last executing test programs: 1m24.544540015s ago: executing program 4 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m24.43527458s ago: executing program 4 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x14, 0x31, 0x3d}, 0x14}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1m24.387991122s ago: executing program 4 (id=11): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @rand_addr=' \x01\x00', 0x8, 0x40, 0x9}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x0, 0x1000000}}) 1m24.356478553s ago: executing program 4 (id=12): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x196, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$netlink(0x10, 0x3, 0x8) chroot(&(0x7f0000000000)='./file0/../file0\x00') statx(0xffffffffffffffff, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x100, 0x800, &(0x7f0000000440)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1m24.323292464s ago: executing program 4 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) listen(0xffffffffffffffff, 0x3) io_uring_setup(0x3538, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1m21.679104358s ago: executing program 4 (id=37): r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.678914658s ago: executing program 32 (id=37): r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.222410448s ago: executing program 0 (id=268): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 1m1.15853312s ago: executing program 0 (id=270): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x2}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x40, 0x7, 0x48, 0x9}, {0x28, 0x4, 0x8d, 0xfffff024}, {0x6, 0x27, 0x3, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(0x0, r2) r3 = syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0x10, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x5, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0x80000000, 0xc74, 0x7, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x2, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x4, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x2, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x3, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0x8, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0x1, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x5, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x8000004, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x8, 0x7, 0x80, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x2, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x8000, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa994, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x9, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x7fd3, 0x1, 0x0, 0x10, 0x0, 0x3, 0x7, 0xc0000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x1b57, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x7, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0x3, 0x6, 0x1000, 0x3, 0x4000027, 0x382d, 0x459, 0xcad, 0x7, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffff7, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x100, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x6, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0xffffffff, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x19, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x7, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x5, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x5, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x0, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x0, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0x5cad, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x2, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xba, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x1000, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x1000003, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0x5, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x10001, 0x2, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xf, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x3cfd8645, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10840010}, 0xc, &(0x7f00000005c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="000227bd7000fddbdf257b0000001400020158dfeca2f43c0259b98b28813f1b579d0a000600ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x20044040}, 0x40040) 1m1.068867074s ago: executing program 0 (id=272): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000001180)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5439, 0x1201, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x2, @perf_bp={&(0x7f0000001200), 0x5}, 0x0, 0x10000, 0x4, 0x5, 0x7, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES32=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="cee54f270c442c08ac6660282af288a498"], 0x20000600}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000000001000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8dfffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1m0.978291449s ago: executing program 0 (id=273): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000880)=""/200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xac, 0x453, 0x4, 0x70bd27, 0x25dfdbfe, "ba256a593a2d1b527d225fd27b532663e745e92adc269b4acd552b07396f053c0ec68e70817048695b414d85b1daeb6ce32ffd7f175e4012557c80b142c921ed3a35c3f7eedef8b06df1b125dba6c6a39793972f02d531b273995e667542868f0bc356f650163e9ac8d8aea51fb5e454d054913f85b5a448224741fc192d21b474f37e0409963b91b4dc790957e85381c31cd7d6338166d9efb0e3", [""]}, 0xac}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$UHID_CREATE(r1, &(0x7f0000000740)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/7, 0x7, 0x1, 0x3, 0x7, 0x3, 0xd2}}, 0x120) 1m0.01224049s ago: executing program 0 (id=281): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 59.888438525s ago: executing program 0 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xffbf) 59.839758328s ago: executing program 33 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xffbf) 16.558890148s ago: executing program 3 (id=789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x0, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x1000}, 0x18) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 16.05404018s ago: executing program 3 (id=793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15.986533053s ago: executing program 3 (id=796): r0 = io_uring_setup(0x1a2a, &(0x7f0000000000)={0x0, 0xf8be, 0x1, 0x3, 0x3fff7fd}) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8024) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) close(0x3) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.435083767s ago: executing program 3 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(0x0) 15.366775819s ago: executing program 3 (id=813): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x13) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_open(0x0, 0x40, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x4f00, 0x100, 0x551}}) 15.154362319s ago: executing program 3 (id=818): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r3 = dup3(r1, r2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4040010, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 15.154219169s ago: executing program 34 (id=818): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r3 = dup3(r1, r2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4040010, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 3.760373238s ago: executing program 2 (id=956): bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) flock(0xffffffffffffffff, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 3.419052953s ago: executing program 2 (id=962): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 3.192991683s ago: executing program 2 (id=968): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x8041}, 0x2004c8c0) 3.158599104s ago: executing program 7 (id=970): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3.074739268s ago: executing program 7 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 2.195713726s ago: executing program 7 (id=972): r0 = socket(0x11, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x2) flock(r3, 0x1) flock(r4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.194387996s ago: executing program 1 (id=973): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.143355188s ago: executing program 1 (id=974): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 2.107154599s ago: executing program 1 (id=975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="c5ab1800"/17], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x5d49, 0xe6eb, 0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2.018107604s ago: executing program 7 (id=976): unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$eJzs3M1vFGUYAPBnZtsiX7YifvChVtHY+NHSgsrBgxpNPGhiogc81rYQZKGG1kQI0WoMHg2Jd+PRxL/Ak16MejLxqndDQgwX0NOa2Z1pt8t2ocu2g+zvlwy873z0fZ6deXffmbfbAPrWaPZPErEjIv6IiOFGdfUOo43/rl05P/PPlfMzSdRqb/+d1Pe7euX8TLFrcdz2vDKWRqSfJ7GvTbsLZ8+dnK5W587k9YnFUx9MLJw99+yJU9PH547PnZ46cuTwockXnp96rid5ZjFd3fvx/P49r7978c2Zoxff++W7pMi/JY9VlrpucrTTxidqta5/8O1oZ1M5GSgxENalEhHZ6Rqs9//hqMTKyRuO1z4rNThgQ9Vqtdr2tTcv1YA7WBJlRwCUo/igz+5/i2WThh63hcsvN26Asryv5Utjy0Ck+T6DLfe3vTQaEUeX/v06W6LTcwgAgB75IRv/PNNu/JfG/U373Z3PDY1ExD0RsSsi7o2I3RFxX0R93wci4sF1tt86SXL9+Ce91FViNykb/72Yz22tHv8Vo78YqeS1nfX8B5NjJ6pzB/PXZCwGt2T1yQ5t/Pjq71+uta15/JctWfvFWDCP49LAltXHzE4vTt9Kzs0ufxqxd6Bd/snyTEASEXsiYm+XbZx46tv9a227cf4d9GCeqfZNxJON878ULfkXks7zkxN3RXXu4ERxVVzv198uvLVW+7eUfw9k539b2+t/Of+RpHm+dmH9bVz484s172m6vf6Hknfq5aF83UfTi4tnJiOGkjcaQTevn1o5tqgX+2f5jx1o3/93xcorsS8isov4oYh4OCIeyWN/NCIei4gDHfL/+ZXH3+8+/42V5T+7rvO/UhiK1jXtC5WTP32/qtGR9eSfnf/D9dJYvuZm3v9uJq7urmYAAAD4/0kjYkck6fhyOU3Hxxu/L787tqXV+YXFp4/Nf3h6tvEdgZEYTIsnXcNNz0Mn89v6oj7VUj+UPzf+qrK1Xh+fma/Olp089Lnta/T/zF+VsqMDNpzva0H/0v+hf+n/0L/0f+hfbfr/1jLiADZfu8//T0qIA9h8Lf1/edrvpRJiATaX+3/oX/o/9C/9H/rSwta48ZfkFTagUPx9hXLDqES3h0da/mt4xxQG84vhdonn5HS1xDclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHvovAAD//+qG390=") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 1.950868536s ago: executing program 6 (id=977): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x1024a2, 0x3, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.845087471s ago: executing program 6 (id=978): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x20000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0], 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0xfe33) 1.844823501s ago: executing program 1 (id=979): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 1.743722855s ago: executing program 5 (id=980): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x50, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x500, &(0x7f0000000c40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') mmap(&(0x7f0000052000/0x2000)=nil, 0x2000, 0x2, 0x40010, r0, 0x6b650000) 1.733504476s ago: executing program 6 (id=981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012401600ffff16000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7aa}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xffff, 0x0, &(0x7f0000000240)="d2dcaafb519c2ec18000000020476203a3d9f35c0882c27525231d3c48ab7922b28a3950339533a21be75c3fa49730778c6b3989af3c365814c577f22106b9f6084bec4a564daad788349ad2527c56d590281c3beb459491fb51a9f0047fb451e6076730459b179c56cb2488385c62734a0935e13a3b1dd90a5cf84fe5cbaa2ac9649559f6a8c067bc5dd1e67286381ec453facca4f2369c5b294105d745", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000040)='GPL\x00'}, 0x94) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10090) socket(0xb, 0x800, 0x8) 1.720623276s ago: executing program 1 (id=984): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000"], 0xa0}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/image_size', 0xa3002, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c0007800800124000f4ff040500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.718415587s ago: executing program 5 (id=985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1.661322949s ago: executing program 6 (id=986): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 1.617759511s ago: executing program 5 (id=988): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffbfffffc}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x40) 329.853186ms ago: executing program 2 (id=990): r0 = socket(0x11, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x2) flock(r3, 0x1) flock(r4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 329.645516ms ago: executing program 7 (id=991): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000100000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) 329.460436ms ago: executing program 5 (id=992): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 327.701826ms ago: executing program 6 (id=1000): bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x243c, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 327.142236ms ago: executing program 1 (id=993): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) 279.185458ms ago: executing program 5 (id=994): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) chdir(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x2, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 231.09895ms ago: executing program 6 (id=995): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000400)=ANY=[@ANYBLOB='sys_immutable,dots,tz=UTC,dots,errors=continue,dots,nodots,dots,dots,dots,allow_utime=00000000000000000000011,gid=', @ANYRESHEX=0x0, @ANYBLOB="000000000000f9ffffff000000"], 0x1, 0x250, &(0x7f00000005c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, r0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) 128.475095ms ago: executing program 7 (id=996): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) 112.826315ms ago: executing program 2 (id=997): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668aee29b7537078dba77963d15c085d7343c1012135d361ac15c082b7ac8db87cc10fe3ffc374c8be18fc53437100a11dddb9981072ec036d513870a5bbf62ce9e39f790f61ef997af390b9f5fc8a699e001c59077c459eb40ee80a3ffeb35737da668ef974592faf129325cd9ad0dc5663950a329804c9f5d261f71165b05dac212cc2afc40f980ddef8773f1045e75de4ec606aef87052e9ac784bb0f5a43f9cac5e44ae1a6dd575ce17a4749dc7cd4d7f76a40676e792e5b31a25703b1f35b48a89ed84582ef8f4ac046695f402c25da1fa6bc732a7016edf093b4c31193130b3bc143702e2b1d23743ca797b24495dc4979b81413701c0597dcd5e3bcc9c2050c18cfe03814d358e0f795e990dc44d2c1b9890514bd5ea94a3f3a1e25a8cdc67133e9176d76dc54c31274cff0101d8a42c103bad1b8b57362446f2c2ed8a69daf3d7306ef3fa2015e4ee1ef3392120b82671d73b07f3082ea69ffa0ebc7b53c78862a3e1ece518c1f0abbe4053b4dfafe815c1fe4b0d079446e80d13af972e00644a0188605d7309812e24cd1158677f94a16a5eb0c5d48b60329fc522026efa596ac913540f2a9b0345f279329bfba29a7dfc8894e6a08eeee3dd974c3de9e0602cfd1e3e584b10dd26cd13f7fb432e72ea85fd1d3a872061bc967d7a67a3a7f09f34cc825db5d9ef3ce0ff9873f8eff342eb30fa970007e2f591f07dc9bc5141a9679a2f7c69aa50894353a7830a0f7cf766aff6e81d7c3b88d730946ce3f327716ef6fd270d5bf467aef288db903f740b6ac27b962a3c6462372e63f8da8505f05d17b364dd8c6b5d449accd01b4c6da297669f098bee986b95e389a2d003539ca9dec8c26b9f6bbb5f7fe6f0b764d99bc0dafcad4121ed6a749ac71fc5deeee54d0e8a2d9dccc87df818258d73c8816b78c1be3670fb14dded879caf925e0f8abf63f55ffee02bbffb465f0303338bd12e22fe94fdaa3f033127ecaf41649232c38e83850fd3ebc890ea5db2763a8389ac49bd9b7f6b81f381d3eeb90d0f596e2b7f7dfa2a0e9453c1f5f359b56aae9e97a51f6c092d25a031843e351f5733a25c5905706618ab569359bdca4932f6471f4f2d152f84cfc0c563885b0d93fd015095a8eb9422e3d17ddaf3f20dde5eeea415f76c0617964198c824b98f4d53ab0d4d734dcd6d07dddd5b77c1bd71208632941973bd5b5aca981137ec21dcd86ba518b3d4979b68f704a2a7d7cfeb9be3edf4b4b3560e930d9dba0bc358cba36a129748c1fa73483a69759ba0c4f2ee2a936899e163c213bb3fe5a28e68669fb2da6bbcdf4c55e933d127a8bc68b8d0e6c6c757fe8ea47f26ceb7c1b3ca8b962eb31a081756ed56fe4385dccc5e2a7a53300e9c8a1a55bcf8db3f828cb3db8485110da631a50199a5c1932b5538a2b1c3cddb4451868a413418e3f761530fd477b2ebb449070c73171964203ad7bad4302af13fa6fe55fb88ede096a7aba95ef3665da778250daa9dd4bd5ecb8a807d83fe6dcf2f0cf5de7a4ef742979afd7d93bb2672ad45f6537640313b1ca8838f3fdc08e57455af6398ce5b253312fe1a88206210831e0de59d1e3f9442fb9dd43f1b9c00d151d3234028990f8bcaf65c0ad9ea1bc20e4b7641ff26969b02ccd60d2d8d2d72fe5fd58068cd6d7525c9e24c4246cd776ecf1f57550bb6bddad5093618797547cde5c07e165bc979bfbb5479c58e89c29efa5fdfa5b4a87917a4275609afc849384458ca980ba5a2aa4d10c761bb3b3a57e3d3b41001cdf6", 0x541}], 0x1}}], 0x2, 0x20000010) 345.2µs ago: executing program 2 (id=998): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 0s ago: executing program 5 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4886) kernel console output (not intermixed with test programs): de=0x7ffc0000 [ 61.768530][ T29] audit: type=1326 audit(1763551713.161:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f850f86f749 code=0x7ffc0000 [ 61.901407][ T4286] tipc: Started in network mode [ 61.906490][ T4286] tipc: Node identity ac14140f, cluster identity 4711 [ 61.934219][ T4286] tipc: New replicast peer: 255.255.255.255 [ 61.940382][ T4286] tipc: Enabled bearer , priority 10 [ 61.998631][ T4288] loop7: detected capacity change from 0 to 16384 [ 62.391154][ T4010] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.408786][ T4010] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.436601][ T4010] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.461464][ T4010] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.553691][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.614899][ T4289] loop7: detected capacity change from 16384 to 0 [ 62.713340][ T4298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 62.723031][ T4297] loop2: detected capacity change from 0 to 2048 [ 62.765889][ T4302] tipc: Enabling of bearer rejected, failed to enable media [ 62.790202][ T4297] loop2: p1 < > p4 [ 62.809187][ T4297] loop2: p4 size 8388608 extends beyond EOD, truncated [ 62.857174][ T3002] loop2: p1 < > p4 [ 62.875045][ T3002] loop2: p4 size 8388608 extends beyond EOD, truncated [ 62.902508][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 62.926206][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 62.936066][ T3408] tipc: Node number set to 2886997007 [ 62.971510][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 62.982725][ T4284] udevd[4284]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 63.587185][ T4331] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.673812][ T4331] SELinux: failed to load policy [ 63.789409][ T4333] netlink: 'syz.5.257': attribute type 1 has an invalid length. [ 63.853408][ T4333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.876455][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.257'. [ 63.911790][ T4337] bond1 (unregistering): Released all slaves [ 64.257128][ T4370] loop1: detected capacity change from 0 to 4096 [ 64.293405][ T4370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.320771][ T4376] loop0: detected capacity change from 0 to 512 [ 64.348137][ T4376] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.273: inode has both inline data and extents flags [ 64.378300][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.387884][ T4376] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.273: couldn't read orphan inode 15 (err -117) [ 64.419192][ T4376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.474724][ T4381] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.488700][ T4379] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 64.516585][ T4381] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.565049][ T4384] loop0: detected capacity change from 512 to 64 [ 64.573832][ T4381] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.577992][ T4386] program syz.1.276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.585925][ T4376] bio_check_eod: 94 callbacks suppressed [ 64.585944][ T4376] syz.0.273: attempt to access beyond end of device [ 64.585944][ T4376] loop0: rw=14337, sector=90, nr_sectors = 2 limit=64 [ 64.611656][ T4376] Buffer I/O error on dev loop0, logical block 45, lost sync page write [ 64.612944][ T4387] EXT4-fs warning (device loop0): ext4_add_entry:2417: inode #2: lblock 0: comm syz.0.273: error -12 reading directory block [ 64.625489][ T4376] EXT4-fs error (device loop0): ext4_splice_branch:472: inode #18: block 45: comm syz.0.273: IO error syncing itable block [ 64.633752][ T4387] EXT4-fs error (device loop0): ext4_check_bdev_write_error:228: comm syz.0.273: Error while async write back metadata [ 64.647494][ T4384] syz.0.273: attempt to access beyond end of device [ 64.647494][ T4384] loop0: rw=2049, sector=426, nr_sectors = 2 limit=64 [ 64.671678][ T4384] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 213) [ 64.683011][ T4384] Buffer I/O error on device loop0, logical block 213 [ 64.690480][ T4376] syz.0.273: attempt to access beyond end of device [ 64.690480][ T4376] loop0: rw=2051, sector=360, nr_sectors = 2 limit=64 [ 64.711012][ T4376] EXT4-fs (loop0): discard request in group:0 block:179 count:1 failed with -5 [ 64.721392][ T4381] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.732886][ T4376] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: IO failure [ 64.751952][ T4376] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 180:freeing already freed block (bit 179); block bitmap corrupt. [ 64.766662][ T4376] EXT4-fs (loop0): pa ffff888106e0d0e0: logic 16, phys. 161, len 48 [ 64.774760][ T4376] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 45, pa_free 44 [ 64.790084][ T4376] syz.0.273: attempt to access beyond end of device [ 64.790084][ T4376] loop0: rw=14337, sector=90, nr_sectors = 2 limit=64 [ 64.803596][ T4376] Buffer I/O error on dev loop0, logical block 45, lost sync page write [ 64.813764][ T4376] EXT4-fs error (device loop0): ext4_free_data:978: inode #18: block 45: comm syz.0.273: IO error syncing itable block [ 64.826788][ T4376] EXT4-fs error (device loop0): ext4_check_bdev_write_error:228: comm syz.0.273: Error while async write back metadata [ 64.855061][ T4376] syz.0.273: attempt to access beyond end of device [ 64.855061][ T4376] loop0: rw=2049, sector=82, nr_sectors = 8 limit=64 [ 64.868313][ T4376] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 64.879540][ T4376] Buffer I/O error on device loop0, logical block 41 [ 64.886238][ T4376] Buffer I/O error on device loop0, logical block 42 [ 64.893084][ T4376] Buffer I/O error on device loop0, logical block 43 [ 64.899828][ T4376] Buffer I/O error on device loop0, logical block 44 [ 64.912546][ T4376] syz.0.273: attempt to access beyond end of device [ 64.912546][ T4376] loop0: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 64.925871][ T4376] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 64.937114][ T4376] Buffer I/O error on device loop0, logical block 49 [ 64.943811][ T4376] Buffer I/O error on device loop0, logical block 50 [ 64.950503][ T4376] Buffer I/O error on device loop0, logical block 51 [ 64.957201][ T4376] Buffer I/O error on device loop0, logical block 52 [ 64.964501][ T4376] syz.0.273: attempt to access beyond end of device [ 64.964501][ T4376] loop0: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 64.977867][ T4376] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 37) [ 64.989081][ T4376] Buffer I/O error on device loop0, logical block 37 [ 64.996667][ T4376] syz.0.273: attempt to access beyond end of device [ 64.996667][ T4376] loop0: rw=2049, sector=106, nr_sectors = 8 limit=64 [ 65.009964][ T4376] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 65.022078][ T4376] syz.0.273: attempt to access beyond end of device [ 65.022078][ T4376] loop0: rw=2049, sector=418, nr_sectors = 8 limit=64 [ 65.035375][ T4376] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 209) [ 65.047084][ T4376] syz.0.273: attempt to access beyond end of device [ 65.047084][ T4376] loop0: rw=2049, sector=170, nr_sectors = 8 limit=64 [ 65.060441][ T4376] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 85) [ 65.072144][ T4376] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 121) [ 65.083788][ T4390] vlan2: entered allmulticast mode [ 65.083831][ T4376] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 157) [ 65.139089][ T4022] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.153873][ T4022] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.186319][ T4395] loop3: detected capacity change from 0 to 512 [ 65.202095][ T4395] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 65.213681][ T4395] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 65.224141][ T4395] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.279: Corrupt directory, running e2fsck is recommended [ 65.245124][ T4022] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.254327][ T4395] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 65.278346][ T4395] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.279: corrupted in-inode xattr: invalid ea_ino [ 65.293853][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.303258][ T4395] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.279: couldn't read orphan inode 15 (err -117) [ 65.307639][ T4022] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.324453][ T4395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.575179][ T4412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.287'. [ 65.598861][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.664162][ T4424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.717809][ T4424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.798420][ T4424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.826401][ T4409] chnl_net:caif_netlink_parms(): no params data found [ 65.881837][ T4409] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.889076][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.896357][ T4409] bridge_slave_0: entered allmulticast mode [ 65.902915][ T4409] bridge_slave_0: entered promiscuous mode [ 65.912797][ T4424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.924959][ T4409] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.932114][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.939656][ T4409] bridge_slave_1: entered allmulticast mode [ 65.946434][ T4409] bridge_slave_1: entered promiscuous mode [ 65.972529][ T4409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.983055][ T4409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.007240][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.021973][ T4409] team0: Port device team_slave_0 added [ 66.028213][ T4010] bridge_slave_1: left allmulticast mode [ 66.033888][ T4010] bridge_slave_1: left promiscuous mode [ 66.039697][ T4010] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.047933][ T4010] bridge_slave_0: left allmulticast mode [ 66.053684][ T4010] bridge_slave_0: left promiscuous mode [ 66.059444][ T4010] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.118903][ T4010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.128428][ T4010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.137583][ T4010] bond0 (unregistering): Released all slaves [ 66.148659][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.158049][ T4409] team0: Port device team_slave_1 added [ 66.186709][ T4010] tipc: Disabling bearer [ 66.191777][ T4010] tipc: Left network mode [ 66.196591][ T4409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.203561][ T4409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.230276][ T4409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.242149][ T4409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.249193][ T4409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.275195][ T4409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.289655][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.320050][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.336859][ T4010] hsr_slave_0: left promiscuous mode [ 66.342684][ T4010] hsr_slave_1: left promiscuous mode [ 66.348725][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.370010][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.390015][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 66.390031][ T29] audit: type=1326 audit(1763551718.511:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501b12f749 code=0x7ffc0000 [ 66.425993][ T4444] loop5: detected capacity change from 0 to 512 [ 66.437324][ T29] audit: type=1326 audit(1763551718.541:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f501b12f749 code=0x7ffc0000 [ 66.460590][ T29] audit: type=1326 audit(1763551718.541:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501b12f749 code=0x7ffc0000 [ 66.484025][ T29] audit: type=1326 audit(1763551718.541:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501b12f749 code=0x7ffc0000 [ 66.507384][ T29] audit: type=1326 audit(1763551718.541:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f501b12f749 code=0x7ffc0000 [ 66.530876][ T29] audit: type=1326 audit(1763551718.541:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501b12f749 code=0x7ffc0000 [ 66.554257][ T29] audit: type=1326 audit(1763551718.541:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f501b12f749 code=0x7ffc0000 [ 66.577641][ T29] audit: type=1326 audit(1763551718.541:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501b12f749 code=0x7ffc0000 [ 66.601173][ T29] audit: type=1326 audit(1763551718.541:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501b12f749 code=0x7ffc0000 [ 66.624658][ T29] audit: type=1326 audit(1763551718.541:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f501b12f749 code=0x7ffc0000 [ 66.626348][ T4444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.661939][ T4010] team0 (unregistering): Port device team_slave_1 removed [ 66.671721][ T4444] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.682683][ T4010] team0 (unregistering): Port device team_slave_0 removed [ 66.767143][ T4409] hsr_slave_0: entered promiscuous mode [ 66.776941][ T4409] hsr_slave_1: entered promiscuous mode [ 66.820241][ T3595] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.979160][ T4457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4457 comm=syz.5.298 [ 67.478888][ T4409] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 67.515553][ T4409] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 67.530675][ T4465] netlink: 96 bytes leftover after parsing attributes in process `syz.2.300'. [ 67.547425][ T4409] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 67.568062][ T4409] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 67.601957][ T4467] Driver unsupported XDP return value 0 on prog (id 248) dev N/A, expect packet loss! [ 67.711386][ T4479] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 67.756943][ T4409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.769879][ T4409] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.781066][ T4020] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.788197][ T4020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.802038][ T4020] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.809187][ T4020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.864590][ T4486] netlink: 'syz.5.307': attribute type 39 has an invalid length. [ 67.897662][ T4492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.308'. [ 67.942087][ T4490] loop3: detected capacity change from 0 to 512 [ 67.966883][ T4490] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 67.978540][ T4490] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 67.984272][ T4492] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4492 comm=syz.1.308 [ 67.988713][ T4490] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.309: Corrupt directory, running e2fsck is recommended [ 68.018329][ T4490] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 68.026644][ T4492] netlink: 'syz.1.308': attribute type 1 has an invalid length. [ 68.027766][ T4490] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.309: corrupted in-inode xattr: invalid ea_ino [ 68.051666][ T4500] loop2: detected capacity change from 0 to 128 [ 68.069176][ T4490] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.309: couldn't read orphan inode 15 (err -117) [ 68.080811][ T4409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.094342][ T4490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.121952][ T4503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 68.201615][ T4510] loop1: detected capacity change from 0 to 512 [ 68.232700][ T4510] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.313: iget: bad i_size value: 38620345925642 [ 68.257209][ T4510] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.313: couldn't read orphan inode 15 (err -117) [ 68.269966][ T4510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.327560][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.384598][ T4409] veth0_vlan: entered promiscuous mode [ 68.391798][ T4525] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.313: bg 0: block 5: invalid block bitmap [ 68.404545][ T4525] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 112 with error 28 [ 68.417120][ T4525] EXT4-fs (loop1): This should not happen!! Data will be lost [ 68.417120][ T4525] [ 68.419171][ T4409] veth1_vlan: entered promiscuous mode [ 68.426850][ T4525] EXT4-fs (loop1): Total free blocks count 0 [ 68.438387][ T4525] EXT4-fs (loop1): Free/Dirty block details [ 68.444354][ T4525] EXT4-fs (loop1): free_blocks=0 [ 68.449339][ T4525] EXT4-fs (loop1): dirty_blocks=112 [ 68.454681][ T4525] EXT4-fs (loop1): Block reservation details [ 68.460765][ T4525] EXT4-fs (loop1): i_reserved_data_blocks=112 [ 68.473096][ T4527] loop3: detected capacity change from 0 to 256 [ 68.481268][ T4409] veth0_macvtap: entered promiscuous mode [ 68.488907][ T4409] veth1_macvtap: entered promiscuous mode [ 68.492009][ T4524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.317'. [ 68.500446][ T4409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.522379][ T4409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.542990][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.548016][ T3696] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.582654][ T3696] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.605277][ T3696] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.621466][ T3696] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.633395][ T4533] loop1: detected capacity change from 0 to 2048 [ 68.656158][ T4533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.675666][ T4533] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.735094][ T4540] loop3: detected capacity change from 0 to 1024 [ 68.750595][ T4540] ext4: Unknown parameter 'uid<00000000000000000000' [ 68.838114][ T4542] loop6: detected capacity change from 0 to 2048 [ 68.870809][ T4542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.891312][ T4542] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.071927][ T3696] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:42: bg 0: block 345: padding at end of block bitmap is not set [ 69.073022][ T4409] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.102954][ T3696] EXT4-fs (loop1): Remounting filesystem read-only [ 69.109687][ T53] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 69.181863][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.109365][ T4572] loop2: detected capacity change from 0 to 512 [ 70.167835][ T4574] loop3: detected capacity change from 0 to 512 [ 70.201228][ T4574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.247050][ T4581] loop1: detected capacity change from 0 to 128 [ 70.256137][ T4574] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.353038][ T4586] bio_check_eod: 2 callbacks suppressed [ 70.353053][ T4586] syz.1.334: attempt to access beyond end of device [ 70.353053][ T4586] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 70.394192][ T4586] syz.1.334: attempt to access beyond end of device [ 70.394192][ T4586] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 70.409979][ T4586] syz.1.334: attempt to access beyond end of device [ 70.409979][ T4586] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 70.424822][ T4586] syz.1.334: attempt to access beyond end of device [ 70.424822][ T4586] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 70.431327][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.438380][ T4586] syz.1.334: attempt to access beyond end of device [ 70.438380][ T4586] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 70.461618][ T4586] syz.1.334: attempt to access beyond end of device [ 70.461618][ T4586] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 70.475392][ T4586] syz.1.334: attempt to access beyond end of device [ 70.475392][ T4586] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 70.488887][ T4586] syz.1.334: attempt to access beyond end of device [ 70.488887][ T4586] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 70.502855][ T4586] syz.1.334: attempt to access beyond end of device [ 70.502855][ T4586] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 70.543934][ T4586] syz.1.334: attempt to access beyond end of device [ 70.543934][ T4586] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 70.574529][ T4596] loop6: detected capacity change from 0 to 512 [ 70.587481][ T4596] EXT4-fs: Ignoring removed nobh option [ 70.600536][ T4596] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.632684][ T4596] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.340: corrupted inode contents [ 70.673189][ T4596] EXT4-fs (loop6): Remounting filesystem read-only [ 70.684434][ T4603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4603 comm=syz.1.343 [ 70.699039][ T4596] EXT4-fs (loop6): 1 truncate cleaned up [ 70.705623][ T4596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.724429][ T4603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 70.734987][ T4596] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.752553][ T4596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.806861][ T4606] loop2: detected capacity change from 0 to 512 [ 70.818506][ T4606] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.836836][ T4606] EXT4-fs (loop2): 1 truncate cleaned up [ 70.843563][ T4611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.346'. [ 70.853443][ T4606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.879546][ T4613] loop3: detected capacity change from 0 to 512 [ 70.902144][ T4606] syzkaller0: entered promiscuous mode [ 70.907735][ T4606] syzkaller0: entered allmulticast mode [ 70.934583][ T4613] ------------[ cut here ]------------ [ 70.940379][ T4613] EA inode 11 i_nlink=2 [ 70.940660][ T4613] WARNING: CPU: 1 PID: 4613 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 70.955280][ T4613] Modules linked in: [ 70.959208][ T4613] CPU: 1 UID: 0 PID: 4613 Comm: syz.3.347 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.968974][ T4613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.979204][ T4613] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 70.985882][ T4613] Code: 90 49 8d 7e 40 e8 06 f8 b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f3 b8 ff 41 8b 56 48 48 c7 c7 81 d4 55 86 4c 89 ee e8 f7 f3 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 78 f2 b5 03 0f 1f 84 00 00 00 00 00 [ 71.005747][ T4613] RSP: 0018:ffffc9000178f5a0 EFLAGS: 00010246 [ 71.011900][ T4613] RAX: 00615ad2990fee00 RBX: ffff888106e32d18 RCX: 0000000000080000 [ 71.019988][ T4613] RDX: ffffc900047c2000 RSI: 000000000000460e RDI: 000000000000460f [ 71.028037][ T4613] RBP: 0000000000000002 R08: 0001c9000178f427 R09: 0000000000000000 [ 71.036290][ T4613] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888106e32cc8 [ 71.044308][ T4613] R13: 000000000000000b R14: ffff888106e32c80 R15: 0000000000000001 [ 71.052419][ T4613] FS: 00007eff01bff6c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 71.061489][ T4613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.068501][ T4613] CR2: 00007f30c7bf2000 CR3: 0000000141184000 CR4: 00000000003506f0 [ 71.076667][ T4613] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 71.084716][ T4613] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 71.092740][ T4613] Call Trace: [ 71.096360][ T4613] [ 71.099369][ T4613] ext4_xattr_set_entry+0x77f/0x1020 [ 71.104854][ T4613] ext4_xattr_ibody_set+0x184/0x3c0 [ 71.110146][ T4613] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 71.116204][ T4613] __ext4_expand_extra_isize+0x246/0x280 [ 71.121872][ T4613] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 71.127432][ T4613] ext4_evict_inode+0x80e/0xd90 [ 71.132568][ T4613] ? __pfx_ext4_evict_inode+0x10/0x10 [ 71.138002][ T4613] evict+0x2e3/0x550 [ 71.142001][ T4613] ? __dquot_initialize+0x146/0x7c0 [ 71.147275][ T4613] iput+0x4ed/0x650 [ 71.151127][ T4613] ext4_process_orphan+0x1a9/0x1c0 [ 71.156352][ T4613] ext4_orphan_cleanup+0x6a8/0xa00 [ 71.161534][ T4613] ext4_fill_super+0x3483/0x3810 [ 71.166678][ T4613] ? snprintf+0x86/0xb0 [ 71.170932][ T4613] ? set_blocksize+0x1a8/0x310 [ 71.175805][ T4613] ? sb_set_blocksize+0xe3/0x100 [ 71.180772][ T4613] ? setup_bdev_super+0x30e/0x370 [ 71.185897][ T4613] ? __pfx_ext4_fill_super+0x10/0x10 [ 71.191209][ T4613] get_tree_bdev_flags+0x291/0x300 [ 71.196455][ T4613] ? __pfx_ext4_fill_super+0x10/0x10 [ 71.201818][ T4613] get_tree_bdev+0x1f/0x30 [ 71.206420][ T4613] ext4_get_tree+0x1c/0x30 [ 71.210865][ T4613] vfs_get_tree+0x57/0x1d0 [ 71.213536][ T4621] loop1: detected capacity change from 0 to 512 [ 71.215338][ T4613] do_new_mount+0x24d/0x660 [ 71.215375][ T4613] path_mount+0x4a5/0xb70 [ 71.230677][ T4613] ? user_path_at+0x109/0x130 [ 71.235427][ T4613] __se_sys_mount+0x28c/0x2e0 [ 71.240228][ T4613] ? do_mkdirat+0x3ac/0x3f0 [ 71.244812][ T4613] __x64_sys_mount+0x67/0x80 [ 71.245300][ T4621] journal_path: Non-blockdev passed as './bus' [ 71.249428][ T4613] x64_sys_call+0x2b51/0x3000 [ 71.255829][ T4621] EXT4-fs: error: could not find journal device path [ 71.260493][ T4613] do_syscall_64+0xd2/0x200 [ 71.271723][ T4613] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.277890][ T4613] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 71.283740][ T4613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.289710][ T4613] RIP: 0033:0x7eff031a0eea [ 71.294164][ T4613] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.313965][ T4613] RSP: 002b:00007eff01bfee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.322451][ T4613] RAX: ffffffffffffffda RBX: 00007eff01bfeef0 RCX: 00007eff031a0eea [ 71.330491][ T4613] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007eff01bfeeb0 [ 71.338526][ T4613] RBP: 0000200000000180 R08: 00007eff01bfeef0 R09: 0000000000800718 [ 71.346834][ T4613] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 71.354850][ T4613] R13: 00007eff01bfeeb0 R14: 000000000000046f R15: 0000200000000200 [ 71.362850][ T4613] [ 71.365915][ T4613] ---[ end trace 0000000000000000 ]--- [ 71.374521][ T4613] EXT4-fs (loop3): 1 orphan inode deleted [ 71.384940][ T4613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.408470][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.471062][ T4629] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.488056][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.506526][ T4629] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.538755][ T4627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 71.560592][ T4629] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.586069][ T4640] capability: warning: `syz.2.355' uses deprecated v2 capabilities in a way that may be insecure [ 71.641856][ T4643] loop3: detected capacity change from 0 to 128 [ 71.699399][ T4629] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.763833][ T4022] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.775231][ T4010] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.791920][ T4010] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.821375][ T4010] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.873083][ T4648] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 71.883380][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 71.883423][ T29] audit: type=1400 audit(1763551724.011:1406): avc: denied { relabelto } for pid=4647 comm="syz.3.358" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 71.917308][ T29] audit: type=1400 audit(1763551724.011:1407): avc: denied { associate } for pid=4647 comm="syz.3.358" name="cgroup.procs" dev="cgroup" ino=249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sendmail_exec_t:s0" [ 71.925874][ T4648] netlink: 'syz.3.358': attribute type 4 has an invalid length. [ 72.037559][ T29] audit: type=1400 audit(1763551724.161:1408): avc: denied { read } for pid=4659 comm="syz.2.363" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.061263][ T29] audit: type=1400 audit(1763551724.161:1409): avc: denied { open } for pid=4659 comm="syz.2.363" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.086342][ T4658] syzkaller0: entered promiscuous mode [ 72.091934][ T4658] syzkaller0: entered allmulticast mode [ 72.107973][ T4663] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 72.437506][ T29] audit: type=1326 audit(1763551724.561:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 72.461111][ T29] audit: type=1326 audit(1763551724.561:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 72.551331][ T29] audit: type=1326 audit(1763551724.611:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 72.574763][ T29] audit: type=1326 audit(1763551724.611:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 72.598276][ T29] audit: type=1326 audit(1763551724.611:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 72.621783][ T29] audit: type=1326 audit(1763551724.621:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 72.985953][ T4719] loop2: detected capacity change from 0 to 512 [ 72.999561][ T4721] loop3: detected capacity change from 0 to 128 [ 73.022286][ T4719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.074763][ T4719] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.074802][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 73.198003][ T4736] netlink: 'syz.1.389': attribute type 4 has an invalid length. [ 73.243021][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.252775][ T4738] loop5: detected capacity change from 0 to 512 [ 73.273945][ T4738] EXT4-fs: Ignoring removed i_version option [ 73.280103][ T4738] EXT4-fs: Ignoring removed bh option [ 73.316740][ T4738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.329491][ T4738] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.476144][ T3595] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.505359][ T4749] xt_hashlimit: size too large, truncated to 1048576 [ 73.609258][ T4751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.695313][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.397'. [ 73.705741][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.6.397'. [ 73.767749][ T4764] loop5: detected capacity change from 0 to 128 [ 73.774854][ T4764] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.803747][ T4764] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.841747][ T4771] loop6: detected capacity change from 0 to 512 [ 73.905272][ T4771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.946908][ T4771] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.116293][ T4785] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.228736][ T4409] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.526894][ T4020] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.596362][ T4811] tipc: Started in network mode [ 74.601295][ T4811] tipc: Node identity be81d9f31691, cluster identity 4711 [ 74.608585][ T4811] tipc: Enabled bearer , priority 0 [ 74.638452][ T4810] tipc: Resetting bearer [ 74.669440][ T4810] tipc: Disabling bearer [ 74.789813][ T4821] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 74.930723][ T4840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.426'. [ 75.027784][ T4851] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 75.230461][ T4869] loop6: detected capacity change from 0 to 512 [ 75.244986][ T4869] EXT4-fs: Ignoring removed i_version option [ 75.251133][ T4869] EXT4-fs: Ignoring removed bh option [ 75.322001][ T4875] loop3: detected capacity change from 0 to 512 [ 75.329678][ T4875] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.408968][ T4875] EXT4-fs (loop3): orphan cleanup on readonly fs [ 75.416627][ T4875] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.432: bg 0: block 248: padding at end of block bitmap is not set [ 75.431294][ T4875] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.432: Failed to acquire dquot type 1 [ 75.443564][ T4875] EXT4-fs (loop3): 1 truncate cleaned up [ 75.472086][ T4869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.502103][ T4849] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 75.855677][ T4869] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.030525][ T4908] syzkaller0: entered promiscuous mode [ 76.036136][ T4908] syzkaller0: entered allmulticast mode [ 76.211284][ T4875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.262900][ T4923] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 76.549300][ T4409] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.710488][ T4930] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.820987][ T4930] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.976014][ T4934] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4934 comm=syz.2.440 [ 77.064705][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 77.078294][ T4930] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.176926][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.229662][ T4925] Set syz1 is full, maxelem 65536 reached [ 77.247958][ T4942] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.261599][ T4930] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.286220][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 77.286238][ T29] audit: type=1400 audit(1763551729.411:1670): avc: denied { connect } for pid=4945 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.287764][ T4942] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.348493][ T4949] loop6: detected capacity change from 0 to 512 [ 77.356749][ T4949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.367250][ T4949] EXT4-fs (loop6): orphan cleanup on readonly fs [ 77.374926][ T4949] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.452: bg 0: block 248: padding at end of block bitmap is not set [ 77.389752][ T4949] Quota error (device loop6): write_blk: dquota write failed [ 77.397208][ T4949] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 77.407349][ T4949] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.452: Failed to acquire dquot type 1 [ 77.420342][ T4949] EXT4-fs (loop6): 1 truncate cleaned up [ 77.426976][ T4949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.480173][ T3675] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.537612][ T4942] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.559376][ T4952] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 77.570422][ T3675] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.617915][ T4942] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.679232][ T3675] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.699883][ T29] audit: type=1326 audit(1763551729.821:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0319f749 code=0x7ffc0000 [ 77.755549][ T3675] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.854138][ T3675] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.908994][ T4959] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 77.948768][ T29] audit: type=1326 audit(1763551729.841:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0319f749 code=0x7ffc0000 [ 77.972377][ T29] audit: type=1326 audit(1763551729.851:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7eff0319f749 code=0x7ffc0000 [ 77.995906][ T29] audit: type=1326 audit(1763551729.851:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0319f749 code=0x7ffc0000 [ 78.019270][ T29] audit: type=1326 audit(1763551729.851:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0319f749 code=0x7ffc0000 [ 78.042750][ T29] audit: type=1326 audit(1763551729.851:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0319f749 code=0x7ffc0000 [ 78.066263][ T29] audit: type=1326 audit(1763551729.851:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0319f749 code=0x7ffc0000 [ 78.276024][ T3675] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.284284][ T3675] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.297381][ T4963] lo speed is unknown, defaulting to 1000 [ 78.344686][ T4963] lo speed is unknown, defaulting to 1000 [ 78.353433][ T4959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.448'. [ 78.362634][ T4963] lo speed is unknown, defaulting to 1000 [ 78.375658][ T3675] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.392950][ T4959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.405868][ T4963] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 78.438914][ T4970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.456797][ T4970] bond1: (slave geneve2): making interface the new active one [ 78.465280][ T4970] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 78.474224][ T4963] lo speed is unknown, defaulting to 1000 [ 78.492258][ T3675] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 78.501436][ T3675] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 78.515167][ T4963] lo speed is unknown, defaulting to 1000 [ 78.528983][ T4963] lo speed is unknown, defaulting to 1000 [ 78.538686][ T3675] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 78.548268][ T4963] lo speed is unknown, defaulting to 1000 [ 78.554176][ T3675] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 78.564044][ T4963] lo speed is unknown, defaulting to 1000 [ 78.673192][ T4977] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4977 comm=syz.3.454 [ 78.745151][ T4983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 78.841835][ T4984] loop5: detected capacity change from 0 to 1024 [ 78.886745][ T4986] loop3: detected capacity change from 0 to 512 [ 78.896495][ T4984] EXT4-fs: Ignoring removed orlov option [ 78.927432][ T4986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.945299][ T4984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.963553][ T4986] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.019659][ T4986] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.039145][ T4409] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.083293][ T3595] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.094027][ T4986] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.095914][ T4992] loop6: detected capacity change from 0 to 2048 [ 79.126739][ T4992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 79.146491][ T4986] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.179054][ T5003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.460'. [ 79.197289][ T4986] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.213529][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 79.272457][ T5004] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.279990][ T3675] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.288254][ T5004] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 984 with error 28 [ 79.307921][ T5004] EXT4-fs (loop6): This should not happen!! Data will be lost [ 79.307921][ T5004] [ 79.317209][ T5008] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 79.317661][ T5004] EXT4-fs (loop6): Total free blocks count 0 [ 79.332336][ T5004] EXT4-fs (loop6): Free/Dirty block details [ 79.338355][ T5004] EXT4-fs (loop6): free_blocks=2415919104 [ 79.344088][ T5004] EXT4-fs (loop6): dirty_blocks=992 [ 79.349461][ T5004] EXT4-fs (loop6): Block reservation details [ 79.355525][ T5004] EXT4-fs (loop6): i_reserved_data_blocks=62 [ 79.383120][ T4010] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.391664][ T5002] lo speed is unknown, defaulting to 1000 [ 79.407496][ T4010] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.426545][ T4010] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.444841][ T5012] netlink: 'syz.1.462': attribute type 10 has an invalid length. [ 79.498197][ T5014] netlink: 'syz.1.462': attribute type 10 has an invalid length. [ 79.512485][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.518603][ T5012] team0: Port device dummy0 added [ 79.527539][ T3679] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 79.537141][ T5014] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 79.579091][ T5014] team0: Failed to send options change via netlink (err -105) [ 79.599208][ T5014] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 79.608375][ T5014] team0: Port device dummy0 removed [ 79.616106][ T5014] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 79.627761][ T5023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 79.717721][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 79.742851][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.750476][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.758179][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.765605][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.783804][ T5018] lo speed is unknown, defaulting to 1000 [ 79.855754][ T5035] netlink: 'syz.5.481': attribute type 10 has an invalid length. [ 79.881964][ T5035] team0: Port device dummy0 added [ 79.908745][ T5035] netlink: 'syz.5.481': attribute type 10 has an invalid length. [ 79.929564][ T5039] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.942248][ T5035] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 79.969684][ T5035] team0: Failed to send options change via netlink (err -105) [ 79.990888][ T5035] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 80.003900][ T5035] team0: Port device dummy0 removed [ 80.011868][ T5035] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 80.022387][ T5039] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.078206][ T5036] loop6: detected capacity change from 0 to 1024 [ 80.085617][ T5036] EXT4-fs: Ignoring removed orlov option [ 80.094101][ T5036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.127366][ T5039] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.140107][ T4409] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.191443][ T5039] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.204462][ T5049] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 80.241433][ T5049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.334129][ T5058] xt_hashlimit: size too large, truncated to 1048576 [ 81.007821][ T5069] loop6: detected capacity change from 0 to 512 [ 81.027548][ T5069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.040378][ T5069] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.085852][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.484'. [ 81.094967][ T5074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.102714][ T5074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.110510][ T5074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.117985][ T5074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.151960][ T5075] loop5: detected capacity change from 0 to 1024 [ 81.175380][ T5075] EXT4-fs: Ignoring removed bh option [ 81.184752][ T5075] EXT4-fs: inline encryption not supported [ 81.195247][ T5075] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.206361][ T5075] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 81.215562][ T5075] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.484: lblock 2 mapped to illegal pblock 2 (length 1) [ 81.229684][ T5075] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.484: lblock 0 mapped to illegal pblock 48 (length 1) [ 81.244338][ T5075] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.484: Failed to acquire dquot type 0 [ 81.250345][ T4409] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.264529][ T5075] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 81.274283][ T5075] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.484: mark_inode_dirty error [ 81.285805][ T5075] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 81.296100][ T5075] EXT4-fs (loop5): 1 orphan inode deleted [ 81.302348][ T5075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.315101][ T4015] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:56: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.341242][ T4015] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:56: Failed to release dquot type 0 [ 81.368054][ T5075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.382620][ T5079] lo speed is unknown, defaulting to 1000 [ 81.391832][ T5075] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.484: Invalid inode table block 1 in block_group 0 [ 81.414254][ T5075] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 81.429152][ T5075] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz.5.484: mark_inode_dirty error [ 82.298790][ T29] kauditd_printk_skb: 736 callbacks suppressed [ 82.298804][ T29] audit: type=1326 audit(1763551734.421:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed7fcf65e7 code=0x7ffc0000 [ 82.332793][ T29] audit: type=1326 audit(1763551734.421:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed7fc9b829 code=0x7ffc0000 [ 82.356291][ T29] audit: type=1326 audit(1763551734.421:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 82.379772][ T29] audit: type=1326 audit(1763551734.431:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed7fcf65e7 code=0x7ffc0000 [ 82.403137][ T29] audit: type=1326 audit(1763551734.431:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed7fc9b829 code=0x7ffc0000 [ 82.427152][ T29] audit: type=1326 audit(1763551734.431:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 82.450622][ T29] audit: type=1326 audit(1763551734.431:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed7fcf65e7 code=0x7ffc0000 [ 82.474160][ T29] audit: type=1326 audit(1763551734.431:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed7fc9b829 code=0x7ffc0000 [ 82.497646][ T29] audit: type=1326 audit(1763551734.431:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 82.521381][ T29] audit: type=1326 audit(1763551734.451:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5083 comm="syz.6.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed7fcf65e7 code=0x7ffc0000 [ 82.782106][ T5105] __nla_validate_parse: 1 callbacks suppressed [ 82.782125][ T5105] netlink: 24 bytes leftover after parsing attributes in process `syz.6.495'. [ 82.823541][ T5105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.495'. [ 83.028674][ T4015] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.037143][ T4015] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.059988][ T4015] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.083706][ T4015] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.501520][ T5115] netlink: 'syz.3.500': attribute type 1 has an invalid length. [ 83.544145][ T5115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.500'. [ 83.567972][ T5115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.576422][ T5119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 83.612893][ T5115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.634987][ T5115] bond2: (slave geneve2): making interface the new active one [ 83.659579][ T5115] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 83.668545][ T5117] lo speed is unknown, defaulting to 1000 [ 83.674320][ T4015] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 83.734712][ T4015] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 83.754791][ T4015] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 83.789166][ T4015] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 83.962778][ T5134] netlink: 'syz.1.515': attribute type 4 has an invalid length. [ 83.974123][ T5134] netlink: 'syz.1.515': attribute type 4 has an invalid length. [ 84.009633][ T5131] xt_hashlimit: size too large, truncated to 1048576 [ 84.021408][ T5137] loop6: detected capacity change from 0 to 512 [ 84.065946][ T5137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.079423][ T5137] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.527721][ T5137] Set syz1 is full, maxelem 65536 reached [ 84.656574][ T5168] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.746723][ T5168] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.757437][ T4409] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.836112][ T5168] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.883419][ T5171] loop5: detected capacity change from 0 to 512 [ 84.897685][ T5168] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.928759][ T5171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.949261][ T5171] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.973315][ T3675] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.995068][ T3675] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.003334][ T3675] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.011643][ T3675] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.025739][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.522'. [ 85.040012][ C0] vcan0: j1939_session_tx_dat: 0xffff88811d9fa400: queue data error: -100 [ 85.254413][ T3595] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.330479][ T5192] loop5: detected capacity change from 0 to 2048 [ 85.405525][ T5192] loop5: p1 < > p4 [ 85.410591][ T5192] loop5: p4 size 8388608 extends beyond EOD, truncated [ 85.521785][ T5203] netlink: 'syz.6.531': attribute type 10 has an invalid length. [ 85.565233][ T5203] team0: Port device dummy0 added [ 85.588129][ T5203] netlink: 'syz.6.531': attribute type 10 has an invalid length. [ 85.602048][ T5203] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.642369][ T5203] team0: Failed to send options change via netlink (err -105) [ 85.650010][ T5203] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.661850][ T5203] team0: Port device dummy0 removed [ 85.669772][ T5203] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.729740][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.533'. [ 85.765458][ T5207] netlink: 32 bytes leftover after parsing attributes in process `syz.5.533'. [ 85.808854][ T5212] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.897991][ T5212] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.957851][ T5212] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.017476][ T5212] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.076146][ T4010] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.089312][ T4015] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.108896][ T4015] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.117648][ T4015] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.178872][ T5216] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 86.187496][ T5216] tipc: Enabled bearer , priority 10 [ 86.352406][ T5222] lo speed is unknown, defaulting to 1000 [ 86.852844][ T5230] loop3: detected capacity change from 0 to 2048 [ 86.882016][ T4015] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.896990][ T5230] loop3: p1 < > p4 [ 86.901495][ T5230] loop3: p4 size 8388608 extends beyond EOD, truncated [ 87.204739][ T9] tipc: Node number set to 2819676659 [ 87.826120][ T5245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 87.840444][ T5243] netlink: 'syz.3.545': attribute type 10 has an invalid length. [ 87.852063][ T5247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 87.866160][ T5243] team0: Failed to send options change via netlink (err -105) [ 87.873767][ T5243] team0: Port device dummy0 added [ 87.907835][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 87.907863][ T29] audit: type=1400 audit(1763551740.031:2963): avc: denied { append } for pid=5250 comm="syz.2.550" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.919725][ T5243] netlink: 'syz.3.545': attribute type 10 has an invalid length. [ 87.938472][ T5251] program syz.2.550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.969704][ T5243] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 87.990833][ T5243] team0: Failed to send options change via netlink (err -105) [ 87.998856][ T5243] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 88.007975][ T5243] team0: Port device dummy0 removed [ 88.017118][ T5243] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 88.074948][ T29] audit: type=1400 audit(1763551740.201:2964): avc: denied { firmware_load } for pid=5248 comm="syz.5.549" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 88.113974][ T29] audit: type=1326 audit(1763551740.221:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 88.137577][ T29] audit: type=1326 audit(1763551740.221:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 88.161524][ T29] audit: type=1326 audit(1763551740.221:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 88.184926][ T29] audit: type=1326 audit(1763551740.221:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe4f0b4f783 code=0x7ffc0000 [ 88.208195][ T29] audit: type=1326 audit(1763551740.221:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe4f0b4f783 code=0x7ffc0000 [ 88.231535][ T29] audit: type=1326 audit(1763551740.231:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 88.255005][ T29] audit: type=1326 audit(1763551740.231:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 88.268056][ T5264] netlink: 'syz.3.555': attribute type 4 has an invalid length. [ 88.278645][ T29] audit: type=1326 audit(1763551740.231:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 88.294402][ T5264] netlink: 'syz.3.555': attribute type 4 has an invalid length. [ 88.322127][ T1034] lo speed is unknown, defaulting to 1000 [ 88.327952][ T1034] syz2: Port: 1 Link ACTIVE [ 88.382046][ T5267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.558'. [ 88.399045][ T5268] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.446842][ T5268] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.496723][ T5268] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.556598][ T5268] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.934685][ T3590] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.934698][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 89.487390][ T5278] loop6: detected capacity change from 0 to 2048 [ 89.515133][ T5280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'. [ 89.552106][ T5278] loop6: p1 < > p4 [ 89.565918][ T5278] loop6: p4 size 8388608 extends beyond EOD, truncated [ 89.680718][ T5286] loop6: detected capacity change from 0 to 2048 [ 89.747024][ T5286] Alternate GPT is invalid, using primary GPT. [ 89.753516][ T5286] loop6: p2 p3 p7 [ 89.798571][ T5290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.567'. [ 89.807771][ T5290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.815508][ T5290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.823445][ T5290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.831033][ T5290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.875886][ T5292] loop6: detected capacity change from 0 to 1024 [ 89.882745][ T5292] EXT4-fs: Ignoring removed bh option [ 89.889096][ T5292] EXT4-fs: inline encryption not supported [ 89.897836][ T5292] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.910896][ T5292] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 89.920838][ T5292] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.567: lblock 2 mapped to illegal pblock 2 (length 1) [ 89.935458][ T5292] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.567: lblock 0 mapped to illegal pblock 48 (length 1) [ 89.950167][ T5292] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.567: Failed to acquire dquot type 0 [ 89.961926][ T5292] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 89.971998][ T5292] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.567: mark_inode_dirty error [ 89.984004][ T5292] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 89.994609][ T5292] EXT4-fs (loop6): 1 orphan inode deleted [ 90.001135][ T5292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.014130][ T3679] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.028809][ T3679] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:28: Failed to release dquot type 0 [ 90.042115][ T5292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.051832][ T5292] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz.6.567: Invalid inode table block 1 in block_group 0 [ 90.064968][ T5292] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 90.075300][ T5292] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz.6.567: mark_inode_dirty error [ 90.404899][ T5297] netlink: 'syz.2.568': attribute type 4 has an invalid length. [ 90.419154][ T5297] netlink: 'syz.2.568': attribute type 4 has an invalid length. [ 91.272533][ T5331] veth2: entered promiscuous mode [ 91.277680][ T5331] veth2: entered allmulticast mode [ 91.373378][ T5340] loop6: detected capacity change from 0 to 512 [ 91.380817][ T5340] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.391715][ T5340] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.585: inode has both inline data and extents flags [ 91.405507][ T5340] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.585: couldn't read orphan inode 15 (err -117) [ 91.418068][ T5340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.452387][ T4023] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.461214][ T4409] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.474814][ T4023] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.497820][ T4023] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.512089][ T4023] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.694652][ T3590] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.238356][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 93.247411][ T5356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.254890][ T5356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.262584][ T5356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.270036][ T5356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.281100][ T5354] tipc: Started in network mode [ 93.286090][ T5354] tipc: Node identity , cluster identity 4711 [ 93.292301][ T5354] tipc: Failed to set node id, please configure manually [ 93.299415][ T5354] tipc: Enabling of bearer rejected, failed to enable media [ 93.309232][ T5355] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.319288][ T5358] loop2: detected capacity change from 0 to 1024 [ 93.326206][ T5358] EXT4-fs: Ignoring removed bh option [ 93.327106][ T5354] tipc: Started in network mode [ 93.331735][ T5358] EXT4-fs: inline encryption not supported [ 93.336761][ T5354] tipc: Node identity ac14140f, cluster identity 4711 [ 93.349670][ T5354] tipc: New replicast peer: 255.255.255.255 [ 93.350157][ T5358] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.355903][ T5354] tipc: Enabled bearer , priority 10 [ 93.366965][ T5358] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 93.381527][ T5358] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.588: lblock 2 mapped to illegal pblock 2 (length 1) [ 93.396350][ T5358] __quota_error: 147 callbacks suppressed [ 93.396365][ T5358] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 93.410272][ T5358] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.588: lblock 0 mapped to illegal pblock 48 (length 1) [ 93.411634][ T5355] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.434451][ T5358] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 93.437794][ T5363] loop6: detected capacity change from 0 to 128 [ 93.443534][ T5358] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.588: Failed to acquire dquot type 0 [ 93.462290][ T5358] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 93.472130][ T5358] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.588: mark_inode_dirty error [ 93.483859][ T5358] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 93.494356][ T5358] EXT4-fs (loop2): 1 orphan inode deleted [ 93.499102][ T5363] bio_check_eod: 32 callbacks suppressed [ 93.499120][ T5363] syz.6.593: attempt to access beyond end of device [ 93.499120][ T5363] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 93.500798][ T5358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.531890][ T5363] syz.6.593: attempt to access beyond end of device [ 93.531890][ T5363] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 93.531880][ T3675] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 93.563314][ T5355] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.566521][ T5363] syz.6.593: attempt to access beyond end of device [ 93.566521][ T5363] loop6: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 93.575686][ T3675] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 93.595073][ T3675] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:24: Failed to release dquot type 0 [ 93.607062][ T5363] syz.6.593: attempt to access beyond end of device [ 93.607062][ T5363] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 93.620659][ T5363] syz.6.593: attempt to access beyond end of device [ 93.620659][ T5363] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 93.621948][ T5358] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.634677][ T5363] syz.6.593: attempt to access beyond end of device [ 93.634677][ T5363] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 93.659993][ T5365] veth4: entered promiscuous mode [ 93.665096][ T5365] veth4: entered allmulticast mode [ 93.681041][ T5368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.595'. [ 93.691319][ T5355] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.701122][ T5363] syz.6.593: attempt to access beyond end of device [ 93.701122][ T5363] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 93.701175][ T5363] syz.6.593: attempt to access beyond end of device [ 93.701175][ T5363] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 93.720710][ T5358] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.588: Invalid inode table block 1 in block_group 0 [ 93.742297][ T5358] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 93.743232][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 93.761008][ T5367] syz.6.593: attempt to access beyond end of device [ 93.761008][ T5367] loop6: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 93.775439][ T5367] syz.6.593: attempt to access beyond end of device [ 93.775439][ T5367] loop6: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 93.789335][ T5358] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz.2.588: mark_inode_dirty error [ 93.808870][ T5371] hsr_slave_1 (unregistering): left promiscuous mode [ 93.837008][ T5368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 93.890105][ T29] audit: type=1326 audit(1763551746.011:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 93.921504][ T29] audit: type=1326 audit(1763551746.041:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 93.945079][ T29] audit: type=1326 audit(1763551746.041:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 93.947707][ T5376] loop2: detected capacity change from 0 to 2048 [ 93.968697][ T29] audit: type=1326 audit(1763551746.041:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 93.998347][ T29] audit: type=1326 audit(1763551746.041:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 94.021682][ T29] audit: type=1326 audit(1763551746.041:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 94.045037][ T29] audit: type=1326 audit(1763551746.041:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 94.074906][ T5376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.097256][ T5376] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.210627][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.297237][ T3675] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.374664][ T3653] tipc: Node number set to 2886997007 [ 95.061552][ T5400] loop6: detected capacity change from 0 to 512 [ 95.069406][ T5400] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.604: iget: bad i_size value: 38620345925642 [ 95.082261][ T5400] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.604: couldn't read orphan inode 15 (err -117) [ 95.095142][ T5400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.178250][ T5404] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.604: bg 0: block 5: invalid block bitmap [ 95.190958][ T5404] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 280 with error 28 [ 95.203442][ T5404] EXT4-fs (loop6): This should not happen!! Data will be lost [ 95.203442][ T5404] [ 95.213227][ T5404] EXT4-fs (loop6): Total free blocks count 0 [ 95.219271][ T5404] EXT4-fs (loop6): Free/Dirty block details [ 95.225319][ T5404] EXT4-fs (loop6): free_blocks=0 [ 95.230269][ T5404] EXT4-fs (loop6): dirty_blocks=284 [ 95.235538][ T5404] EXT4-fs (loop6): Block reservation details [ 95.241527][ T5404] EXT4-fs (loop6): i_reserved_data_blocks=284 [ 95.259899][ T4015] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 280 with max blocks 4 with error 28 [ 95.352157][ T5411] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.386292][ T5411] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.427951][ T5411] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.466329][ T5411] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.523426][ T4015] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.536499][ T4015] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.552813][ T4015] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.571271][ T4015] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.848591][ T5423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'. [ 96.026025][ T4023] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.043562][ T4023] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.113643][ T4023] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.134200][ T4023] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.297871][ T5438] loop5: detected capacity change from 0 to 512 [ 96.315638][ T5438] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.619: iget: bad i_size value: 38620345925642 [ 96.377308][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 96.383485][ T3590] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.444913][ T5438] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.619: couldn't read orphan inode 15 (err -117) [ 96.465378][ T5438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.590510][ T5446] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.619: bg 0: block 5: invalid block bitmap [ 96.633712][ T5446] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 84 with error 28 [ 96.646208][ T5446] EXT4-fs (loop5): This should not happen!! Data will be lost [ 96.646208][ T5446] [ 96.655981][ T5446] EXT4-fs (loop5): Total free blocks count 0 [ 96.661999][ T5446] EXT4-fs (loop5): Free/Dirty block details [ 96.667995][ T5446] EXT4-fs (loop5): free_blocks=0 [ 96.672992][ T5446] EXT4-fs (loop5): dirty_blocks=84 [ 96.678204][ T5446] EXT4-fs (loop5): Block reservation details [ 96.684210][ T5446] EXT4-fs (loop5): i_reserved_data_blocks=84 [ 96.698577][ T5443] lo speed is unknown, defaulting to 1000 [ 96.737672][ T3595] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.102298][ T5455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'. [ 97.269453][ T5462] lo speed is unknown, defaulting to 1000 [ 97.536375][ T5465] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.546293][ T5465] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 97.579374][ T5469] netlink: 'syz.1.629': attribute type 4 has an invalid length. [ 97.652933][ T5465] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.662906][ T5465] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 97.681677][ T5474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'. [ 97.693510][ T5471] syzkaller0: entered promiscuous mode [ 97.699197][ T5471] syzkaller0: entered allmulticast mode [ 97.724211][ T5465] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.734061][ T5465] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 97.816783][ T5465] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.826835][ T5465] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 97.972830][ T4010] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 97.981286][ T4010] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 97.997113][ T4010] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 98.005536][ T4010] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 98.021370][ T4010] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 98.029806][ T4010] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 98.038453][ T4010] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 98.046784][ T4010] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 98.178995][ T5492] hub 6-0:1.0: USB hub found [ 98.183897][ T5492] hub 6-0:1.0: 8 ports detected [ 98.221506][ T5501] loop3: detected capacity change from 0 to 128 [ 98.231348][ T5501] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 98.239299][ T5501] FAT-fs (loop3): Filesystem has been set read-only [ 98.247072][ T5501] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 98.255000][ T5501] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 98.307712][ T5505] loop6: detected capacity change from 0 to 128 [ 98.494674][ T5501] bio_check_eod: 3673 callbacks suppressed [ 98.494691][ T5501] +}[@: attempt to access beyond end of device [ 98.494691][ T5501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.516236][ T5501] +}[@: attempt to access beyond end of device [ 98.516236][ T5501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.529532][ T5501] +}[@: attempt to access beyond end of device [ 98.529532][ T5501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.551952][ T5501] +}[@: attempt to access beyond end of device [ 98.551952][ T5501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.567118][ T5501] +}[@: attempt to access beyond end of device [ 98.567118][ T5501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.580309][ T5501] +}[@: attempt to access beyond end of device [ 98.580309][ T5501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.593378][ T5501] +}[@: attempt to access beyond end of device [ 98.593378][ T5501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.606429][ T5501] +}[@: attempt to access beyond end of device [ 98.606429][ T5501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.622439][ T5501] +}[@: attempt to access beyond end of device [ 98.622439][ T5501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.635528][ T5516] loop6: detected capacity change from 0 to 1024 [ 98.642314][ T5516] EXT4-fs: Ignoring removed oldalloc option [ 98.648293][ T5516] EXT4-fs: Ignoring removed bh option [ 98.656984][ T5501] +}[@: attempt to access beyond end of device [ 98.656984][ T5501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.671658][ T5516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.065729][ T5525] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.106662][ T5525] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.176877][ T5528] syzkaller0: entered promiscuous mode [ 99.182427][ T5528] syzkaller0: entered allmulticast mode [ 99.276520][ T5525] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.356366][ T5525] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.421239][ T4409] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.458435][ T5535] syzkaller0: entered promiscuous mode [ 99.463945][ T5535] syzkaller0: entered allmulticast mode [ 99.527255][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 100.288790][ T5552] tipc: Started in network mode [ 100.293759][ T5552] tipc: Node identity 8e89d4d15397, cluster identity 4711 [ 100.301063][ T5552] tipc: Enabled bearer , priority 0 [ 100.333207][ T5552] syzkaller0: entered promiscuous mode [ 100.338792][ T5552] syzkaller0: entered allmulticast mode [ 100.345042][ T5552] tipc: Resetting bearer [ 100.357512][ T5550] tipc: Resetting bearer [ 100.372661][ T5550] tipc: Disabling bearer [ 100.540112][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 100.540135][ T29] audit: type=1400 audit(1763551752.661:3430): avc: denied { relabelfrom } for pid=5560 comm="syz.6.663" name="NETLINK" dev="sockfs" ino=15477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.570893][ T29] audit: type=1400 audit(1763551752.661:3431): avc: denied { relabelto } for pid=5560 comm="syz.6.663" name="NETLINK" dev="sockfs" ino=15477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 100.740038][ T5571] lo speed is unknown, defaulting to 1000 [ 100.976854][ T4023] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.994686][ T4023] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.005504][ T5584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 101.005733][ T4023] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.063065][ T4023] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.169584][ T5594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 102.089843][ T5605] netlink: 'syz.3.677': attribute type 2 has an invalid length. [ 102.097617][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'. [ 102.220024][ T5617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'. [ 102.253815][ T29] audit: type=1400 audit(1763551754.371:3432): avc: denied { read } for pid=5619 comm="syz.1.683" lport=50609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.358727][ T5628] vlan2: entered allmulticast mode [ 102.363926][ T5628] hsr0: entered allmulticast mode [ 102.369006][ T5628] hsr_slave_0: entered allmulticast mode [ 102.374682][ T5628] hsr_slave_1: entered allmulticast mode [ 102.474537][ T5626] lo speed is unknown, defaulting to 1000 [ 102.507648][ T29] audit: type=1400 audit(1763551754.631:3433): avc: denied { write } for pid=5630 comm="syz.6.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.680823][ T29] audit: type=1326 audit(1763551754.741:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.6.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 102.704588][ T29] audit: type=1326 audit(1763551754.741:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.6.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 102.728065][ T29] audit: type=1326 audit(1763551754.741:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.6.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 102.751484][ T29] audit: type=1326 audit(1763551754.741:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.6.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 102.775003][ T29] audit: type=1326 audit(1763551754.741:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.6.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 102.798643][ T29] audit: type=1326 audit(1763551754.741:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.6.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 103.182970][ T5658] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.485302][ T5680] netlink: 24 bytes leftover after parsing attributes in process `syz.6.698'. [ 103.856993][ T5698] syzkaller0: entered promiscuous mode [ 103.862617][ T5698] syzkaller0: entered allmulticast mode [ 104.176124][ T5715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.714'. [ 104.651357][ T5742] @: renamed from vlan0 (while UP) [ 104.765372][ T5748] loop9: detected capacity change from 0 to 7 [ 104.771641][ T5748] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.789505][ T5748] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.797494][ T5748] loop9: unable to read partition table [ 104.819094][ T5748] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 104.819094][ T5748] ) failed (rc=-5) [ 105.074480][ T5772] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 105.084430][ T5772] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 105.136390][ T5772] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 105.146418][ T5772] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 105.196432][ T5772] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 105.206352][ T5772] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 105.236377][ T5772] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 105.246397][ T5772] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 105.312436][ T3679] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 105.320827][ T3679] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 105.332475][ T3679] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 105.341026][ T3679] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 105.353000][ T3679] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 105.361383][ T3679] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 105.373022][ T3679] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 105.381527][ T3679] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 106.523883][ T5814] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.535946][ T5814] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 106.636494][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 106.636589][ T29] audit: type=1326 audit(1763551758.761:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5818 comm="syz.3.751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff0319f749 code=0x0 [ 106.698295][ T5814] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.709519][ T5814] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 106.888257][ T5814] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.899100][ T5814] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 107.034168][ T5814] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.044637][ T5814] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 107.204777][ T29] audit: type=1326 audit(1763551759.311:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 107.228655][ T29] audit: type=1326 audit(1763551759.311:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 107.251973][ T29] audit: type=1326 audit(1763551759.311:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 107.275637][ T29] audit: type=1326 audit(1763551759.311:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 107.299224][ T29] audit: type=1326 audit(1763551759.311:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 107.322684][ T29] audit: type=1326 audit(1763551759.311:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 107.348673][ T3675] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 107.357152][ T3675] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 107.373827][ T5814] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 107.383754][ T5814] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 107.419371][ T5831] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.438408][ T29] audit: type=1326 audit(1763551759.561:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 107.464385][ T29] audit: type=1326 audit(1763551759.591:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 107.556900][ T5831] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.569977][ T5837] netlink: 16 bytes leftover after parsing attributes in process `syz.6.756'. [ 107.575000][ T29] audit: type=1326 audit(1763551759.681:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fe4f0b4f749 code=0x7ffc0000 [ 107.631895][ T5839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.758'. [ 107.657703][ T5839] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5839 comm=syz.3.758 [ 107.672250][ T5831] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.727060][ T5831] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.747589][ T5852] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.763'. [ 107.756891][ T5852] netlink: zone id is out of range [ 107.762108][ T5852] netlink: zone id is out of range [ 107.767639][ T5852] netlink: zone id is out of range [ 107.772775][ T5852] netlink: zone id is out of range [ 107.778047][ T5852] netlink: zone id is out of range [ 107.783203][ T5852] netlink: zone id is out of range [ 107.788430][ T5852] netlink: zone id is out of range [ 107.793608][ T5852] netlink: zone id is out of range [ 107.798785][ T5852] netlink: zone id is out of range [ 107.803939][ T5852] netlink: zone id is out of range [ 107.850104][ T4023] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.859156][ T5861] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.893799][ T4023] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.903239][ T3675] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.927861][ T3675] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.143364][ T5874] veth6: entered promiscuous mode [ 108.148640][ T5874] veth6: entered allmulticast mode [ 108.169158][ T5876] : renamed from vlan1 (while UP) [ 108.195324][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.769'. [ 108.239586][ T5880] tipc: Enabled bearer , priority 0 [ 108.256721][ T5880] syzkaller0: MTU too low for tipc bearer [ 108.262534][ T5880] tipc: Disabling bearer [ 108.637639][ T5918] netlink: 'syz.5.788': attribute type 4 has an invalid length. [ 108.686230][ T5918] netlink: 'syz.5.788': attribute type 4 has an invalid length. [ 109.351387][ T5949] netlink: 'syz.2.801': attribute type 7 has an invalid length. [ 109.359289][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 109.639864][ T5966] lo speed is unknown, defaulting to 1000 [ 109.806175][ T5977] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.876867][ T5977] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.900443][ T5982] syzkaller0: entered promiscuous mode [ 109.906087][ T5982] syzkaller0: entered allmulticast mode [ 109.930410][ T5977] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.016503][ T5977] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.079802][ T3678] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 110.089956][ T3678] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 110.156082][ T3679] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.164379][ T3679] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.181958][ T3679] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.191829][ T3678] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 110.201789][ T3678] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 110.214319][ T3679] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.249533][ T3678] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 110.259561][ T3678] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 110.307036][ T3678] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 110.317029][ T3678] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 110.452773][ T3678] bond2 (unregistering): (slave geneve2): Releasing active interface [ 110.511151][ T6013] netlink: 19 bytes leftover after parsing attributes in process `syz.5.825'. [ 110.537477][ T3678] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 110.547170][ T3678] bond0 (unregistering): Released all slaves [ 110.556382][ T3678] bond1 (unregistering): Released all slaves [ 110.565430][ T3678] bond2 (unregistering): Released all slaves [ 110.574109][ T5993] lo speed is unknown, defaulting to 1000 [ 110.627519][ T3678] tipc: Left network mode [ 110.644151][ T5993] chnl_net:caif_netlink_parms(): no params data found [ 110.694142][ T3678] hsr_slave_0: left promiscuous mode [ 110.700085][ T3678] hsr_slave_1: left promiscuous mode [ 110.707667][ T3678] veth1_macvtap: left promiscuous mode [ 110.713309][ T3678] veth0_macvtap: left promiscuous mode [ 110.720600][ T3678] veth1_vlan: left promiscuous mode [ 110.726457][ T3678] veth0_vlan: left promiscuous mode [ 110.827003][ T1034] lo speed is unknown, defaulting to 1000 [ 110.832820][ T1034] infiniband syz2: ib_query_port failed (-19) [ 110.856396][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.863574][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.870879][ T5993] bridge_slave_0: entered allmulticast mode [ 110.877478][ T5993] bridge_slave_0: entered promiscuous mode [ 110.884408][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.891619][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.899388][ T5993] bridge_slave_1: entered allmulticast mode [ 110.906067][ T5993] bridge_slave_1: entered promiscuous mode [ 110.925695][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.937257][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.973871][ T5993] team0: Port device team_slave_0 added [ 110.980610][ T5993] team0: Port device team_slave_1 added [ 110.997406][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.004421][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.030552][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.055300][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.062297][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.088272][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.115086][ T6036] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.153897][ T5993] hsr_slave_0: entered promiscuous mode [ 111.160545][ T5993] hsr_slave_1: entered promiscuous mode [ 111.168128][ T5993] debugfs: 'hsr0' already exists in 'hsr' [ 111.173915][ T5993] Cannot create hsr debugfs directory [ 111.191789][ T6036] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.258123][ T6036] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.341504][ T6036] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.379908][ T5993] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 111.398911][ T5993] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 111.411401][ T5993] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 111.422018][ T5993] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 111.436320][ T3675] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.465272][ T3678] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.489065][ T3675] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.508382][ T3675] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.529053][ T5993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.542777][ T5993] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.559267][ T3675] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.566470][ T3675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.575759][ T3675] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.582838][ T3675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.613879][ T5993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.649022][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.834'. [ 111.668417][ T6050] bridge_slave_1: left allmulticast mode [ 111.674094][ T6050] bridge_slave_1: left promiscuous mode [ 111.680015][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.693131][ T6050] bridge_slave_0: left allmulticast mode [ 111.698907][ T6050] bridge_slave_0: left promiscuous mode [ 111.704708][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.798580][ T5993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.919041][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 111.919060][ T29] audit: type=1400 audit(1763551764.041:3918): avc: denied { getopt } for pid=6063 comm="syz.2.837" lport=45548 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 112.070923][ T5993] veth0_vlan: entered promiscuous mode [ 112.081396][ T5993] veth1_vlan: entered promiscuous mode [ 112.104291][ T5993] veth0_macvtap: entered promiscuous mode [ 112.112659][ T5993] veth1_macvtap: entered promiscuous mode [ 112.145476][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.159850][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.186875][ T3678] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.196619][ T3678] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.206345][ T3678] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.218710][ T3678] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.265399][ T29] audit: type=1400 audit(1763551764.391:3919): avc: denied { mount } for pid=5993 comm="syz-executor" name="/" dev="gadgetfs" ino=3852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 112.365964][ T6082] loop7: detected capacity change from 0 to 512 [ 112.406010][ T6082] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.423593][ T6082] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.477480][ T5993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.547152][ T29] audit: type=1326 audit(1763551764.661:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 112.570713][ T29] audit: type=1326 audit(1763551764.661:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 112.594194][ T29] audit: type=1326 audit(1763551764.661:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 112.617717][ T29] audit: type=1326 audit(1763551764.661:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 112.641242][ T29] audit: type=1326 audit(1763551764.661:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 112.664672][ T29] audit: type=1326 audit(1763551764.661:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 112.688237][ T29] audit: type=1326 audit(1763551764.661:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 112.711601][ T29] audit: type=1326 audit(1763551764.661:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6088 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998def749 code=0x7ffc0000 [ 113.220472][ T6096] netlink: 'syz.2.843': attribute type 11 has an invalid length. [ 113.410897][ T6106] netlink: 'syz.7.847': attribute type 12 has an invalid length. [ 113.503481][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 113.706309][ T6125] sch_fq: defrate 0 ignored. [ 113.917751][ T6136] bond_slave_1: entered promiscuous mode [ 113.923681][ T6136] bond_slave_1: left promiscuous mode [ 114.473803][ T4019] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 114.482240][ T4019] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 114.494544][ T4019] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 114.502908][ T4019] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 114.515086][ T4020] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 114.523484][ T4020] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 114.535669][ T3677] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 114.544046][ T3677] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 114.593974][ T6158] sg_write: data in/out 852124/32 bytes for SCSI command 0x7-- guessing data in; [ 114.593974][ T6158] program syz.1.869 not setting count and/or reply_len properly [ 115.513953][ T6196] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 116.378253][ T6229] net_ratelimit: 79 callbacks suppressed [ 116.378263][ T6229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.804885][ T6226] netlink: 'syz.6.895': attribute type 1 has an invalid length. [ 116.814793][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 118.497692][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 118.497708][ T29] audit: type=1400 audit(1763552282.624:4181): avc: denied { create } for pid=6280 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 118.776443][ T6295] program syz.6.918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.034271][ T29] audit: type=1326 audit(1763552283.144:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 119.057759][ T29] audit: type=1326 audit(1763552283.144:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 119.081411][ T29] audit: type=1326 audit(1763552283.144:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 119.105144][ T29] audit: type=1326 audit(1763552283.154:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 119.128503][ T29] audit: type=1326 audit(1763552283.154:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 119.151939][ T29] audit: type=1326 audit(1763552283.154:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 119.175179][ T29] audit: type=1326 audit(1763552283.154:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 119.198567][ T29] audit: type=1326 audit(1763552283.154:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7fcff749 code=0x7ffc0000 [ 119.394482][ T6308] netlink: 'syz.5.920': attribute type 1 has an invalid length. [ 119.442468][ T6304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.466003][ T6307] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.537085][ T6307] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.608930][ T6315] syzkaller0: entered promiscuous mode [ 119.614507][ T6315] syzkaller0: entered allmulticast mode [ 119.633839][ T6307] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.676884][ T6307] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.753964][ T29] audit: type=1326 audit(1763552283.874:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.5.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501b12f749 code=0x7ffc0000 [ 119.853121][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.867169][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.881143][ T6325] bond_slave_1: entered promiscuous mode [ 119.887057][ T6325] bond_slave_1: left promiscuous mode [ 119.894407][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.906513][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.403963][ T6350] tipc: Enabling of bearer rejected, failed to enable media [ 120.415106][ T6350] tipc: New replicast peer: 255.255.255.255 [ 120.421249][ T6350] tipc: Enabled bearer , priority 10 [ 120.474291][ T6353] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.586508][ T6353] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.668518][ T6353] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.695005][ T3653] page_pool_release_retry() stalled pool shutdown: id 32, 1 inflight 60 sec [ 120.732772][ T6353] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.878735][ T3677] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.909991][ T3677] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.991934][ T3677] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.158631][ T3677] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.364723][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 122.090294][ T6429] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.140962][ T6433] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.214473][ T6429] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.516336][ T6433] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.756738][ T6429] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.786787][ T6433] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.833727][ T6429] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.882462][ T6433] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.927975][ T4020] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.940636][ T4020] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.961052][ T4020] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.975502][ T4020] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.081127][ T6446] veth6: entered promiscuous mode [ 123.086290][ T6446] veth6: entered allmulticast mode [ 123.163868][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 123.173040][ T6459] bridge_slave_1: left allmulticast mode [ 123.178789][ T6459] bridge_slave_1: left promiscuous mode [ 123.184767][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.192962][ T6459] bridge_slave_0: left promiscuous mode [ 123.198777][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.351925][ T6470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.396826][ T6470] loop7: detected capacity change from 0 to 512 [ 123.403552][ T6470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.429720][ T6470] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 123.452226][ T6470] EXT4-fs (loop7): 1 truncate cleaned up [ 123.465151][ T6470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.645769][ T6467] netlink: 'syz.7.976': attribute type 1 has an invalid length. [ 123.672825][ T6496] veth4: entered promiscuous mode [ 123.677955][ T6496] veth4: entered allmulticast mode [ 123.755433][ T5993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.879810][ T3684] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.890981][ T3684] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.902329][ T3684] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.913765][ T3684] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.959160][ T6504] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 124.969253][ T6504] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 125.076576][ T6504] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 125.086541][ T6504] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 125.154678][ T6523] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.189801][ T6504] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 125.199880][ T6504] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 125.269105][ T6523] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.297821][ T6504] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 125.307874][ T6504] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 125.318457][ T3409] ================================================================== [ 125.326561][ T3409] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 125.333786][ T3409] [ 125.336122][ T3409] read-write to 0xffff888106d636b0 of 8 bytes by task 3677 on cpu 1: [ 125.344192][ T3409] __xa_set_mark+0xd2/0x1a0 [ 125.348717][ T3409] ref_tracker_dir_exit+0x5e/0x360 [ 125.353854][ T3409] free_netdev+0x325/0x4a0 [ 125.358322][ T3409] netdev_run_todo+0x711/0x810 [ 125.363105][ T3409] rtnl_unlock+0xe/0x20 [ 125.367373][ T3409] ops_undo_list+0x218/0x410 [ 125.371976][ T3409] cleanup_net+0x2f4/0x4f0 [ 125.376405][ T3409] process_scheduled_works+0x4ce/0x9d0 [ 125.381895][ T3409] worker_thread+0x582/0x770 [ 125.386504][ T3409] kthread+0x489/0x510 [ 125.390590][ T3409] ret_from_fork+0x122/0x1b0 [ 125.395226][ T3409] ret_from_fork_asm+0x1a/0x30 [ 125.400015][ T3409] [ 125.402353][ T3409] read to 0xffff888106d636b0 of 8 bytes by task 3409 on cpu 0: [ 125.409906][ T3409] xas_find_marked+0x218/0x620 [ 125.414687][ T3409] xa_find+0xa4/0x140 [ 125.418686][ T3409] debugfs_reap_work+0x122/0x1d0 [ 125.423629][ T3409] process_scheduled_works+0x4ce/0x9d0 [ 125.429111][ T3409] worker_thread+0x582/0x770 [ 125.433707][ T3409] kthread+0x489/0x510 [ 125.437790][ T3409] ret_from_fork+0x122/0x1b0 [ 125.442391][ T3409] ret_from_fork_asm+0x1a/0x30 [ 125.447165][ T3409] [ 125.449487][ T3409] value changed: 0x0000000000000200 -> 0x0000000006000200 [ 125.456602][ T3409] [ 125.458924][ T3409] Reported by Kernel Concurrency Sanitizer on: [ 125.465083][ T3409] CPU: 0 UID: 0 PID: 3409 Comm: kworker/0:5 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.476464][ T3409] Tainted: [W]=WARN [ 125.480267][ T3409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.490342][ T3409] Workqueue: events debugfs_reap_work [ 125.495732][ T3409] ================================================================== [ 125.537930][ T6523] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.572696][ T4020] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 125.581243][ T4020] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 125.592971][ T4020] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 125.601393][ T4020] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 125.613017][ T6523] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.627321][ T4020] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 125.635655][ T4020] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 125.647287][ T4020] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 125.655720][ T4020] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 125.676141][ T4020] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.695995][ T4020] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.704343][ T4020] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.712678][ T4020] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0