last executing test programs: 2m30.854634498s ago: executing program 3 (id=1245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2m30.854311128s ago: executing program 3 (id=1247): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000700000000000000000085000000ae00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2401) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x8, 0x0, 0x9, 0x0}) 2m30.850554378s ago: executing program 3 (id=1250): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000000)="fad5f3", 0x3) recvmmsg$unix(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) 2m30.810209728s ago: executing program 3 (id=1251): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2m30.653818109s ago: executing program 3 (id=1256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b0000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 2m30.311727691s ago: executing program 3 (id=1266): syz_emit_ethernet(0x7b, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa808100100086dd60f5000000000000000000000000bbff020000000000000000000000000001020090780000050060000000004000fffc010000000000000000000004eafffffb02000000000000000000000000003a00000000000000e1c636bed6f068cc2400"], 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x402002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x15de}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) socket$inet(0x2, 0x8000a, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) syz_emit_ethernet(0x55a, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x300, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010", @ANYRES8=r2], 0x10b8}, 0x0) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00008004000000040000000400010000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x48) socket$kcm(0xa, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x300, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300090f000000000000000000000001001800"], 0x78}, 0x1, 0x7}, 0x0) 2m30.296876031s ago: executing program 32 (id=1266): syz_emit_ethernet(0x7b, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa808100100086dd60f5000000000000000000000000bbff020000000000000000000000000001020090780000050060000000004000fffc010000000000000000000004eafffffb02000000000000000000000000003a00000000000000e1c636bed6f068cc2400"], 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x402002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x15de}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) socket$inet(0x2, 0x8000a, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) syz_emit_ethernet(0x55a, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x300, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010", @ANYRES8=r2], 0x10b8}, 0x0) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00008004000000040000000400010000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x48) socket$kcm(0xa, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x300, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300090f000000000000000000000001001800"], 0x78}, 0x1, 0x7}, 0x0) 2m29.169371858s ago: executing program 2 (id=1287): r0 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6f0, 0x800, 0x82, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000100)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x2000099d9}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) 2m29.033449699s ago: executing program 2 (id=1290): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/17, 0x15}, 0x8e0f}], 0x400029c, 0x40010142, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m28.92035346s ago: executing program 2 (id=1293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @dev}]}}}}}}}}, 0x0) 2m28.89046919s ago: executing program 2 (id=1294): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2m28.050074096s ago: executing program 2 (id=1299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x5, 0x477, @vifc_lcl_ifindex, @rand_addr=0x64010100}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001a40)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x7, 0xfff1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xfff3}}]}}]}, 0x40}}, 0x0) 2m27.550596648s ago: executing program 2 (id=1307): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9c420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) nanosleep(&(0x7f0000000300), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x24020400) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000017c0)=""/130, 0x82}], 0x1}, 0xa1}], 0x1, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) 2m27.539283058s ago: executing program 33 (id=1307): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9c420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) nanosleep(&(0x7f0000000300), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x24020400) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000017c0)=""/130, 0x82}], 0x1}, 0xa1}], 0x1, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) 1m31.33729116s ago: executing program 4 (id=2763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x2, 0xb, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m31.25592409s ago: executing program 4 (id=2768): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2a630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa08, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1m31.057412112s ago: executing program 4 (id=2777): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='kmem_cache_free\x00', r3}, 0x18) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m29.906414859s ago: executing program 4 (id=2791): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x12c5008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x321f008, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') 1m29.848399729s ago: executing program 4 (id=2793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000340)={0xeec4, 0x1, [{0x6}]}) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@empty, {}, {0xfffffffffffffffd, 0x7, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) 1m29.206054083s ago: executing program 4 (id=2806): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500fde100000000000100000035399b4b057086fbae65c97d4e22fdcd9078040000000000"], 0x0) 1m29.181372443s ago: executing program 34 (id=2806): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500fde100000000000100000035399b4b057086fbae65c97d4e22fdcd9078040000000000"], 0x0) 4.398754323s ago: executing program 7 (id=3830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0x6b3025b977026a30, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x4, 0x7f, 0x180, 0x6, 0x9, 0x4}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x80000001, 0x0, 0xffffffc1}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008031}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.060820275s ago: executing program 7 (id=3832): syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000300)=r4}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x29) stat(&(0x7f0000000300)='./file2\x00', &(0x7f0000000340)) 4.014669555s ago: executing program 6 (id=3833): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe0000000) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) read(r1, 0x0, 0x20) close(r1) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x18) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) dup(0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES8], 0x28}}], 0x2, 0x4000004) connect$qrtr(0xffffffffffffffff, &(0x7f00000001c0)={0x2a, 0xffffffff, 0x4000}, 0xc) 3.679293377s ago: executing program 6 (id=3836): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000eeca34ec052c28b085000000000000000b000000003bea1ec696fb4b3352023a4a188477028cbd3ee2a1cafa67f341da967f4181a35d7c2d94c2dbe31db7f6787f2fe1e3f4a0b83f3d5c9ae8ce4d0eac565ec3250223aa08ff7a28a34a966e428a50ec9729d6e54eb9d27c74b2fdf67ee8aa81bfa0735e8d2d7fdb458378095a251dbeafaa755c60cd78159684afce91309a9dab70124f4c1009daeedb1a99fcd8d7eac9f2d23c97aa1a72ac96"], 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000002c0), 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.24217651s ago: executing program 6 (id=3837): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) iopl(0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) personality(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x1, 0x2000) msgctl$IPC_SET(r5, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x174, 0xb7f}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xec, 0x0, 0xfffc, 0x0, 0xffffffffffffffff}) 3.086247671s ago: executing program 5 (id=3840): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x17}, 0x4}, 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@minixdf}]}, 0x0, 0x485, &(0x7f0000001500)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") creat(&(0x7f0000000080)='./bus\x00', 0x151) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = open(0x0, 0x4000, 0x0) preadv2(r3, &(0x7f0000000200)=[{&(0x7f0000004300)=""/4096, 0x1000}], 0x1, 0x3400, 0x2, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 3.048544141s ago: executing program 7 (id=3841): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x4) r4 = syz_io_uring_setup(0x837, 0x0, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r3, 0xffffffffffffffff, 0x0) 2.915616482s ago: executing program 5 (id=3843): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000240)={0xa, 0x4e1f, 0x61, @local, 0x3}, 0x1c, 0x0}}], 0x1, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000440)=""/73, 0x49}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 2.915376172s ago: executing program 7 (id=3844): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 2.765304963s ago: executing program 5 (id=3847): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=']) syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="18090000000000000000000000000000181200", @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1e, 0x4}, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c0000000000000000850000000700000004"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.636142024s ago: executing program 5 (id=3848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$FS_IOC_GETFSMAP(r2, 0x40305839, &(0x7f00000001c0)=ANY=[]) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000640000008500000006000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0011aaaa9d8c50378848fb14e6e419ceebc65ae5a58dfd1559edabe26f89ce590694ffb766259362dafb76fc820d87a60e79481434881b4449126dd273fd2a59a96f2d743eb9640c3ecc839c8eb461e493c1cd03535e988267972e22fbce769cba398b5128419db5e96eb8b8e263d39bf5eb4bdd05f86e0965f32ac70cdb51b3020141ac1cd2211ed69e14fa4a34"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r8], 0x2c}}, 0x0) 2.362549546s ago: executing program 6 (id=3849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x208904, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf251500000008000300", @ANYRES32=r4, @ANYBLOB="2c002b8008000100000000df1f0003800600010002000000080002"], 0x48}, 0x1, 0x0, 0x0, 0x2400089c}, 0x4000080) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r5) 2.192559017s ago: executing program 7 (id=3850): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x0, 0x8, 0x6, 0x4, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_setup(0x5, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 2.191905896s ago: executing program 6 (id=3851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) listen(r4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000000c0)=@phonet={0x23, 0xc, 0xff}, 0x80, 0x0}, 0x8000) accept(r1, 0x0, 0x0) 1.946637428s ago: executing program 1 (id=3853): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e40)={&(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x60}, 0x28) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.927701518s ago: executing program 0 (id=3854): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="fdffff51897f9e00"/20, @ANYRES32, @ANYBLOB], 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000006c0), 0x6e, &(0x7f0000000740)=[{0x0}], 0x1, &(0x7f00000008c0)}, 0x100) rt_sigprocmask(0x1, 0x0, &(0x7f0000000340), 0x0) r3 = syz_io_uring_setup(0x1104, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1.898165078s ago: executing program 0 (id=3855): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) semop(r0, &(0x7f0000000140)=[{0x1, 0x5, 0x1800}, {0x4, 0x5, 0x800}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.856047089s ago: executing program 0 (id=3856): bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x17}, 0x4}, 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@minixdf}]}, 0x0, 0x485, &(0x7f0000001500)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x151) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) preadv2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000004300)=""/4096, 0x1000}], 0x1, 0x3400, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x9}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 1.855384679s ago: executing program 1 (id=3857): prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='/dev/sg#\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES16], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40040, 0x1) finit_module(r0, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x400400, 0x0) getsockname$packet(r2, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 1.772044569s ago: executing program 5 (id=3858): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0xfd, 0x0, 0x0, 0x4, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x37}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x4000, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="e90500000400000000000000d7ffffffffffff", @ANYRES32], 0x50) write$binfmt_register(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x200000000000006}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.71362873s ago: executing program 0 (id=3859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x5453, 0x0) unshare(0x24000280) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20060400) 1.59559782s ago: executing program 1 (id=3860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x208904, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf251500000008000300", @ANYRES32=r4, @ANYBLOB="2c002b8008000100000000df1f0003800600010002000000080002"], 0x48}, 0x1, 0x0, 0x0, 0x2400089c}, 0x4000080) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r5) 1.595000571s ago: executing program 0 (id=3870): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, 0x0, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) bind$inet(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.498552151s ago: executing program 0 (id=3861): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 1.492256331s ago: executing program 1 (id=3862): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000840)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") bpf$TOKEN_CREATE(0x24, &(0x7f0000000900)={0x0, r1}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x1d, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xffffffff, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 1.491587491s ago: executing program 5 (id=3863): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x39e}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) 1.367319512s ago: executing program 1 (id=3864): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) 326.460488ms ago: executing program 6 (id=3865): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) io_setup(0x3, &(0x7f0000000180)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0x541b, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r6, 0x30, r0}, 0x10) 127.8972ms ago: executing program 1 (id=3866): fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000240)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0x7, 0x364, &(0x7f0000000900)="$eJzs3c1rO0UYwPEnabJNU9rkIIqCdLAXvSxt9CwGaUEIWNpGbAVh2240ZE1KNlQjYtuTV/HuSfBQerPgoaD9B3rxphcRvPUieLAHdWXfkm1e+hKT5vdrvx8omczMszubmZRn02724t0vP6qUbL1kaBJPKYmJiFyKZCUuoVjwGPfKmkQdyCvTf/784tpGMeVXqOX8+qs5pdTsXKLd7XRSzrPvX/yR+/382fPnL/5d/7Bsq7KtqrWGMtRW7deGsWWZaqdsV3SlVizTsE1Vrtpm3W//LtiOVdvdbSqjujOT3q2btq2MalNVzKZq1FSj3lTGB0a5qnRdVzNpwU2KR6urRn7A4O0hDwYjUq/njQkRmepqKR6NZUAAAGCs2vl/w8v/425KP0j+vymzhcLSqnI7B/n/Dx9/dvzSWWP6nZPZIP8/1Xrl/6/94m/rSv7vnk608/+af35Qujn//1rukP93Z0SPy8D5f3YEg8Fg5rSuqtiVZ27+nw7ev57D944XvAL5PwAAAAAAAAAAAAAAAAAAAAAAT4NLx8k4jpMJH8Of9iUEwXM8SP3mf1JEUu7sO8z/Q7a2sSkp78I9d46tL/aKe0X/MehwJiKWmP84ndy1EV55pFxZ+dHaD+L394oTXku+JGU3XhYlI1lvPUXiHWf5rcLSovIF8a3LlNLR+Jxk5Jlo/Pfe6nTjc1fjg/1r8vJ8JF6XjPy0LTWxZMeLbO//80Wl3ny70BE/5fUTkd/ufVIAAAAAABgyXbX0PH/XtX7t/reM5Evex0SmLEhG/u59fr/Q8/w8kXkhMe6jBwAAAADgcbCbn1YMiZt1r2BZvQpT0rdpCIVEq2bSMetJEenZWeuoSV635YnIEd52PJr4dzD5v8f1Tfiq3iUq/EcKd+CtpuCOKjLYeMLj92piicGnKXYg3gI4iDbF5Rbhic7Bz7kVqmfn+b7bOQwOpFUTfmyk9XmdZaV7O/FrVkKyq8aJDbYAnvvq27+G9wZ5/SRYAZ/c3PnQMp19uc2kdBTcXXQ3JUf+iwcAAADAvWsn/WHNG9Hm6I1EojfL4S/3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM0Ui+0q+jMO5jBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4U/wUAAP//nVbxdQ==") r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r6, r5, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r7, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r5, &(0x7f0000000000), 0x200a00}]) 0s ago: executing program 7 (id=3867): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902"], 0x0) fadvise64(r0, 0x807f, 0x1000000, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) kernel console output (not intermixed with test programs): ck 99, lost async page write [ 182.547364][T12042] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 182.548718][T12049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.567019][T12042] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 182.575854][T12042] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 182.618297][T12049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.738793][ T8147] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.769617][ T8147] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.779077][ T8147] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.787929][ T8147] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.812124][ T3417] kernel write not supported for file [eventfd] (pid: 3417 comm: kworker/0:3) [ 182.859288][T12068] tipc: Started in network mode [ 182.864192][T12068] tipc: Node identity d68081b49b52, cluster identity 4711 [ 182.871587][T12068] tipc: Enabled bearer , priority 0 [ 182.890131][T12068] syzkaller0: entered promiscuous mode [ 182.895779][T12068] syzkaller0: entered allmulticast mode [ 182.904623][T12068] tipc: Resetting bearer [ 182.911781][T12067] tipc: Resetting bearer [ 182.920050][T12067] tipc: Disabling bearer [ 182.979426][T12076] loop5: detected capacity change from 0 to 1024 [ 182.987141][T12076] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 182.998057][T12076] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 183.008579][T12076] JBD2: no valid journal superblock found [ 183.014363][T12076] EXT4-fs (loop5): Could not load journal inode [ 183.084115][T12080] SELinux: ebitmap: truncated map [ 183.090742][T12080] SELinux: failed to load policy [ 183.181600][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3142'. [ 183.194014][T12097] syz_tun (unregistering): left allmulticast mode [ 183.973632][T12118] loop7: detected capacity change from 0 to 512 [ 183.980603][T12118] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 183.992049][T12118] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 184.006646][T12118] EXT4-fs (loop7): 1 truncate cleaned up [ 184.012757][T12118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.035667][T12118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.374130][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3155'. [ 184.386196][T12137] syz_tun (unregistering): left allmulticast mode [ 184.395043][T12134] x_tables: duplicate underflow at hook 2 [ 184.517548][T12146] loop7: detected capacity change from 0 to 4096 [ 184.539062][T12146] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.617750][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.742794][T12174] pim6reg1: entered promiscuous mode [ 184.748228][T12174] pim6reg1: entered allmulticast mode [ 184.847320][T12186] syzkaller0: entered promiscuous mode [ 184.852844][T12186] syzkaller0: entered allmulticast mode [ 185.057318][T12207] veth0_to_team: entered promiscuous mode [ 185.118618][T12215] loop5: detected capacity change from 0 to 512 [ 185.165276][T12215] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3182: couldn't read orphan inode 26 (err -116) [ 185.178511][T12215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.191478][T12215] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.866734][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.890217][T12223] SELinux: failed to load policy [ 185.925476][T12226] loop1: detected capacity change from 0 to 128 [ 185.948990][T12233] loop7: detected capacity change from 0 to 1024 [ 185.957870][T12233] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 185.968831][T12233] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 185.979375][T12233] JBD2: no valid journal superblock found [ 185.985189][T12233] EXT4-fs (loop7): Could not load journal inode [ 186.056654][T12244] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3201'. [ 186.127956][T12248] loop7: detected capacity change from 0 to 512 [ 186.142646][T12248] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 186.153594][T12248] EXT4-fs (loop7): group descriptors corrupted! [ 186.214965][T12252] loop5: detected capacity change from 0 to 512 [ 186.246459][T12252] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3202: couldn't read orphan inode 26 (err -116) [ 186.269302][T12252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.281944][T12252] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.423194][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 186.423210][ T29] audit: type=1400 audit(1762031293.703:8691): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 186.489728][ T29] audit: type=1400 audit(1762031293.753:8692): avc: denied { allowed } for pid=12255 comm="syz.1.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 186.509232][ T29] audit: type=1400 audit(1762031293.763:8693): avc: denied { create } for pid=12255 comm="syz.1.3204" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 186.530574][ T29] audit: type=1400 audit(1762031293.773:8694): avc: denied { create } for pid=12255 comm="syz.1.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.600492][ T29] audit: type=1400 audit(1762031293.833:8695): avc: denied { getopt } for pid=12255 comm="syz.1.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.620140][ T29] audit: type=1400 audit(1762031293.883:8696): avc: denied { name_bind } for pid=12257 comm="syz.1.3205" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 186.770312][ T29] audit: type=1400 audit(1762031294.053:8697): avc: denied { create } for pid=12263 comm="syz.7.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.823446][ T29] audit: type=1400 audit(1762031294.103:8698): avc: denied { read write } for pid=12267 comm="syz.7.3209" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.847370][ T29] audit: type=1400 audit(1762031294.103:8699): avc: denied { open } for pid=12267 comm="syz.7.3209" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.948036][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.122965][ T29] audit: type=1400 audit(1762031294.403:8700): avc: denied { create } for pid=12278 comm="syz.5.3211" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 187.314312][T12283] loop7: detected capacity change from 0 to 2048 [ 187.339784][T12283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.401021][T12283] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.554334][T12290] loop1: detected capacity change from 0 to 1024 [ 187.563319][T12290] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 187.574246][T12290] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 187.586036][T12291] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3212: bg 0: block 345: padding at end of block bitmap is not set [ 187.601637][T12290] JBD2: no valid journal superblock found [ 187.607421][T12290] EXT4-fs (loop1): Could not load journal inode [ 187.613690][T12291] EXT4-fs (loop7): Remounting filesystem read-only [ 187.622493][ T8143] EXT4-fs warning (device loop7): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 187.705338][ T8143] syzkaller0: tun_net_xmit 76 [ 187.710221][ T8143] syzkaller0: tun_net_xmit 48 [ 187.745376][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.764827][ T23] syzkaller0: tun_net_xmit 76 [ 187.772696][T12293] syzkaller0: tun_net_xmit 28 [ 187.900787][T12304] loop5: detected capacity change from 0 to 512 [ 187.948884][T12304] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.986488][T12304] EXT4-fs (loop5): mount failed [ 188.038173][T12328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.045518][T12328] IPv6: NLM_F_CREATE should be set when creating new route [ 188.052799][T12328] IPv6: NLM_F_CREATE should be set when creating new route [ 188.061610][T12328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.090751][T12333] loop7: detected capacity change from 0 to 128 [ 188.124035][T12337] serio: Serial port ptm0 [ 188.246855][ T8152] bio_check_eod: 74 callbacks suppressed [ 188.246872][ T8152] kworker/u8:45: attempt to access beyond end of device [ 188.246872][ T8152] loop7: rw=1, sector=145, nr_sectors = 16 limit=128 [ 188.267599][ T8152] kworker/u8:45: attempt to access beyond end of device [ 188.267599][ T8152] loop7: rw=1, sector=169, nr_sectors = 8 limit=128 [ 188.281221][ T8152] kworker/u8:45: attempt to access beyond end of device [ 188.281221][ T8152] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 188.294735][ T8152] kworker/u8:45: attempt to access beyond end of device [ 188.294735][ T8152] loop7: rw=1, sector=201, nr_sectors = 8 limit=128 [ 188.308342][ T8152] kworker/u8:45: attempt to access beyond end of device [ 188.308342][ T8152] loop7: rw=1, sector=217, nr_sectors = 8 limit=128 [ 188.331617][ T8152] kworker/u8:45: attempt to access beyond end of device [ 188.331617][ T8152] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 188.345467][ T8152] kworker/u8:45: attempt to access beyond end of device [ 188.345467][ T8152] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 188.359324][ T8152] kworker/u8:45: attempt to access beyond end of device [ 188.359324][ T8152] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 188.380724][ T8152] kworker/u8:45: attempt to access beyond end of device [ 188.380724][ T8152] loop7: rw=1, sector=281, nr_sectors = 8 limit=128 [ 188.394543][ T8152] kworker/u8:45: attempt to access beyond end of device [ 188.394543][ T8152] loop7: rw=1, sector=297, nr_sectors = 8 limit=128 [ 188.481940][T12356] wg2: entered promiscuous mode [ 188.486966][T12356] wg2: entered allmulticast mode [ 188.559915][T12364] syzkaller0: entered promiscuous mode [ 188.565575][T12364] syzkaller0: entered allmulticast mode [ 189.556087][T12405] loop7: detected capacity change from 0 to 128 [ 189.556420][T12407] loop5: detected capacity change from 0 to 512 [ 189.581066][T12407] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.3262: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 189.616276][T12407] EXT4-fs error (device loop5): ext4_quota_enable:7139: comm syz.5.3262: Bad quota inode: 3, type: 0 [ 189.636397][T12407] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 189.651288][T12407] EXT4-fs (loop5): mount failed [ 189.951012][T12426] loop1: detected capacity change from 0 to 8192 [ 190.140947][T12430] syzkaller0: entered promiscuous mode [ 190.146634][T12430] syzkaller0: entered allmulticast mode [ 190.284520][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3271'. [ 190.355496][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3271'. [ 190.976209][T12471] loop5: detected capacity change from 0 to 256 [ 191.323679][T12488] program syz.1.3285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.348017][T12490] netlink: 312 bytes leftover after parsing attributes in process `syz.5.3288'. [ 191.445773][T12492] loop1: detected capacity change from 0 to 512 [ 191.490486][T12492] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3289: EA inode hash validation failed [ 191.503241][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 191.503256][ T29] audit: type=1326 audit(1762031298.783:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 191.533137][ T29] audit: type=1326 audit(1762031298.783:8978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 191.556798][ T29] audit: type=1326 audit(1762031298.783:8979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 191.580487][ T29] audit: type=1326 audit(1762031298.793:8980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 191.600901][T12492] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.3289: corrupted inode contents [ 191.604145][ T29] audit: type=1326 audit(1762031298.793:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 191.639341][ T29] audit: type=1326 audit(1762031298.793:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 191.643542][T12492] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.3289: mark_inode_dirty error [ 191.662868][ T29] audit: type=1326 audit(1762031298.793:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 191.697661][ T29] audit: type=1326 audit(1762031298.793:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 191.721355][ T29] audit: type=1326 audit(1762031298.793:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 191.744868][ T29] audit: type=1326 audit(1762031298.793:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 191.769684][T12492] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.3289: corrupted inode contents [ 191.810742][T12492] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.3289: mark_inode_dirty error [ 191.909889][T12492] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.3289: mark inode dirty (error -117) [ 191.927333][T12492] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 191.945205][T12492] EXT4-fs (loop1): 1 orphan inode deleted [ 192.382430][T12529] loop7: detected capacity change from 0 to 128 [ 192.399619][T12529] buffer_io_error: 46 callbacks suppressed [ 192.399654][T12529] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 192.416298][T12529] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 192.428778][T12529] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 192.437499][T12529] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 192.447855][T12529] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 192.458824][T12529] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 192.896771][T12539] loop5: detected capacity change from 0 to 512 [ 192.917437][T12543] macvtap0: entered promiscuous mode [ 192.923648][T12543] macvtap0: left promiscuous mode [ 192.931300][T12539] EXT4-fs mount: 2 callbacks suppressed [ 192.931313][T12539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.965560][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.081725][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3306'. [ 193.221557][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3306'. [ 193.522683][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3307'. [ 193.568315][T12565] loop7: detected capacity change from 0 to 136 [ 193.603043][T12573] loop7: detected capacity change from 0 to 512 [ 193.609719][T12573] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.617493][T12573] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 193.626419][T12573] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.3314: attempt to clear invalid blocks 2 len 1 [ 193.639940][T12573] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 193.683044][T12573] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3314: invalid indirect mapped block 1819239214 (level 0) [ 193.704964][T12573] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3314: invalid indirect mapped block 1819239214 (level 1) [ 193.753954][T12581] netlink: 'syz.6.3316': attribute type 1 has an invalid length. [ 193.771492][T12573] EXT4-fs (loop7): 1 truncate cleaned up [ 193.776733][T12581] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 193.783997][T12573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.788339][T12581] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 193.818404][T12573] EXT4-fs (loop7): Quota file not on filesystem root. Journaled quota will not work [ 193.831365][T12583] gretap1: entered promiscuous mode [ 193.843908][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.855398][T12583] bond1: (slave gretap1): making interface the new active one [ 193.885328][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3317'. [ 193.895217][T12583] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 193.911325][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3317'. [ 193.988894][T12581] macvlan0: entered promiscuous mode [ 193.994341][T12581] macvlan0: entered allmulticast mode [ 194.015557][T12581] bond1: entered promiscuous mode [ 194.029672][T12581] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 194.055825][T12581] bond1: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 194.072221][T12581] bond1: left promiscuous mode [ 194.085868][T12590] netlink: 'syz.0.3319': attribute type 3 has an invalid length. [ 194.358682][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3320'. [ 195.039572][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3324'. [ 195.199152][T12607] loop7: detected capacity change from 0 to 128 [ 195.214991][T12607] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.227375][T12607] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.281239][T10970] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.549243][T12630] syzkaller0: entered promiscuous mode [ 195.554802][T12630] syzkaller0: entered allmulticast mode [ 195.672295][T12638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.712428][T12638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.425689][T12657] 9pnet_fd: Insufficient options for proto=fd [ 196.490491][T12660] macvtap0: entered promiscuous mode [ 196.496497][T12660] macvtap0: left promiscuous mode [ 196.512775][ T29] kauditd_printk_skb: 1835 callbacks suppressed [ 196.512795][ T29] audit: type=1326 audit(1762031303.793:10822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.5.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1fde1a5e67 code=0x7ffc0000 [ 196.543459][ T29] audit: type=1326 audit(1762031303.793:10823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.5.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1fde14b099 code=0x7ffc0000 [ 196.567174][ T29] audit: type=1326 audit(1762031303.793:10824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.5.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 196.590851][ T29] audit: type=1326 audit(1762031303.803:10825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.5.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1fde1a5e67 code=0x7ffc0000 [ 196.614531][ T29] audit: type=1326 audit(1762031303.803:10826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.5.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1fde14b099 code=0x7ffc0000 [ 196.638200][ T29] audit: type=1326 audit(1762031303.803:10827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.5.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 196.661923][ T29] audit: type=1326 audit(1762031303.803:10828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.5.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1fde1a5e67 code=0x7ffc0000 [ 196.685456][ T29] audit: type=1326 audit(1762031303.803:10829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.5.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1fde14b099 code=0x7ffc0000 [ 196.708997][ T29] audit: type=1326 audit(1762031303.803:10830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.5.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 196.732506][ T29] audit: type=1326 audit(1762031303.803:10831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.5.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1fde1a5e67 code=0x7ffc0000 [ 196.812786][T12672] netlink: 'syz.5.3358': attribute type 1 has an invalid length. [ 196.828078][T12672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.835931][T12668] $H: renamed from bond0 (while UP) [ 196.843040][T12668] $H: entered promiscuous mode [ 196.848116][T12668] bond_slave_0: entered promiscuous mode [ 196.853806][T12668] bond_slave_1: entered promiscuous mode [ 196.885056][T12672] macvlan0: entered promiscuous mode [ 196.890498][T12672] macvlan0: entered allmulticast mode [ 196.956021][T12672] bond1: entered promiscuous mode [ 196.968207][T12682] loop1: detected capacity change from 0 to 512 [ 196.982770][T12679] loop7: detected capacity change from 0 to 512 [ 197.000819][T12672] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 197.011938][T12679] EXT4-fs: Ignoring removed bh option [ 197.032757][T12672] bond1: left promiscuous mode [ 197.048629][T12679] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.057734][T12679] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 197.076427][T12682] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3348: couldn't read orphan inode 26 (err -116) [ 197.089445][T12682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.102028][T12682] ext4 filesystem being mounted at /629/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.163051][T12681] bond1: (slave ip6gretap1): making interface the new active one [ 197.221011][T12681] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 197.243686][T12679] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 197.320158][T12679] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 197.329349][T12679] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.359508][T12679] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 197.373336][T12679] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 197.387514][T12679] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 197.395899][T12679] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 197.425244][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.509574][T12705] sd 0:0:1:0: device reset [ 197.660825][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.774132][T12707] loop5: detected capacity change from 0 to 8192 [ 198.305612][T12721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.347499][T12721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.400426][T12723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.407981][T12723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.416036][T12723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.423452][T12723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.432489][T12723] bridge0: port 3(batadv0) entered disabled state [ 198.648928][T12730] syzkaller0: entered promiscuous mode [ 198.654466][T12730] syzkaller0: entered allmulticast mode [ 198.984039][T12750] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3374'. [ 199.078785][T12759] kernel profiling enabled (shift: 21) [ 199.151516][T12764] syzkaller0: entered promiscuous mode [ 199.157065][T12764] syzkaller0: entered allmulticast mode [ 199.387069][T12780] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.397445][T12780] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.467308][T12780] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.477625][T12780] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.504571][T12782] xt_CONNSECMARK: invalid mode: 0 [ 199.529626][T12786] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3388'. [ 199.539798][T12780] team0: Failed to send options change via netlink (err -105) [ 199.557728][T12780] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 199.605290][T12780] team0: Port device netdevsim1 removed [ 199.612357][T12780] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.622748][T12780] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.992123][T12811] loop1: detected capacity change from 0 to 1024 [ 201.008391][T12811] EXT4-fs: Ignoring removed orlov option [ 201.018396][T12811] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.044821][T12811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000] [ 201.062460][T12811] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.3405: lblock 2 mapped to illegal pblock 2 (length 1) [ 201.085041][T12811] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3405: lblock 0 mapped to illegal pblock 48 (length 1) [ 201.100146][T12811] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3405: Failed to acquire dquot type 0 [ 201.114058][T12811] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 201.124221][T12811] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.3405: mark_inode_dirty error [ 201.139647][T12811] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 201.150079][T12811] EXT4-fs (loop1): 1 orphan inode deleted [ 201.156341][T12811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.168579][ T8152] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:45: lblock 1 mapped to illegal pblock 1 (length 1) [ 201.181043][T12811] netlink: 'syz.1.3405': attribute type 13 has an invalid length. [ 201.190695][ T8152] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:45: Failed to release dquot type 0 [ 201.228415][T12827] loop7: detected capacity change from 0 to 512 [ 201.243752][T12827] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 201.256461][T12827] EXT4-fs (loop7): 1 truncate cleaned up [ 201.262805][T12827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.295450][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.307551][T12780] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.317924][T12780] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.379958][ T8125] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.388500][ T8125] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.409950][ T8125] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.418373][ T8125] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.432956][T12835] netlink: 'syz.7.3402': attribute type 13 has an invalid length. [ 201.465080][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.474751][ T3316] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 201.499907][T12837] loop5: detected capacity change from 0 to 512 [ 201.504159][ T3316] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 201.516511][T12837] EXT4-fs (loop5): orphan cleanup on readonly fs [ 201.518207][ T3316] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 201.523304][T12837] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3403: bad orphan inode 13 [ 201.540717][T12835] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.545147][T12837] ext4_test_bit(bit=12, block=18) = 1 [ 201.551479][T12835] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.556754][T12837] is_bad_inode(inode)=0 [ 201.568012][T12837] NEXT_ORPHAN(inode)=2130706432 [ 201.572871][T12837] max_ino=32 [ 201.576225][T12837] i_nlink=1 [ 201.579972][T12837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.621471][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.635396][T12835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.650504][T12835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.717030][ T8125] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.725311][ T8125] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.790161][T12847] netlink: 'syz.7.3407': attribute type 39 has an invalid length. [ 201.800224][ T8125] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.808560][ T8125] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.817110][ T8125] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.826598][ T8125] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.846604][ T8125] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.858052][ T8125] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.875684][T12849] loop1: detected capacity change from 0 to 512 [ 201.883886][T12849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.068252][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 202.068270][ T29] audit: type=1326 audit(1762031309.353:11200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12863 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 202.144433][ T29] audit: type=1326 audit(1762031309.353:11201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12863 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 202.168090][ T29] audit: type=1326 audit(1762031309.353:11202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12863 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 202.191707][ T29] audit: type=1326 audit(1762031309.353:11203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12863 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 202.215363][ T29] audit: type=1326 audit(1762031309.353:11204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12863 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 202.238862][ T29] audit: type=1326 audit(1762031309.353:11205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12863 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 202.262574][ T29] audit: type=1326 audit(1762031309.353:11206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12863 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 202.286262][ T29] audit: type=1326 audit(1762031309.353:11207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12863 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 202.309846][ T29] audit: type=1326 audit(1762031309.353:11208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12863 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 202.333428][ T29] audit: type=1326 audit(1762031309.353:11209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12863 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 202.749870][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.823675][T12875] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 202.833574][T12875] SELinux: failed to load policy [ 202.864898][T12875] macvtap0: refused to change device tx_queue_len [ 202.928325][T12884] tipc: Enabled bearer , priority 0 [ 202.936631][T12884] tipc: Disabling bearer [ 202.973129][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3418'. [ 202.986144][T12887] macvtap1: entered promiscuous mode [ 202.991530][T12887] bond0: entered promiscuous mode [ 202.996683][T12887] bond_slave_0: entered promiscuous mode [ 203.002379][T12887] bond_slave_1: entered promiscuous mode [ 203.008196][T12887] macvtap1: entered allmulticast mode [ 203.013573][T12887] bond0: entered allmulticast mode [ 203.018798][T12887] bond_slave_0: entered allmulticast mode [ 203.024567][T12887] bond_slave_1: entered allmulticast mode [ 203.034266][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3418'. [ 203.043565][T12887] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 203.062843][T12890] bond0: left allmulticast mode [ 203.067792][T12890] bond_slave_0: left allmulticast mode [ 203.073321][T12890] bond_slave_1: left allmulticast mode [ 203.078852][T12890] bond0: left promiscuous mode [ 203.083632][T12890] bond_slave_0: left promiscuous mode [ 203.089230][T12890] bond_slave_1: left promiscuous mode [ 203.165609][T12894] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 203.280249][T12901] netlink: 'syz.0.3424': attribute type 1 has an invalid length. [ 203.313520][T12901] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 203.325398][T12901] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 203.504584][T12906] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 203.597087][T12901] bond1: (slave gretap1): making interface the new active one [ 203.623597][T12901] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 203.633236][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3425'. [ 203.680546][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3425'. [ 204.184419][T12917] netlink: 'syz.6.3427': attribute type 13 has an invalid length. [ 204.270408][T12917] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.277806][T12917] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.433348][ T8143] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.444367][ T8143] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.453368][ T8143] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.471187][ T8143] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.562871][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3429'. [ 204.577740][T12921] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3429'. [ 204.663842][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3431'. [ 205.050828][T12938] loop7: detected capacity change from 0 to 512 [ 205.127658][T12938] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 205.135691][T12938] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 205.258341][T12938] System zones: 0-1, 15-15, 18-18, 34-34 [ 205.283307][T12938] EXT4-fs (loop7): orphan cleanup on readonly fs [ 205.292231][T12938] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 205.306887][T12938] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 205.344788][ T8152] Bluetooth: hci0: Frame reassembly failed (-84) [ 205.352006][T12938] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3435: bg 0: block 40: padding at end of block bitmap is not set [ 205.408292][T12938] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 205.417238][T12938] EXT4-fs (loop7): 1 truncate cleaned up [ 205.423580][T12938] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.439296][T12938] EXT4-fs (loop7): shut down requested (1) [ 205.445623][T12938] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=16 [ 205.454508][T12938] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=16 [ 205.474840][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.910507][T12959] loop7: detected capacity change from 0 to 512 [ 205.917581][T12959] EXT4-fs: Ignoring removed i_version option [ 205.989041][T12959] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 205.997201][T12959] System zones: 0-2, 18-18, 34-35 [ 206.005390][T12959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.017995][T12959] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.730554][T12968] loop1: detected capacity change from 0 to 512 [ 207.295685][T12968] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3441: couldn't read orphan inode 26 (err -116) [ 207.308193][T12968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.320667][T12968] ext4 filesystem being mounted at /650/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.357781][T12973] tipc: Enabling of bearer rejected, failed to enable media [ 207.400160][T12975] netlink: 'syz.0.3444': attribute type 13 has an invalid length. [ 207.408216][ T3745] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 207.414364][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 207.506346][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.141461][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.185192][T12991] sch_fq: defrate 0 ignored. [ 208.253807][T12993] lo: Caught tx_queue_len zero misconfig [ 208.313495][T12999] tipc: Started in network mode [ 208.318596][T12999] tipc: Node identity ac14140f, cluster identity 4711 [ 208.325654][T12999] tipc: New replicast peer: 255.255.255.255 [ 208.331753][T12999] tipc: Enabled bearer , priority 10 [ 208.431537][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 208.431555][ T29] audit: type=1400 audit(1762031315.683:11287): avc: denied { name_connect } for pid=12988 comm="syz.1.3445" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 208.740074][T13009] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3455'. [ 208.794496][T13011] vlan0: entered promiscuous mode [ 208.799586][T13011] team0: entered promiscuous mode [ 208.804691][T13011] C: entered promiscuous mode [ 208.809500][T13011] team_slave_1: entered promiscuous mode [ 208.845730][ T29] audit: type=1326 audit(1762031315.903:11288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13004 comm="syz.0.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 208.869420][ T29] audit: type=1326 audit(1762031315.903:11289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13004 comm="syz.0.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 208.893003][ T29] audit: type=1326 audit(1762031315.903:11290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13004 comm="syz.0.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 208.916621][ T29] audit: type=1326 audit(1762031315.903:11291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13004 comm="syz.0.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 208.940279][ T29] audit: type=1326 audit(1762031315.903:11292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13004 comm="syz.0.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 208.963930][ T29] audit: type=1326 audit(1762031315.903:11293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13004 comm="syz.0.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 208.987660][ T29] audit: type=1326 audit(1762031315.903:11294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13004 comm="syz.0.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 209.011330][ T29] audit: type=1326 audit(1762031315.903:11295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13004 comm="syz.0.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 209.034969][ T29] audit: type=1326 audit(1762031315.903:11296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13004 comm="syz.0.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 209.111238][T13013] wireguard0: entered promiscuous mode [ 209.116959][T13013] wireguard0: entered allmulticast mode [ 209.129542][T13020] loop9: detected capacity change from 0 to 7 [ 209.137214][T13020] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.148441][T13018] syzkaller0: entered promiscuous mode [ 209.153978][T13018] syzkaller0: entered allmulticast mode [ 209.159836][T13020] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.167822][T13020] loop9: unable to read partition table [ 209.178201][T13020] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 209.178201][T13020] ) failed (rc=-5) [ 209.232434][T13029] syzkaller0: entered promiscuous mode [ 209.238059][T13029] syzkaller0: entered allmulticast mode [ 209.467777][ T23] tipc: Node number set to 2886997007 [ 209.479713][T13039] loop1: detected capacity change from 0 to 512 [ 209.492027][T13039] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.3466: iget: bad extra_isize 90 (inode size 256) [ 209.506253][T13039] EXT4-fs (loop1): Remounting filesystem read-only [ 209.512904][T13039] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 209.554987][T13039] EXT4-fs (loop1): 1 orphan inode deleted [ 209.561899][T13039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.844363][T13043] lo speed is unknown, defaulting to 1000 [ 209.850161][T13043] lo speed is unknown, defaulting to 1000 [ 209.856319][T13043] lo speed is unknown, defaulting to 1000 [ 209.863597][T13043] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 209.874585][T13043] lo speed is unknown, defaulting to 1000 [ 209.880867][T13043] lo speed is unknown, defaulting to 1000 [ 209.887478][T13043] lo speed is unknown, defaulting to 1000 [ 209.893708][T13043] lo speed is unknown, defaulting to 1000 [ 209.900349][T13043] lo speed is unknown, defaulting to 1000 [ 210.298145][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.317481][T13045] loop7: detected capacity change from 0 to 128 [ 210.472489][T13054] loop1: detected capacity change from 0 to 1024 [ 210.494857][T13054] EXT4-fs: Ignoring removed orlov option [ 210.508074][T13054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.585662][T13059] lo speed is unknown, defaulting to 1000 [ 211.061818][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3476'. [ 211.218457][T13080] lo speed is unknown, defaulting to 1000 [ 211.247327][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.327444][T13085] lo speed is unknown, defaulting to 1000 [ 211.557002][T13103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.574529][T13103] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 211.616770][T13103] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 211.659846][T13110] lo speed is unknown, defaulting to 1000 [ 211.823022][T13109] loop5: detected capacity change from 0 to 1024 [ 211.831206][T13109] EXT4-fs: inline encryption not supported [ 211.878202][T13109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.024442][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.456012][T13126] netlink: 'syz.7.3492': attribute type 12 has an invalid length. [ 212.484582][T13130] loop1: detected capacity change from 0 to 2048 [ 212.516338][T13130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.576766][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3497'. [ 212.588996][T13142] macvtap1: entered promiscuous mode [ 212.594477][T13142] macvtap1: entered allmulticast mode [ 212.599910][T13142] $H: entered allmulticast mode [ 212.605140][T13142] bond_slave_0: entered allmulticast mode [ 212.610896][T13142] bond_slave_1: entered allmulticast mode [ 212.636040][T13130] ext4 filesystem being mounted at /656/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.658072][T13142] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 212.690206][T13157] $H: left allmulticast mode [ 212.695177][T13157] bond_slave_0: left allmulticast mode [ 212.700774][T13157] bond_slave_1: left allmulticast mode [ 212.822805][T13171] loop7: detected capacity change from 0 to 1024 [ 212.849117][T13171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.871922][T13175] netlink: 83992 bytes leftover after parsing attributes in process `+}[@'. [ 212.884484][T13175] netlink: zone id is out of range [ 212.889603][T13175] netlink: zone id is out of range [ 212.904475][T13175] netlink: zone id is out of range [ 212.914886][T13175] netlink: zone id is out of range [ 212.920794][T13175] netlink: zone id is out of range [ 212.926205][T13175] netlink: zone id is out of range [ 212.932566][T13175] netlink: zone id is out of range [ 212.937744][T13175] netlink: zone id is out of range [ 212.942865][T13175] netlink: zone id is out of range [ 212.947997][T13175] netlink: zone id is out of range [ 212.987843][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.057180][T13185] netlink: 'syz.0.3503': attribute type 1 has an invalid length. [ 213.127108][T13188] loop5: detected capacity change from 0 to 512 [ 213.135211][ T8143] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:36: bg 0: block 345: padding at end of block bitmap is not set [ 213.158804][T13190] wg2: entered promiscuous mode [ 213.163700][T13190] wg2: entered allmulticast mode [ 213.173465][ T8143] EXT4-fs (loop1): Remounting filesystem read-only [ 213.180098][ T8127] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 213.224352][T13188] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3501: couldn't read orphan inode 26 (err -116) [ 213.238087][T13188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.250703][T13188] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.385062][T13193] lo speed is unknown, defaulting to 1000 [ 213.438708][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.593911][T13204] netlink: 'syz.0.3517': attribute type 10 has an invalid length. [ 213.621999][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3508'. [ 213.648492][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3508'. [ 213.657632][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 213.657644][ T29] audit: type=1326 audit(1762031320.933:11635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.7.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63776cefc9 code=0x7ffc0000 [ 213.687798][ T29] audit: type=1326 audit(1762031320.933:11636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.7.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63776cefc9 code=0x7ffc0000 [ 213.711400][ T29] audit: type=1326 audit(1762031320.933:11637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.7.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63776cefc9 code=0x7ffc0000 [ 213.735020][ T29] audit: type=1326 audit(1762031320.933:11638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.7.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63776cefc9 code=0x7ffc0000 [ 213.758717][ T29] audit: type=1326 audit(1762031320.933:11639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.7.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63776cefc9 code=0x7ffc0000 [ 213.782542][ T29] audit: type=1326 audit(1762031320.943:11640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.7.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63776cefc9 code=0x7ffc0000 [ 213.806153][ T29] audit: type=1326 audit(1762031320.943:11641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.7.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63776cefc9 code=0x7ffc0000 [ 213.829754][ T29] audit: type=1326 audit(1762031320.943:11642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.7.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63776cefc9 code=0x7ffc0000 [ 213.853337][ T29] audit: type=1326 audit(1762031320.943:11643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.7.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f63776cefc9 code=0x7ffc0000 [ 213.876984][ T29] audit: type=1326 audit(1762031320.943:11644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.7.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63776cefc9 code=0x7ffc0000 [ 213.922426][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.950089][T13211] C: entered promiscuous mode [ 213.954902][T13211] team_slave_1: entered promiscuous mode [ 213.960560][T13211] dummy0: entered promiscuous mode [ 213.966624][T13211] vlan0: entered promiscuous mode [ 213.971709][T13211] team0: entered promiscuous mode [ 214.108888][T13217] loop5: detected capacity change from 0 to 1024 [ 214.126912][T13217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.161863][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.289348][T13223] siw: device registration error -23 [ 214.335718][T13227] loop7: detected capacity change from 0 to 1024 [ 214.344770][T13227] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.366405][T13227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.404865][T13233] loop1: detected capacity change from 0 to 256 [ 214.412025][T13233] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.510179][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3518'. [ 214.521620][T13236] macvtap1: entered promiscuous mode [ 214.527055][T13236] bond0: entered promiscuous mode [ 214.532193][T13236] bond_slave_0: entered promiscuous mode [ 214.537969][T13236] bond_slave_1: entered promiscuous mode [ 214.543764][T13236] macvtap1: entered allmulticast mode [ 214.549208][T13236] bond0: entered allmulticast mode [ 214.554332][T13236] bond_slave_0: entered allmulticast mode [ 214.560049][T13236] bond_slave_1: entered allmulticast mode [ 214.566557][T13236] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 214.575361][T13237] bond0: left allmulticast mode [ 214.580276][T13237] bond_slave_0: left allmulticast mode [ 214.585849][T13237] bond_slave_1: left allmulticast mode [ 214.591304][T13237] bond0: left promiscuous mode [ 214.596097][T13237] bond_slave_0: left promiscuous mode [ 214.601509][T13237] bond_slave_1: left promiscuous mode [ 214.830413][T13244] loop1: detected capacity change from 0 to 512 [ 214.847229][T13244] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3521: couldn't read orphan inode 26 (err -116) [ 214.860462][T13244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.873056][T13244] ext4 filesystem being mounted at /660/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.121465][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.433708][T13253] loop5: detected capacity change from 0 to 128 [ 215.626172][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.993670][T13261] loop7: detected capacity change from 0 to 512 [ 216.018945][T13261] EXT4-fs: Ignoring removed i_version option [ 216.025154][T13261] EXT4-fs: Ignoring removed bh option [ 216.108735][T13261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.147486][T13261] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.303847][T13277] loop5: detected capacity change from 0 to 2048 [ 216.321604][T13277] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 216.331330][T13277] EXT4-fs (loop5): group descriptors corrupted! [ 216.340712][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.127271][T13289] lo speed is unknown, defaulting to 1000 [ 217.684925][T13299] tipc: Enabled bearer , priority 0 [ 217.715273][T13299] syzkaller0: entered promiscuous mode [ 217.720777][T13299] syzkaller0: entered allmulticast mode [ 217.783031][T13299] tipc: Resetting bearer [ 217.790474][T13301] tipc: Enabled bearer , priority 0 [ 217.806129][T13301] syzkaller0: entered promiscuous mode [ 217.811827][T13301] syzkaller0: entered allmulticast mode [ 217.838748][T13298] tipc: Resetting bearer [ 217.855412][T13298] tipc: Disabling bearer [ 217.881459][T13301] tipc: Resetting bearer [ 217.883993][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'. [ 217.899757][T13300] tipc: Resetting bearer [ 217.924970][T13300] tipc: Disabling bearer [ 217.932284][T13305] lo speed is unknown, defaulting to 1000 [ 217.988921][T13313] loop7: detected capacity change from 0 to 512 [ 218.007405][T13313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 218.020056][T13313] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.156763][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 218.193356][T13322] lo speed is unknown, defaulting to 1000 [ 218.255099][T13325] siw: device registration error -23 [ 218.358853][T13327] loop5: detected capacity change from 0 to 1024 [ 218.384133][T13327] EXT4-fs: Ignoring removed orlov option [ 218.446288][T13327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.497116][T13327] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 218.503693][T13327] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 218.511877][T13327] vhci_hcd vhci_hcd.0: Device attached [ 218.529610][T13327] vhci_hcd vhci_hcd.0: port 0 already used [ 218.538748][T13330] vhci_hcd: connection closed [ 218.539084][ T8127] vhci_hcd: stop threads [ 218.548094][ T8127] vhci_hcd: release socket [ 218.552509][ T8127] vhci_hcd: disconnect device [ 218.947577][T13343] lo speed is unknown, defaulting to 1000 [ 218.988344][ T1036] IPVS: starting estimator thread 0... [ 219.101574][T13344] IPVS: using max 2352 ests per chain, 117600 per kthread [ 219.132881][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.193513][T13352] loop1: detected capacity change from 0 to 128 [ 219.418965][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 219.418982][ T29] audit: type=1326 audit(1762031326.703:11872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 219.461484][T13354] loop1: detected capacity change from 0 to 512 [ 219.468829][T13354] EXT4-fs: Ignoring removed i_version option [ 219.475104][T13354] EXT4-fs: Ignoring removed bh option [ 219.500938][ T29] audit: type=1326 audit(1762031326.733:11873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 219.524690][ T29] audit: type=1326 audit(1762031326.733:11874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 219.548258][ T29] audit: type=1326 audit(1762031326.733:11875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 219.567376][T13357] can0: slcan on ttyS3. [ 219.571908][ T29] audit: type=1326 audit(1762031326.733:11876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 219.599634][ T29] audit: type=1326 audit(1762031326.733:11877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 219.623213][ T29] audit: type=1326 audit(1762031326.733:11878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 219.647274][ T29] audit: type=1326 audit(1762031326.733:11879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 219.652332][T13362] tipc: Enabling of bearer rejected, failed to enable media [ 219.671084][ T29] audit: type=1326 audit(1762031326.733:11880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 219.703360][ T29] audit: type=1326 audit(1762031326.733:11881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.1.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 219.728964][T13354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.748987][T13368] tipc: Enabling of bearer rejected, failed to enable media [ 219.759170][T13354] ext4 filesystem being mounted at /669/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.784374][T13358] can0 (unregistered): slcan off ttyS3. [ 219.804787][T13357] can0: slcan on ttyS3. [ 219.816878][ T8143] IPVS: stop unused estimator thread 0... [ 219.884576][T13356] can0 (unregistered): slcan off ttyS3. [ 220.101347][T13387] lo speed is unknown, defaulting to 1000 [ 220.855403][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.911760][T13394] tipc: Enabled bearer , priority 0 [ 220.918866][T13394] syzkaller0: entered promiscuous mode [ 220.924370][T13394] syzkaller0: entered allmulticast mode [ 220.934518][T13395] loop5: detected capacity change from 0 to 512 [ 220.944704][T13395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.956349][T13394] tipc: Resetting bearer [ 220.962428][T13395] EXT4-fs (loop5): orphan cleanup on readonly fs [ 220.969419][T13393] tipc: Resetting bearer [ 220.976981][T13395] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3562: bg 0: block 248: padding at end of block bitmap is not set [ 220.993003][T13393] tipc: Disabling bearer [ 220.996089][T13395] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3562: Failed to acquire dquot type 1 [ 221.011218][T13395] EXT4-fs (loop5): 1 truncate cleaned up [ 221.027209][T13399] lo speed is unknown, defaulting to 1000 [ 221.033501][T13395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.172886][T13406] loop1: detected capacity change from 0 to 512 [ 221.190982][T13406] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3563: couldn't read orphan inode 26 (err -116) [ 221.204437][T13406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.217081][T13406] ext4 filesystem being mounted at /670/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.559016][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.601143][T13414] loop5: detected capacity change from 0 to 1024 [ 221.607833][T13414] EXT4-fs: Ignoring removed orlov option [ 221.615973][T13414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.643674][T13417] tipc: Enabled bearer , priority 0 [ 221.675273][T13417] syzkaller0: entered promiscuous mode [ 221.680808][T13417] syzkaller0: entered allmulticast mode [ 221.694656][T13417] tipc: Resetting bearer [ 221.707071][T13416] tipc: Resetting bearer [ 221.719327][T13416] tipc: Disabling bearer [ 221.761645][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.818242][T13419] lo speed is unknown, defaulting to 1000 [ 221.858024][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.933181][T13432] loop7: detected capacity change from 0 to 256 [ 222.032675][T13440] hub 5-0:1.0: USB hub found [ 222.037449][T13440] hub 5-0:1.0: 8 ports detected [ 222.089908][T13444] syzkaller1: entered promiscuous mode [ 222.095453][T13444] syzkaller1: entered allmulticast mode [ 222.230833][T13450] lo speed is unknown, defaulting to 1000 [ 222.328292][T13457] can0: slcan on ttyS3. [ 222.411637][T13460] loop5: detected capacity change from 0 to 128 [ 222.418357][T13457] can0 (unregistered): slcan off ttyS3. [ 222.427126][T13459] can0: slcan on ttyS3. [ 222.464480][T13455] can0 (unregistered): slcan off ttyS3. [ 222.609655][T13468] tipc: Started in network mode [ 222.614618][T13468] tipc: Node identity 5e33be9a693a, cluster identity 4711 [ 222.621895][T13468] tipc: Enabled bearer , priority 0 [ 222.635176][T13468] syzkaller0: entered promiscuous mode [ 222.640825][T13468] syzkaller0: entered allmulticast mode [ 222.665112][T13468] tipc: Resetting bearer [ 222.674509][T13467] tipc: Resetting bearer [ 222.690617][T13467] tipc: Disabling bearer [ 222.938841][T13480] loop5: detected capacity change from 0 to 512 [ 222.952687][T13480] EXT4-fs: Ignoring removed i_version option [ 222.958872][T13480] EXT4-fs: Ignoring removed bh option [ 222.959929][T13484] loop7: detected capacity change from 0 to 1024 [ 222.972440][T13484] EXT4-fs: Ignoring removed orlov option [ 222.985241][T13483] loop1: detected capacity change from 0 to 256 [ 222.996252][T13486] lo speed is unknown, defaulting to 1000 [ 223.009959][T13480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.037279][T13480] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.038689][T13490] bridge0: port 3(gretap0) entered blocking state [ 223.054193][T13490] bridge0: port 3(gretap0) entered disabled state [ 223.061295][T13490] gretap0: entered allmulticast mode [ 223.067435][T13490] gretap0: entered promiscuous mode [ 223.073471][T13484] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.099895][T13484] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 223.106444][T13484] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.114612][T13484] vhci_hcd vhci_hcd.0: Device attached [ 223.127988][T13484] vhci_hcd vhci_hcd.0: port 0 already used [ 223.137448][T13492] vhci_hcd: connection closed [ 223.137679][ T8163] vhci_hcd: stop threads [ 223.146737][ T8163] vhci_hcd: release socket [ 223.151184][ T8163] vhci_hcd: disconnect device [ 223.195792][T13486] gretap0: left allmulticast mode [ 223.200929][T13486] gretap0: left promiscuous mode [ 223.206192][T13486] bridge0: port 3(gretap0) entered disabled state [ 223.214453][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.282796][T13502] tipc: Enabling of bearer rejected, failed to enable media [ 223.480170][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3599'. [ 223.607697][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'. [ 223.711862][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.763765][T13524] hub 5-0:1.0: USB hub found [ 223.768994][T13524] hub 5-0:1.0: 8 ports detected [ 223.804758][T13526] lo speed is unknown, defaulting to 1000 [ 224.126490][T13552] lo speed is unknown, defaulting to 1000 [ 224.149370][T13554] net_ratelimit: 366 callbacks suppressed [ 224.149409][T13554] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 224.475018][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3629'. [ 224.484258][T13571] hsr_slave_0: left promiscuous mode [ 224.490241][T13571] hsr_slave_1: left promiscuous mode [ 225.027992][T13586] team0: Port device dummy0 removed [ 225.043698][T13586] bridge_slave_0: left allmulticast mode [ 225.049436][T13586] bridge_slave_0: left promiscuous mode [ 225.055093][T13586] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.063429][T13586] bridge_slave_1: left allmulticast mode [ 225.066877][T13588] loop1: detected capacity change from 0 to 512 [ 225.069149][T13586] bridge_slave_1: left promiscuous mode [ 225.081092][T13586] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.083340][T13589] netlink: 4788 bytes leftover after parsing attributes in process `syz.7.3625'. [ 225.088257][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 225.088305][ T29] audit: type=1400 audit(1762031332.363:12128): avc: denied { bind } for pid=13585 comm="syz.7.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.103738][T13589] netlink: 4788 bytes leftover after parsing attributes in process `syz.7.3625'. [ 225.123452][ T29] audit: type=1400 audit(1762031332.363:12129): avc: denied { setopt } for pid=13585 comm="syz.7.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.150327][T13588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 225.152731][ T29] audit: type=1400 audit(1762031332.363:12130): avc: denied { write } for pid=13585 comm="syz.7.3625" path="socket:[36838]" dev="sockfs" ino=36838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.165504][T13588] ext4 filesystem being mounted at /679/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.210526][T13586] $H: (slave bond_slave_0): Releasing backup interface [ 225.223490][T13586] bond_slave_0: left promiscuous mode [ 225.233666][T13586] $H: (slave bond_slave_1): Releasing backup interface [ 225.241761][T13586] bond_slave_1: left promiscuous mode [ 225.248979][T13586] team0: Port device C removed [ 225.260211][T13586] team0: Port device team_slave_1 removed [ 225.267390][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 225.277201][T13586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.294223][T13586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.301877][T13586] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.470751][ T29] audit: type=1326 audit(1762031332.753:12131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13601 comm="syz.7.3630" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63776cefc9 code=0x0 [ 225.620069][T13606] loop1: detected capacity change from 0 to 512 [ 225.677067][T13606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.812928][T13606] ext4 filesystem being mounted at /680/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.454715][ T29] audit: type=1326 audit(1762031332.993:12132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 226.478568][ T29] audit: type=1326 audit(1762031332.993:12133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 226.502246][ T29] audit: type=1326 audit(1762031332.993:12134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 226.508407][T13623] loop5: detected capacity change from 0 to 1024 [ 226.525859][ T29] audit: type=1326 audit(1762031332.993:12135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 226.555737][ T29] audit: type=1326 audit(1762031332.993:12136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 226.579367][ T29] audit: type=1326 audit(1762031332.993:12137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.0.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 226.583717][T13623] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.677285][T13623] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 226.701993][T13623] EXT4-fs (loop5): orphan cleanup on readonly fs [ 226.722274][T13623] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.3644: Invalid inode table block 0 in block_group 0 [ 226.764387][T13623] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 226.792741][T13623] EXT4-fs error (device loop5): ext4_quota_write:7334: inode #3: comm syz.5.3644: mark_inode_dirty error [ 226.824547][T13623] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3644: Failed to acquire dquot type 0 [ 226.854240][T13623] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.3644: Invalid inode table block 0 in block_group 0 [ 226.884446][T13623] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 226.914265][T13623] EXT4-fs error (device loop5): ext4_ext_truncate:4475: inode #15: comm syz.5.3644: mark_inode_dirty error [ 226.934425][T13623] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.3644: Invalid inode table block 0 in block_group 0 [ 226.967664][T13623] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 226.994499][T13623] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 227.024920][T13623] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.3644: Invalid inode table block 0 in block_group 0 [ 227.054555][T13623] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 227.079682][T13623] EXT4-fs error (device loop5): ext4_truncate:4637: inode #15: comm syz.5.3644: mark_inode_dirty error [ 227.102203][T13623] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 227.133871][T13623] EXT4-fs (loop5): 1 truncate cleaned up [ 227.188812][T13623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.282774][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.297236][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 230.297300][ T29] audit: type=1326 audit(1762031337.583:12178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 230.327057][ T29] audit: type=1326 audit(1762031337.583:12179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 230.366854][T13673] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 230.381795][ T29] audit: type=1326 audit(1762031337.643:12180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 230.405488][ T29] audit: type=1326 audit(1762031337.643:12181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 230.429092][ T29] audit: type=1326 audit(1762031337.643:12182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 230.452710][ T29] audit: type=1326 audit(1762031337.643:12183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 230.476413][ T29] audit: type=1326 audit(1762031337.643:12184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 230.500022][ T29] audit: type=1326 audit(1762031337.643:12185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 230.523731][ T29] audit: type=1326 audit(1762031337.643:12186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 230.547381][ T29] audit: type=1326 audit(1762031337.643:12187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6a1efc9 code=0x7ffc0000 [ 230.602293][T13673] bond0 (unregistering): Released all slaves [ 231.070063][T13683] dummy0: left promiscuous mode [ 231.097105][T13683] team0: Port device dummy0 removed [ 231.136503][T13686] netlink: 4788 bytes leftover after parsing attributes in process `syz.5.3652'. [ 231.150432][T13683] bridge_slave_0: left allmulticast mode [ 231.156157][T13683] bridge_slave_0: left promiscuous mode [ 231.161958][T13683] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.174345][T13686] netlink: 4788 bytes leftover after parsing attributes in process `syz.5.3652'. [ 231.264441][T13683] bridge_slave_1: left allmulticast mode [ 231.270178][T13683] bridge_slave_1: left promiscuous mode [ 231.275936][T13683] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.392076][T13683] bond0: (slave bond_slave_0): Releasing backup interface [ 231.411325][T13683] bond0: (slave bond_slave_1): Releasing backup interface [ 231.422949][T13683] C: left promiscuous mode [ 231.433911][T13683] team0: Port device C removed [ 231.440355][T13683] team_slave_1: left promiscuous mode [ 231.596984][T13683] team0: Port device team_slave_1 removed [ 231.627519][T13683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.634991][T13683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.765282][T13683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.772985][T13683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.889678][T13683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.017722][T13697] lo speed is unknown, defaulting to 1000 [ 232.074390][T13685] lo speed is unknown, defaulting to 1000 [ 232.206573][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.313663][T13732] loop9: detected capacity change from 0 to 7 [ 232.320031][T13732] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.508135][T13732] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.516040][T13732] loop9: unable to read partition table [ 232.665029][T13732] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 232.665029][T13732] ) failed (rc=-5) [ 232.772798][T13743] loop7: detected capacity change from 0 to 164 [ 232.790845][T13743] ISOFS: unable to read i-node block [ 232.796249][T13743] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 232.983768][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3667'. [ 233.034959][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3667'. [ 233.060459][T13751] ip6tnl0: entered promiscuous mode [ 233.066138][T13751] ip6tnl0: entered allmulticast mode [ 233.095661][T13753] netlink: 'syz.7.3669': attribute type 10 has an invalid length. [ 233.103527][T13753] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3669'. [ 233.119903][T13753] team0: entered promiscuous mode [ 233.126234][T13753] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.133941][T13753] bridge0: port 1(team0) entered blocking state [ 233.140320][T13753] bridge0: port 1(team0) entered disabled state [ 233.146903][T13753] team0: entered allmulticast mode [ 233.248598][T13765] tipc: New replicast peer: 255.255.255.255 [ 233.254832][T13765] tipc: Enabled bearer , priority 10 [ 233.609714][T13779] team0: Caught tx_queue_len zero misconfig [ 233.683468][T13782] loop1: detected capacity change from 0 to 1024 [ 233.727148][T13782] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 233.872328][T13782] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 233.880624][T13782] EXT4-fs (loop1): orphan cleanup on readonly fs [ 233.933695][T13782] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.3679: Invalid inode table block 0 in block_group 0 [ 233.952745][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3680'. [ 233.973909][T13787] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3680'. [ 234.007246][T13782] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 234.017340][T13782] EXT4-fs error (device loop1): ext4_quota_write:7334: inode #3: comm syz.1.3679: mark_inode_dirty error [ 234.028947][T13782] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3679: Failed to acquire dquot type 0 [ 234.040477][T13782] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.3679: Invalid inode table block 0 in block_group 0 [ 234.053739][T13782] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 234.075153][T13782] EXT4-fs error (device loop1): ext4_ext_truncate:4475: inode #15: comm syz.1.3679: mark_inode_dirty error [ 234.086933][T13782] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.3679: Invalid inode table block 0 in block_group 0 [ 234.100072][T13782] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 234.109661][T13782] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 234.118403][T13782] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.3679: Invalid inode table block 0 in block_group 0 [ 234.132613][T13792] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 234.142545][T13782] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 234.152113][T13782] EXT4-fs error (device loop1): ext4_truncate:4637: inode #15: comm syz.1.3679: mark_inode_dirty error [ 234.163324][T13782] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 234.172484][T13782] EXT4-fs (loop1): 1 truncate cleaned up [ 234.179135][T13782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.223104][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.264335][ T1036] tipc: Node number set to 923385498 [ 234.385015][T13795] debugfs: 'netdev@ffff88811a6aa558' already exists in 'ref_tracker' [ 234.697793][T13821] lo speed is unknown, defaulting to 1000 [ 235.282264][T13828] lo speed is unknown, defaulting to 1000 [ 235.370564][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 235.370579][ T29] audit: type=1400 audit(1762031342.653:12304): avc: denied { read } for pid=13832 comm="syz.1.3692" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 235.400157][ T29] audit: type=1400 audit(1762031342.653:12305): avc: denied { open } for pid=13832 comm="syz.1.3692" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 235.472117][ T29] audit: type=1400 audit(1762031342.713:12306): avc: denied { ioctl } for pid=13832 comm="syz.1.3692" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 235.520784][T13839] loop5: detected capacity change from 0 to 512 [ 235.564174][T13839] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.585666][T13835] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3693'. [ 235.594945][T13835] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3693'. [ 235.624407][T13839] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.803661][ T29] audit: type=1326 audit(1762031343.083:12307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 235.827413][ T29] audit: type=1326 audit(1762031343.083:12308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 235.851038][ T29] audit: type=1326 audit(1762031343.083:12309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 235.874704][ T29] audit: type=1326 audit(1762031343.083:12310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 235.898398][ T29] audit: type=1326 audit(1762031343.083:12311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 235.921980][ T29] audit: type=1326 audit(1762031343.083:12312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 235.945539][ T29] audit: type=1326 audit(1762031343.083:12313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382c8efc9 code=0x7ffc0000 [ 235.976232][T13852] loop7: detected capacity change from 0 to 512 [ 236.025087][T13852] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3696: couldn't read orphan inode 26 (err -116) [ 236.038213][T13852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.050733][T13852] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.147679][T13856] netlink: 'syz.1.3698': attribute type 12 has an invalid length. [ 236.407065][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.674922][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.971820][T13876] lo speed is unknown, defaulting to 1000 [ 237.014346][T13876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.022967][T13876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.671818][T13891] loop5: detected capacity change from 0 to 4096 [ 237.687409][T13891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.890218][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.562602][T13929] loop5: detected capacity change from 0 to 2048 [ 239.607073][T13929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.723031][T13938] netlink: 'syz.0.3724': attribute type 10 has an invalid length. [ 239.732365][T13938] team0: Port device dummy0 added [ 239.738547][T13938] netlink: 'syz.0.3724': attribute type 10 has an invalid length. [ 239.746965][T13938] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 239.756493][T13938] team0: Failed to send options change via netlink (err -105) [ 239.764007][T13938] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 239.772861][T13938] team0: Port device dummy0 removed [ 239.779571][T13938] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 239.820363][T13940] syz.0.3725 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 239.854130][T13941] lo speed is unknown, defaulting to 1000 [ 240.172496][T13952] vlan0: entered allmulticast mode [ 240.177868][T13952] dummy0: entered allmulticast mode [ 240.257397][T13952] vlan0: entered allmulticast mode [ 240.386623][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.478708][T13959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3732'. [ 240.488224][T13959] bridge_slave_1: left allmulticast mode [ 240.493988][T13959] bridge_slave_1: left promiscuous mode [ 240.499786][T13959] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.507594][T13959] bridge_slave_0: left allmulticast mode [ 240.508411][T13961] loop7: detected capacity change from 0 to 128 [ 240.513285][T13959] bridge_slave_0: left promiscuous mode [ 240.525306][T13959] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.614122][T13970] netlink: 'syz.5.3736': attribute type 10 has an invalid length. [ 240.623584][T13970] dummy0: entered promiscuous mode [ 240.629342][T13970] team0: Port device dummy0 added [ 240.636748][T13970] netlink: 'syz.5.3736': attribute type 10 has an invalid length. [ 240.645276][T13970] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 240.658141][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3737'. [ 240.665804][T13970] dummy0: left promiscuous mode [ 240.670645][T13972] loop7: detected capacity change from 0 to 128 [ 240.681619][T13970] team0: Failed to send options change via netlink (err -105) [ 240.681983][T13972] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.690127][T13970] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 240.701656][T13972] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.710516][T13970] team0: Port device dummy0 removed [ 240.725973][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 240.725986][ T29] audit: type=1400 audit(1762031348.013:12487): avc: denied { create } for pid=13971 comm="syz.7.3737" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 240.729397][T13970] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 240.761959][T10970] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.813306][T13978] vlan0: entered allmulticast mode [ 240.818655][T13978] dummy0: entered allmulticast mode [ 240.835760][T13979] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 240.845752][ T29] audit: type=1400 audit(1762031348.123:12488): avc: denied { relabelfrom } for pid=13976 comm="syz.5.3739" name="MPTCPv6" dev="sockfs" ino=39588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 240.869243][ T29] audit: type=1400 audit(1762031348.123:12489): avc: denied { mac_admin } for pid=13976 comm="syz.5.3739" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.890618][ T29] audit: type=1400 audit(1762031348.133:12490): avc: denied { relabelto } for pid=13976 comm="syz.5.3739" name="MPTCPv6" dev="sockfs" ino=39588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:udev_var_run_t:s0" [ 240.934045][T13978] vlan0: entered allmulticast mode [ 241.015278][T13983] loop1: detected capacity change from 0 to 2048 [ 241.092250][ T29] audit: type=1400 audit(1762031348.373:12491): avc: denied { write } for pid=13982 comm="syz.5.3742" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.118126][T13984] sg_write: data in/out 268435420/14 bytes for SCSI command 0x0-- guessing data in; [ 241.118126][T13984] program syz.5.3742 not setting count and/or reply_len properly [ 241.287930][T13983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.432506][ T29] audit: type=1326 audit(1762031348.713:12492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 241.456274][ T29] audit: type=1326 audit(1762031348.713:12493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 241.479902][ T29] audit: type=1326 audit(1762031348.713:12494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 241.503851][ T29] audit: type=1326 audit(1762031348.713:12495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 241.527664][ T29] audit: type=1326 audit(1762031348.713:12496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13981 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 241.844037][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.890067][T13998] lo speed is unknown, defaulting to 1000 [ 242.527995][T14020] bridge_slave_0: left allmulticast mode [ 242.533702][T14020] bridge_slave_0: left promiscuous mode [ 242.539419][T14020] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.551971][T14022] netlink: 'syz.1.3754': attribute type 10 has an invalid length. [ 242.559925][T14022] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3754'. [ 242.572399][T14020] bridge_slave_1: left allmulticast mode [ 242.578415][T14020] bridge_slave_1: left promiscuous mode [ 242.584352][T14020] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.595158][T14020] bond0: (slave bond_slave_0): Releasing backup interface [ 242.604700][T14020] bond0: (slave bond_slave_1): Releasing backup interface [ 242.616797][T14020] team0: Port device C removed [ 242.624921][T14020] team0: Port device team_slave_1 removed [ 242.727257][T14025] lo speed is unknown, defaulting to 1000 [ 243.013170][T14028] loop5: detected capacity change from 0 to 128 [ 243.021408][T14028] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 243.033439][T14028] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 243.041461][T14028] FAT-fs (loop5): Filesystem has been set read-only [ 243.048345][T14028] bio_check_eod: 113 callbacks suppressed [ 243.048364][T14028] syz.5.3755: attempt to access beyond end of device [ 243.048364][T14028] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 243.105405][T14030] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 243.114927][T14032] netlink: 660 bytes leftover after parsing attributes in process `syz.1.3766'. [ 243.637012][T14032] infiniband sy: set down [ 243.641527][T14032] infiniband sy: added bond_slave_0 [ 243.769677][T14032] RDS/IB: sy: added [ 244.197224][T14032] smc: adding ib device sy with port count 1 [ 244.228646][T14032] smc: ib device sy port 1 has no pnetid [ 244.300802][T14052] 9pnet_fd: Insufficient options for proto=fd [ 244.448947][T14055] lo speed is unknown, defaulting to 1000 [ 244.469490][T14056] tipc: Enabling of bearer rejected, failed to enable media [ 244.504959][T14062] loop5: detected capacity change from 0 to 512 [ 244.537189][T14062] EXT4-fs (loop5): too many log groups per flexible block group [ 244.631547][T14062] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 244.660213][T14062] EXT4-fs (loop5): mount failed [ 244.665183][T14073] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 244.671717][T14073] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 244.679862][T14073] vhci_hcd vhci_hcd.0: Device attached [ 244.750485][T14081] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3770'. [ 244.769832][T14084] netlink: 'syz.5.3771': attribute type 10 has an invalid length. [ 244.794679][T14079] vhci_hcd vhci_hcd.0: port 0 already used [ 244.802838][T14075] vhci_hcd: connection closed [ 244.803115][ T8163] vhci_hcd: stop threads [ 244.805181][T14081] lo speed is unknown, defaulting to 1000 [ 244.807990][ T8163] vhci_hcd: release socket [ 244.812200][T14081] lo speed is unknown, defaulting to 1000 [ 244.817915][ T8163] vhci_hcd: disconnect device [ 244.833303][T14084] bond0: (slave dummy0): Releasing backup interface [ 244.843911][T14089] netlink: 'syz.5.3771': attribute type 10 has an invalid length. [ 244.854603][T14084] dummy0: entered promiscuous mode [ 244.860174][T14084] team0: Failed to send options change via netlink (err -105) [ 244.867729][T14084] team0: Port device dummy0 added [ 244.873256][T14081] lo speed is unknown, defaulting to 1000 [ 244.878271][T14089] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 244.881181][T14081] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 244.898307][T14089] dummy0: left promiscuous mode [ 244.921595][T14089] team0: Failed to send options change via netlink (err -105) [ 244.929723][T14089] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 244.938788][T14089] team0: Port device dummy0 removed [ 244.947293][T14089] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 244.986770][T14081] lo speed is unknown, defaulting to 1000 [ 244.992962][T14081] lo speed is unknown, defaulting to 1000 [ 245.011734][T14081] lo speed is unknown, defaulting to 1000 [ 245.027225][T14081] lo speed is unknown, defaulting to 1000 [ 245.042020][T14095] loop5: detected capacity change from 0 to 512 [ 245.043733][T14081] lo speed is unknown, defaulting to 1000 [ 245.063629][T14095] EXT4-fs (loop5): orphan cleanup on readonly fs [ 245.071151][T14095] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3773: bad orphan inode 13 [ 245.081472][T14095] ext4_test_bit(bit=12, block=18) = 1 [ 245.087021][T14095] is_bad_inode(inode)=0 [ 245.091194][T14095] NEXT_ORPHAN(inode)=2130706432 [ 245.096072][T14095] max_ino=32 [ 245.099280][T14095] i_nlink=1 [ 245.102950][T14095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 245.128285][T14095] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.3773: deleted inode referenced: 12 [ 245.155170][T14095] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.3773: deleted inode referenced: 12 [ 245.185215][T14095] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.3773: deleted inode referenced: 12 [ 245.223822][T14095] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 245.265305][T14095] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 245.300950][T14104] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3773: bg 0: block 248: padding at end of block bitmap is not set [ 245.354776][T14104] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3773: Failed to acquire dquot type 1 [ 245.739319][T14111] geneve1: Caught tx_queue_len zero misconfig [ 245.755110][T14111] loop1: detected capacity change from 0 to 1024 [ 245.801623][T14111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.835595][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.901433][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.971180][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 245.971196][ T29] audit: type=1400 audit(1762031353.253:12589): avc: denied { ioctl } for pid=14120 comm="syz.5.3779" path="socket:[39863]" dev="sockfs" ino=39863 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.068510][T14123] loop1: detected capacity change from 0 to 512 [ 246.164571][ T29] audit: type=1326 audit(1762031353.423:12590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14120 comm="syz.5.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 246.188248][ T29] audit: type=1326 audit(1762031353.423:12591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14120 comm="syz.5.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 246.219863][T14123] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm +}[@: inode has both inline data and extents flags [ 246.232774][T14123] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm +}[@: couldn't read orphan inode 15 (err -117) [ 246.245237][T14123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.284205][T14124] loop5: detected capacity change from 0 to 2048 [ 246.395433][ T29] audit: type=1326 audit(1762031353.653:12592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14120 comm="syz.5.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 246.419075][ T29] audit: type=1326 audit(1762031353.653:12593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14120 comm="syz.5.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 246.442769][ T29] audit: type=1326 audit(1762031353.653:12594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14120 comm="syz.5.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fde1aefc9 code=0x7ffc0000 [ 246.503079][T14124] loop5: p2 p3 p7 [ 246.820327][ T29] audit: type=1400 audit(1762031353.893:12595): avc: denied { sqpoll } for pid=14128 comm="syz.0.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 246.856280][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.932289][ T29] audit: type=1400 audit(1762031354.213:12596): avc: denied { mounton } for pid=14138 comm="syz.1.3784" path="/704/file0" dev="tmpfs" ino=3685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 246.955771][T14139] 9pnet_fd: Insufficient options for proto=fd [ 246.965074][T14139] loop1: detected capacity change from 0 to 512 [ 246.988570][T14139] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.005682][T14139] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 247.020650][T14139] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3784: bg 0: block 248: padding at end of block bitmap is not set [ 247.021151][ T29] audit: type=1400 audit(1762031354.303:12597): avc: denied { create } for pid=14142 comm="syz.5.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 247.036188][T14139] Quota error (device loop1): write_blk: dquota write failed [ 247.062191][T14139] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3784: Failed to acquire dquot type 1 [ 247.074077][T14139] EXT4-fs (loop1): 1 truncate cleaned up [ 247.080284][T14139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 247.177470][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 247.283086][T14149] tipc: Enabling of bearer rejected, failed to enable media [ 247.348839][T14154] lo speed is unknown, defaulting to 1000 [ 247.488312][T14154] lo speed is unknown, defaulting to 1000 [ 247.803525][T14164] Set syz1 is full, maxelem 65536 reached [ 247.936286][T14170] loop1: detected capacity change from 0 to 512 [ 247.977286][T14170] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 247.980857][T14172] tipc: Enabling of bearer rejected, failed to enable media [ 248.005525][T14170] EXT4-fs (loop1): invalid journal inode [ 248.012343][T14170] EXT4-fs (loop1): can't get journal size [ 248.022740][T14170] EXT4-fs (loop1): 1 truncate cleaned up [ 248.032738][T14170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.081458][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.136339][T14183] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3798'. [ 248.149828][T14183] siw: device registration error -23 [ 248.198826][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3802'. [ 248.250834][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3802'. [ 248.482425][T14201] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 248.543798][T14189] Set syz1 is full, maxelem 65536 reached [ 248.601040][T14205] bridge1: entered promiscuous mode [ 248.680713][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3807'. [ 248.692069][T14214] team0: left allmulticast mode [ 248.697335][T14214] bridge0: port 1(team0) entered disabled state [ 250.116621][T14234] lo speed is unknown, defaulting to 1000 [ 250.236440][T14234] lo speed is unknown, defaulting to 1000 [ 250.628415][T14238] bridge_slave_0: left allmulticast mode [ 250.634121][T14238] bridge_slave_0: left promiscuous mode [ 250.640068][T14238] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.648219][T14238] bridge_slave_1: left allmulticast mode [ 250.653867][T14238] bridge_slave_1: left promiscuous mode [ 250.659637][T14238] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.670527][T14238] bond0: (slave bond_slave_0): Releasing backup interface [ 250.678947][T14238] bond0: (slave bond_slave_1): Releasing backup interface [ 250.688570][T14242] netlink: 'syz.6.3815': attribute type 10 has an invalid length. [ 250.696486][T14242] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3815'. [ 250.706641][T14238] C: left promiscuous mode [ 250.711953][T14238] team0: Port device C removed [ 250.717234][T14238] team_slave_1: left promiscuous mode [ 250.723520][T14238] team0: Port device team_slave_1 removed [ 250.729702][T14238] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 250.748827][T14240] veth0_to_team: entered promiscuous mode [ 250.807753][T14249] loop5: detected capacity change from 0 to 1024 [ 250.825435][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3822'. [ 250.836273][T14249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.891066][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.944401][T14262] netlink: 'syz.5.3824': attribute type 21 has an invalid length. [ 250.952285][T14262] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.988301][T14262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.995586][T14262] IPv6: NLM_F_CREATE should be set when creating new route [ 251.002789][T14262] IPv6: NLM_F_CREATE should be set when creating new route [ 251.010021][T14262] IPv6: NLM_F_CREATE should be set when creating new route [ 251.091100][T14266] loop5: detected capacity change from 0 to 2048 [ 251.145571][T14266] Alternate GPT is invalid, using primary GPT. [ 251.148558][T14251] Set syz1 is full, maxelem 65536 reached [ 251.152047][T14266] loop5: p1 p2 p3 [ 251.161307][T14266] loop5: partition table partially beyond EOD, truncated [ 251.224498][T14280] syzkaller0: entered promiscuous mode [ 251.230035][T14280] syzkaller0: entered allmulticast mode [ 251.249132][T14280] tipc: Enabled bearer , priority 0 [ 251.257736][T14280] tipc: Resetting bearer [ 251.268066][T14279] tipc: Resetting bearer [ 251.281084][T14279] tipc: Disabling bearer [ 251.392207][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3831'. [ 251.606584][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 251.606610][ T29] audit: type=1400 audit(1762031358.893:12910): avc: denied { append } for pid=14289 comm="syz.7.3832" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 251.716036][T14292] futex_wake_op: syz.6.3833 tries to shift op by 32; fix this program [ 251.735099][T14290] loop7: detected capacity change from 0 to 128 [ 251.785101][T14290] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 251.792993][T14290] FAT-fs (loop7): Filesystem has been set read-only [ 251.820944][T14290] syz.7.3832: attempt to access beyond end of device [ 251.820944][T14290] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 251.842463][T14290] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 251.850394][T14290] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 251.858960][T14290] syz.7.3832: attempt to access beyond end of device [ 251.858960][T14290] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 251.872511][T14290] syz.7.3832: attempt to access beyond end of device [ 251.872511][T14290] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 251.886656][T14300] syz.7.3832: attempt to access beyond end of device [ 251.886656][T14300] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 251.899990][T14300] Buffer I/O error on dev loop7, logical block 2065, async page read [ 251.908700][T14300] syz.7.3832: attempt to access beyond end of device [ 251.908700][T14300] loop7: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 251.922101][T14300] Buffer I/O error on dev loop7, logical block 2066, async page read [ 251.930687][T14300] syz.7.3832: attempt to access beyond end of device [ 251.930687][T14300] loop7: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 251.943955][T14300] Buffer I/O error on dev loop7, logical block 2067, async page read [ 251.952495][T14300] syz.7.3832: attempt to access beyond end of device [ 251.952495][T14300] loop7: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 251.966042][T14300] Buffer I/O error on dev loop7, logical block 2068, async page read [ 251.974691][T14300] syz.7.3832: attempt to access beyond end of device [ 251.974691][T14300] loop7: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 251.987977][T14300] Buffer I/O error on dev loop7, logical block 2069, async page read [ 251.998099][ T29] audit: type=1326 audit(1762031359.283:12911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 252.022055][ T29] audit: type=1326 audit(1762031359.283:12912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 252.046282][ T29] audit: type=1326 audit(1762031359.283:12913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 252.070305][ T29] audit: type=1326 audit(1762031359.283:12914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 252.094374][ T29] audit: type=1326 audit(1762031359.283:12915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 252.099764][T14302] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 252.118578][ T29] audit: type=1326 audit(1762031359.283:12916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 252.141450][T14300] syz.7.3832: attempt to access beyond end of device [ 252.141450][T14300] loop7: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 252.153433][ T29] audit: type=1326 audit(1762031359.283:12917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 252.165784][T14300] Buffer I/O error on dev loop7, logical block 2070, async page read [ 252.194552][T14300] syz.7.3832: attempt to access beyond end of device [ 252.194552][T14300] loop7: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 252.199113][ T29] audit: type=1326 audit(1762031359.283:12918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 252.211559][T14300] Buffer I/O error on dev loop7, logical block 2071, async page read [ 252.211759][T14300] Buffer I/O error on dev loop7, logical block 2072, async page read [ 252.211856][T14300] Buffer I/O error on dev loop7, logical block 2065, async page read [ 252.211878][T14300] Buffer I/O error on dev loop7, logical block 2066, async page read [ 252.270905][ T29] audit: type=1326 audit(1762031359.283:12919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14301 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2976d6efc9 code=0x7ffc0000 [ 252.348606][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 252.356139][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 252.363628][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 252.371071][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 252.390814][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 252.398374][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 252.405794][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 252.413248][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 252.420762][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 252.428205][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 252.494106][ T23] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 252.542763][T14316] loop5: detected capacity change from 0 to 512 [ 252.549739][T14316] journal_path: Non-blockdev passed as './file0' [ 252.556598][T14316] EXT4-fs: error: could not find journal device path [ 252.570522][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3840'. [ 252.711279][T14329] netlink: 28 bytes leftover after parsing attributes in process `/dev/sg#'. [ 252.720260][T14329] netlink: 28 bytes leftover after parsing attributes in process `/dev/sg#'. [ 252.739806][T14331] loop5: detected capacity change from 0 to 512 [ 252.747172][T14331] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 252.756111][T14331] EXT4-fs (loop5): invalid journal inode [ 252.761857][T14331] EXT4-fs (loop5): can't get journal size [ 252.795638][T14331] EXT4-fs (loop5): 1 truncate cleaned up [ 252.801956][T14331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.845890][T14338] xt_hashlimit: max too large, truncated to 1048576 [ 252.853582][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.870936][T14340] 9pnet_fd: Insufficient options for proto=fd [ 252.956020][T14340] netlink: 'syz.5.3847': attribute type 39 has an invalid length. [ 253.305415][T14350] tipc: Enabling of bearer rejected, failed to enable media [ 253.640505][T14361] loop1: detected capacity change from 0 to 2048 [ 253.695815][T14361] Alternate GPT is invalid, using primary GPT. [ 253.702142][T14361] loop1: p1 p2 p3 [ 253.705988][T14361] loop1: partition table partially beyond EOD, truncated [ 253.768475][T14370] __nla_validate_parse: 1 callbacks suppressed [ 253.768493][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3856'. [ 253.769161][T14372] loop1: detected capacity change from 0 to 256 [ 253.792208][T14370] team0 (unregistering): Port device C removed [ 253.799273][T14370] team0 (unregistering): Port device team_slave_1 removed [ 253.799701][T14372] FAT-fs (loop1): Directory bread(block 64) failed [ 253.814008][T14372] FAT-fs (loop1): Directory bread(block 65) failed [ 253.820754][T14372] FAT-fs (loop1): Directory bread(block 66) failed [ 253.827352][T14372] FAT-fs (loop1): Directory bread(block 67) failed [ 253.834029][T14372] FAT-fs (loop1): Directory bread(block 68) failed [ 253.840974][T14372] FAT-fs (loop1): Directory bread(block 69) failed [ 253.847710][T14372] FAT-fs (loop1): Directory bread(block 70) failed [ 253.854819][T14372] FAT-fs (loop1): Directory bread(block 71) failed [ 253.861460][T14372] FAT-fs (loop1): Directory bread(block 72) failed [ 253.868043][T14372] FAT-fs (loop1): Directory bread(block 73) failed [ 253.868304][T14374] loop5: detected capacity change from 0 to 512 [ 253.892806][T14374] EXT4-fs (loop5): orphan cleanup on readonly fs [ 253.899666][T14374] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3858: bad orphan inode 13 [ 253.900516][T14372] netlink: 28 bytes leftover after parsing attributes in process `/dev/sg#'. [ 253.918641][T14372] netlink: 28 bytes leftover after parsing attributes in process `/dev/sg#'. [ 253.918745][T14374] ext4_test_bit(bit=12, block=18) = 1 [ 253.930668][T14372] ip6gretap0: entered promiscuous mode [ 253.932867][T14374] is_bad_inode(inode)=0 [ 253.939522][T14372] syz_tun: entered promiscuous mode [ 253.942529][T14374] NEXT_ORPHAN(inode)=2130706432 [ 253.948077][T14372] debugfs: 'hsr0' already exists in 'hsr' [ 253.952585][T14374] max_ino=32 [ 253.952595][T14374] i_nlink=1 [ 253.964848][T14372] Cannot create hsr debugfs directory [ 253.972107][T14374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.995060][T14374] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 254.025043][T14374] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 254.030161][T14382] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3860'. [ 254.043959][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3870'. [ 254.050187][T14382] tipc: Enabled bearer , priority 0 [ 254.062145][T14382] tipc: Disabling bearer [ 254.120348][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.138645][T14386] bridge1: entered promiscuous mode [ 254.155457][T14386] loop1: detected capacity change from 0 to 1024 [ 254.162491][T14386] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 254.173420][T14386] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 254.199439][T14389] loop5: detected capacity change from 0 to 2048 [ 254.207735][T14386] JBD2: no valid journal superblock found [ 254.213513][T14386] EXT4-fs (loop1): Could not load journal inode [ 254.221629][T14389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.525875][T14401] loop1: detected capacity change from 0 to 128 [ 255.557221][T14401] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 255.565154][T14401] FAT-fs (loop1): Filesystem has been set read-only [ 255.645938][T14403] loop7: detected capacity change from 0 to 2048 [ 255.695563][T14403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.711438][T14403] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.758082][ T6921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.775876][T14406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.784508][T14406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.799150][T14406] ================================================================== [ 255.807269][T14406] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 255.814491][T14406] [ 255.816827][T14406] read-write to 0xffff88811aa256b0 of 8 bytes by task 14403 on cpu 0: [ 255.825003][T14406] __xa_set_mark+0xd2/0x1a0 [ 255.829530][T14406] __folio_mark_dirty+0x384/0x4a0 [ 255.834579][T14406] mark_buffer_dirty+0x11e/0x210 [ 255.839527][T14406] folio_zero_new_buffers+0x28c/0x2e0 [ 255.844911][T14406] block_write_end+0x200/0x210 [ 255.849704][T14406] ext4_da_write_end+0x1d3/0x800 [ 255.854666][T14406] generic_perform_write+0x312/0x490 [ 255.859968][T14406] ext4_buffered_write_iter+0x1ee/0x3c0 [ 255.865526][T14406] ext4_file_write_iter+0x387/0xf60 [ 255.870738][T14406] vfs_write+0x52a/0x960 [ 255.874998][T14406] ksys_write+0xda/0x1a0 [ 255.879255][T14406] __x64_sys_write+0x40/0x50 [ 255.883960][T14406] x64_sys_call+0x2802/0x3000 [ 255.888657][T14406] do_syscall_64+0xd2/0x200 [ 255.893196][T14406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.899129][T14406] [ 255.901461][T14406] read to 0xffff88811aa256b0 of 8 bytes by task 14406 on cpu 1: [ 255.909092][T14406] xas_find_marked+0x218/0x620 [ 255.913870][T14406] find_get_entry+0x5d/0x380 [ 255.918489][T14406] filemap_get_folios_tag+0x13b/0x210 [ 255.923893][T14406] mpage_prepare_extent_to_map+0x320/0xc00 [ 255.929726][T14406] ext4_do_writepages+0xa05/0x2750 [ 255.934843][T14406] ext4_writepages+0x176/0x300 [ 255.939626][T14406] do_writepages+0x1c6/0x310 [ 255.944223][T14406] __filemap_fdatawrite_range+0xfb/0x140 [ 255.949865][T14406] generic_fadvise+0x312/0x430 [ 255.954651][T14406] __x64_sys_fadvise64+0xcb/0x110 [ 255.959692][T14406] x64_sys_call+0x29c5/0x3000 [ 255.964391][T14406] do_syscall_64+0xd2/0x200 [ 255.968905][T14406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.974815][T14406] [ 255.977130][T14406] value changed: 0x0000000000000007 -> 0x000000000000003f [ 255.984232][T14406] [ 255.986552][T14406] Reported by Kernel Concurrency Sanitizer on: [ 255.992693][T14406] CPU: 1 UID: 0 PID: 14406 Comm: syz.7.3867 Not tainted syzkaller #0 PREEMPT(voluntary) [ 256.002491][T14406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.012536][T14406] ================================================================== [ 256.024879][T14406] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3867: bg 0: block 345: padding at end of block bitmap is not set [ 256.039346][T14406] EXT4-fs (loop7): Remounting filesystem read-only [ 256.737074][T10970] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.