: type=1400 audit(1755471145.609:6904): avc: denied { prog_run } for pid=18231 comm="syz.2.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.547412][ T29] audit: type=1400 audit(1755471145.630:6905): avc: denied { create } for pid=18231 comm="syz.2.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.567027][ T29] audit: type=1400 audit(1755471145.630:6906): avc: denied { connect } for pid=18231 comm="syz.2.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.778737][T18252] tipc: Enabled bearer , priority 0 [ 168.792240][T18250] tipc: Resetting bearer [ 168.816764][T18250] tipc: Disabling bearer [ 168.882952][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3364'. [ 168.978877][T18271] loop2: detected capacity change from 0 to 512 [ 168.987585][T18271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.026205][T18271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.052254][T18271] ext4 filesystem being mounted at /685/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.082248][T18271] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.3368: corrupted xattr block 19: overlapping e_value [ 169.098104][T18271] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 169.141167][T18271] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.3368: corrupted xattr block 19: overlapping e_value [ 169.170857][T18271] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 169.182406][T18283] lo speed is unknown, defaulting to 1000 [ 169.191649][T18271] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.3368: corrupted xattr block 19: overlapping e_value [ 169.259143][T18293] lo speed is unknown, defaulting to 1000 [ 169.312547][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.383573][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3391'. [ 170.439650][T18389] vlan1: entered allmulticast mode [ 170.444894][T18389] bridge0: entered allmulticast mode [ 170.458911][T18389] bridge2: port 1(vlan1) entered blocking state [ 170.465242][T18389] bridge2: port 1(vlan1) entered disabled state [ 170.510963][T18389] vlan1: entered promiscuous mode [ 170.516250][T18389] bridge0: entered promiscuous mode [ 170.655184][T18416] loop1: detected capacity change from 0 to 128 [ 170.686208][T18416] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 170.703174][T18416] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.3399'. [ 170.767632][T18427] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.806942][T18418] tipc: Enabled bearer , priority 0 [ 170.821036][T18429] lo speed is unknown, defaulting to 1000 [ 170.827033][T18417] tipc: Resetting bearer [ 170.859111][T18417] tipc: Disabling bearer [ 170.870628][T18427] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.962992][T18427] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.021097][T18427] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.168669][T18481] loop4: detected capacity change from 0 to 512 [ 171.215738][T18481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.241816][T18481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.277633][ T5941] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.284791][T18481] ext4 filesystem being mounted at /627/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.293575][ T5941] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.336446][ T3980] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.357354][ T3980] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.367615][T18502] ªªªªªª: renamed from vlan0 [ 171.371755][T18481] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.3409: corrupted xattr block 19: overlapping e_value [ 171.393083][T18481] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 171.402315][T18481] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.3409: corrupted xattr block 19: overlapping e_value [ 171.427664][T18481] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 171.442516][T18481] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.3409: corrupted xattr block 19: overlapping e_value [ 171.459584][T18504] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2405536509/2405536511 [ 171.470906][T18504] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2405536509/2405536511 [ 171.480184][T18504] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2405536509/2405536511 [ 171.504165][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.884866][T18558] lo speed is unknown, defaulting to 1000 [ 171.998840][T18590] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3435'. [ 172.011041][T18593] netlink: 'syz.7.3436': attribute type 4 has an invalid length. [ 172.174603][T18606] tipc: Started in network mode [ 172.179627][T18606] tipc: Node identity d2123008920e, cluster identity 4711 [ 172.186804][T18606] tipc: Enabled bearer , priority 0 [ 172.206839][T18605] tipc: Resetting bearer [ 172.240725][T18605] tipc: Disabling bearer [ 172.372803][T18581] Set syz1 is full, maxelem 65536 reached [ 172.928346][T18664] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.966079][T18664] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.012952][T18664] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.068995][T18664] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.462178][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 173.462196][ T29] audit: type=1326 audit(1755471150.858:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.4.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 173.523187][ T29] audit: type=1326 audit(1755471150.858:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.4.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 173.547022][ T29] audit: type=1326 audit(1755471150.858:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.4.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 173.570695][ T29] audit: type=1326 audit(1755471150.858:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.4.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 173.594208][ T29] audit: type=1326 audit(1755471150.858:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.4.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 173.617766][ T29] audit: type=1326 audit(1755471150.869:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.4.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 173.714962][ T29] audit: type=1326 audit(1755471151.005:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.4.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 173.738598][ T29] audit: type=1326 audit(1755471151.005:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.4.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 173.762576][ T29] audit: type=1326 audit(1755471151.089:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.4.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 173.786600][ T29] audit: type=1326 audit(1755471151.089:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.4.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 173.799296][T18689] loop1: detected capacity change from 0 to 512 [ 173.845996][T18689] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.3467: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 173.894351][T18689] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.3467: Bad quota inode: 3, type: 0 [ 173.925736][T18689] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 173.953116][T18689] EXT4-fs (loop1): mount failed [ 174.097578][T18709] lo speed is unknown, defaulting to 1000 [ 174.181285][T18732] loop2: detected capacity change from 0 to 512 [ 174.188606][T18732] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 174.385696][T18753] netlink: zone id is out of range [ 174.390863][T18753] netlink: zone id is out of range [ 174.400685][T18753] netlink: zone id is out of range [ 174.405836][T18753] netlink: zone id is out of range [ 174.432480][T18753] netlink: zone id is out of range [ 174.447835][T18753] netlink: zone id is out of range [ 174.466845][T18753] netlink: zone id is out of range [ 174.473138][T18753] netlink: zone id is out of range [ 174.478764][T18753] netlink: zone id is out of range [ 175.091779][ T5974] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.103311][ T5937] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.115107][ T5937] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.126261][ T5947] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.156844][T18777] tipc: Enabling of bearer rejected, failed to enable media [ 175.701881][T11126] page_pool_release_retry() stalled pool shutdown: id 82, 1 inflight 60 sec [ 175.777349][T18815] loop4: detected capacity change from 0 to 512 [ 175.796887][T18815] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.3499: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 175.831108][T18815] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.3499: Bad quota inode: 3, type: 0 [ 175.845263][T18815] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 175.862953][T18815] EXT4-fs (loop4): mount failed [ 176.563636][T18864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.579906][T18864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.706688][T18873] loop2: detected capacity change from 0 to 512 [ 176.850159][T18873] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.3515: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 176.877424][T18873] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.3515: Bad quota inode: 3, type: 0 [ 176.899471][T18873] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 176.931030][T18873] EXT4-fs (loop2): mount failed [ 176.946647][T18893] netlink: 'syz.7.3521': attribute type 30 has an invalid length. [ 177.122314][T18926] vhci_hcd: default hub control req: a111 v0000 i0000 l0 [ 177.165185][T18929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3533'. [ 177.217926][T18929] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3533'. [ 177.391695][T18978] geneve2: entered allmulticast mode [ 177.399528][ T5914] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.418096][ T5914] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.450016][T18991] loop2: detected capacity change from 0 to 512 [ 177.468833][ T5947] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.480816][T18991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.494377][ T5947] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.511841][T18991] ext4 filesystem being mounted at /709/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.532077][T18975] tipc: Enabled bearer , priority 0 [ 177.546611][T19004] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3554'. [ 177.579270][T18974] tipc: Resetting bearer [ 177.589538][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.620642][T18974] tipc: Disabling bearer [ 177.711493][T19020] loop1: detected capacity change from 0 to 512 [ 177.739755][T19020] EXT4-fs: Ignoring removed nobh option [ 177.765068][T19020] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm wÞ£ÿ: corrupted inode contents [ 177.791645][T19020] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm wÞ£ÿ: mark_inode_dirty error [ 177.844070][T19020] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm wÞ£ÿ: corrupted inode contents [ 177.876663][T19020] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm wÞ£ÿ: mark_inode_dirty error [ 177.926082][T19020] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm wÞ£ÿ: Failed to acquire dquot type 0 [ 177.953268][T19020] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm wÞ£ÿ: corrupted inode contents [ 177.974808][T19020] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm wÞ£ÿ: mark_inode_dirty error [ 177.990455][T19020] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm wÞ£ÿ: corrupted inode contents [ 178.003308][T19020] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm wÞ£ÿ: mark_inode_dirty error [ 178.035750][T19020] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm wÞ£ÿ: corrupted inode contents [ 178.059702][T19020] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 178.069082][T19020] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm wÞ£ÿ: corrupted inode contents [ 178.082095][T19020] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm wÞ£ÿ: mark_inode_dirty error [ 178.093688][T19020] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 178.104464][T19020] EXT4-fs (loop1): 1 truncate cleaned up [ 178.110670][T19020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.123845][T19020] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.139761][T19020] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm wÞ£ÿ: corrupted inode contents [ 178.167944][T19020] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm wÞ£ÿ: mark_inode_dirty error [ 178.195928][T19020] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm wÞ£ÿ: corrupted inode contents [ 178.209846][T19020] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm wÞ£ÿ: mark_inode_dirty error [ 178.222740][T19020] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm wÞ£ÿ: corrupted inode contents [ 178.234897][T19020] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm wÞ£ÿ: mark_inode_dirty error [ 178.248309][T19020] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm wÞ£ÿ: corrupted inode contents [ 178.261322][T19059] loop4: detected capacity change from 0 to 512 [ 178.270429][T19020] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm wÞ£ÿ: mark_inode_dirty error [ 178.282829][T19059] EXT4-fs error (device loop4): ext4_init_orphan_info:585: comm syz.4.3573: inode #0: comm syz.4.3573: iget: illegal inode # [ 178.297268][T19020] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem [ 178.306167][T19059] EXT4-fs (loop4): get orphan inode failed [ 178.314321][T19059] EXT4-fs (loop4): mount failed [ 178.324480][T19063] tmpfs: Unsupported parameter 'huge' [ 178.331331][T17523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.341630][ T5947] __quota_error: 194 callbacks suppressed [ 178.341649][ T5947] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 178.357344][ T5947] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:48: Failed to release dquot type 1 [ 178.387877][ T29] audit: type=1400 audit(1755471156.024:7420): avc: denied { create } for pid=19067 comm="syz.1.3575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 178.420840][T19071] loop1: detected capacity change from 0 to 128 [ 178.428299][T19071] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.447600][T19071] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.460390][ T29] audit: type=1400 audit(1755471156.066:7421): avc: denied { mounton } for pid=19067 comm="syz.1.3575" path="/59/file0" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 178.514921][ T29] audit: type=1400 audit(1755471156.108:7422): avc: denied { mount } for pid=19067 comm="syz.1.3575" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 178.613013][ T5914] bridge0: port 3(bond0) entered disabled state [ 178.625433][ T5914] bridge_slave_1: left allmulticast mode [ 178.631527][ T5914] bridge_slave_1: left promiscuous mode [ 178.637376][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.646537][ T5914] bridge_slave_0: left allmulticast mode [ 178.652303][ T5914] bridge_slave_0: left promiscuous mode [ 178.658276][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.679414][T19095] loop1: detected capacity change from 0 to 512 [ 178.724971][T19095] EXT4-fs (loop1): too many log groups per flexible block group [ 178.732797][T19095] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 178.744915][T19095] EXT4-fs (loop1): mount failed [ 178.804271][ T5914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.817519][ T5914] bond_slave_0: left promiscuous mode [ 178.823091][ T5914] bond_slave_0: left allmulticast mode [ 178.838473][ T5914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.858552][ T5914] bond_slave_1: left promiscuous mode [ 178.864070][ T5914] bond_slave_1: left allmulticast mode [ 178.886939][ T5914] bond0 (unregistering): (slave team0): Releasing backup interface [ 178.908962][ T5914] team0: left promiscuous mode [ 178.913789][ T5914] team_slave_0: left promiscuous mode [ 178.919417][ T5914] team_slave_1: left promiscuous mode [ 178.925022][ T5914] team0: left allmulticast mode [ 178.930080][ T5914] team_slave_0: left allmulticast mode [ 178.935668][ T5914] team_slave_1: left allmulticast mode [ 178.972426][ T5914] bond0 (unregistering): Released all slaves [ 178.981164][ T5914] bond1 (unregistering): Released all slaves [ 178.997653][ T5914] bond2 (unregistering): Released all slaves [ 179.053741][ T29] audit: type=1400 audit(1755471156.727:7423): avc: denied { validate_trans } for pid=19119 comm="syz.1.3584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 179.090630][T19125] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3587'. [ 179.099860][T19125] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3587'. [ 179.147417][ T5914] hsr_slave_0: left promiscuous mode [ 179.172495][ T5914] hsr_slave_1: left promiscuous mode [ 179.204349][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.223926][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.343074][ T5914] team0 (unregistering): Port device team_slave_1 removed [ 179.364012][ T5914] team0 (unregistering): Port device team_slave_0 removed [ 179.446507][T19153] loop1: detected capacity change from 0 to 512 [ 179.463311][ T29] audit: type=1400 audit(1755471157.158:7424): avc: denied { read write } for pid=19156 comm="syz.4.3602" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 179.492577][ T29] audit: type=1400 audit(1755471157.158:7425): avc: denied { open } for pid=19156 comm="syz.4.3602" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 179.497164][T19153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.530758][T19153] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.565653][T17523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.577957][ T29] audit: type=1326 audit(1755471157.273:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.7.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aae38ebe9 code=0x7ffc0000 [ 179.601719][ T29] audit: type=1326 audit(1755471157.273:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.7.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aae38ebe9 code=0x7ffc0000 [ 179.625528][ T29] audit: type=1326 audit(1755471157.305:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.7.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aae38ebe9 code=0x7ffc0000 [ 179.679217][T19180] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3608'. [ 180.663777][T19234] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 180.975345][T19228] net_ratelimit: 2 callbacks suppressed [ 180.975365][T19228] Set syz1 is full, maxelem 65536 reached [ 181.136331][T19271] loop1: detected capacity change from 0 to 2048 [ 181.156647][T19271] EXT4-fs: inline encryption not supported [ 181.202482][T19271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.416081][T19271] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3633: bg 0: block 234: padding at end of block bitmap is not set [ 181.432216][T19271] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 181.444592][T19271] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.444592][T19271] [ 181.503504][T17523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.928848][T19316] tipc: New replicast peer: 255.255.255.255 [ 181.935049][T19316] tipc: Enabled bearer , priority 10 [ 182.023966][T19328] syz_tun: entered allmulticast mode [ 182.033589][T19327] syz_tun: left allmulticast mode [ 182.176785][T19337] syzkaller0: entered promiscuous mode [ 182.182428][T19337] syzkaller0: entered allmulticast mode [ 182.646568][T19393] loop2: detected capacity change from 0 to 128 [ 182.670903][T19396] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3679'. [ 182.690573][T19396] 0ªX¹¦À: renamed from caif0 [ 182.698474][T19396] 0ªX¹¦À: entered allmulticast mode [ 182.703767][T19396] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 182.806586][T19404] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 182.871766][T19411] 9pnet: p9_errstr2errno: server reported unknown error [ 182.899697][T19410] loop2: detected capacity change from 0 to 2048 [ 182.908273][T19415] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 182.944420][T19410] loop2: p1 < > p4 [ 182.954525][T19410] loop2: p4 size 8388608 extends beyond EOD, truncated [ 183.055302][T19437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3691'. [ 183.173967][T19426] netlink: 29 bytes leftover after parsing attributes in process `syz.6.3689'. [ 183.211949][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 183.212001][ T29] audit: type=1326 audit(1755471161.095:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19453 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 183.252202][T19443] loop2: detected capacity change from 0 to 1024 [ 183.264565][T19443] EXT4-fs: Ignoring removed bh option [ 183.271768][ T29] audit: type=1326 audit(1755471161.126:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19453 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 183.295442][ T29] audit: type=1326 audit(1755471161.126:7565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19453 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 183.318987][ T29] audit: type=1326 audit(1755471161.126:7566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19453 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 183.342607][ T29] audit: type=1326 audit(1755471161.126:7567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19453 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 183.366184][ T29] audit: type=1326 audit(1755471161.126:7568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19453 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 183.375107][T19443] EXT4-fs: Ignoring removed nobh option [ 183.389742][ T29] audit: type=1326 audit(1755471161.126:7569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19453 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 183.389774][ T29] audit: type=1326 audit(1755471161.126:7570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19453 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 183.389801][ T29] audit: type=1326 audit(1755471161.126:7571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19453 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 183.389826][ T29] audit: type=1326 audit(1755471161.126:7572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19453 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14528ebe9 code=0x7ffc0000 [ 183.478616][T19459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3700'. [ 183.501293][T19443] EXT4-fs: inline encryption not supported [ 183.785225][T19443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.919938][T19507] pim6reg1: entered promiscuous mode [ 183.925331][T19507] pim6reg1: entered allmulticast mode [ 184.037363][T19526] wg2: entered promiscuous mode [ 184.042372][T19526] wg2: entered allmulticast mode [ 184.118221][T19528] loop4: detected capacity change from 0 to 1024 [ 184.137866][T19528] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 184.141778][T19538] loop1: detected capacity change from 0 to 1024 [ 184.187083][T19538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.209467][T19522] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3694: Allocating blocks 321-513 which overlap fs metadata [ 184.255688][T19538] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3726: Allocating blocks 449-513 which overlap fs metadata [ 184.271552][T19554] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3732'. [ 184.272395][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.306630][T19533] EXT4-fs (loop1): pa ffff888107301460: logic 48, phys. 177, len 21 [ 184.314676][T19533] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 184.337385][T17523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.395391][T19575] loop2: detected capacity change from 0 to 512 [ 184.403237][T19575] journal_path: Non-blockdev passed as './bus' [ 184.409518][T19575] EXT4-fs: error: could not find journal device path [ 184.533458][T19598] bridge: RTM_NEWNEIGH with invalid ether address [ 184.614000][T19605] netlink: 'syz.4.3748': attribute type 1 has an invalid length. [ 184.674829][T19613] loop1: detected capacity change from 0 to 512 [ 184.688780][T19613] EXT4-fs: Ignoring removed oldalloc option [ 184.702642][T19613] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.728984][T19613] EXT4-fs (loop1): 1 truncate cleaned up [ 184.738414][T19613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.752158][T19632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3757'. [ 184.761299][T19632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3757'. [ 184.860950][T19640] loop2: detected capacity change from 0 to 2048 [ 184.886308][T17523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.907170][T19640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.923006][T19649] tipc: Enabling of bearer rejected, failed to enable media [ 184.975296][ T3301] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 185.011954][ T3301] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 185.044223][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3770'. [ 185.059266][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.096249][T19665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.103561][T19665] IPv6: NLM_F_CREATE should be set when creating new route [ 185.110836][T19665] IPv6: NLM_F_CREATE should be set when creating new route [ 185.145414][T19665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.160818][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3770'. [ 185.191636][T19676] serio: Serial port ptm0 [ 185.271282][T19685] lo speed is unknown, defaulting to 1000 [ 185.282108][T19696] loop1: detected capacity change from 0 to 128 [ 185.505488][T19696] ================================================================== [ 185.513587][T19696] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 185.520796][T19696] [ 185.523118][T19696] write to 0xffff888119166c14 of 4 bytes by task 19715 on cpu 1: [ 185.530835][T19696] __xa_set_mark+0x172/0x1a0 [ 185.535462][T19696] __folio_mark_dirty+0x3af/0x4d0 [ 185.540634][T19696] mark_buffer_dirty+0x11e/0x210 [ 185.545606][T19696] block_write_end+0x12d/0x210 [ 185.550412][T19696] generic_write_end+0x56/0x150 [ 185.555291][T19696] fat_write_end+0x4f/0x160 [ 185.559822][T19696] generic_perform_write+0x312/0x490 [ 185.565136][T19696] __generic_file_write_iter+0x9e/0x120 [ 185.570709][T19696] generic_file_write_iter+0x8d/0x2f0 [ 185.576108][T19696] iter_file_splice_write+0x666/0x9e0 [ 185.581528][T19696] direct_splice_actor+0x153/0x2a0 [ 185.586668][T19696] splice_direct_to_actor+0x30f/0x680 [ 185.592073][T19696] do_splice_direct+0xda/0x150 [ 185.596855][T19696] do_sendfile+0x380/0x650 [ 185.601307][T19696] __x64_sys_sendfile64+0x105/0x150 [ 185.606529][T19696] x64_sys_call+0x2bb0/0x2ff0 [ 185.611325][T19696] do_syscall_64+0xd2/0x200 [ 185.615849][T19696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.621762][T19696] [ 185.624101][T19696] read to 0xffff888119166c14 of 4 bytes by task 19696 on cpu 0: [ 185.631754][T19696] xas_find_marked+0x5dc/0x620 [ 185.636643][T19696] find_get_entry+0x5d/0x380 [ 185.641258][T19696] filemap_get_folios_tag+0x92/0x210 [ 185.646570][T19696] file_write_and_wait_range+0x1ea/0x2c0 [ 185.652239][T19696] __generic_file_fsync+0x46/0x140 [ 185.657365][T19696] fat_file_fsync+0x49/0x100 [ 185.662011][T19696] vfs_fsync_range+0x10d/0x130 [ 185.666800][T19696] generic_file_write_iter+0x1b8/0x2f0 [ 185.672283][T19696] iter_file_splice_write+0x666/0x9e0 [ 185.677695][T19696] direct_splice_actor+0x153/0x2a0 [ 185.682828][T19696] splice_direct_to_actor+0x30f/0x680 [ 185.688225][T19696] do_splice_direct+0xda/0x150 [ 185.693013][T19696] do_sendfile+0x380/0x650 [ 185.697450][T19696] __x64_sys_sendfile64+0x105/0x150 [ 185.702682][T19696] x64_sys_call+0x2bb0/0x2ff0 [ 185.707379][T19696] do_syscall_64+0xd2/0x200 [ 185.711917][T19696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.717831][T19696] [ 185.720515][T19696] value changed: 0x04000021 -> 0x0e000021 [ 185.726245][T19696] [ 185.728596][T19696] Reported by Kernel Concurrency Sanitizer on: [ 185.734846][T19696] CPU: 0 UID: 0 PID: 19696 Comm: syz.1.3777 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 185.747368][T19696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.757440][T19696] ==================================================================