last executing test programs: 35.03474808s ago: executing program 1 (id=191): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x1, 0x40, 0xffffffff, 0x2, {{0x7, 0x4, 0x0, 0xc, 0x1c, 0x65, 0x0, 0x70, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, {[@rr={0x7, 0x3, 0x3f}, @timestamp_addr={0x44, 0x4, 0x7f, 0x1, 0x2}]}}}}}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) eventfd(0x5) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder-control\x00', 0x800, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 34.877746161s ago: executing program 1 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 34.669648842s ago: executing program 1 (id=201): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000000500050008000000180001801400020073797a5f74756e"], 0x34}}, 0x0) 34.573781912s ago: executing program 1 (id=203): epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0xfcb8) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200009700", [0x8]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 34.029276155s ago: executing program 1 (id=212): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480), &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0xd3ef, 0x105, 0x2, 0x4, 0x4, 0x7, 0x40000240}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[], 0x3, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 33.046703299s ago: executing program 1 (id=225): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 33.022569949s ago: executing program 32 (id=225): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 2.3341608s ago: executing program 4 (id=726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) getsockname$qrtr(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") creat(&(0x7f000009df00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60) creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000a00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$inet6(r0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) 2.054280321s ago: executing program 4 (id=730): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r3) 1.930536061s ago: executing program 4 (id=735): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs28uPFMUfAPBv9z74/XjtivgAUVeJceNjl11QOXjRaOIBo4ke8LjOLoQwsIZdEyFEVmPwYmJI9Gw8mvgXePNi1JOJV70bEqJcQE9juqcbZoaZhYXZmZX5fJKGqumarfpOdXVXd80EMLAmsn+SiK0R8VtEjNWzzQUm6v9dvXy28vfls5UkarW3/kzyclcun62URcv3bSkyk2lE+klSVNJs6fSZ43PV6sKpIj+9fOK96aXTZ549dmLu6MLRhZOzBw8e2D/zwvOzz3UlzlqtVruy+8PFPbtee+fC65XDF9796dusvVuL/Y1xdMtEFvhftVzrvie6XVmfbWtIJ8N9bAhrMhQRWXeN5ON/LIbieueNxasf97VxwLrKrk2bOu9eqQF3sST63QKgP8oLfXb/W249mnpsCJdeqt8AZXFfLbb6nuFIizIjLfe33TQREYdX/vkq22KdnkMAADT6rPLloXim3fwvjfsbym0v1obGI+KeiNgREfdGxM6IuC8iL/tARDy4xvpbl4ZunP+kF28rsFuUzf9eLNa2mud/5ewvxoeK3LY8/pHkyLHqwr7iM5mMkU1ZfmaVOr5/5dfPO+1rnP9lW1Z/ORcs2nFxuOUB3fzc8lw+Ke2CSx9F7B5uF39ybSUgiYhdEbF7bX96e5k49tQ3ezoVunn8q+jCOlPt64gn6/2/Ei3xl5LV1yen/xfVhX3T5VFxo59/Of9mp/rvKP4uyPp/c/Px31pkPGlcr11aex3nf/+04z3N7R7/o8nb+flotHjtg7nl5VMzEaPJoTzf9Prs9feW+bJ8Fv/k3vbjf0fxniz+hyIiO4gfjohHIuLRou2PRcTjEbF3lfh/fLnzvo3Q//Ntz3/Xjv+W/l97Yuj4D991qv/W+v9AnposXsnPfzdxqw28k88OAAAA/ivS/DvwSTp1LZ2mU1P17/DvjM1pdXFp+ekji++fnK9/V348RtLySddYw/PQmWSl+Iv1/GzxrLjcv794bvzF0P/z/FRlsTrf59hh0G3pMP4zfwz1u3XAumu3jjY72oeGAD3XOv7T5uy5N3rZGKCn/F4bBtdNxn/aq3YAvef6D4Or3fg/15K3FgB3J9d/GFzGPwwu4x8Gl/EPA+lOftcvMciJSDdEMyTWKdHvMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB3/BsAAP//bK7yyQ==") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000d40)="$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") 1.756778432s ago: executing program 4 (id=736): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) close(r2) 1.737064292s ago: executing program 4 (id=737): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 1.512459783s ago: executing program 2 (id=739): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.486743193s ago: executing program 2 (id=740): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.431581814s ago: executing program 3 (id=741): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(0x0, 0x0) setrlimit(0x40000000000008, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1200, 0x0, 0x3) 1.384178264s ago: executing program 3 (id=742): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "ed8d27d8e9ee9ffc", "40ea6e3c80265f50e043c08a37d3278a", "5e756880", "a929907359ff46a0"}, 0x28) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000020500000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1.296919014s ago: executing program 3 (id=743): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='qgroup_meta_free_all_pertrans\x00'}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r1) 1.127846245s ago: executing program 3 (id=744): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x3c8e, &(0x7f0000000500)={0x0, 0x490}) pause() close_range(r2, 0xffffffffffffffff, 0x0) 1.048803385s ago: executing program 0 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x14, r3, 0xb31}, 0x14}}, 0x0) 873.714386ms ago: executing program 4 (id=752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000300)}, 0x40000043) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 819.705197ms ago: executing program 0 (id=753): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811d", 0x1f}], 0x1}, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)='dn:') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0) 762.377427ms ago: executing program 5 (id=754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x80000000, &(0x7f0000000200)) lstat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x4040044) 706.662347ms ago: executing program 5 (id=755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffffef) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}], 0x1) 705.916947ms ago: executing program 0 (id=756): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeb8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) socket$packet(0x11, 0x0, 0x300) setitimer(0x1, 0x0, 0x0) 652.157777ms ago: executing program 0 (id=757): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1e08f000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000380)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 622.880827ms ago: executing program 2 (id=758): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100)) 553.863967ms ago: executing program 2 (id=759): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 524.998498ms ago: executing program 5 (id=760): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket(0x2b, 0x1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x18) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xfe, 0x36, 0x1}, 0x10) 452.795448ms ago: executing program 2 (id=761): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x8004745a, 0x2000000c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 449.256988ms ago: executing program 5 (id=762): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r3, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r4 = dup2(r3, r2) sendmsg$nl_route_sched(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) 336.127249ms ago: executing program 5 (id=763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000003c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x304}, "f09897f100008000", "0d07080d004fcf0000e8ffff1a8600", "cf0d1d00", "8657e2b7e43b34e4"}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000580), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) 312.150049ms ago: executing program 2 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000280), 0x45}, 0x0) 287.897959ms ago: executing program 5 (id=765): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000ac0)={0x80000000, 0x6, 0x0, 0x0, 0x8000000400000, 0x0, 0x0, 0x0, 0x101}) 265.155529ms ago: executing program 3 (id=766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, {0x0, @local, 'veth0_virt_wifi\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, 0x0, &(0x7f00000006c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 240.578459ms ago: executing program 0 (id=767): r0 = io_uring_setup(0x4fb2, &(0x7f0000000140)={0x0, 0x574, 0x100, 0x2, 0x1dc}) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='xdp_bulk_tx\x00'}, 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x0, 0x0}) 35.08005ms ago: executing program 3 (id=768): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 0 (id=769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) shutdown(r2, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = accept(r3, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000)='\x00', 0x1, 0x4000045, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 33.251290][ T3470] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.305851][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.313843][ T3483] batadv_slave_0: entered promiscuous mode [ 33.328277][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.334198][ T3481] loop4: detected capacity change from 0 to 2048 [ 33.362732][ T3481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.387583][ T3481] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 33.399993][ T3481] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.399993][ T3481] [ 33.409761][ T3481] EXT4-fs (loop4): Total free blocks count 0 [ 33.415864][ T3481] EXT4-fs (loop4): Free/Dirty block details [ 33.421788][ T3481] EXT4-fs (loop4): free_blocks=0 [ 33.426839][ T3481] EXT4-fs (loop4): dirty_blocks=0 [ 33.431959][ T3481] EXT4-fs (loop4): Block reservation details [ 33.438085][ T3481] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 33.444133][ T3489] loop0: detected capacity change from 0 to 512 [ 33.452909][ T3481] syz.4.8 (3481) used greatest stack depth: 10560 bytes left [ 33.462754][ T3489] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.476033][ T3489] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.500699][ T3489] EXT4-fs (loop0): 1 truncate cleaned up [ 33.510557][ T3489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.560970][ T3504] vlan2: entered promiscuous mode [ 33.566119][ T3504] ip6gretap0: entered promiscuous mode [ 33.571636][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.580776][ T3504] vlan2: entered allmulticast mode [ 33.585910][ T3504] ip6gretap0: entered allmulticast mode [ 33.599023][ T3504] team0: Device vlan2 is up. Set it down before adding it as a team port [ 33.609152][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.626052][ T3504] ip6gretap0: left allmulticast mode [ 33.631445][ T3504] ip6gretap0: left promiscuous mode [ 33.659765][ T3512] loop0: detected capacity change from 0 to 256 [ 33.682157][ T3512] ======================================================= [ 33.682157][ T3512] WARNING: The mand mount option has been deprecated and [ 33.682157][ T3512] and is ignored by this kernel. Remove the mand [ 33.682157][ T3512] option from the mount to silence this warning. [ 33.682157][ T3512] ======================================================= [ 33.734145][ T3512] FAT-fs (loop0): Directory bread(block 64) failed [ 33.740820][ T3512] FAT-fs (loop0): Directory bread(block 65) failed [ 33.764287][ T3512] FAT-fs (loop0): Directory bread(block 66) failed [ 33.770840][ T3512] FAT-fs (loop0): Directory bread(block 67) failed [ 33.779167][ T3512] FAT-fs (loop0): Directory bread(block 68) failed [ 33.798900][ T3512] FAT-fs (loop0): Directory bread(block 69) failed [ 33.820676][ T3514] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.831426][ T3512] FAT-fs (loop0): Directory bread(block 70) failed [ 33.845366][ T3512] FAT-fs (loop0): Directory bread(block 71) failed [ 33.858117][ T3512] FAT-fs (loop0): Directory bread(block 72) failed [ 33.865669][ T3512] FAT-fs (loop0): Directory bread(block 73) failed [ 33.996859][ T3539] loop3: detected capacity change from 0 to 256 [ 34.003785][ T3539] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.036490][ T3539] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.256844][ T3569] serio: Serial port ptm0 [ 34.564459][ T3574] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 34.769800][ T3620] lo speed is unknown, defaulting to 1000 [ 34.891073][ T3620] lo speed is unknown, defaulting to 1000 [ 34.903305][ T3620] lo speed is unknown, defaulting to 1000 [ 34.925422][ T3620] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.953575][ T3620] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 35.005712][ T3620] lo speed is unknown, defaulting to 1000 [ 35.021873][ T3393] IPVS: starting estimator thread 0... [ 35.056578][ T3648] lo speed is unknown, defaulting to 1000 [ 35.067504][ T3620] lo speed is unknown, defaulting to 1000 [ 35.090179][ T3620] lo speed is unknown, defaulting to 1000 [ 35.101753][ T3664] ref_ctr increment failed for inode: 0x3c offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888115aa5500 [ 35.111592][ T3620] lo speed is unknown, defaulting to 1000 [ 35.118375][ T3664] uprobe: syz.0.34:3664 failed to unregister, leaking uprobe [ 35.118840][ T3654] IPVS: using max 2352 ests per chain, 117600 per kthread [ 35.149350][ T3620] lo speed is unknown, defaulting to 1000 [ 35.237838][ T3668] ref_ctr increment failed for inode: 0x42 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888115aa5500 [ 35.249783][ T3667] uprobe: syz.0.36:3667 failed to unregister, leaking uprobe [ 35.287160][ T3674] netlink: 48 bytes leftover after parsing attributes in process `syz.2.37'. [ 35.733840][ T3690] wg1: entered promiscuous mode [ 35.738780][ T3690] wg1: entered allmulticast mode [ 35.759461][ T3514] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.781144][ T3694] loop0: detected capacity change from 0 to 2048 [ 35.789292][ T3694] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.805384][ T3694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.810701][ T3696] netlink: 'î{ŸL': attribute type 10 has an invalid length. [ 35.829962][ T3696] team0: Port device netdevsim1 added [ 35.875205][ T3701] loop1: detected capacity change from 0 to 512 [ 35.894901][ T3701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.907825][ T3701] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.932428][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.084014][ T3694] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.46: bg 0: block 234: padding at end of block bitmap is not set [ 36.099865][ T3694] EXT4-fs (loop0): Remounting filesystem read-only [ 36.156282][ T3694] syz.0.46 (3694) used greatest stack depth: 10008 bytes left [ 36.276418][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.374748][ T3717] ref_ctr increment failed for inode: 0x34 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888115aa5f80 [ 36.420958][ T3714] uprobe: syz.2.52:3714 failed to unregister, leaking uprobe [ 36.670822][ T3719] atomic_op ffff888115bb8528 conn xmit_atomic 0000000000000000 [ 36.717032][ T3721] loop2: detected capacity change from 0 to 2048 [ 36.717990][ T3723] loop0: detected capacity change from 0 to 2048 [ 36.735044][ T3721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.764546][ T3723] loop0: p1 < > p4 [ 36.769453][ T3723] loop0: p4 size 8388608 extends beyond EOD, truncated [ 36.777404][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.825953][ T3727] pim6reg1: entered promiscuous mode [ 36.831315][ T3727] pim6reg1: entered allmulticast mode [ 36.901294][ T3731] netlink: 'syz.2.57': attribute type 4 has an invalid length. [ 36.914485][ T1033] lo speed is unknown, defaulting to 1000 [ 36.935578][ T3731] netlink: 'syz.2.57': attribute type 4 has an invalid length. [ 36.946370][ T3379] lo speed is unknown, defaulting to 1000 [ 36.961300][ T3514] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.986123][ T3735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 36.998889][ T3735] vlan2: entered promiscuous mode [ 37.004089][ T3735] syz_tun: entered promiscuous mode [ 37.011479][ T3735] syz_tun: left promiscuous mode [ 37.026229][ T3514] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.046373][ T3740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.61'. [ 37.061552][ T3742] ref_ctr increment failed for inode: 0x55 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888115b7ea00 [ 37.076679][ T3742] uprobe: syz.1.62:3742 failed to unregister, leaking uprobe [ 37.130389][ T3514] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.148357][ T3514] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.166652][ T3514] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.180238][ T3514] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.208316][ T3750] loop4: detected capacity change from 0 to 512 [ 37.224942][ T3750] EXT4-fs: Mount option(s) incompatible with ext3 [ 37.672335][ T3757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.686345][ T3757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.723519][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 37.723595][ T29] audit: type=1400 audit(1731459038.621:575): avc: denied { ioctl } for pid=3755 comm="syz.0.67" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.754536][ T29] audit: type=1400 audit(1731459038.661:576): avc: denied { write } for pid=3755 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 38.166474][ T29] audit: type=1400 audit(1731459039.121:577): avc: denied { create } for pid=3772 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.229815][ T3779] loop1: detected capacity change from 0 to 1024 [ 38.237153][ T3779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.265647][ T29] audit: type=1400 audit(1731459039.221:578): avc: denied { append } for pid=3780 comm="syz.4.77" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.296448][ T3779] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.347251][ T29] audit: type=1326 audit(1731459039.291:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4f46e719 code=0x7ffc0000 [ 38.370635][ T29] audit: type=1326 audit(1731459039.291:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4f46e719 code=0x7ffc0000 [ 38.394065][ T29] audit: type=1326 audit(1731459039.291:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4f46e719 code=0x7ffc0000 [ 38.417243][ T29] audit: type=1326 audit(1731459039.291:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4f46e719 code=0x7ffc0000 [ 38.440538][ T29] audit: type=1326 audit(1731459039.301:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4f46e719 code=0x7ffc0000 [ 38.469362][ T29] audit: type=1326 audit(1731459039.391:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4f46e719 code=0x7ffc0000 [ 38.514584][ T3779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 38.531727][ T3779] hsr_slave_1 (unregistering): left promiscuous mode [ 38.560151][ T3794] loop3: detected capacity change from 0 to 512 [ 38.589211][ T3794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.602722][ T3794] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.643566][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.738867][ T3800] lo speed is unknown, defaulting to 1000 [ 38.781073][ T3802] lo speed is unknown, defaulting to 1000 [ 38.823098][ T8] IPVS: starting estimator thread 0... [ 38.823150][ T3802] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 38.923064][ T3807] IPVS: using max 1872 ests per chain, 93600 per kthread [ 38.957072][ T3813] loop3: detected capacity change from 0 to 1024 [ 38.974334][ T3813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.991919][ T3813] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 40 with max blocks 4 with error 28 [ 39.004461][ T3813] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.004461][ T3813] [ 39.014172][ T3813] EXT4-fs (loop3): Total free blocks count 0 [ 39.020226][ T3813] EXT4-fs (loop3): Free/Dirty block details [ 39.026208][ T3813] EXT4-fs (loop3): free_blocks=0 [ 39.031264][ T3813] EXT4-fs (loop3): dirty_blocks=0 [ 39.036415][ T3813] EXT4-fs (loop3): Block reservation details [ 39.042509][ T3813] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 39.057237][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.084928][ T11] IPVS: stop unused estimator thread 0... [ 39.170181][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 39.279342][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.289655][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.396569][ T3835] wg1: left promiscuous mode [ 39.401240][ T3835] wg1: left allmulticast mode [ 39.417210][ T3835] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.424446][ T3835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.442415][ T3835] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.449612][ T3835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.547195][ T3831] lo speed is unknown, defaulting to 1000 [ 39.558688][ T3831] lo speed is unknown, defaulting to 1000 [ 39.566187][ T3831] lo speed is unknown, defaulting to 1000 [ 39.580106][ T3831] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 39.591624][ T3831] lo speed is unknown, defaulting to 1000 [ 39.601042][ T3831] lo speed is unknown, defaulting to 1000 [ 39.607993][ T3831] lo speed is unknown, defaulting to 1000 [ 39.615364][ T3831] lo speed is unknown, defaulting to 1000 [ 39.621625][ T3831] lo speed is unknown, defaulting to 1000 [ 39.665959][ T3846] netlink: 145 bytes leftover after parsing attributes in process `syz.1.97'. [ 39.675083][ T3846] netlink: 145 bytes leftover after parsing attributes in process `syz.1.97'. [ 39.782549][ T3856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 39.826330][ T3860] netlink: 60 bytes leftover after parsing attributes in process `syz.3.104'. [ 39.835463][ T3860] netlink: 'syz.3.104': attribute type 2 has an invalid length. [ 39.843193][ T3860] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 39.850871][ T3860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 39.890832][ T3863] syz.1.105 uses obsolete (PF_INET,SOCK_PACKET) [ 39.936722][ T3865] loop3: detected capacity change from 0 to 8192 [ 39.949531][ T3865] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.084008][ T3878] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.102863][ T3880] loop1: detected capacity change from 0 to 512 [ 40.109569][ T3880] ext2: Unknown parameter 'euid<00000000000000060928' [ 40.152327][ T3882] loop1: detected capacity change from 0 to 2048 [ 40.171138][ T3882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.200668][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.669321][ T3878] usb usb7: usbfs: interface 0 claimed by hub while 'syz.2.112' sets config #15 [ 40.722348][ T3903] process 'syz.0.119' launched '/dev/fd/5' with NULL argv: empty string added [ 41.005247][ T3911] loop3: detected capacity change from 0 to 164 [ 41.015425][ T3911] syz.3.122: attempt to access beyond end of device [ 41.015425][ T3911] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 41.029311][ T3911] syz.3.122: attempt to access beyond end of device [ 41.029311][ T3911] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.042918][ T3911] syz.3.122: attempt to access beyond end of device [ 41.042918][ T3911] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.056610][ T3911] syz.3.122: attempt to access beyond end of device [ 41.056610][ T3911] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.074970][ T3911] syz.3.122: attempt to access beyond end of device [ 41.074970][ T3911] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.085907][ T3913] syz.1.123[3913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.088481][ T3913] syz.1.123[3913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.089706][ T3911] syz.3.122: attempt to access beyond end of device [ 41.089706][ T3911] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.100354][ T3913] syz.1.123[3913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.112430][ T3911] syz.3.122: attempt to access beyond end of device [ 41.112430][ T3911] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.150910][ T3911] syz.3.122: attempt to access beyond end of device [ 41.150910][ T3911] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.166855][ T3911] syz.3.122: attempt to access beyond end of device [ 41.166855][ T3911] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.184632][ T3915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 41.187938][ T3911] syz.3.122: attempt to access beyond end of device [ 41.187938][ T3911] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.648536][ T3922] loop2: detected capacity change from 0 to 512 [ 41.669030][ T3922] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.128: bad orphan inode 17 [ 41.680284][ T3922] ext4_test_bit(bit=16, block=4) = 1 [ 41.685646][ T3922] is_bad_inode(inode)=0 [ 41.689864][ T3922] NEXT_ORPHAN(inode)=0 [ 41.694005][ T3922] max_ino=32 [ 41.697291][ T3922] i_nlink=1 [ 41.701262][ T3922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.743486][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.778006][ T3931] loop2: detected capacity change from 0 to 164 [ 41.800891][ T3929] syzkaller0: entered promiscuous mode [ 41.806498][ T3929] syzkaller0: entered allmulticast mode [ 41.886317][ T3938] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.072554][ T3948] loop2: detected capacity change from 0 to 8192 [ 42.094298][ T3951] loop1: detected capacity change from 0 to 512 [ 42.101203][ T3951] EXT4-fs: Ignoring removed orlov option [ 42.114872][ T3951] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.128808][ T3948] Buffer I/O error on dev loop2, logical block 57847, async page read [ 42.138932][ T3948] Buffer I/O error on dev loop2, logical block 57847, async page read [ 42.149704][ T3951] EXT4-fs (loop1): 1 orphan inode deleted [ 42.155579][ T3951] EXT4-fs (loop1): 1 truncate cleaned up [ 42.174678][ T3951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.187930][ T3948] Buffer I/O error on dev loop2, logical block 57847, async page read [ 42.203853][ T3948] Buffer I/O error on dev loop2, logical block 57847, async page read [ 42.266700][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.363662][ T3958] netlink: 3 bytes leftover after parsing attributes in process `syz.1.140'. [ 42.372569][ T3958] 0ªX¹¦À: renamed from caif0 [ 42.403179][ T3958] 0ªX¹¦À: entered allmulticast mode [ 42.408428][ T3958] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 42.412044][ T3959] loop2: detected capacity change from 0 to 1024 [ 42.486355][ T3959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.597068][ T3974] loop1: detected capacity change from 0 to 164 [ 42.615354][ T3977] EXT4-fs (loop2): shut down requested (0) [ 42.749223][ T3981] lo speed is unknown, defaulting to 1000 [ 42.783169][ T3981] lo speed is unknown, defaulting to 1000 [ 42.855339][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 42.855354][ T29] audit: type=1400 audit(1731459043.811:772): avc: denied { relabelfrom } for pid=3990 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 42.888471][ T29] audit: type=1400 audit(1731459043.811:773): avc: denied { relabelto } for pid=3990 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 42.921733][ T3997] loop3: detected capacity change from 0 to 1024 [ 42.982919][ T29] audit: type=1400 audit(1731459043.931:774): avc: denied { bind } for pid=4000 comm="\" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 43.001442][ T29] audit: type=1400 audit(1731459043.931:775): avc: denied { name_bind } for pid=4000 comm="\" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 43.021619][ T29] audit: type=1400 audit(1731459043.931:776): avc: denied { node_bind } for pid=4000 comm="\" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 43.041774][ T29] audit: type=1400 audit(1731459043.941:777): avc: denied { listen } for pid=4000 comm="\" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 43.061591][ T29] audit: type=1400 audit(1731459043.941:778): avc: denied { connect } for pid=4000 comm="\" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 43.080384][ T29] audit: type=1400 audit(1731459043.941:779): avc: denied { name_connect } for pid=4000 comm="\" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 43.117359][ T3997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.138712][ T29] audit: type=1400 audit(1731459044.091:780): avc: denied { write } for pid=3996 comm="syz.3.145" path="/43/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.161269][ T29] audit: type=1400 audit(1731459044.091:781): avc: denied { map } for pid=3996 comm="syz.3.145" path="/43/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.189087][ T3997] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 40 with max blocks 4 with error 28 [ 43.201412][ T3997] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.201412][ T3997] [ 43.211224][ T3997] EXT4-fs (loop3): Total free blocks count 0 [ 43.217252][ T3997] EXT4-fs (loop3): Free/Dirty block details [ 43.223191][ T3997] EXT4-fs (loop3): free_blocks=0 [ 43.228148][ T3997] EXT4-fs (loop3): dirty_blocks=0 [ 43.233196][ T3997] EXT4-fs (loop3): Block reservation details [ 43.239270][ T3997] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 43.242755][ T4004] pim6reg1: entered promiscuous mode [ 43.250725][ T4004] pim6reg1: entered allmulticast mode [ 43.354195][ T4041] capability: warning: `syz.4.148' uses deprecated v2 capabilities in a way that may be insecure [ 43.388897][ T3412] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 43.511590][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.515893][ T3412] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 43.533093][ T3412] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.533093][ T3412] [ 43.542786][ T3412] EXT4-fs (loop2): Total free blocks count 0 [ 43.548908][ T3412] EXT4-fs (loop2): Free/Dirty block details [ 43.554921][ T3412] EXT4-fs (loop2): free_blocks=68451041280 [ 43.560788][ T3412] EXT4-fs (loop2): dirty_blocks=16384 [ 43.566278][ T3412] EXT4-fs (loop2): Block reservation details [ 43.572278][ T3412] EXT4-fs (loop2): i_reserved_data_blocks=1024 [ 43.738444][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 43.773537][ T4081] ip6t_rpfilter: unknown options [ 44.083096][ T4086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.091933][ T4086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.104074][ T4086] loop2: detected capacity change from 0 to 512 [ 44.112487][ T4086] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.118977][ T4083] syz.4.151[4083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.129151][ T4083] syz.4.151[4083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.140786][ T4083] syz.4.151[4083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.148848][ T4086] EXT4-fs (loop2): 1 truncate cleaned up [ 44.180126][ T4086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.429941][ T4095] loop4: detected capacity change from 0 to 256 [ 44.446853][ T4097] loop0: detected capacity change from 0 to 512 [ 44.457315][ T4097] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.474045][ T4097] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 44.482249][ T4097] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 44.491953][ T4097] EXT4-fs (loop0): 1 truncate cleaned up [ 44.507333][ T4097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.527599][ T4097] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 44.548889][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.617522][ T4104] can0: slcan on ttyS3. [ 44.638307][ T4106] loop0: detected capacity change from 0 to 512 [ 44.645413][ T4106] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.654606][ T4106] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 44.667200][ T4106] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 44.676090][ T4103] can0 (unregistered): slcan off ttyS3. [ 44.677856][ T4106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 44.689947][ T4106] System zones: 0-2, 18-18, 34-34 [ 44.703014][ T4106] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.708256][ T4109] loop1: detected capacity change from 0 to 512 [ 44.731718][ T4106] EXT4-fs (loop0): 1 truncate cleaned up [ 44.738114][ T4109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.747038][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.753298][ T4106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.772683][ T4109] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.773120][ T4106] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 44.813816][ T4109] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.163: bg 0: block 248: padding at end of block bitmap is not set [ 44.845304][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.854686][ T4109] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.163: Failed to acquire dquot type 1 [ 44.886626][ T4109] EXT4-fs (loop1): 1 truncate cleaned up [ 44.960598][ T4125] netlink: 'syz.3.170': attribute type 10 has an invalid length. [ 44.965809][ T4126] loop0: detected capacity change from 0 to 128 [ 44.976676][ T4109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.992395][ T4125] team0: Failed to send options change via netlink (err -105) [ 44.999946][ T4125] team0: Port device netdevsim1 added [ 45.015507][ T4127] netlink: 'syz.3.170': attribute type 10 has an invalid length. [ 45.033504][ T4127] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 45.045194][ T4127] team0: Failed to send options change via netlink (err -105) [ 45.053096][ T4127] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 45.062971][ T4127] team0: Port device netdevsim1 removed [ 45.072819][ T4127] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 45.091812][ T4109] syz.1.163 (4109) used greatest stack depth: 9344 bytes left [ 45.111116][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.142397][ T4130] syz.3.173[4130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.142547][ T4130] syz.3.173[4130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.154399][ T4130] syz.3.173[4130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.216539][ T4136] loop3: detected capacity change from 0 to 512 [ 45.237059][ T4138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'. [ 45.246419][ T4136] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 45.370039][ T4147] netlink: 72 bytes leftover after parsing attributes in process `syz.4.179'. [ 45.384645][ T4149] veth0_to_team: entered promiscuous mode [ 45.390466][ T4149] veth0_to_team: entered allmulticast mode [ 45.458302][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 45.470023][ T4152] bridge_slave_1: left allmulticast mode [ 45.475732][ T4152] bridge_slave_1: left promiscuous mode [ 45.481702][ T4152] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.491402][ T4152] bridge_slave_0: left allmulticast mode [ 45.497124][ T4152] bridge_slave_0: left promiscuous mode [ 45.502945][ T4152] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.658278][ T4154] loop0: detected capacity change from 0 to 512 [ 45.697069][ T4154] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 45.723386][ T4154] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.730123][ T4154] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 45.765676][ T4154] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 45.783298][ T4154] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.181: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 45.819119][ T4154] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.181: couldn't read orphan inode 13 (err -117) [ 45.858151][ T4154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.904551][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.907698][ T4158] loop2: detected capacity change from 0 to 512 [ 45.927967][ T4158] EXT4-fs: Ignoring removed nobh option [ 45.933621][ T4158] EXT4-fs: Ignoring removed nobh option [ 45.935382][ T4160] loop0: detected capacity change from 0 to 512 [ 45.946155][ T4158] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 45.955476][ T4158] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.182: invalid indirect mapped block 2683928664 (level 1) [ 45.960881][ T4160] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 45.972636][ T4158] EXT4-fs (loop2): 1 truncate cleaned up [ 45.986540][ T4158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.987012][ T4160] ref_ctr increment failed for inode: 0xdb offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888115b7c000 [ 46.014271][ T4159] uprobe: syz.0.183:4159 failed to unregister, leaking uprobe [ 46.032529][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.053485][ T4165] loop0: detected capacity change from 0 to 2048 [ 46.060098][ T4165] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.066601][ T4165] EXT4-fs: Ignoring removed i_version option [ 46.074979][ T4165] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 46.101909][ T4165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.141544][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.167094][ T4172] loop3: detected capacity change from 0 to 1024 [ 46.179477][ T4172] EXT4-fs: Ignoring removed orlov option [ 46.185335][ T4172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.193331][ T4174] tipc: Started in network mode [ 46.198228][ T4174] tipc: Node identity ac14140f, cluster identity 4711 [ 46.219839][ T4174] tipc: New replicast peer: 255.255.255.255 [ 46.226147][ T4174] tipc: Enabled bearer , priority 10 [ 46.233719][ T4176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 46.242542][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 46.274286][ T4180] tipc: Started in network mode [ 46.279201][ T4180] tipc: Node identity ac1414aa, cluster identity 4711 [ 46.286584][ T4172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.314173][ T4180] tipc: New replicast peer: 100.1.1.1 [ 46.319621][ T4180] tipc: Enabled bearer , priority 10 [ 46.328011][ T4187] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.336832][ T4187] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.345635][ T4187] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.354442][ T4187] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.363750][ T4187] vxlan0: entered promiscuous mode [ 46.364271][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.368886][ T4187] vxlan0: entered allmulticast mode [ 46.389124][ T4187] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.398116][ T4187] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.407207][ T4187] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.416221][ T4187] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.441827][ T4193] loop3: detected capacity change from 0 to 1024 [ 46.467714][ T4194] pim6reg1: entered promiscuous mode [ 46.473190][ T4194] pim6reg1: entered allmulticast mode [ 46.488268][ T4193] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 46.505400][ T4189] pim6reg1: entered promiscuous mode [ 46.510812][ T4189] pim6reg1: entered allmulticast mode [ 46.531112][ T4193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.558361][ T4205] loop4: detected capacity change from 0 to 2048 [ 46.600644][ T4205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.644362][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.690719][ T4215] loop1: detected capacity change from 0 to 2048 [ 46.696972][ T4217] syz.3.202[4217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.708626][ T4217] syz.3.202[4217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.732195][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.753504][ T4217] syz.3.202[4217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.763944][ T4215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.806324][ T4225] loop0: detected capacity change from 0 to 1024 [ 46.858506][ T4235] bridge0: port 3(vlan2) entered blocking state [ 46.864943][ T4235] bridge0: port 3(vlan2) entered disabled state [ 46.865844][ T4225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.871613][ T4235] vlan2: entered allmulticast mode [ 46.885449][ T4215] loop1: detected capacity change from 2048 to 0 [ 46.895237][ T4235] vlan2: left allmulticast mode [ 46.898672][ T4237] bio_check_eod: 23502 callbacks suppressed [ 46.898690][ T4237] syz.1.203: attempt to access beyond end of device [ 46.898690][ T4237] loop1: rw=536576, sector=8, nr_sectors = 4 limit=0 [ 46.919367][ T4237] syz.1.203: attempt to access beyond end of device [ 46.919367][ T4237] loop1: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 46.932604][ T4237] EXT4-fs error (device loop1): ext4_wait_block_bitmap:584: comm syz.1.203: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 46.946964][ T4237] syz.1.203: attempt to access beyond end of device [ 46.946964][ T4237] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 46.948887][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.960190][ T4237] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 46.961342][ T4237] EXT4-fs (loop1): I/O error while writing superblock [ 46.984658][ T4237] syz.1.203: attempt to access beyond end of device [ 46.984658][ T4237] loop1: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 46.998846][ T4237] EXT4-fs error (device loop1): ext4_wait_block_bitmap:584: comm syz.1.203: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 47.015739][ T4237] syz.1.203: attempt to access beyond end of device [ 47.015739][ T4237] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 47.028951][ T4237] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 47.043473][ T4242] loop0: detected capacity change from 0 to 512 [ 47.049292][ T4237] EXT4-fs (loop1): I/O error while writing superblock [ 47.056646][ T4237] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 5 [ 47.068884][ T4237] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.068884][ T4237] [ 47.076910][ T4242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.116678][ T4242] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 47.132642][ T4242] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.148144][ T4242] EXT4-fs (loop0): 1 truncate cleaned up [ 47.154445][ T4242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.176618][ T3313] syz-executor: attempt to access beyond end of device [ 47.176618][ T3313] loop1: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 47.191716][ T3313] syz-executor: attempt to access beyond end of device [ 47.191716][ T3313] loop1: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 47.201967][ T4251] pim6reg1: entered promiscuous mode [ 47.210611][ T4251] pim6reg1: entered allmulticast mode [ 47.218339][ T3313] syz-executor: attempt to access beyond end of device [ 47.218339][ T3313] loop1: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 47.232096][ T3313] syz-executor: attempt to access beyond end of device [ 47.232096][ T3313] loop1: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 47.232249][ T1033] tipc: Node number set to 2886997007 [ 47.247976][ T3313] syz-executor: attempt to access beyond end of device [ 47.247976][ T3313] loop1: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 47.293209][ T3313] EXT4-fs error (device loop1): ext4_get_inode_loc:4541: inode #2: block 4: comm syz-executor: unable to read itable block [ 47.325444][ T1033] tipc: Node number set to 2886997162 [ 47.332674][ T4262] capability: warning: `syz.0.208' uses 32-bit capabilities (legacy support in use) [ 47.332920][ T4254] syzkaller0: entered promiscuous mode [ 47.347639][ T4254] syzkaller0: entered allmulticast mode [ 47.354875][ T3313] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 47.363209][ T3313] EXT4-fs (loop1): I/O error while writing superblock [ 47.370059][ T3313] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: IO failure [ 47.380309][ T3313] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 47.391794][ T3313] EXT4-fs (loop1): I/O error while writing superblock [ 47.398656][ T3313] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 47.430095][ T3313] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 47.439900][ T3313] EXT4-fs (loop1): I/O error while writing superblock [ 47.477159][ T3412] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #18: block 6: comm kworker/u8:7: unable to read itable block [ 47.498504][ T3412] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 47.506978][ T3412] EXT4-fs (loop1): I/O error while writing superblock [ 47.514338][ T3412] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #2: block 4: comm kworker/u8:7: unable to read itable block [ 47.528310][ T3412] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 47.536844][ T3412] EXT4-fs (loop1): I/O error while writing superblock [ 47.613206][ T3313] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 47.626719][ T4221] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 47.657420][ T4296] mmap: syz.2.222 (4296) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.724242][ T4301] lo speed is unknown, defaulting to 1000 [ 47.730916][ T4301] lo speed is unknown, defaulting to 1000 [ 47.782468][ T4301] loop4: detected capacity change from 0 to 512 [ 47.854603][ T4301] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.869439][ T4301] EXT4-fs (loop4): mount failed [ 48.049046][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.060201][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 48.060216][ T29] audit: type=1400 audit(1731459049.011:976): avc: denied { name_bind } for pid=4310 comm="syz.2.224" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 48.220986][ T2374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.272768][ T29] audit: type=1400 audit(1731459049.221:977): avc: denied { mounton } for pid=4319 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.308536][ T2374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.409005][ T2374] team0: Port device netdevsim1 removed [ 48.416035][ T2374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.448416][ T4319] lo speed is unknown, defaulting to 1000 [ 48.454661][ T4319] lo speed is unknown, defaulting to 1000 [ 48.489411][ T4335] loop3: detected capacity change from 0 to 512 [ 48.510908][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 48.523275][ T4331] Falling back ldisc for ttyS3. [ 48.540524][ T2374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.543219][ T4339] loop0: detected capacity change from 0 to 2048 [ 48.555981][ T4335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.570616][ T4343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.232'. [ 48.573703][ T4335] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.594661][ T4339] loop0: p1 < > p3 p4 < > [ 48.595244][ T4335] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.230: corrupted inode contents [ 48.601336][ T4339] loop0: p3 start 4284289 is beyond EOD, truncated [ 48.614604][ T29] audit: type=1400 audit(1731459049.551:978): avc: denied { create } for pid=4334 comm="syz.3.230" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 48.639528][ T4335] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.230: mark_inode_dirty error [ 48.651987][ T4335] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.230: corrupted inode contents [ 48.665095][ T3016] loop0: p1 < > p3 p4 < > [ 48.669976][ T4335] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.230: mark_inode_dirty error [ 48.670323][ T3016] loop0: p3 start 4284289 is beyond EOD, truncated [ 48.692611][ T29] audit: type=1400 audit(1731459049.641:979): avc: denied { read } for pid=4338 comm="syz.0.231" name="loop0p4" dev="devtmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.715243][ T29] audit: type=1400 audit(1731459049.641:980): avc: denied { open } for pid=4338 comm="syz.0.231" path="/dev/loop0p4" dev="devtmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.742538][ T3844] udevd[3844]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 48.757223][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.764347][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.771482][ T29] audit: type=1400 audit(1731459049.721:981): avc: denied { create } for pid=4349 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.774351][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 48.792195][ T3844] udevd[3844]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 48.808393][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.812281][ T29] audit: type=1400 audit(1731459049.721:982): avc: denied { connect } for pid=4349 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.820557][ T4319] bridge_slave_0: entered allmulticast mode [ 48.845714][ T4319] bridge_slave_0: entered promiscuous mode [ 48.852563][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.859669][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.867044][ T4319] bridge_slave_1: entered allmulticast mode [ 48.873845][ T4319] bridge_slave_1: entered promiscuous mode [ 48.906818][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.915994][ T29] audit: type=1400 audit(1731459049.861:983): avc: denied { ioctl } for pid=4351 comm="syz.4.235" path="socket:[6591]" dev="sockfs" ino=6591 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.958672][ T4358] loop2: detected capacity change from 0 to 256 [ 48.962884][ T29] audit: type=1400 audit(1731459049.911:984): avc: denied { name_bind } for pid=4359 comm="syz.0.236" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 48.995225][ T4358] FAT-fs (loop2): Directory bread(block 64) failed [ 48.997316][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.001934][ T4358] FAT-fs (loop2): Directory bread(block 65) failed [ 49.013569][ T4354] pim6reg1: entered promiscuous mode [ 49.022702][ T4354] pim6reg1: entered allmulticast mode [ 49.022924][ T4358] FAT-fs (loop2): Directory bread(block 66) failed [ 49.031239][ T2374] bridge_slave_1: left allmulticast mode [ 49.036458][ T29] audit: type=1400 audit(1731459049.981:985): avc: denied { search } for pid=3054 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.040268][ T2374] bridge_slave_1: left promiscuous mode [ 49.040435][ T2374] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.075087][ T4358] FAT-fs (loop2): Directory bread(block 67) failed [ 49.081933][ T4358] FAT-fs (loop2): Directory bread(block 68) failed [ 49.089491][ T4358] FAT-fs (loop2): Directory bread(block 69) failed [ 49.101439][ T4358] FAT-fs (loop2): Directory bread(block 70) failed [ 49.108188][ T4358] FAT-fs (loop2): Directory bread(block 71) failed [ 49.114892][ T4358] FAT-fs (loop2): Directory bread(block 72) failed [ 49.115426][ T2374] bridge_slave_0: left allmulticast mode [ 49.121446][ T4358] FAT-fs (loop2): Directory bread(block 73) failed [ 49.127194][ T2374] bridge_slave_0: left promiscuous mode [ 49.139407][ T2374] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.279701][ T4370] loop4: detected capacity change from 0 to 512 [ 49.286858][ T4370] EXT4-fs: Ignoring removed oldalloc option [ 49.297922][ T4370] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.242: Parent and EA inode have the same ino 15 [ 49.310426][ T4370] EXT4-fs (loop4): Remounting filesystem read-only [ 49.310649][ T2374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.317013][ T4370] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 49.335747][ T4370] EXT4-fs (loop4): 1 orphan inode deleted [ 49.341934][ T4370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.354064][ T4370] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 49.354278][ T2374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.361680][ T4370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.381428][ T2374] bond0 (unregistering): Released all slaves [ 49.424720][ T4319] team0: Port device team_slave_0 added [ 49.431436][ T4319] team0: Port device team_slave_1 added [ 49.470623][ T4376] syzkaller0: entered promiscuous mode [ 49.476217][ T4376] syzkaller0: entered allmulticast mode [ 49.502535][ T2374] hsr_slave_0: left promiscuous mode [ 49.512485][ T2374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.519943][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.533688][ T2374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.541130][ T2374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.551508][ T2374] veth1_macvtap: left promiscuous mode [ 49.557132][ T2374] veth0_macvtap: left promiscuous mode [ 49.562707][ T2374] veth1_vlan: left promiscuous mode [ 49.568032][ T2374] veth0_vlan: left promiscuous mode [ 49.588673][ T4383] loop3: detected capacity change from 0 to 2048 [ 49.606956][ T4383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.686615][ T2374] team0 (unregistering): Port device team_slave_1 removed [ 49.701656][ T2374] team0 (unregistering): Port device team_slave_0 removed [ 49.752784][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.760029][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.786076][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.841960][ T3379] lo speed is unknown, defaulting to 1000 [ 49.848780][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.855868][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.881886][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.906175][ T3320] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.941035][ T4408] loop0: detected capacity change from 0 to 128 [ 49.955557][ T4409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.250'. [ 49.974339][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.985963][ T4319] hsr_slave_0: entered promiscuous mode [ 49.995008][ T4319] hsr_slave_1: entered promiscuous mode [ 50.001491][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.011151][ T4319] Cannot create hsr debugfs directory [ 50.027867][ T4409] Zero length message leads to an empty skb [ 50.078061][ T4414] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 39486 - 0 [ 50.087056][ T4414] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 39486 - 0 [ 50.096082][ T4414] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 39486 - 0 [ 50.104944][ T4414] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 39486 - 0 [ 50.114181][ T4414] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 37442 - 0 [ 50.123047][ T4414] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 37442 - 0 [ 50.132054][ T4414] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 37442 - 0 [ 50.139651][ T4425] loop2: detected capacity change from 0 to 512 [ 50.141033][ T4414] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 37442 - 0 [ 50.157612][ T4425] ext4: Unknown parameter 'nouser_xattr' [ 50.166521][ T4414] geneve2: entered promiscuous mode [ 50.171757][ T4414] geneve2: entered allmulticast mode [ 50.320534][ T4437] bond_slave_0: entered promiscuous mode [ 50.326363][ T4437] bond_slave_1: entered promiscuous mode [ 50.332027][ T4437] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 50.345649][ T4437] bond_slave_0: left promiscuous mode [ 50.351129][ T4437] bond_slave_1: left promiscuous mode [ 50.356664][ T4437] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 50.370795][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.385439][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.397743][ T4437] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 50.399462][ T4447] loop2: detected capacity change from 0 to 1764 [ 50.416459][ T4437] bond0 (unregistering): Released all slaves [ 50.559028][ T4319] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.585923][ T4319] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.608145][ T4319] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.625225][ T4319] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.713470][ T4470] loop2: detected capacity change from 0 to 512 [ 50.726443][ T4470] EXT4-fs: inline encryption not supported [ 50.745034][ T4470] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.756628][ T4470] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 50.766919][ T4470] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.263: Corrupt directory, running e2fsck is recommended [ 50.793634][ T4470] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 50.799403][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.801935][ T4470] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.263: corrupted in-inode xattr: invalid ea_ino [ 50.838714][ T4470] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.263: couldn't read orphan inode 15 (err -117) [ 50.855120][ T4470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.874852][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.907812][ T2374] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.914922][ T2374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.927493][ T2374] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.934614][ T2374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.074346][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.123677][ T4480] loop4: detected capacity change from 0 to 8192 [ 51.138130][ T4480] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000008ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 51.359861][ T4516] syzkaller0: entered promiscuous mode [ 51.365702][ T4516] syzkaller0: entered allmulticast mode [ 51.564069][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.597669][ T4319] veth0_vlan: entered promiscuous mode [ 51.623160][ T4548] netlink: 40 bytes leftover after parsing attributes in process `syz.3.275'. [ 51.640565][ T4319] veth1_vlan: entered promiscuous mode [ 51.686502][ T4319] veth0_macvtap: entered promiscuous mode [ 51.701673][ T4319] veth1_macvtap: entered promiscuous mode [ 51.718658][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.729224][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.739172][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.749700][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.759702][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.770180][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.814048][ T4555] infiniband syz1: set down [ 51.818699][ T4555] infiniband syz1: added bond_slave_1 [ 51.824402][ T4565] loop0: detected capacity change from 0 to 512 [ 51.880811][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.892592][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.903167][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.913027][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.923486][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.933355][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.943817][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.953745][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.964221][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.034462][ T4565] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.279: casefold flag without casefold feature [ 52.056143][ T4555] RDS/IB: syz1: added [ 52.061539][ T4555] smc: adding ib device syz1 with port count 1 [ 52.080623][ T4555] smc: ib device syz1 port 1 has pnetid [ 52.089263][ T4565] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.279: couldn't read orphan inode 15 (err -117) [ 52.109214][ T4565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.124600][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.161047][ T4319] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.169860][ T4319] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.178676][ T4319] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.187441][ T4319] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.267751][ T4582] loop5: detected capacity change from 0 to 256 [ 52.291657][ T4582] FAT-fs (loop5): Directory bread(block 64) failed [ 52.298682][ T4582] FAT-fs (loop5): Directory bread(block 65) failed [ 52.307885][ T4582] FAT-fs (loop5): Directory bread(block 66) failed [ 52.325331][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.335942][ T4582] FAT-fs (loop5): Directory bread(block 67) failed [ 52.367886][ T4582] FAT-fs (loop5): Directory bread(block 68) failed [ 52.384024][ T4582] FAT-fs (loop5): Directory bread(block 69) failed [ 52.402957][ T4582] FAT-fs (loop5): Directory bread(block 70) failed [ 52.421944][ T4582] FAT-fs (loop5): Directory bread(block 71) failed [ 52.437532][ T4582] FAT-fs (loop5): Directory bread(block 72) failed [ 52.456863][ T4582] FAT-fs (loop5): Directory bread(block 73) failed [ 52.479818][ T4582] bio_check_eod: 20 callbacks suppressed [ 52.479838][ T4582] syz.5.226: attempt to access beyond end of device [ 52.479838][ T4582] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 52.506233][ T4582] syz.5.226: attempt to access beyond end of device [ 52.506233][ T4582] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 52.632324][ T4593] loop2: detected capacity change from 0 to 1024 [ 52.642659][ T4597] lo speed is unknown, defaulting to 1000 [ 52.657664][ T4593] EXT4-fs: Ignoring removed nobh option [ 52.663369][ T4593] EXT4-fs: Ignoring removed orlov option [ 52.732101][ T4593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.787699][ T4611] xt_TPROXY: Can be used only with -p tcp or -p udp [ 52.810030][ T4611] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 52.833587][ T4611] netlink: 44 bytes leftover after parsing attributes in process `syz.0.289'. [ 52.899399][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.914808][ T4620] loop0: detected capacity change from 0 to 512 [ 52.942992][ T4620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.007989][ T4625] loop2: detected capacity change from 0 to 2048 [ 53.016619][ T4620] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.041594][ T4629] loop4: detected capacity change from 0 to 2048 [ 53.088567][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 53.088590][ T29] audit: type=1326 audit(1731459054.041:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f0ae719 code=0x7ffc0000 [ 53.152333][ T4625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.170462][ T4629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.184464][ T4636] Process accounting resumed [ 53.191231][ T29] audit: type=1326 audit(1731459054.141:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f0ae719 code=0x7ffc0000 [ 53.214764][ T29] audit: type=1326 audit(1731459054.141:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f725f0ae719 code=0x7ffc0000 [ 53.238089][ T29] audit: type=1326 audit(1731459054.141:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f0ae719 code=0x7ffc0000 [ 53.261495][ T29] audit: type=1326 audit(1731459054.141:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f725f0ae719 code=0x7ffc0000 [ 53.285073][ T29] audit: type=1326 audit(1731459054.141:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f0ae719 code=0x7ffc0000 [ 53.308458][ T29] audit: type=1326 audit(1731459054.141:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f725f0ae719 code=0x7ffc0000 [ 53.345853][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.366660][ T4636] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 53.367316][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.403212][ T29] audit: type=1326 audit(1731459054.351:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f0ae719 code=0x7ffc0000 [ 53.426694][ T29] audit: type=1326 audit(1731459054.351:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f0ae719 code=0x7ffc0000 [ 53.487166][ T29] audit: type=1400 audit(1731459054.401:1154): avc: denied { sys_chroot } for pid=4651 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 53.521520][ T4657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.296'. [ 53.678759][ T4674] loop3: detected capacity change from 0 to 512 [ 53.706179][ T4678] loop4: detected capacity change from 0 to 128 [ 53.940764][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 54.382255][ T4707] loop2: detected capacity change from 0 to 1024 [ 54.402611][ T4707] EXT4-fs: Ignoring removed nobh option [ 54.408339][ T4707] EXT4-fs: Ignoring removed orlov option [ 54.447207][ T4707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.476184][ T4707] program syz.2.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.544296][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.614280][ T4712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.312'. [ 54.652152][ T4712] dummy0: entered promiscuous mode [ 54.673718][ T4712] dummy0: left promiscuous mode [ 54.709273][ T4718] syz.4.315 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.776615][ T4721] loop2: detected capacity change from 0 to 128 [ 54.810862][ T4721] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.849519][ T4729] loop5: detected capacity change from 0 to 1024 [ 54.885791][ T4721] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.963811][ T4729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.028025][ T4729] tipc: Started in network mode [ 55.033132][ T4729] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 55.044533][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.082454][ T4729] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 55.090883][ T4729] tipc: Enabled bearer , priority 10 [ 55.201467][ T4743] lo speed is unknown, defaulting to 1000 [ 55.210579][ T4746] loop0: detected capacity change from 0 to 2048 [ 55.234408][ T4745] loop4: detected capacity change from 0 to 512 [ 55.242134][ T4746] EXT4-fs (loop0): stripe (1021) is not aligned with cluster size (16), stripe is disabled [ 55.264552][ T4748] loop5: detected capacity change from 0 to 512 [ 55.272337][ T4745] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.286970][ T4748] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.335118][ T4748] EXT4-fs (loop5): 1 truncate cleaned up [ 55.405505][ T4758] netlink: 'syz.4.327': attribute type 10 has an invalid length. [ 55.415435][ T4758] veth0_macvtap: left promiscuous mode [ 55.424163][ T4758] veth0_macvtap: entered promiscuous mode [ 55.431704][ T4758] team0: Device macvtap0 failed to register rx_handler [ 55.440620][ T4758] veth0_macvtap: left promiscuous mode [ 55.542152][ T4767] loop4: detected capacity change from 0 to 512 [ 55.621169][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 55.680399][ T4767] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.800940][ T4767] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.916414][ T4767] netlink: 'syz.4.331': attribute type 4 has an invalid length. [ 55.924126][ T4767] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.331'. [ 55.981555][ T4767] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.331: corrupted inode contents [ 56.026083][ T4767] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.331: mark_inode_dirty error [ 56.049642][ T4767] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.331: corrupted inode contents [ 56.063763][ T4767] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.331: mark_inode_dirty error [ 56.077456][ T4767] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.331: mark inode dirty (error -117) [ 56.100461][ T4767] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 56.121784][ T4799] loop3: detected capacity change from 0 to 128 [ 56.158757][ T4801] loop3: detected capacity change from 0 to 1024 [ 56.165652][ T4801] EXT4-fs: Ignoring removed nobh option [ 56.171280][ T4801] EXT4-fs: Ignoring removed orlov option [ 56.202852][ T35] tipc: Node number set to 1 [ 56.217007][ T4806] loop2: detected capacity change from 0 to 512 [ 56.240967][ T4808] SELinux: policydb version 167772160 does not match my version range 15-33 [ 56.250390][ T4808] SELinux: failed to load policy [ 56.284391][ T4811] netlink: 'syz.4.347': attribute type 3 has an invalid length. [ 56.295593][ T4806] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.309090][ T4815] loop0: detected capacity change from 0 to 256 [ 56.512552][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 56.527652][ T4842] loop3: detected capacity change from 0 to 1024 [ 56.539876][ T4845] loop4: detected capacity change from 0 to 512 [ 56.577777][ T4845] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.605466][ T4853] netlink: 76 bytes leftover after parsing attributes in process `syz.2.362'. [ 56.696863][ T4863] loop2: detected capacity change from 0 to 1024 [ 56.704514][ T4863] EXT4-fs: Ignoring removed nobh option [ 56.710211][ T4863] EXT4-fs: Ignoring removed orlov option [ 56.793548][ T4872] pim6reg1: entered promiscuous mode [ 56.798882][ T4872] pim6reg1: entered allmulticast mode [ 57.256341][ T4878] ip6t_rpfilter: unknown options [ 57.819460][ T4901] loop2: detected capacity change from 0 to 512 [ 57.833620][ T4901] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.861936][ T4901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 57.883603][ T4901] System zones: 1-12 [ 57.930722][ T4916] random: crng reseeded on system resumption [ 57.941190][ T4901] EXT4-fs (loop2): 1 truncate cleaned up [ 57.957698][ T4901] futex_wake_op: syz.2.381 tries to shift op by 32; fix this program [ 58.094212][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 58.094226][ T29] audit: type=1326 audit(1731459059.051:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7fc00000 [ 58.147500][ T4936] team_slave_1: entered promiscuous mode [ 58.151964][ T29] audit: type=1326 audit(1731459059.081:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7fc00000 [ 58.153273][ T4936] team_slave_1: entered allmulticast mode [ 58.176493][ T29] audit: type=1326 audit(1731459059.081:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7fc00000 [ 58.205915][ T29] audit: type=1326 audit(1731459059.081:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7fc00000 [ 58.229360][ T29] audit: type=1326 audit(1731459059.081:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7fc00000 [ 58.234637][ T4939] loop5: detected capacity change from 0 to 2048 [ 58.252907][ T29] audit: type=1326 audit(1731459059.081:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7fc00000 [ 58.282495][ T29] audit: type=1326 audit(1731459059.081:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7fc00000 [ 58.305885][ T29] audit: type=1326 audit(1731459059.081:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7fc00000 [ 58.329300][ T29] audit: type=1326 audit(1731459059.081:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7fc00000 [ 58.352618][ T29] audit: type=1326 audit(1731459059.081:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7fc00000 [ 58.389760][ T4936] team0: Port device team_slave_1 removed [ 58.519268][ T4947] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4947 comm=syz.4.390 [ 58.596251][ T4969] loop4: detected capacity change from 0 to 512 [ 58.631299][ T4969] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 58.649351][ T4969] netlink: 128 bytes leftover after parsing attributes in process `syz.4.395'. [ 58.658392][ T4969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.395'. [ 58.673187][ T4969] ref_ctr increment failed for inode: 0x18b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888112444000 [ 58.688579][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 58.698886][ T4973] bridge_slave_1: left allmulticast mode [ 58.703858][ T4968] uprobe: syz.4.395:4968 failed to unregister, leaking uprobe [ 58.704588][ T4973] bridge_slave_1: left promiscuous mode [ 58.717966][ T4973] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.742549][ T4973] bridge_slave_0: left allmulticast mode [ 58.748317][ T4973] bridge_slave_0: left promiscuous mode [ 58.754033][ T4973] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.755022][ T4979] loop4: detected capacity change from 0 to 1024 [ 58.768139][ T4979] EXT4-fs: Ignoring removed orlov option [ 58.773924][ T4979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.793780][ T4981] serio: Serial port ttyS3 [ 58.891501][ T4986] loop3: detected capacity change from 0 to 1024 [ 58.905853][ T4986] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.987336][ T4992] program syz.2.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.031144][ T4994] loop2: detected capacity change from 0 to 512 [ 59.345744][ T5005] netlink: 'syz.5.407': attribute type 2 has an invalid length. [ 59.353462][ T5005] netlink: 'syz.5.407': attribute type 8 has an invalid length. [ 59.361171][ T5005] netlink: 132 bytes leftover after parsing attributes in process `syz.5.407'. [ 59.591517][ T5011] loop5: detected capacity change from 0 to 512 [ 59.629274][ T5011] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.659853][ T5011] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 59.668068][ T5011] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 59.677201][ T5011] EXT4-fs (loop5): 1 truncate cleaned up [ 59.687852][ T5011] veth0_to_team: entered promiscuous mode [ 59.693783][ T5011] veth0_to_team: entered allmulticast mode [ 59.837019][ T5017] serio: Serial port ptm0 [ 59.882665][ T5021] loop3: detected capacity change from 0 to 1024 [ 59.901411][ T5021] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.917765][ T5021] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 59.960376][ T5021] JBD2: no valid journal superblock found [ 59.966215][ T5021] EXT4-fs (loop3): Could not load journal inode [ 60.059974][ T5028] siw: device registration error -23 [ 60.145149][ T5032] loop5: detected capacity change from 0 to 128 [ 60.219804][ T5040] loop3: detected capacity change from 0 to 1024 [ 60.236911][ T5040] EXT4-fs: Ignoring removed nobh option [ 60.242577][ T5040] EXT4-fs: Ignoring removed orlov option [ 60.269625][ T5032] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.326768][ T5032] Process accounting resumed [ 60.387044][ T5048] ipvlan2: entered promiscuous mode [ 60.401119][ T5048] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 60.409429][ T5048] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 60.439751][ T5053] tap0: tun_chr_ioctl cmd 1074025675 [ 60.445224][ T5053] tap0: persist enabled [ 60.449669][ T5053] tap0: tun_chr_ioctl cmd 1074025675 [ 60.455048][ T5053] tap0: persist enabled [ 60.561684][ T5062] loop4: detected capacity change from 0 to 512 [ 60.612956][ T5062] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.736914][ T5078] loop0: detected capacity change from 0 to 2048 [ 60.749298][ T5075] lo speed is unknown, defaulting to 1000 [ 60.892356][ T5086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.439'. [ 60.917380][ T5090] loop5: detected capacity change from 0 to 2048 [ 61.022355][ T5086] loop3: detected capacity change from 0 to 512 [ 61.029086][ T5086] EXT4-fs: Ignoring removed nobh option [ 61.043445][ T5086] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.058017][ T5096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 61.073424][ T5086] EXT4-fs (loop3): 1 truncate cleaned up [ 61.086458][ T5101] 9pnet_virtio: no channels available for device 127.0.0.1 [ 61.374727][ T5107] loop5: detected capacity change from 0 to 512 [ 61.385909][ T5107] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.404794][ T5107] hub 9-0:1.0: USB hub found [ 61.409636][ T5107] hub 9-0:1.0: 8 ports detected [ 61.460049][ T5112] pim6reg1: entered promiscuous mode [ 61.465466][ T5112] pim6reg1: entered allmulticast mode [ 61.491585][ T5115] syz.5.448[5115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.491672][ T5115] syz.5.448[5115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.503599][ T5115] syz.5.448[5115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.543595][ T5119] loop5: detected capacity change from 0 to 128 [ 61.611444][ T5123] netlink: 32 bytes leftover after parsing attributes in process `syz.5.451'. [ 61.633336][ T5125] loop2: detected capacity change from 0 to 2048 [ 61.765280][ T5136] loop2: detected capacity change from 0 to 128 [ 61.785310][ T5136] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 61.946213][ T5144] loop3: detected capacity change from 0 to 512 [ 61.953846][ T5144] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 61.999465][ T5154] loop0: detected capacity change from 0 to 512 [ 62.034780][ T5154] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.078897][ T5161] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 62.196538][ T5172] loop3: detected capacity change from 0 to 2048 [ 62.216622][ T5172] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.231975][ T5172] EXT4-fs (loop3): Remounting filesystem read-only [ 62.267969][ T5177] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 62.462187][ T5185] tmpfs: Bad value for 'size' [ 62.487043][ T5187] IPv4: Oversized IP packet from 127.202.26.0 [ 62.746457][ T5203] loop4: detected capacity change from 0 to 512 [ 62.761440][ T5203] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.479: invalid block [ 62.773187][ T5203] EXT4-fs (loop4): Remounting filesystem read-only [ 62.779868][ T5203] EXT4-fs (loop4): 1 truncate cleaned up [ 62.785985][ T5203] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 62.870976][ T5206] loop5: detected capacity change from 0 to 2048 [ 62.933684][ T5206] loop5: p1 < > p4 [ 62.938079][ T5206] loop5: p4 size 8388608 extends beyond EOD, truncated [ 63.042040][ T5212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.484'. [ 63.051125][ T5212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.058637][ T5212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.072321][ T5212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.079888][ T5212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.236914][ T5229] loop5: detected capacity change from 0 to 128 [ 63.244618][ T29] kauditd_printk_skb: 2095 callbacks suppressed [ 63.244635][ T29] audit: type=1400 audit(1731459320.196:3631): avc: denied { read } for pid=5224 comm="syz.0.488" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.321535][ T29] audit: type=1400 audit(1731459320.256:3632): avc: denied { watch watch_reads } for pid=5236 comm="syz.5.490" path="/proc/113" dev="proc" ino=9448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 63.473700][ T29] audit: type=1400 audit(1731459320.426:3633): avc: denied { write } for pid=5246 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.566034][ T29] audit: type=1400 audit(1731459320.516:3634): avc: denied { append } for pid=5254 comm="syz.4.494" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.594273][ T5255] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 63.601920][ T5255] SELinux: failed to load policy [ 63.666680][ T29] audit: type=1326 audit(1731459320.616:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.4.496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb4f46e719 code=0x0 [ 63.721926][ T5273] netlink: 12 bytes leftover after parsing attributes in process `syz.5.497'. [ 63.821169][ T5287] lo speed is unknown, defaulting to 1000 [ 63.985447][ T5300] loop2: detected capacity change from 0 to 256 [ 64.041148][ T29] audit: type=1326 audit(1731459320.986:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f0ae719 code=0x7ffc0000 [ 64.047347][ T5300] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.065016][ T29] audit: type=1326 audit(1731459320.986:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725f0ae719 code=0x7ffc0000 [ 64.095555][ T29] audit: type=1326 audit(1731459320.986:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f725f0ae719 code=0x7ffc0000 [ 64.116546][ T5306] loop0: detected capacity change from 0 to 512 [ 64.118870][ T29] audit: type=1326 audit(1731459320.986:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f725f0ae753 code=0x7ffc0000 [ 64.144991][ T29] audit: type=1326 audit(1731459321.066:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f725f0ad1ff code=0x7ffc0000 [ 64.196095][ T5306] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.503: corrupted xattr block 255: invalid header [ 64.226986][ T5306] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 64.237482][ T5306] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.503: corrupted xattr block 255: invalid header [ 64.279844][ T5306] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 64.408173][ T5333] IPv4: Oversized IP packet from 127.202.26.0 [ 64.513137][ T5346] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 64.543303][ T5352] netlink: 104 bytes leftover after parsing attributes in process `syz.4.512'. [ 64.546610][ T5351] loop0: detected capacity change from 0 to 512 [ 64.576419][ T5352] netlink: 64 bytes leftover after parsing attributes in process `syz.4.512'. [ 64.587792][ T5351] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.617965][ T5351] EXT4-fs (loop0): mount failed [ 64.803353][ T5378] loop4: detected capacity change from 0 to 128 [ 64.830077][ T5378] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.830472][ T5380] loop3: detected capacity change from 0 to 2048 [ 64.904229][ T5380] loop3: p1 < > p3 p4 < > [ 64.914499][ T5380] loop3: p3 start 4284289 is beyond EOD, truncated [ 65.089607][ T5408] loop3: detected capacity change from 0 to 512 [ 65.106161][ T5408] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.348439][ T5422] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 65.501230][ T5440] loop0: detected capacity change from 0 to 512 [ 65.525306][ T5440] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.530: Failed to acquire dquot type 1 [ 65.548156][ T5440] EXT4-fs (loop0): 1 truncate cleaned up [ 65.559080][ T5440] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.104758][ T5479] loop4: detected capacity change from 0 to 128 [ 66.256196][ T5487] loop4: detected capacity change from 0 to 128 [ 66.263019][ T5487] journal_path: Lookup failure for './file1' [ 66.269059][ T5487] EXT4-fs: error: could not find journal device path [ 66.501760][ T5491] loop0: detected capacity change from 0 to 512 [ 66.524891][ T5491] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.542: corrupted xattr block 255: invalid header [ 66.538327][ T5491] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 66.547161][ T5491] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.542: corrupted xattr block 255: invalid header [ 66.560677][ T5491] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 66.731806][ T5503] loop3: detected capacity change from 0 to 256 [ 66.800067][ T5503] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 66.810237][ T5503] FAT-fs (loop3): Filesystem has been set read-only [ 66.816901][ T5503] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 66.827163][ T5503] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 67.064886][ T5513] loop4: detected capacity change from 0 to 1024 [ 67.086300][ T5513] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.338994][ T5524] loop4: detected capacity change from 0 to 2048 [ 67.384379][ T5524] Alternate GPT is invalid, using primary GPT. [ 67.390691][ T5524] loop4: p1 p2 p3 [ 67.426384][ T5527] loop4: detected capacity change from 0 to 164 [ 67.651869][ T5542] team0 (unregistering): Port device team_slave_0 removed [ 67.691387][ T5542] team0 (unregistering): Port device team_slave_1 removed [ 67.761348][ T5545] loop2: detected capacity change from 0 to 1024 [ 67.784927][ T5545] EXT4-fs: Ignoring removed oldalloc option [ 67.845762][ T5543] wireguard0: entered promiscuous mode [ 67.851277][ T5543] wireguard0: entered allmulticast mode [ 67.858644][ T5545] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 67.941317][ T5556] syz.4.564[5556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.941587][ T5556] syz.4.564[5556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.957072][ T5556] syz.4.564[5556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.004632][ T5556] loop4: detected capacity change from 0 to 256 [ 68.036723][ T5556] vfat: Unknown parameter 'rdir' [ 68.085824][ T5556] Invalid ELF header magic: != ELF [ 68.108096][ T5566] SELinux: Context :yz1 is not valid (left unmapped). [ 68.118608][ T5565] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 68.153821][ T5565] bond1: entered promiscuous mode [ 68.205039][ T5570] bond1: (slave team_slave_1): making interface the new active one [ 68.254080][ T5570] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 68.442952][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 68.442978][ T29] audit: type=1400 audit(1731459325.386:3933): avc: denied { create } for pid=5563 comm="syz.5.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.480666][ T5566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.567'. [ 68.489684][ T5566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.567'. [ 68.619764][ T29] audit: type=1400 audit(1731459325.426:3934): avc: denied { write } for pid=5563 comm="syz.5.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.640365][ T29] audit: type=1326 audit(1731459325.496:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edf74e719 code=0x7ffc0000 [ 68.663757][ T29] audit: type=1326 audit(1731459325.496:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edf74e719 code=0x7ffc0000 [ 68.687153][ T29] audit: type=1326 audit(1731459325.506:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6edf74e719 code=0x7ffc0000 [ 68.710622][ T29] audit: type=1326 audit(1731459325.506:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edf74e719 code=0x7ffc0000 [ 68.734075][ T29] audit: type=1326 audit(1731459325.506:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edf74e719 code=0x7ffc0000 [ 68.757673][ T29] audit: type=1326 audit(1731459325.506:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6edf74e719 code=0x7ffc0000 [ 68.781015][ T29] audit: type=1326 audit(1731459325.506:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edf74e719 code=0x7ffc0000 [ 68.804464][ T29] audit: type=1326 audit(1731459325.506:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5577 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edf74e719 code=0x7ffc0000 [ 68.848836][ T5582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.572'. [ 68.926181][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.981321][ T5593] netlink: 'syz.2.577': attribute type 4 has an invalid length. [ 69.033035][ T8] lo speed is unknown, defaulting to 1000 [ 69.041562][ T5595] loop5: detected capacity change from 0 to 256 [ 69.095664][ T5595] FAT-fs (loop5): codepage cp861 not found [ 69.465387][ T5616] loop0: detected capacity change from 0 to 128 [ 69.601920][ T3392] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 69.609462][ T3392] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.645276][ T5616] loop0: detected capacity change from 0 to 512 [ 69.675881][ T3392] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 69.868580][ T5626] loop2: detected capacity change from 0 to 512 [ 69.907891][ T5626] EXT4-fs: Ignoring removed orlov option [ 69.951811][ T5631] loop0: detected capacity change from 0 to 512 [ 69.961780][ T5631] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.971681][ T5631] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 70.005931][ T5626] EXT4-fs mount: 66 callbacks suppressed [ 70.005958][ T5626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.045428][ T5626] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.056580][ T5644] netlink: 'syz.0.596': attribute type 4 has an invalid length. [ 70.080071][ T5626] Â: renamed from pim6reg1 [ 70.092946][ T5644] netlink: 'syz.0.596': attribute type 4 has an invalid length. [ 70.167785][ T5650] batadv0: entered promiscuous mode [ 70.178725][ T5650] batadv_slave_0: entered promiscuous mode [ 70.181090][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.184923][ T5650] batadv_slave_0: left promiscuous mode [ 70.222327][ T5654] loop3: detected capacity change from 0 to 512 [ 70.240922][ T5650] batadv0: left promiscuous mode [ 70.245286][ T5658] loop2: detected capacity change from 0 to 2048 [ 70.249794][ T5654] EXT4-fs: Ignoring removed oldalloc option [ 70.261160][ T5654] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.600: Parent and EA inode have the same ino 15 [ 70.273925][ T5654] EXT4-fs (loop3): Remounting filesystem read-only [ 70.280450][ T5654] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 70.290834][ T5654] EXT4-fs (loop3): 1 orphan inode deleted [ 70.291097][ T5658] loop2: p1 < > p4 [ 70.297330][ T5654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.302660][ T5658] loop2: p4 size 8388608 extends beyond EOD, truncated [ 70.329471][ T5654] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 70.349062][ T5654] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.384347][ T3016] loop2: p1 < > p4 [ 70.388725][ T3016] loop2: p4 size 8388608 extends beyond EOD, truncated [ 70.419377][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 70.454715][ T3844] udevd[3844]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 70.671729][ T5673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5673 comm=syz.2.606 [ 70.829648][ T5678] loop2: detected capacity change from 0 to 512 [ 70.837677][ T5678] EXT4-fs: Ignoring removed oldalloc option [ 70.904624][ T5678] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.608: Parent and EA inode have the same ino 15 [ 70.917324][ T5678] EXT4-fs (loop2): Remounting filesystem read-only [ 70.923914][ T5678] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 70.934116][ T5678] EXT4-fs (loop2): 1 orphan inode deleted [ 70.940786][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.954305][ T5678] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 70.961523][ T5678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.066231][ T5688] loop0: detected capacity change from 0 to 736 [ 71.201075][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 71.298908][ T5706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.307912][ T5706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.318377][ T5706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.331483][ T5706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.348492][ T5706] ipvlan2: entered promiscuous mode [ 71.355267][ T5706] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 71.363974][ T5706] team0: Device ipvlan2 is already an upper device of the team interface [ 71.413850][ T5714] netlink: 16 bytes leftover after parsing attributes in process `syz.5.619'. [ 71.520561][ T5726] loop3: detected capacity change from 0 to 512 [ 71.527708][ T5726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.545261][ T5726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.557963][ T5726] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.573535][ T5726] netlink: 'syz.3.624': attribute type 4 has an invalid length. [ 71.581212][ T5726] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.624'. [ 71.603337][ T5730] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.623'. [ 71.612499][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.623'. [ 71.621356][ T5730] netlink: 16 bytes leftover after parsing attributes in process `syz.5.623'. [ 71.632230][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.797164][ T5741] loop2: detected capacity change from 0 to 256 [ 71.823635][ T5741] FAT-fs (loop2): Directory bread(block 64) failed [ 71.830945][ T5741] FAT-fs (loop2): Directory bread(block 65) failed [ 71.848140][ T5741] FAT-fs (loop2): Directory bread(block 66) failed [ 71.864902][ T5741] FAT-fs (loop2): Directory bread(block 67) failed [ 71.878535][ T5741] FAT-fs (loop2): Directory bread(block 68) failed [ 71.892851][ T5741] FAT-fs (loop2): Directory bread(block 69) failed [ 71.935931][ T5741] FAT-fs (loop2): Directory bread(block 70) failed [ 71.952706][ T5741] FAT-fs (loop2): Directory bread(block 71) failed [ 71.967425][ T5741] FAT-fs (loop2): Directory bread(block 72) failed [ 71.984799][ T5741] FAT-fs (loop2): Directory bread(block 73) failed [ 71.993825][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 72.016847][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 72.044862][ T5747] loop4: detected capacity change from 0 to 512 [ 72.065102][ T5747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.076441][ T5741] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 72.084683][ T5741] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 72.106155][ T5747] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 72.115928][ T5747] EXT4-fs (loop4): group descriptors corrupted! [ 72.118442][ T5749] loop0: detected capacity change from 0 to 2048 [ 72.185470][ T5749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.284116][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.365385][ T5764] netlink: 'syz.2.637': attribute type 6 has an invalid length. [ 72.673517][ T5766] lo speed is unknown, defaulting to 1000 [ 72.714580][ T5770] loop2: detected capacity change from 0 to 8192 [ 72.753042][ T5770] loop2: p1 p2[DM] p4 [ 72.757256][ T5770] loop2: p1 size 196608 extends beyond EOD, truncated [ 72.772988][ T5770] loop2: p2 start 4292936063 is beyond EOD, truncated [ 72.779923][ T5770] loop2: p4 size 50331648 extends beyond EOD, truncated [ 72.813502][ T5769] delete_channel: no stack [ 72.865444][ T5772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5772 comm=syz.4.640 [ 72.915688][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 72.923039][ T3844] udevd[3844]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 73.086220][ T5780] loop4: detected capacity change from 0 to 512 [ 73.224954][ T5780] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm kfree: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 73.249083][ T5780] EXT4-fs error (device loop4): ext4_quota_enable:7056: comm kfree: Bad quota inode: 3, type: 0 [ 73.274476][ T5780] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 73.331635][ T5793] lo speed is unknown, defaulting to 1000 [ 73.544677][ T5780] EXT4-fs (loop4): mount failed [ 73.613280][ T29] kauditd_printk_skb: 646 callbacks suppressed [ 73.613296][ T29] audit: type=1326 audit(1731459330.566:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7ffc0000 [ 73.676832][ T29] audit: type=1326 audit(1731459330.596:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7ffc0000 [ 73.715432][ T5800] lo speed is unknown, defaulting to 1000 [ 73.758595][ T29] audit: type=1400 audit(1731459330.706:4591): avc: denied { read } for pid=5803 comm="syz.0.650" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.781444][ T29] audit: type=1400 audit(1731459330.706:4592): avc: denied { open } for pid=5803 comm="syz.0.650" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.804823][ T29] audit: type=1400 audit(1731459330.706:4593): avc: denied { ioctl } for pid=5803 comm="syz.0.650" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.829425][ T29] audit: type=1400 audit(1731459330.706:4594): avc: denied { create } for pid=5803 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.849017][ T29] audit: type=1400 audit(1731459330.706:4595): avc: denied { write } for pid=5803 comm="syz.0.650" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.873944][ T29] audit: type=1326 audit(1731459330.806:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7ffc0000 [ 73.897334][ T29] audit: type=1326 audit(1731459330.806:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875f15e719 code=0x7ffc0000 [ 73.920719][ T29] audit: type=1326 audit(1731459330.826:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f875f15e719 code=0x7ffc0000 [ 73.951750][ T5806] loop3: detected capacity change from 0 to 2048 [ 73.999176][ T5807] syzkaller0: entered promiscuous mode [ 74.005003][ T5807] syzkaller0: entered allmulticast mode [ 74.082944][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 74.257544][ T5822] loop3: detected capacity change from 0 to 128 [ 74.315360][ T5822] syz.3.657: attempt to access beyond end of device [ 74.315360][ T5822] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 74.345774][ T5822] syz.3.657: attempt to access beyond end of device [ 74.345774][ T5822] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 74.360518][ T5822] syz.3.657: attempt to access beyond end of device [ 74.360518][ T5822] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 74.375736][ T5822] syz.3.657: attempt to access beyond end of device [ 74.375736][ T5822] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 74.389066][ T5822] syz.3.657: attempt to access beyond end of device [ 74.389066][ T5822] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 74.408332][ T5822] syz.3.657: attempt to access beyond end of device [ 74.408332][ T5822] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 74.429172][ T5827] loop0: detected capacity change from 0 to 512 [ 74.476923][ T5827] EXT4-fs (loop0): SIPHASH is not a valid default hash value [ 74.529439][ T5827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 74.571613][ T5827] loop0: detected capacity change from 0 to 512 [ 74.593165][ T5840] loop2: detected capacity change from 0 to 2048 [ 74.607671][ T5827] EXT4-fs: Ignoring removed orlov option [ 74.626889][ T5840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.646703][ T5827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.666000][ T5827] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.681118][ T5827] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.656: bg 0: block 248: padding at end of block bitmap is not set [ 74.712001][ T5827] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.656: Failed to acquire dquot type 1 [ 74.735746][ T5827] EXT4-fs (loop0): 1 truncate cleaned up [ 74.752531][ T5827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.768325][ T5827] EXT4-fs: Ignoring removed orlov option [ 74.774468][ T5827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.785722][ T5827] EXT4-fs error (device loop0): __ext4_remount:6522: comm syz.0.656: Abort forced by user [ 74.806987][ T5827] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 74.841293][ T5827] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 74.893745][ T5827] ext4 filesystem being remounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.982097][ T5875] bond_slave_0: entered promiscuous mode [ 74.987906][ T5875] bond_slave_1: entered promiscuous mode [ 75.006509][ T5875] vlan2: entered promiscuous mode [ 75.011583][ T5875] bond0: entered promiscuous mode [ 75.030569][ T5875] bond0: left promiscuous mode [ 75.036531][ T5875] bond_slave_0: left promiscuous mode [ 75.041955][ T5875] bond_slave_1: left promiscuous mode [ 75.199767][ T5895] loop4: detected capacity change from 0 to 512 [ 75.223840][ T5895] EXT4-fs: Mount option(s) incompatible with ext2 [ 75.521489][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.565859][ T5972] loop2: detected capacity change from 0 to 512 [ 75.579372][ T5972] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.615041][ T5972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.643417][ T5972] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.666680][ T5972] netlink: 'syz.2.670': attribute type 4 has an invalid length. [ 75.674464][ T5972] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.670'. [ 75.704541][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.738494][ T5972] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.670: corrupted inode contents [ 75.752088][ T5972] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #19: comm syz.2.670: mark_inode_dirty error [ 75.764243][ T5972] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.670: corrupted inode contents [ 75.776362][ T5972] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.670: mark_inode_dirty error [ 75.789305][ T5972] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.670: mark inode dirty (error -117) [ 75.802264][ T5972] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 75.835843][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.226398][ T5996] Process accounting resumed [ 76.288835][ T6002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6002 comm=syz.5.677 [ 76.322320][ T6005] loop4: detected capacity change from 0 to 512 [ 76.329000][ T6005] EXT4-fs: Invalid want_extra_isize 9 [ 76.381906][ T6012] loop5: detected capacity change from 0 to 1024 [ 76.390329][ T6012] EXT4-fs: Ignoring removed orlov option [ 76.396141][ T6012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.416742][ T6012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.425237][ T6014] loop4: detected capacity change from 0 to 1024 [ 76.467765][ T4319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.468551][ T6021] loop2: detected capacity change from 0 to 1024 [ 76.477965][ T6014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.497362][ T6014] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.516310][ T6024] netlink: 'syz.3.683': attribute type 10 has an invalid length. [ 76.525059][ T6024] team0: Port device netdevsim1 added [ 76.529403][ T6027] SELinux: policydb version 0 does not match my version range 15-33 [ 76.533167][ T6024] netlink: 'syz.3.683': attribute type 10 has an invalid length. [ 76.539411][ T6027] SELinux: failed to load policy [ 76.550960][ T6021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.571744][ T6024] team0: Port device netdevsim1 removed [ 76.679563][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.682674][ T6039] loop3: detected capacity change from 0 to 128 [ 76.749048][ T6039] syz.3.690: attempt to access beyond end of device [ 76.749048][ T6039] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 76.773223][ T6039] syz.3.690: attempt to access beyond end of device [ 76.773223][ T6039] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 76.836026][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.024187][ T6062] loop2: detected capacity change from 0 to 128 [ 77.034625][ T6062] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.048302][ T6062] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.089853][ T6065] loop3: detected capacity change from 0 to 256 [ 77.099958][ T6065] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.178867][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.965196][ T6081] netlink: 'syz.3.704': attribute type 4 has an invalid length. [ 77.983584][ T6086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.706'. [ 77.991245][ T6084] loop4: detected capacity change from 0 to 512 [ 77.994970][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 78.007813][ T6084] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 78.155849][ T6089] loop2: detected capacity change from 0 to 1024 [ 78.157562][ T6090] loop3: detected capacity change from 0 to 512 [ 78.178910][ T6090] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.199780][ T6093] loop5: detected capacity change from 0 to 128 [ 78.218204][ T6089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.239720][ T6097] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.254818][ T6090] EXT4-fs (loop3): 1 truncate cleaned up [ 78.261120][ T6090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.279033][ T6093] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 78.286942][ T6093] FAT-fs (loop5): Filesystem has been set read-only [ 78.293820][ T6093] syz.5.709: attempt to access beyond end of device [ 78.293820][ T6093] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 78.300875][ T6100] loop4: detected capacity change from 0 to 1024 [ 78.308586][ T6093] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 78.322382][ T6093] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 78.327999][ T6100] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.338039][ T6093] syz.5.709: attempt to access beyond end of device [ 78.338039][ T6093] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 78.364822][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.376343][ T6101] geneve0: entered allmulticast mode [ 78.381494][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.392730][ T6100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.449633][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.499349][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.715'. [ 78.544669][ T6120] syzkaller0: entered promiscuous mode [ 78.550170][ T6120] syzkaller0: entered allmulticast mode [ 78.562733][ T6108] loop2: detected capacity change from 0 to 8192 [ 78.564366][ T6118] bond_slave_0: entered promiscuous mode [ 78.574801][ T6118] bond_slave_1: entered promiscuous mode [ 78.589944][ T6118] bond_slave_0: left promiscuous mode [ 78.596084][ T6118] bond_slave_1: left promiscuous mode [ 78.622744][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.641431][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.652386][ T6118] bond0 (unregistering): Released all slaves [ 78.782698][ T6125] lo speed is unknown, defaulting to 1000 [ 78.812464][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 78.812495][ T29] audit: type=1400 audit(1731459335.756:4797): avc: denied { ioctl } for pid=6129 comm="syz.5.722" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.857817][ T29] audit: type=1400 audit(1731459335.796:4798): avc: denied { mounton } for pid=6135 comm="syz.4.724" path="/proc/331/task" dev="proc" ino=11159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 78.881108][ T29] audit: type=1400 audit(1731459335.796:4799): avc: denied { mount } for pid=6135 comm="syz.4.724" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.904629][ T29] audit: type=1326 audit(1731459335.836:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.5.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02fc07e719 code=0x7ffc0000 [ 78.928772][ T29] audit: type=1326 audit(1731459335.836:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.5.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02fc07e719 code=0x7ffc0000 [ 78.952306][ T29] audit: type=1326 audit(1731459335.836:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.5.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02fc07e719 code=0x7ffc0000 [ 78.970164][ T6142] loop4: detected capacity change from 0 to 512 [ 78.976451][ T29] audit: type=1326 audit(1731459335.836:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.5.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02fc07e719 code=0x7ffc0000 [ 78.986000][ T6142] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 79.005945][ T29] audit: type=1326 audit(1731459335.836:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.5.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02fc07e719 code=0x7ffc0000 [ 79.037691][ T29] audit: type=1326 audit(1731459335.836:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.5.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02fc07e719 code=0x7ffc0000 [ 79.061789][ T29] audit: type=1326 audit(1731459335.836:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.5.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02fc07e719 code=0x7ffc0000 [ 79.093252][ T6142] EXT4-fs (loop4): invalid journal inode [ 79.100278][ T6142] EXT4-fs (loop4): can't get journal size [ 79.114204][ T6142] EXT4-fs (loop4): 1 truncate cleaned up [ 79.122752][ T6142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.223286][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.348729][ T6163] loop4: detected capacity change from 0 to 512 [ 79.357888][ T6163] EXT4-fs: Ignoring removed oldalloc option [ 79.372843][ T6163] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.735: bad orphan inode 4294967295 [ 79.385492][ T6163] EXT4-fs (loop4): Remounting filesystem read-only [ 79.392868][ T6163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.407161][ T6163] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 79.414273][ T6163] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.438246][ T6163] loop4: detected capacity change from 0 to 512 [ 79.467443][ T6163] EXT4-fs (loop4): too many log groups per flexible block group [ 79.475215][ T6163] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 79.485918][ T6163] EXT4-fs (loop4): mount failed [ 79.533546][ T6172] loop4: detected capacity change from 0 to 512 [ 79.540726][ T6172] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.565435][ T6172] EXT4-fs (loop4): 1 truncate cleaned up [ 79.571902][ T6172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.833203][ T6184] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 79.840931][ T6184] netlink: 'syz.2.740': attribute type 4 has an invalid length. [ 79.848662][ T6184] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.740'. [ 79.896816][ T6187] loop3: detected capacity change from 0 to 4096 [ 79.917504][ T6187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.936083][ T6187] Process accounting resumed [ 79.941970][ T6187] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 79.962044][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.386308][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.404804][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 80.442407][ T6211] loop5: detected capacity change from 0 to 1024 [ 80.457129][ T6211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.497890][ T4319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.735180][ T6230] netlink: 'syz.2.759': attribute type 29 has an invalid length. [ 80.762233][ T6230] netlink: 'syz.2.759': attribute type 29 has an invalid length. [ 80.772331][ T6230] netlink: 500 bytes leftover after parsing attributes in process `syz.2.759'. [ 80.782090][ T6230] unsupported nla_type 40 [ 81.055199][ T6246] bridge_slave_0: left allmulticast mode [ 81.060917][ T6246] bridge_slave_0: left promiscuous mode [ 81.067588][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.078971][ T6246] bridge_slave_1: left allmulticast mode [ 81.086226][ T6246] bridge_slave_1: left promiscuous mode [ 81.092019][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.108174][ T6246] team0: Port device team_slave_0 removed [ 81.119245][ T6246] team0: Port device team_slave_1 removed [ 81.128268][ T6246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.135794][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.147157][ T6246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.154808][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.274920][ T6209] ================================================================== [ 81.283489][ T6209] BUG: KCSAN: data-race in mptcp_subflow_get_send / tcp_rearm_rto [ 81.291365][ T6209] [ 81.293700][ T6209] write to 0xffff8881241a34e2 of 1 bytes by interrupt on cpu 1: [ 81.301358][ T6209] tcp_rearm_rto+0x94/0x370 [ 81.305913][ T6209] tcp_ack+0x2717/0x2f70 [ 81.310174][ T6209] tcp_rcv_established+0x46b/0xef0 [ 81.315318][ T6209] tcp_v4_do_rcv+0x662/0x740 [ 81.319942][ T6209] tcp_v4_rcv+0x1b25/0x1ee0 [ 81.324473][ T6209] ip_protocol_deliver_rcu+0x370/0x720 [ 81.329971][ T6209] ip_local_deliver_finish+0x17d/0x210 [ 81.335472][ T6209] ip_local_deliver+0xec/0x1d0 [ 81.340284][ T6209] ip_rcv_finish+0x193/0x1b0 [ 81.344911][ T6209] ip_rcv+0x64/0x140 [ 81.348834][ T6209] __netif_receive_skb+0x10a/0x280 [ 81.353971][ T6209] process_backlog+0x22e/0x440 [ 81.358769][ T6209] __napi_poll+0x63/0x3c0 [ 81.363130][ T6209] net_rx_action+0x3a1/0x7f0 [ 81.367926][ T6209] handle_softirqs+0xbf/0x280 [ 81.370063][ T6245] loop5: detected capacity change from 0 to 512 [ 81.372615][ T6209] do_softirq+0x5e/0x90 [ 81.383027][ T6209] __local_bh_enable_ip+0x6e/0x70 [ 81.388071][ T6209] _raw_spin_unlock_bh+0x36/0x40 [ 81.393029][ T6209] mptcp_recvmsg+0x851/0x16a0 [ 81.397730][ T6209] inet_recvmsg+0x171/0x290 [ 81.402257][ T6209] sock_recvmsg+0xfe/0x170 [ 81.406690][ T6209] __sys_recvfrom+0x15b/0x230 [ 81.411388][ T6209] __x64_sys_recvfrom+0x78/0x90 [ 81.416262][ T6209] x64_sys_call+0x1726/0x2d60 [ 81.420955][ T6209] do_syscall_64+0xc9/0x1c0 [ 81.425472][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.431391][ T6209] [ 81.433718][ T6209] read to 0xffff8881241a34e2 of 1 bytes by task 6209 on cpu 0: [ 81.441266][ T6209] mptcp_subflow_get_send+0x1ac/0x7f0 [ 81.446656][ T6209] mptcp_sched_get_send+0x218/0x2e0 [ 81.451872][ T6209] __mptcp_push_pending+0x100/0x4e0 [ 81.457085][ T6209] mptcp_sendmsg+0xa70/0xe60 [ 81.461699][ T6209] inet6_sendmsg+0xc5/0xd0 [ 81.466128][ T6209] __sock_sendmsg+0x8b/0x180 [ 81.470735][ T6209] ____sys_sendmsg+0x312/0x410 [ 81.475506][ T6209] __sys_sendmsg+0x1d9/0x270 [ 81.480192][ T6209] __x64_sys_sendmsg+0x46/0x50 [ 81.484966][ T6209] x64_sys_call+0x2689/0x2d60 [ 81.489658][ T6209] do_syscall_64+0xc9/0x1c0 [ 81.494175][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.500094][ T6209] [ 81.502420][ T6209] value changed: 0x05 -> 0x00 [ 81.507103][ T6209] [ 81.509425][ T6209] Reported by Kernel Concurrency Sanitizer on: [ 81.515575][ T6209] CPU: 0 UID: 0 PID: 6209 Comm: syz.4.752 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 81.526171][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.536236][ T6209] ================================================================== [ 81.575629][ T6245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.601157][ T6245] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.656900][ T4319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.