last executing test programs: 5.598283643s ago: executing program 1 (id=779): symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 4.694933097s ago: executing program 1 (id=776): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000080), &(0x7f00000000c0)=0x3) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = epoll_create1(0x0) dup(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x0, 0x4b, 0x1ff, 0x200d, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4.301160839s ago: executing program 3 (id=780): socket$nl_generic(0x10, 0x3, 0x10) statfs(0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x40000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x79f, &(0x7f00000012c0)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.794279872s ago: executing program 1 (id=794): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00000072fd26e207df3ae2fc7a2106000000ff", @ANYRES32=r0, @ANYBLOB="05f30000000047e62a49272bada7fe9000000001", @ANYRES32, @ANYRES32, @ANYBLOB="0100000002000000000000000b00"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000010000), 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000000), &(0x7f0000000380)}, 0x20) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="c02101"], 0xda) 3.540319863s ago: executing program 3 (id=786): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000201030000000000000000000a0000080c0019800800020028090000f157185ba15b36efe66c46cf39182fabc1322f1dc8be9be9aa1304a737dc2e0ffa0bd3ddc8422cacfe72e3263b10b83048093859132345814d1ccc2b421cae709f4e2a0a3d040d12f09dd6623e73ce8ac87da848a614f39333bbc5689a61eb13586724975dbfeb89f4ceb3efca26270ddd6336bba1f46a88c911df872aa0ece1d2899635f4eeeae73b696e73a72f56678c4d0a66275e53a858f3b6"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4008010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) pipe2(&(0x7f0000000580), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000340)={[{@nojournal_checksum}, {}]}, 0x0, 0x4ee, &(0x7f0000000c40)="$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") r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb60b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3.427322944s ago: executing program 1 (id=787): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3849f6c3febd7b52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x40044590, 0x0) r1 = getpid() clock_gettime(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000c00)={{0x12, 0x1, 0x250, 0x21, 0x5a, 0xa3, 0xff, 0x2001, 0x3c22, 0xdd25, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x70, 0x9, 0x80, 0xff, [{{0x9, 0x4, 0x8b, 0x4, 0x0, 0x3d, 0xd0, 0xc4, 0xcf}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x32, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 3.219316034s ago: executing program 2 (id=789): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f0000001a80)="$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") fdatasync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x3, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "d46962", 0x0, 0x3a, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 3.169832945s ago: executing program 0 (id=790): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000700)={[{@nojournal_checksum}, {@jqfmt_vfsold}]}, 0x0, 0x4ee, &(0x7f0000000c40)="$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") r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb60b, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r5, 0x503, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) socket$pptp(0x18, 0x1, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) shmget$private(0x0, 0x800000, 0x800, &(0x7f00007fd000/0x800000)=nil) 1.896736661s ago: executing program 3 (id=793): epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x2}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x9, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x9) socket(0x10, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.706874671s ago: executing program 0 (id=795): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = msgget$private(0x0, 0x214) msgsnd(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="03"], 0x401, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x82, 0x2}, 0x0, 0x0, 0x3, 0x9c84, 0x1, 0x0, 0x0, 0xfffc, 0x1b}) msgsnd(r2, &(0x7f0000000100)=ANY=[], 0x1d, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x4e23, 0x9, @mcast1, 0x1}, 0xffffffffffffffff, 0x6}}, 0x48) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}]}, 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.640223232s ago: executing program 3 (id=796): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = msgget$private(0x0, 0x2) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x50, 0x7}, 0x0, 0x0, 0x200, 0x6, 0xffffffff, 0x0, 0x100, 0x40, 0x7, 0x8001}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x3) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x0, &(0x7f00000009c0)}, 0x10) socket(0x2, 0x80805, 0x0) r3 = syz_io_uring_setup(0x49b9, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.333418443s ago: executing program 3 (id=797): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r0, 0xc0189436, 0x1ffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x28204, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0, @void, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = gettid() syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRESOCT=r4], 0x1, 0x67e, &(0x7f0000001600)="$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") r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r5, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.314445463s ago: executing program 2 (id=799): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f00000002c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc0002}, {0x8001, 0x0, 0x81, 0x1}, {0x2, 0x4, 0x7, 0x7}]}) socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0xffffffff, 0xa8}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x100084, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x800, &(0x7f0000000380)={0xa, 0x4e23, 0xb, @mcast2, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000000280)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0x22, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000400)="3292f60e34b68b", 0x7, 0x20000001, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4100, 0x1004}], 0x1) 1.275892454s ago: executing program 4 (id=800): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80880) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{@none}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x22}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") 1.234497163s ago: executing program 2 (id=801): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.123833074s ago: executing program 0 (id=802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2188, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu\t<0&&\t') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x20000014}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 876.108305ms ago: executing program 2 (id=803): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8835}, 0x1c) getsockname$packet(r0, 0x0, &(0x7f0000000e00)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x10088, &(0x7f0000000580)=ANY=[@ANYBLOB="73686f77657865632c6e6f646f74732c7379735f696d6d757461626c652c646f74732c6e66732c6e6f646f74732c6e6f646f74732c64656275672c646f74732c756d61736b3d30303030303030303030303030303030303030303230302c00c4cd878e2e225ee8a12ec0f0234a613f191236529e2eb19792d74d539f7b74148c4cd01ca5836451894237f5161f323e3dff6322349bb51c07b887571b07ed2b9f7e59a22824b104346da8", @ANYRESOCT], 0x1, 0x1ff, &(0x7f00000002c0)="$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") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0xa1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8911, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6000000, 0x12, 0xffffffffffffffff, 0xb4a38000) 867.984236ms ago: executing program 4 (id=804): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r0}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x50) getdents64(0xffffffffffffff9c, &(0x7f0000000080)=""/187, 0xbb) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3764}, 0x18) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "011c4e", 0x2, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "6b1b3e", 0x0, 0x0, 0x0, @private2, @private0}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000300)={'vlan1\x00', @remote}) 820.268906ms ago: executing program 0 (id=805): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40005200060010"], 0x24}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@empty, @in=@multicast2, 0x4e24, 0x0, 0x4e24, 0x7, 0x2, 0x20, 0x20, 0xa0, r9}, {0xfffffffffffffff8, 0x7800000000000000, 0xd8b3, 0x2, 0x10000, 0x11, 0x6, 0xba04}, {0x6c, 0x9, 0xabd7, 0x1}, 0xf, 0x6e6bbb, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d3, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x3507, 0x3, 0x0, 0x10, 0x9, 0x7, 0x8}}, 0xe8) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0xff600000, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) 780.565016ms ago: executing program 4 (id=806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x2}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 716.474896ms ago: executing program 0 (id=807): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000002680)) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 638.698426ms ago: executing program 4 (id=808): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = msgget$private(0x0, 0x2) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x50, 0x7}, 0x0, 0x0, 0x200, 0x6, 0xffffffff, 0x0, 0x100, 0x40, 0x7, 0x8001}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x3) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x0, &(0x7f00000009c0)}, 0x10) socket(0x2, 0x80805, 0x0) r3 = syz_io_uring_setup(0x49b9, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 637.610146ms ago: executing program 2 (id=818): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 443.897977ms ago: executing program 3 (id=809): io_uring_setup(0x79af, 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x2000002, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d2023d6ffff756d7461696c3d302c6e6f6e75617461696c696f6368619615f9a9d8fc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466b83d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c8e380b24aa44b2a03f9d01000080000000002c4fb4e27388a38ca91b346d2e5535414e8214d26a8c3700"/241], 0x1, 0x368, &(0x7f0000000700)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x10) uname(&(0x7f00000004c0)=""/162) open(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x0, 0x4}}}, 0x24}}, 0x40044) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/2198], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 443.575618ms ago: executing program 4 (id=810): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_aout(r0, 0x0, 0x4b6) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000000)='./file0\x00', 0x48) 441.949827ms ago: executing program 0 (id=811): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000001c0)={'veth1\x00', {0x2, 0x4e24, @remote}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000208060001080006040002aaaaaaaaaa00f5b75eb8725f"], 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 441.328787ms ago: executing program 2 (id=812): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36c, &(0x7f00000023c0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x4002, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r4, &(0x7f0000000080), 0x208e24b) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x77000, 0xfff0}]) 380.523678ms ago: executing program 4 (id=813): mkdir(&(0x7f0000000080)='./file0\x00', 0x80) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000180)={[{@data_journal}, {@jqfmt_vfsv0}, {@errors_continue}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000280)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) 327.792638ms ago: executing program 1 (id=814): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e24, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @remote}, &(0x7f0000000240)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=@newlink={0xa0, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x70, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xfff}}]}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xee, 0x508}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc000, 0x4000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xef7b, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4c48, 0x4cbc}}]}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0xa040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(&(0x7f0000000480)=""/252) 0s ago: executing program 1 (id=815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) syz_io_uring_setup(0x4974, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r3}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): [ T29] audit: type=1400 audit(1733096470.957:329): avc: denied { read write } for pid=3642 comm="syz.3.68" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.832605][ T29] audit: type=1400 audit(1733096470.967:330): avc: denied { open } for pid=3642 comm="syz.3.68" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.855583][ T29] audit: type=1400 audit(1733096470.967:331): avc: denied { ioctl } for pid=3642 comm="syz.3.68" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.905340][ T29] audit: type=1400 audit(1733096471.057:332): avc: denied { read } for pid=3651 comm="syz.1.69" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.934526][ T29] audit: type=1400 audit(1733096471.057:333): avc: denied { open } for pid=3651 comm="syz.1.69" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.958657][ T29] audit: type=1400 audit(1733096471.057:334): avc: denied { ioctl } for pid=3651 comm="syz.1.69" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.024833][ T3662] block device autoloading is deprecated and will be removed. [ 37.033478][ T3662] syz.1.72: attempt to access beyond end of device [ 37.033478][ T3662] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 37.081860][ T3643] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.090959][ T3643] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.099968][ T3643] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.108937][ T3643] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.124925][ T3675] xt_hashlimit: max too large, truncated to 1048576 [ 37.180748][ T3664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.198647][ T3664] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.216048][ T3664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.243436][ T3675] IPv6: Can't replace route, no match found [ 37.318015][ T3703] netlink: 132 bytes leftover after parsing attributes in process `syz.1.74'. [ 37.331046][ T3703] netlink: 'syz.1.74': attribute type 10 has an invalid length. [ 37.357344][ T3703] @: (slave dummy0): Enslaving as an active interface with an up link [ 37.446412][ T3709] loop4: detected capacity change from 0 to 8192 [ 37.453071][ T3709] vfat: Unknown parameter 'ÿÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿô˜`!›êÓ;;C@èMëøn”›éÊæLË›ø¼!­ AÇvøÀ´Åt‹Î¡Î©ùNêHŠ! [ 37.453071][ T3709] |¡é¹m'–ðy^U' [ 37.459326][ T3720] loop7: detected capacity change from 0 to 16384 [ 37.549611][ T3728] veth1_to_team: entered promiscuous mode [ 37.555452][ T3720] I/O error, dev loop7, sector 7936 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 37.575688][ T3720] I/O error, dev loop7, sector 8192 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 37.590078][ T3720] I/O error, dev loop7, sector 7936 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.599704][ T3720] Buffer I/O error on dev loop7, logical block 992, async page read [ 37.618483][ T3735] netlink: 76 bytes leftover after parsing attributes in process `syz.4.79'. [ 37.658491][ T3718] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 37.668283][ T3718] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 37.676800][ T3718] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 37.685210][ T3718] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 37.693614][ T3718] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 37.702078][ T3718] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 37.710502][ T3718] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 37.718956][ T3718] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 37.727586][ T3718] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 37.735985][ T3718] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 37.749615][ T3718] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 37.762953][ T3718] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 37.777340][ T3718] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 37.791570][ T3718] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 37.804745][ T3718] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 37.820268][ T3718] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 37.859980][ T3755] process 'syz.4.82' launched './file1' with NULL argv: empty string added [ 38.073057][ T3814] loop1: detected capacity change from 0 to 1024 [ 38.079882][ T3814] ext4: Bad value for 'debug_want_extra_isize' [ 38.089963][ T3814] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.131237][ T3823] loop4: detected capacity change from 0 to 512 [ 38.162674][ T3826] loop0: detected capacity change from 0 to 512 [ 38.163772][ T3825] loop1: detected capacity change from 0 to 4096 [ 38.182987][ T3826] EXT4-fs: Ignoring removed oldalloc option [ 38.212546][ T3826] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.221361][ T3822] loop2: detected capacity change from 0 to 512 [ 38.225739][ T3826] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.233408][ T3825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.245697][ T3823] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.271843][ T3826] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 38.276257][ T3823] EXT4-fs (loop4): mount failed [ 38.296333][ T3826] EXT4-fs (loop0): 1 truncate cleaned up [ 38.302361][ T3826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.315863][ T3822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.329715][ T3822] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.336747][ T3823] loop4: detected capacity change from 0 to 1024 [ 38.346854][ T3823] EXT4-fs: Ignoring removed orlov option [ 38.352606][ T3823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.374349][ T3822] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.96: corrupted inode contents [ 38.375111][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.395814][ T3822] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.96: mark_inode_dirty error [ 38.409551][ T3822] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.96: corrupted inode contents [ 38.418182][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.424074][ T3822] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.96: mark_inode_dirty error [ 38.501021][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.504209][ T3844] loop1: detected capacity change from 0 to 512 [ 38.538505][ T3844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.557952][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.567396][ T3844] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.612574][ T3857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.623464][ T3844] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 38.632449][ T3857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.667147][ T3850] netlink: 44 bytes leftover after parsing attributes in process `syz.4.89'. [ 38.729201][ T3869] netlink: 'syz.2.92': attribute type 27 has an invalid length. [ 38.742714][ T3869] bond0: (slave bond_slave_0): Releasing backup interface [ 38.795240][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.863988][ T3886] loop2: detected capacity change from 0 to 1024 [ 38.870828][ T3886] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.878578][ T3886] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 38.903782][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.914706][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 40.335385][ T3906] syz.2.103: attempt to access beyond end of device [ 40.335385][ T3906] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 40.380380][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.393648][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.476138][ T3916] veth1_to_team: entered promiscuous mode [ 40.529013][ T3919] Driver unsupported XDP return value 0 on prog (id 91) dev N/A, expect packet loss! [ 40.593152][ T3921] loop2: detected capacity change from 0 to 1024 [ 40.605231][ T3921] EXT4-fs: Ignoring removed oldalloc option [ 40.660068][ T3921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.710648][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.196623][ T3927] loop2: detected capacity change from 0 to 164 [ 41.303914][ T3931] netlink: 'syz.0.111': attribute type 10 has an invalid length. [ 41.348325][ T3931] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 41.396219][ T3931] team0: Failed to send options change via netlink (err -105) [ 41.398382][ T3933] loop1: detected capacity change from 0 to 256 [ 41.403750][ T3931] team0: Port device netdevsim1 added [ 41.496546][ T3939] SELinux: syz.0.113 (3939) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 41.515357][ T3940] syz.1.115[3940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.515428][ T3940] syz.1.115[3940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.527107][ T3940] syz.1.115[3940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.601961][ T3947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.118'. [ 41.626085][ T3951] loop1: detected capacity change from 0 to 512 [ 41.661226][ T3951] __quota_error: 86 callbacks suppressed [ 41.661244][ T3951] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 41.676921][ T3951] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.678972][ T3955] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.700371][ T3955] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.709418][ T3955] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.718259][ T3955] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.727793][ T3951] EXT4-fs (loop1): mount failed [ 41.732796][ T3955] vxlan0: entered promiscuous mode [ 41.738091][ T3955] vxlan0: entered allmulticast mode [ 41.747287][ T3955] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.756377][ T3955] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.765352][ T3955] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.774310][ T3955] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.781345][ T3945] loop1: detected capacity change from 0 to 1024 [ 41.784043][ T29] audit: type=1400 audit(1733096475.947:420): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 41.799363][ T3945] EXT4-fs: Ignoring removed orlov option [ 41.815335][ T3945] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.834201][ T3958] netlink: 6 bytes leftover after parsing attributes in process `syz.2.121'. [ 41.849433][ T29] audit: type=1400 audit(1733096476.007:421): avc: denied { cpu } for pid=3946 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.899855][ T3945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.919239][ T29] audit: type=1400 audit(1733096476.027:422): avc: denied { connect } for pid=3957 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 42.049959][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.328439][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.347075][ T3978] batadv_slave_0: entered promiscuous mode [ 42.398844][ T3981] vlan2: entered promiscuous mode [ 42.403928][ T3981] dummy0: entered promiscuous mode [ 42.409333][ T3981] vlan2: entered allmulticast mode [ 42.414503][ T3981] dummy0: entered allmulticast mode [ 42.483221][ T3981] dummy0: left allmulticast mode [ 42.488264][ T3981] dummy0: left promiscuous mode [ 42.602182][ T3974] bridge_slave_0: left allmulticast mode [ 42.607961][ T3974] bridge_slave_0: left promiscuous mode [ 42.613637][ T3974] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.646770][ T3974] bridge_slave_1: left allmulticast mode [ 42.652482][ T3974] bridge_slave_1: left promiscuous mode [ 42.658321][ T3974] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.686221][ T3974] bond0: (slave bond_slave_1): Releasing backup interface [ 42.710679][ T3974] team0: Port device team_slave_0 removed [ 42.770243][ T3988] loop2: detected capacity change from 0 to 128 [ 43.097268][ T29] audit: type=1326 audit(1733096477.227:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 43.120591][ T29] audit: type=1326 audit(1733096477.227:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 43.143944][ T29] audit: type=1326 audit(1733096477.227:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 43.167377][ T29] audit: type=1326 audit(1733096477.227:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 43.190782][ T29] audit: type=1326 audit(1733096477.247:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 43.214306][ T29] audit: type=1326 audit(1733096477.247:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 43.276946][ T3974] team0: Port device team_slave_1 removed [ 43.291356][ T3974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.299099][ T3974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.311086][ T3994] netlink: 'syz.3.131': attribute type 39 has an invalid length. [ 43.330603][ T3974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.338080][ T3974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.394216][ T3993] smc: net device wg0 applied user defined pnetid SYZ0 [ 43.401872][ T3994] smc: removing net device wg0 with user defined pnetid SYZ0 [ 43.557968][ T3999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 43.593749][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.633622][ T4001] loop4: detected capacity change from 0 to 512 [ 43.640465][ T4001] EXT4-fs: Ignoring removed oldalloc option [ 43.649179][ T4001] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.679419][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.687038][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.725824][ T4001] EXT4-fs (loop4): 1 truncate cleaned up [ 43.732428][ T4001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.175956][ T4009] loop2: detected capacity change from 0 to 128 [ 44.217840][ T4009] EXT4-fs: Ignoring removed nobh option [ 44.268149][ T4009] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.290309][ T4009] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.324005][ T4013] bridge0: port 3(netdevsim1) entered blocking state [ 44.330976][ T4013] bridge0: port 3(netdevsim1) entered disabled state [ 44.391816][ T4013] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 44.400036][ T4013] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 44.407535][ T4013] bridge0: port 3(netdevsim1) entered blocking state [ 44.414333][ T4013] bridge0: port 3(netdevsim1) entered forwarding state [ 44.457001][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.563205][ T4020] loop3: detected capacity change from 0 to 8192 [ 44.679932][ T4029] loop3: detected capacity change from 0 to 512 [ 44.698384][ T4029] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.745444][ T3301] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 45.050783][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.235554][ T4048] loop2: detected capacity change from 0 to 512 [ 45.247764][ T4048] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.151: corrupted in-inode xattr: invalid ea_ino [ 45.262488][ T4048] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.151: couldn't read orphan inode 15 (err -117) [ 45.275070][ T4048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.306500][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.333738][ T4052] loop2: detected capacity change from 0 to 1024 [ 45.341616][ T4052] EXT4-fs: Ignoring removed orlov option [ 45.347467][ T4052] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.496148][ T4052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.533189][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.947064][ T4065] netlink: 'syz.3.155': attribute type 4 has an invalid length. [ 46.093070][ T4069] loop4: detected capacity change from 0 to 1024 [ 46.118727][ T4069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.258179][ T3788] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 4 with error 28 [ 46.270528][ T3788] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.270528][ T3788] [ 46.280223][ T3788] EXT4-fs (loop4): Total free blocks count 0 [ 46.286326][ T3788] EXT4-fs (loop4): Free/Dirty block details [ 46.292253][ T3788] EXT4-fs (loop4): free_blocks=0 [ 46.297260][ T3788] EXT4-fs (loop4): dirty_blocks=0 [ 46.302304][ T3788] EXT4-fs (loop4): Block reservation details [ 46.308330][ T3788] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 46.343496][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.437248][ T4085] tipc: Started in network mode [ 46.442190][ T4085] tipc: Node identity 4, cluster identity 4711 [ 46.448419][ T4085] tipc: Node number set to 4 [ 46.638203][ T4093] loop4: detected capacity change from 0 to 1764 [ 46.726988][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 46.727005][ T29] audit: type=1400 audit(1733096480.877:723): avc: denied { create } for pid=4100 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 46.790900][ T29] audit: type=1326 audit(1733096480.917:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 46.814451][ T29] audit: type=1326 audit(1733096480.917:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 46.832180][ T4110] smc: net device wg0 applied user defined pnetid SYZ0 [ 46.837617][ T29] audit: type=1326 audit(1733096480.917:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 46.867729][ T29] audit: type=1326 audit(1733096480.917:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 46.870638][ T4110] netlink: 'syz.4.168': attribute type 39 has an invalid length. [ 46.890995][ T29] audit: type=1326 audit(1733096480.917:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 46.922028][ T29] audit: type=1326 audit(1733096480.917:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 46.945312][ T29] audit: type=1326 audit(1733096480.917:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 46.968721][ T29] audit: type=1326 audit(1733096480.917:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 46.991960][ T29] audit: type=1326 audit(1733096480.917:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 47.021300][ T4110] smc: removing net device wg0 with user defined pnetid SYZ0 [ 47.113403][ T4119] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 47.113403][ T4119] program syz.2.170 not setting count and/or reply_len properly [ 47.144815][ T4116] loop3: detected capacity change from 0 to 1764 [ 49.013575][ T4147] netlink: 'syz.0.183': attribute type 27 has an invalid length. [ 49.480394][ T4147] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.487723][ T4147] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.592044][ T4147] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.601015][ T4147] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.609937][ T4147] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.618899][ T4147] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.646065][ T4157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.647703][ T4157] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.650233][ T4157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.016295][ C1] hrtimer: interrupt took 58104 ns [ 50.482499][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 50.539018][ T4197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.558751][ T4197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.604536][ T4200] smc: net device wg0 applied user defined pnetid SYZ0 [ 50.616686][ T4200] netlink: 'syz.1.200': attribute type 39 has an invalid length. [ 50.637403][ T4200] smc: removing net device wg0 with user defined pnetid SYZ0 [ 50.698714][ T4207] hsr_slave_0: left promiscuous mode [ 50.704880][ T4207] hsr_slave_1: left promiscuous mode [ 50.753250][ T4213] netlink: 'syz.1.206': attribute type 27 has an invalid length. [ 50.789599][ T4215] loop3: detected capacity change from 0 to 128 [ 50.944214][ T4213] bridge0: port 3(netdevsim1) entered disabled state [ 50.951072][ T4213] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.958349][ T4213] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.072973][ T4213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.097497][ T4213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.164800][ T4213] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.173815][ T4213] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.182822][ T4213] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.286814][ T4226] 8021q: adding VLAN 0 to HW filter on device @ [ 51.303642][ T4226] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.350313][ T4226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.440798][ T4247] loop3: detected capacity change from 0 to 512 [ 51.476194][ T4247] bond1: entered promiscuous mode [ 51.481282][ T4247] bond1: entered allmulticast mode [ 51.486686][ T4247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.496555][ T4247] bond1 (unregistering): Released all slaves [ 51.543251][ T4257] syz.1.216[4257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.543317][ T4257] syz.1.216[4257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.555050][ T4257] syz.1.216[4257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.592526][ T4262] macvtap0: entered promiscuous mode [ 51.609834][ T4262] macvtap0: left promiscuous mode [ 51.654924][ T4244] dvmrp1: entered allmulticast mode [ 51.811790][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 51.811808][ T29] audit: type=1400 audit(1733096485.967:870): avc: denied { relabelfrom } for pid=4276 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.844186][ T29] audit: type=1400 audit(1733096485.967:871): avc: denied { relabelto } for pid=4276 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.930693][ T4282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'. [ 51.940005][ T4282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'. [ 51.958848][ T4282] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 51.970815][ T4282] dummy0: entered promiscuous mode [ 51.988683][ T29] audit: type=1326 audit(1733096486.147:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.3.222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x0 [ 52.007520][ T4285] netlink: 'syz.2.226': attribute type 27 has an invalid length. [ 52.040180][ T29] audit: type=1326 audit(1733096486.197:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 52.064432][ T29] audit: type=1326 audit(1733096486.197:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 52.092496][ T29] audit: type=1326 audit(1733096486.227:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 52.115970][ T29] audit: type=1326 audit(1733096486.227:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 52.139434][ T29] audit: type=1326 audit(1733096486.227:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 52.163103][ T29] audit: type=1326 audit(1733096486.247:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 52.186431][ T29] audit: type=1326 audit(1733096486.247:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 52.213774][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.221065][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.263218][ T4285] batadv_slave_0: left promiscuous mode [ 52.300816][ T4285] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.309818][ T4285] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.319086][ T4285] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.328182][ T4285] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.384341][ T4297] lo speed is unknown, defaulting to 1000 [ 52.409067][ T4293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.418393][ T4293] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.429033][ T4293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.445543][ T4297] lo speed is unknown, defaulting to 1000 [ 52.453340][ T4297] lo speed is unknown, defaulting to 1000 [ 52.463468][ T4297] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.471874][ T4297] infiniband syzD: RDMA CMA: cma_listen_on_dev, error -98 [ 52.490354][ T4297] lo speed is unknown, defaulting to 1000 [ 52.498679][ T4297] lo speed is unknown, defaulting to 1000 [ 52.504768][ T4297] lo speed is unknown, defaulting to 1000 [ 52.511467][ T4297] lo speed is unknown, defaulting to 1000 [ 52.517756][ T4297] lo speed is unknown, defaulting to 1000 [ 52.524014][ T4297] lo speed is unknown, defaulting to 1000 [ 52.566427][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 52.668583][ T4216] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.710116][ T4216] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.742541][ T4316] syz.1.237[4316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.742620][ T4316] syz.1.237[4316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.763195][ T4316] syz.1.237[4316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.219446][ T4322] lo speed is unknown, defaulting to 1000 [ 54.215422][ T4327] loop4: detected capacity change from 0 to 512 [ 54.222154][ T4327] EXT4-fs: Ignoring removed orlov option [ 54.234219][ T4327] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.258511][ T4327] EXT4-fs (loop4): 1 orphan inode deleted [ 54.264360][ T4327] EXT4-fs (loop4): 1 truncate cleaned up [ 54.280128][ T4327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.344313][ T4334] lo speed is unknown, defaulting to 1000 [ 54.370534][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.567063][ T4363] lo speed is unknown, defaulting to 1000 [ 54.657699][ T4373] SELinux: syz.2.253 (4373) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 54.740383][ T4383] bridge0: entered allmulticast mode [ 54.745901][ T4381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 54.754206][ T4383] loop3: detected capacity change from 0 to 512 [ 54.770974][ T4383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.784166][ T4383] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.808520][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.869626][ T4395] loop3: detected capacity change from 0 to 512 [ 54.908831][ T4395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.921487][ T4395] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.986087][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.499833][ T4408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4408 comm=syz.0.268 [ 55.703507][ T4419] wireguard0: entered promiscuous mode [ 55.709162][ T4419] wireguard0: entered allmulticast mode [ 55.889948][ T4429] veth0_to_team: entered promiscuous mode [ 55.895735][ T4429] veth0_to_team: entered allmulticast mode [ 55.953702][ T4426] loop4: detected capacity change from 0 to 512 [ 55.970636][ T4426] ext4: Unknown parameter 'auto_da_alloc.smackfshat' [ 55.982991][ T4435] xt_hashlimit: max too large, truncated to 1048576 [ 56.010620][ T4436] loop3: detected capacity change from 0 to 512 [ 56.028430][ T4436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.041256][ T4436] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.057507][ T4436] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.275: bg 0: block 248: padding at end of block bitmap is not set [ 56.084349][ T4441] Process accounting resumed [ 56.165429][ T4444] mmap: syz.1.277 (4444) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.191016][ T4444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'. [ 56.526733][ T3366] IPVS: starting estimator thread 0... [ 56.584644][ T4459] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.616472][ T4456] IPVS: using max 2304 ests per chain, 115200 per kthread [ 56.654836][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.665174][ T4465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.283'. [ 56.697156][ T4468] netlink: 'syz.3.286': attribute type 3 has an invalid length. [ 56.704889][ T4468] netlink: 'syz.3.286': attribute type 3 has an invalid length. [ 56.718236][ T4468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'. [ 56.798724][ T4468] loop3: detected capacity change from 0 to 2048 [ 56.806703][ T4468] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 57.217517][ T4482] can0: slcan on ttyS3. [ 57.256294][ T4482] can0 (unregistered): slcan off ttyS3. [ 57.261997][ T4482] Falling back ldisc for ttyS3. [ 57.327062][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 57.349593][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 57.361813][ T4492] hsr_slave_1 (unregistering): left promiscuous mode [ 57.481772][ T4502] netlink: 'syz.4.296': attribute type 27 has an invalid length. [ 57.486297][ T4498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 57.573374][ T4502] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.582755][ T4502] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.592016][ T4502] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.601105][ T4502] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.617288][ T4498] team0 (unregistering): Port device team_slave_0 removed [ 57.625162][ T4498] team0 (unregistering): Port device team_slave_1 removed [ 57.637430][ T3373] lo speed is unknown, defaulting to 1000 [ 57.649184][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 57.649202][ T29] audit: type=1326 audit(1733096491.807:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4501 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 57.680079][ T29] audit: type=1326 audit(1733096491.807:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4501 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 57.695708][ T4502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.703644][ T29] audit: type=1326 audit(1733096491.807:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4501 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 57.714191][ T4502] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.733631][ T29] audit: type=1326 audit(1733096491.807:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4501 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 57.763973][ T29] audit: type=1326 audit(1733096491.807:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4501 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 57.792464][ T4502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.809744][ T3373] lo speed is unknown, defaulting to 1000 [ 57.855955][ T4516] program syz.0.301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.866998][ T4518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.875565][ T4518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.921390][ T4522] can0: slcan on ttyS3. [ 57.956937][ T4522] can0 (unregistered): slcan off ttyS3. [ 57.965703][ T4522] Falling back ldisc for ttyS3. [ 57.981026][ T4525] lo speed is unknown, defaulting to 1000 [ 58.227833][ T29] audit: type=1400 audit(1733096492.387:1138): avc: denied { setopt } for pid=4559 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.250386][ T4534] loop4: detected capacity change from 0 to 2048 [ 58.306350][ T4534] loop4: p3 < > p4 < > [ 58.310617][ T4534] loop4: partition table partially beyond EOD, truncated [ 58.318608][ T4534] loop4: p3 start 4284289 is beyond EOD, truncated [ 58.331368][ T4534] smc: net device bond0 applied user defined pnetid SYZ0 [ 58.347908][ T4534] netlink: 116 bytes leftover after parsing attributes in process `syz.4.307'. [ 58.359620][ T4534] smc: net device bond0 erased user defined pnetid SYZ0 [ 58.429238][ T4571] hub 6-0:1.0: USB hub found [ 58.439280][ T4571] hub 6-0:1.0: 8 ports detected [ 58.464192][ T4575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 58.646700][ T4586] netlink: 'syz.3.317': attribute type 27 has an invalid length. [ 58.674922][ T4586] bridge0: left allmulticast mode [ 58.812476][ T4586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.824658][ T4586] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.847967][ T4586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.057628][ T29] audit: type=1400 audit(1733096493.197:1139): avc: denied { create } for pid=4590 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 59.077024][ T29] audit: type=1326 audit(1733096493.207:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4590 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 59.100463][ T29] audit: type=1326 audit(1733096493.207:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4590 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 59.123889][ T29] audit: type=1326 audit(1733096493.207:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4590 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 59.219502][ T4593] veth0_to_team: entered promiscuous mode [ 59.225421][ T4593] veth0_to_team: entered allmulticast mode [ 59.517166][ T4606] smc: net device wg0 applied user defined pnetid SYZ0 [ 59.583626][ T4618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.593294][ T4618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.607012][ T4618] macsec2: entered promiscuous mode [ 59.612338][ T4618] team0: entered promiscuous mode [ 59.617512][ T4618] team_slave_0: entered promiscuous mode [ 59.623420][ T4618] team_slave_1: entered promiscuous mode [ 59.629456][ T4618] macsec2: entered allmulticast mode [ 59.635003][ T4618] team0: entered allmulticast mode [ 59.640384][ T4618] team_slave_0: entered allmulticast mode [ 59.646224][ T4618] team_slave_1: entered allmulticast mode [ 59.654691][ T4618] team0: Device macsec2 is already an upper device of the team interface [ 59.673890][ T4618] team0: left allmulticast mode [ 59.678892][ T4618] team_slave_0: left allmulticast mode [ 59.684365][ T4618] team_slave_1: left allmulticast mode [ 59.689870][ T4618] team0: left promiscuous mode [ 59.694674][ T4618] team_slave_0: left promiscuous mode [ 59.700277][ T4618] team_slave_1: left promiscuous mode [ 59.739888][ T4624] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.740609][ T4626] loop4: detected capacity change from 0 to 1024 [ 59.748203][ T4624] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.762788][ T4624] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.768237][ T4626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.771044][ T4624] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.791676][ T4624] vxlan0: entered promiscuous mode [ 59.796917][ T4624] vxlan0: entered allmulticast mode [ 59.802818][ T4624] bridge0: port 1(vxlan0) entered blocking state [ 59.809281][ T4624] bridge0: port 1(vxlan0) entered disabled state [ 59.817591][ T4624] bridge0: port 1(vxlan0) entered blocking state [ 59.817629][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.832964][ T4624] bridge0: port 1(vxlan0) entered forwarding state [ 59.872792][ T4633] loop3: detected capacity change from 0 to 2048 [ 59.897919][ T4633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.207999][ T4649] xt_hashlimit: max too large, truncated to 1048576 [ 60.509744][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 60.767276][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.001633][ T4668] infiniband syz0: set down [ 61.001919][ T4669] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.006311][ T4668] infiniband syz0: added bond0 [ 61.019284][ T4670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.030052][ T4669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'. [ 61.047317][ T4670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.064410][ T4670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.073887][ T4670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.100653][ T4668] RDS/IB: syz0: added [ 61.105809][ T4668] smc: adding ib device syz0 with port count 1 [ 61.112371][ T4668] smc: ib device syz0 port 1 has pnetid [ 62.198422][ T4700] bridge0: port 4(vlan2) entered blocking state [ 62.204750][ T4700] bridge0: port 4(vlan2) entered disabled state [ 62.212757][ T4700] vlan2: entered allmulticast mode [ 62.218006][ T4700] @: entered allmulticast mode [ 62.222844][ T4700] bond_slave_0: entered allmulticast mode [ 62.228597][ T4700] bond_slave_1: entered allmulticast mode [ 62.234330][ T4700] dummy0: entered allmulticast mode [ 62.250227][ T4700] vlan2: entered promiscuous mode [ 62.255367][ T4700] @: entered promiscuous mode [ 62.260091][ T4700] bond_slave_0: entered promiscuous mode [ 62.265831][ T4700] bond_slave_1: entered promiscuous mode [ 62.271699][ T4700] dummy0: entered promiscuous mode [ 62.282045][ T4700] bridge0: port 4(vlan2) entered blocking state [ 62.288444][ T4700] bridge0: port 4(vlan2) entered forwarding state [ 62.607141][ T4715] netlink: 132 bytes leftover after parsing attributes in process `syz.0.361'. [ 62.617230][ T4715] netlink: 'syz.0.361': attribute type 10 has an invalid length. [ 62.627682][ T4715] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.659379][ T4720] netlink: 84 bytes leftover after parsing attributes in process `syz.1.363'. [ 62.670722][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 62.670737][ T29] audit: type=1400 audit(1733096496.827:1285): avc: denied { create } for pid=4718 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.707034][ T29] audit: type=1400 audit(1733096496.857:1286): avc: denied { write } for pid=4718 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.757307][ T4724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.365'. [ 62.766642][ T4724] netlink: 'syz.1.365': attribute type 10 has an invalid length. [ 62.771853][ T29] audit: type=1326 audit(1733096496.927:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 62.798038][ T29] audit: type=1326 audit(1733096496.927:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 62.837486][ T29] audit: type=1326 audit(1733096496.927:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 62.860882][ T29] audit: type=1326 audit(1733096496.927:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 62.884297][ T29] audit: type=1326 audit(1733096496.927:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 62.907697][ T29] audit: type=1326 audit(1733096496.927:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 62.931087][ T29] audit: type=1326 audit(1733096496.947:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 62.954440][ T29] audit: type=1326 audit(1733096496.957:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 62.986588][ T4726] geneve0: entered allmulticast mode [ 63.043963][ T4733] loop4: detected capacity change from 0 to 512 [ 63.068153][ T4733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.086199][ T4733] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.178187][ T4733] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #19: comm syz.4.369: corrupted inode contents [ 63.195587][ T4733] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #19: comm syz.4.369: mark_inode_dirty error [ 63.206910][ T4735] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 63.213681][ T4733] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #19: comm syz.4.369: corrupted inode contents [ 63.230302][ T4733] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.369: mark_inode_dirty error [ 63.246580][ T4733] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.369: mark inode dirty (error -117) [ 63.276790][ T4733] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 63.316845][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.408116][ T4758] netlink: 'syz.4.378': attribute type 4 has an invalid length. [ 63.498465][ T4765] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 63.505092][ T4765] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.512816][ T4765] vhci_hcd vhci_hcd.0: Device attached [ 63.577661][ T4768] vhci_hcd: connection closed [ 63.577792][ T3800] vhci_hcd: stop threads [ 63.586874][ T3800] vhci_hcd: release socket [ 63.591324][ T3800] vhci_hcd: disconnect device [ 64.207997][ T4811] loop4: detected capacity change from 0 to 512 [ 64.308681][ T4811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.321506][ T4811] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.455435][ T4815] netlink: 'syz.3.386': attribute type 3 has an invalid length. [ 64.463306][ T4815] netlink: 'syz.3.386': attribute type 3 has an invalid length. [ 64.473053][ T4815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.386'. [ 64.817236][ T4843] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.393'. [ 64.827116][ T4837] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.393'. [ 64.837454][ T4843] syz.2.393[4843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.837531][ T4843] syz.2.393[4843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.850192][ T4843] syz.2.393[4843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.917399][ T4848] netlink: 6 bytes leftover after parsing attributes in process `syz.3.397'. [ 64.975841][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.002498][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 65.015585][ T4851] bridge0: port 1(vxlan0) entered disabled state [ 65.332900][ T4873] hub 2-0:1.0: USB hub found [ 65.348245][ T4873] hub 2-0:1.0: 8 ports detected [ 65.348482][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 65.453479][ T4878] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 5, id = 0 [ 65.849750][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 66.040321][ T4911] loop4: detected capacity change from 0 to 256 [ 66.215050][ T4934] loop3: detected capacity change from 0 to 1024 [ 66.229235][ T4934] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 66.243945][ T4934] JBD2: no valid journal superblock found [ 66.249809][ T4934] EXT4-fs (loop3): Could not load journal inode [ 66.318227][ T4946] loop4: detected capacity change from 0 to 512 [ 66.339128][ T4946] EXT4-fs: Ignoring removed orlov option [ 66.346890][ T4953] loop3: detected capacity change from 0 to 512 [ 66.359704][ T4946] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.370876][ T4953] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.419: corrupted in-inode xattr: invalid ea_ino [ 66.387783][ T4946] EXT4-fs (loop4): 1 orphan inode deleted [ 66.393572][ T4946] EXT4-fs (loop4): 1 truncate cleaned up [ 66.404184][ T4953] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.419: couldn't read orphan inode 15 (err -117) [ 66.427119][ T4946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.498037][ T4946] veth0_to_team: entered promiscuous mode [ 66.503844][ T4946] veth0_to_team: entered allmulticast mode [ 66.537886][ T4953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.631269][ T5010] xt_hashlimit: max too large, truncated to 1048576 [ 66.647787][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.691346][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.710443][ T5022] loop4: detected capacity change from 0 to 256 [ 66.784358][ T5022] FAT-fs (loop4): Directory bread(block 64) failed [ 66.803006][ T5030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 66.811337][ T5022] FAT-fs (loop4): Directory bread(block 65) failed [ 66.838838][ T5022] FAT-fs (loop4): Directory bread(block 66) failed [ 66.859209][ T5022] FAT-fs (loop4): Directory bread(block 67) failed [ 66.868638][ T5030] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 66.902433][ T5022] FAT-fs (loop4): Directory bread(block 68) failed [ 66.930083][ T5022] FAT-fs (loop4): Directory bread(block 69) failed [ 66.948167][ T5022] FAT-fs (loop4): Directory bread(block 70) failed [ 66.948235][ T5030] syz.3.425 (5030) used greatest stack depth: 10312 bytes left [ 66.971625][ T5022] FAT-fs (loop4): Directory bread(block 71) failed [ 66.992800][ T5022] FAT-fs (loop4): Directory bread(block 72) failed [ 67.016148][ T5022] FAT-fs (loop4): Directory bread(block 73) failed [ 67.831017][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 67.831036][ T29] audit: type=1326 audit(1733096501.987:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 67.874906][ T29] audit: type=1326 audit(1733096501.987:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 67.898424][ T29] audit: type=1326 audit(1733096501.987:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 67.921962][ T29] audit: type=1326 audit(1733096501.987:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 67.945683][ T29] audit: type=1326 audit(1733096501.997:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 67.969169][ T29] audit: type=1326 audit(1733096501.997:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 67.992548][ T29] audit: type=1326 audit(1733096501.997:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 68.015963][ T29] audit: type=1326 audit(1733096501.997:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 68.039330][ T29] audit: type=1326 audit(1733096501.997:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 68.062760][ T29] audit: type=1326 audit(1733096501.997:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 68.152097][ T5095] loop3: detected capacity change from 0 to 512 [ 68.166953][ T5095] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.232857][ T5095] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.248260][ T5095] EXT4-fs (loop3): mount failed [ 68.807951][ T5118] loop0: detected capacity change from 0 to 512 [ 68.840439][ T5118] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 68.858791][ T5118] System zones: 0-2, 18-18, 34-34 [ 68.871403][ T5118] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.446: bg 0: block 248: padding at end of block bitmap is not set [ 68.901766][ T5118] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.446: Failed to acquire dquot type 1 [ 68.939520][ T5118] EXT4-fs (loop0): 1 truncate cleaned up [ 68.948214][ T5125] loop3: detected capacity change from 0 to 512 [ 69.030828][ T5118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.056330][ T5125] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 69.110943][ T5125] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 69.123898][ T5118] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.154664][ T5125] EXT4-fs (loop3): mount failed [ 69.286582][ T5118] syz.0.446 (5118) used greatest stack depth: 9192 bytes left [ 69.315607][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.445889][ T5141] veth0_vlan: entered allmulticast mode [ 69.481859][ T5144] loop7: detected capacity change from 0 to 16384 [ 69.593792][ T5152] loop0: detected capacity change from 0 to 128 [ 69.688457][ T5153] loop3: detected capacity change from 0 to 512 [ 69.805381][ T5153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.812111][ T5153] EXT4-fs: Ignoring removed oldalloc option [ 69.958185][ T5141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.000073][ T5153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.033618][ T5153] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 70.064489][ T5149] loop7: detected capacity change from 16384 to 16383 [ 70.208530][ T5159] loop4: detected capacity change from 0 to 128 [ 70.242099][ T5159] infiniband syz0: set down [ 70.297387][ T5166] loop3: detected capacity change from 0 to 256 [ 70.363848][ T5170] syz.3.464[5170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.363919][ T5170] syz.3.464[5170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.384686][ T5170] syz.3.464[5170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.388054][ T5173] loop0: detected capacity change from 0 to 2048 [ 70.426420][ T5173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.459210][ T5173] __nla_validate_parse: 2 callbacks suppressed [ 70.459224][ T5173] netlink: 12 bytes leftover after parsing attributes in process `+F'. [ 70.489892][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.604397][ T5187] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 70.649217][ T5181] netlink: 'syz.3.467': attribute type 10 has an invalid length. [ 70.804345][ T5202] loop3: detected capacity change from 0 to 2048 [ 70.839710][ T5202] Alternate GPT is invalid, using primary GPT. [ 70.846044][ T5202] loop3: p1 p2 p3 [ 70.875763][ T5208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.477'. [ 70.885160][ T5208] all: renamed from gretap0 (while UP) [ 70.896705][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 70.908895][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 70.920965][ T3467] udevd[3467]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 70.938184][ T5210] loop3: detected capacity change from 0 to 1024 [ 70.948544][ T5210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.033998][ T5220] netlink: 87 bytes leftover after parsing attributes in process `syz.2.480'. [ 71.588627][ T5245] loop0: detected capacity change from 0 to 128 [ 71.608405][ T5245] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.621694][ T5245] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.734484][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.763759][ T5210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.771289][ T5253] xt_TCPMSS: Only works on TCP SYN packets [ 71.874051][ T5259] loop3: detected capacity change from 0 to 2048 [ 71.915400][ T5259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.951522][ T5259] 9pnet_fd: Insufficient options for proto=fd [ 71.994593][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.051384][ T5265] loop3: detected capacity change from 0 to 764 [ 72.071657][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 72.160157][ T5269] loop3: detected capacity change from 0 to 128 [ 72.177060][ T5269] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 72.204224][ T5269] ªªªªªª: renamed from vlan0 [ 72.262266][ T5269] syz.3.497: attempt to access beyond end of device [ 72.262266][ T5269] loop3: rw=0, sector=216, nr_sectors = 1 limit=128 [ 72.381901][ T4996] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 72.385670][ T5280] loop0: detected capacity change from 0 to 128 [ 72.470021][ T5291] block device autoloading is deprecated and will be removed. [ 72.594751][ T5298] pim6reg: entered allmulticast mode [ 72.626623][ T5298] loop1: detected capacity change from 0 to 2048 [ 72.724499][ T5298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.743883][ T5298] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.779381][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.840611][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 72.840655][ T29] audit: type=1400 audit(1733096507.020:2227): avc: denied { read } for pid=5300 comm="syz.0.509" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.870143][ T29] audit: type=1400 audit(1733096507.020:2228): avc: denied { open } for pid=5300 comm="syz.0.509" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.879667][ T5311] loop1: detected capacity change from 0 to 512 [ 72.972231][ T5311] bond0: entered promiscuous mode [ 72.977452][ T5311] bond0: entered allmulticast mode [ 72.983942][ T5311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.002092][ T5311] bond0 (unregistering): Released all slaves [ 73.673490][ T5322] loop0: detected capacity change from 0 to 256 [ 73.760225][ T29] audit: type=1400 audit(1733096507.947:2229): avc: denied { mount } for pid=5323 comm="syz.2.514" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 73.849261][ T5326] loop3: detected capacity change from 0 to 164 [ 73.861768][ T5322] FAT-fs (loop0): Directory bread(block 64) failed [ 73.920987][ T5322] FAT-fs (loop0): Directory bread(block 65) failed [ 73.972805][ T5322] FAT-fs (loop0): Directory bread(block 66) failed [ 74.100142][ T5322] FAT-fs (loop0): Directory bread(block 67) failed [ 74.303306][ T29] audit: type=1326 audit(1733096508.501:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 74.326692][ T29] audit: type=1326 audit(1733096508.501:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 74.350054][ T29] audit: type=1326 audit(1733096508.501:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 74.373430][ T29] audit: type=1326 audit(1733096508.501:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 74.396771][ T29] audit: type=1326 audit(1733096508.501:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 74.433888][ T5322] FAT-fs (loop0): Directory bread(block 68) failed [ 74.460841][ T5322] FAT-fs (loop0): Directory bread(block 69) failed [ 74.478294][ T5322] FAT-fs (loop0): Directory bread(block 70) failed [ 74.505943][ T5322] FAT-fs (loop0): Directory bread(block 71) failed [ 74.547199][ T5322] FAT-fs (loop0): Directory bread(block 72) failed [ 74.567068][ T5322] FAT-fs (loop0): Directory bread(block 73) failed [ 74.701014][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 74.902246][ T29] audit: type=1326 audit(1733096508.622:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 74.925662][ T29] audit: type=1326 audit(1733096508.622:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.3.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 75.188189][ T5357] netlink: 'syz.4.525': attribute type 4 has an invalid length. [ 75.205763][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 75.378315][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 75.396254][ T5347] bridge0: entered promiscuous mode [ 75.411715][ T5347] macvlan2: entered promiscuous mode [ 75.724747][ T5379] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 75.748633][ T5377] atomic_op ffff8881163f7d28 conn xmit_atomic 0000000000000000 [ 75.895899][ T5383] lo speed is unknown, defaulting to 1000 [ 76.024903][ T5383] lo speed is unknown, defaulting to 1000 [ 76.069839][ T5383] lo speed is unknown, defaulting to 1000 [ 76.098787][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 76.131100][ T5383] infiniband syzD: RDMA CMA: cma_listen_on_dev, error -98 [ 76.168361][ T5390] bridge_slave_1: left allmulticast mode [ 76.174097][ T5390] bridge_slave_1: left promiscuous mode [ 76.179849][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.300324][ T5390] bridge_slave_0: left allmulticast mode [ 76.306130][ T5390] bridge_slave_0: left promiscuous mode [ 76.311967][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.408423][ T5383] lo speed is unknown, defaulting to 1000 [ 76.416571][ T5383] lo speed is unknown, defaulting to 1000 [ 76.422967][ T5383] lo speed is unknown, defaulting to 1000 [ 76.429237][ T5383] lo speed is unknown, defaulting to 1000 [ 76.435458][ T5383] lo speed is unknown, defaulting to 1000 [ 76.441585][ T5383] lo speed is unknown, defaulting to 1000 [ 76.505890][ T5397] loop3: detected capacity change from 0 to 512 [ 76.516206][ T5397] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.581332][ T5397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.683470][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.720132][ T5409] bond0: entered promiscuous mode [ 76.725330][ T5409] bond0: entered allmulticast mode [ 76.757800][ T5412] loop3: detected capacity change from 0 to 2048 [ 76.774826][ T5409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.797828][ T5413] loop1: detected capacity change from 0 to 2048 [ 76.806660][ T5409] bond0 (unregistering): Released all slaves [ 76.845094][ T5412] loop3: p1 < > p4 [ 76.849001][ T5413] EXT4-fs (loop1): failed to initialize system zone (-117) [ 76.865146][ T5412] loop3: p4 size 8388608 extends beyond EOD, truncated [ 76.888496][ T5413] EXT4-fs (loop1): mount failed [ 77.027887][ T5420] loop4: detected capacity change from 0 to 8192 [ 77.045717][ T5424] block device autoloading is deprecated and will be removed. [ 77.080523][ T5424] syz.3.548: attempt to access beyond end of device [ 77.080523][ T5424] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 77.091259][ T5430] loop1: detected capacity change from 0 to 512 [ 77.127439][ T5430] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 77.156287][ T5430] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 77.181608][ T5430] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.199825][ T5430] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.550: Invalid block bitmap block 0 in block_group 0 [ 77.243910][ T5430] EXT4-fs (loop1): Remounting filesystem read-only [ 77.262265][ T5430] EXT4-fs (loop1): 1 orphan inode deleted [ 77.309706][ T5430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.322979][ T5430] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 77.330027][ T5430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.625270][ T5443] loop4: detected capacity change from 0 to 128 [ 78.080606][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 78.080639][ T29] audit: type=1400 audit(1733096512.298:2435): avc: denied { append } for pid=5457 comm="syz.3.558" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.122573][ T5458] hub 6-0:1.0: USB hub found [ 78.134503][ T5458] hub 6-0:1.0: 8 ports detected [ 78.140229][ T29] audit: type=1400 audit(1733096512.308:2436): avc: denied { map } for pid=5457 comm="syz.3.558" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.164451][ T29] audit: type=1400 audit(1733096512.308:2437): avc: denied { ioctl } for pid=5457 comm="syz.3.558" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.215512][ T5462] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 78.222091][ T5460] lo speed is unknown, defaulting to 1000 [ 78.258393][ T5464] loop3: detected capacity change from 0 to 512 [ 78.275299][ T5464] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.561: iget: bogus i_mode (0) [ 78.287346][ T5464] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.561: couldn't read orphan inode 17 (err -117) [ 78.300438][ T5464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.344550][ T29] audit: type=1400 audit(1733096512.570:2438): avc: denied { unmount } for pid=5469 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 78.364507][ T5470] Process accounting resumed [ 78.397176][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.411301][ T29] audit: type=1400 audit(1733096512.630:2439): avc: denied { mount } for pid=5471 comm="syz.4.564" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.438495][ T29] audit: type=1400 audit(1733096512.640:2440): avc: denied { write } for pid=5471 comm="syz.4.564" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.459293][ T29] audit: type=1400 audit(1733096512.640:2441): avc: denied { open } for pid=5471 comm="syz.4.564" path="/104/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.486506][ T5474] xt_hashlimit: max too large, truncated to 1048576 [ 78.498441][ T29] audit: type=1400 audit(1733096512.721:2442): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.518916][ T29] audit: type=1326 audit(1733096512.721:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.0.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 78.542501][ T29] audit: type=1326 audit(1733096512.721:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.0.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f875df20849 code=0x7ffc0000 [ 78.651147][ T5485] vlan0: entered promiscuous mode [ 78.656301][ T5485] team0: entered promiscuous mode [ 78.661449][ T5485] team_slave_0: entered promiscuous mode [ 78.667223][ T5487] loop4: detected capacity change from 0 to 512 [ 78.667251][ T5485] team_slave_1: entered promiscuous mode [ 78.679222][ T5485] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 78.687808][ T5485] team0: left promiscuous mode [ 78.692733][ T5485] team_slave_0: left promiscuous mode [ 78.698233][ T5485] team_slave_1: left promiscuous mode [ 78.703732][ T5485] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 78.713767][ T5487] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.817568][ T5487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.915725][ T5497] loop3: detected capacity change from 0 to 256 [ 79.053523][ T5500] loop0: detected capacity change from 0 to 512 [ 79.078955][ T5501] capability: warning: `syz.1.575' uses 32-bit capabilities (legacy support in use) [ 79.090115][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.125271][ T5500] EXT4-fs: Ignoring removed orlov option [ 79.179292][ T5500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.260071][ T5493] hsr_slave_0: left promiscuous mode [ 79.268214][ T5493] hsr_slave_1: left promiscuous mode [ 79.282959][ T5500] EXT4-fs (loop0): 1 orphan inode deleted [ 79.288812][ T5500] EXT4-fs (loop0): 1 truncate cleaned up [ 79.294870][ T5500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.341263][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.508670][ T5506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.574'. [ 79.574707][ T5512] dccp_close: ABORT with 1 bytes unread [ 79.585249][ T5514] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.619500][ T5517] xt_hashlimit: max too large, truncated to 1048576 [ 79.811683][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 79.899170][ T5529] Process accounting resumed [ 80.122507][ T5546] loop1: detected capacity change from 0 to 128 [ 80.374187][ T5556] syz.0.593[5556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.374316][ T5556] syz.0.593[5556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.416241][ T5556] syz.0.593[5556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.503377][ T5562] xt_hashlimit: max too large, truncated to 1048576 [ 80.857694][ T5572] lo speed is unknown, defaulting to 1000 [ 81.286957][ T5576] vlan2: entered promiscuous mode [ 81.292268][ T5576] vlan2: entered allmulticast mode [ 81.297520][ T5576] hsr_slave_1: entered allmulticast mode [ 81.459702][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 81.536548][ T5576] hsr_slave_1 (unregistering): left allmulticast mode [ 81.623673][ T5576] hsr_slave_1 (unregistering): left promiscuous mode [ 81.744518][ T5588] hsr_slave_0: left promiscuous mode [ 81.750518][ T5588] hsr_slave_1: left promiscuous mode [ 81.803365][ T5591] loop4: detected capacity change from 0 to 512 [ 81.820109][ T5591] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 81.850396][ T5591] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 81.858470][ T5591] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.887326][ T5591] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.605: Invalid block bitmap block 0 in block_group 0 [ 81.908394][ T5591] EXT4-fs (loop4): Remounting filesystem read-only [ 81.923388][ T5597] vlan0: entered promiscuous mode [ 81.928547][ T5597] hsr_slave_1: entered promiscuous mode [ 81.934455][ T5597] vlan0: entered allmulticast mode [ 81.939708][ T5597] hsr_slave_1: entered allmulticast mode [ 81.950318][ T5591] EXT4-fs (loop4): 1 orphan inode deleted [ 81.969802][ T5591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.005613][ T5601] syz.0.606: attempt to access beyond end of device [ 82.005613][ T5601] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 82.019446][ T5591] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 82.032922][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 82.049230][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.072105][ T5597] hsr_slave_1 (unregistering): left allmulticast mode [ 82.079044][ T5597] hsr_slave_1 (unregistering): left promiscuous mode [ 82.079581][ T5603] loop0: detected capacity change from 0 to 512 [ 82.126809][ T5603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.158331][ T5603] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.242061][ T5610] loop4: detected capacity change from 0 to 512 [ 82.281749][ T5610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.307883][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.327242][ T5610] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.525642][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.611319][ T5627] loop0: detected capacity change from 0 to 256 [ 82.819607][ T5631] loop3: detected capacity change from 0 to 512 [ 82.864152][ T5631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.030395][ T5631] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.085509][ T5631] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 83.088637][ T29] kauditd_printk_skb: 477 callbacks suppressed [ 83.088654][ T29] audit: type=1326 audit(1733096517.341:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f95353677e7 code=0x7ffc0000 [ 83.096524][ T5631] System zones: [ 83.099777][ T29] audit: type=1326 audit(1733096517.341:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f953530c189 code=0x7ffc0000 [ 83.123084][ T5631] 0-2 [ 83.126588][ T29] audit: type=1326 audit(1733096517.341:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 83.149763][ T5631] , 18-18, 34-34 [ 83.301800][ T5637] lo speed is unknown, defaulting to 1000 [ 83.657820][ T5631] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 83.689443][ T5631] EXT4-fs (loop3): 1 truncate cleaned up [ 83.705635][ T5631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.871021][ T29] audit: type=1326 audit(1733096518.126:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 83.959287][ T5631] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #2: block 3: comm syz.3.614: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 84.025258][ T5645] loop1: detected capacity change from 0 to 512 [ 84.036538][ T5647] loop0: detected capacity change from 0 to 2048 [ 84.046308][ T29] audit: type=1326 audit(1733096518.156:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9535372767 code=0x7ffc0000 [ 84.069741][ T29] audit: type=1326 audit(1733096518.156:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f95353726dc code=0x7ffc0000 [ 84.093045][ T29] audit: type=1326 audit(1733096518.156:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9535372614 code=0x7ffc0000 [ 84.116353][ T29] audit: type=1326 audit(1733096518.156:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9535372614 code=0x7ffc0000 [ 84.139720][ T29] audit: type=1326 audit(1733096518.156:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f953536f4aa code=0x7ffc0000 [ 84.162900][ T29] audit: type=1326 audit(1733096518.156:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 84.219287][ T5631] EXT4-fs (loop3): Remounting filesystem read-only [ 84.237210][ T5647] loop0: p1 < > p4 [ 84.239227][ T5645] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.618: iget: bogus i_mode (0) [ 84.245953][ T5647] loop0: p4 size 8388608 extends beyond EOD, truncated [ 84.253566][ T5645] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.618: couldn't read orphan inode 17 (err -117) [ 84.271381][ T5631] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 84.291258][ T5645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.309975][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.381107][ T5655] loop3: detected capacity change from 0 to 512 [ 84.395984][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 84.402115][ T3467] udevd[3467]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.418239][ T5657] vlan0: entered promiscuous mode [ 84.423311][ T5657] hsr_slave_1: entered promiscuous mode [ 84.429000][ T5657] vlan0: entered allmulticast mode [ 84.434453][ T5657] hsr_slave_1: entered allmulticast mode [ 84.444920][ T5655] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 84.452953][ T3467] udevd[3467]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.456223][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 84.497257][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 84.510437][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.519748][ T5655] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 84.528155][ T5655] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.542154][ T5657] hsr_slave_1 (unregistering): left allmulticast mode [ 84.549116][ T5657] hsr_slave_1 (unregistering): left promiscuous mode [ 84.564896][ T5655] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.622: Invalid block bitmap block 0 in block_group 0 [ 84.602845][ T5655] EXT4-fs (loop3): Remounting filesystem read-only [ 84.623624][ T5655] EXT4-fs (loop3): 1 orphan inode deleted [ 84.658766][ T5655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.698049][ T5655] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 84.699509][ T5665] loop0: detected capacity change from 0 to 512 [ 84.732525][ T5665] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.735352][ T5655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.772638][ T5665] EXT4-fs (loop0): 1 truncate cleaned up [ 84.778799][ T5665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.201929][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.243290][ T5684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.254829][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 85.262438][ T5684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.564710][ T5699] atomic_op ffff888133010928 conn xmit_atomic 0000000000000000 [ 85.774970][ T5712] xt_hashlimit: max too large, truncated to 1048576 [ 85.782600][ T5711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.651'. [ 85.922861][ T5718] loop0: detected capacity change from 0 to 512 [ 85.989469][ T5718] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 86.100646][ T5718] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.189766][ T5718] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 86.218181][ T5718] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 86.226808][ T5718] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.643: bg 0: block 40: padding at end of block bitmap is not set [ 86.241621][ T5718] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 86.251234][ T5718] EXT4-fs (loop0): 1 truncate cleaned up [ 86.257741][ T5718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.282135][ T5728] loop4: detected capacity change from 0 to 128 [ 86.747094][ T5739] loop1: detected capacity change from 0 to 1024 [ 86.860041][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.869566][ T5741] xt_hashlimit: max too large, truncated to 1048576 [ 86.947464][ T5739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.118410][ T5739] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 87.216758][ T5739] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 776 with error 28 [ 87.229287][ T5739] EXT4-fs (loop1): This should not happen!! Data will be lost [ 87.229287][ T5739] [ 87.239020][ T5739] EXT4-fs (loop1): Total free blocks count 0 [ 87.245048][ T5739] EXT4-fs (loop1): Free/Dirty block details [ 87.251155][ T5739] EXT4-fs (loop1): free_blocks=68451041280 [ 87.257054][ T5739] EXT4-fs (loop1): dirty_blocks=784 [ 87.262329][ T5739] EXT4-fs (loop1): Block reservation details [ 87.268364][ T5739] EXT4-fs (loop1): i_reserved_data_blocks=49 [ 87.350367][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.464690][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 87.535900][ T5770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.568083][ T5770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.952925][ T5777] netlink: 132 bytes leftover after parsing attributes in process `syz.4.663'. [ 87.982919][ T5777] netlink: 'syz.4.663': attribute type 10 has an invalid length. [ 88.024168][ T5777] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 88.033819][ T4992] infiniband syz0: set active [ 88.087565][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 88.087582][ T29] audit: type=1326 audit(1733096522.372:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 88.090216][ T5781] loop4: detected capacity change from 0 to 512 [ 88.123670][ T29] audit: type=1326 audit(1733096522.402:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 88.149198][ T5781] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.157823][ T5781] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.165418][ T5781] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.181941][ T5781] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 88.189669][ T29] audit: type=1326 audit(1733096522.432:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 88.213595][ T29] audit: type=1326 audit(1733096522.432:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 88.221584][ T5781] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.664: bg 0: block 40: padding at end of block bitmap is not set [ 88.236939][ T29] audit: type=1326 audit(1733096522.432:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 88.274461][ T29] audit: type=1326 audit(1733096522.432:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 88.297819][ T29] audit: type=1326 audit(1733096522.432:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 88.313370][ T5781] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 88.321156][ T29] audit: type=1326 audit(1733096522.432:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 88.321190][ T29] audit: type=1326 audit(1733096522.432:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 88.360593][ T5781] EXT4-fs (loop4): 1 truncate cleaned up [ 88.376351][ T29] audit: type=1326 audit(1733096522.432:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535370849 code=0x7ffc0000 [ 88.410546][ T5781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.789151][ T5803] lo speed is unknown, defaulting to 1000 [ 89.728067][ T5806] loop1: detected capacity change from 0 to 256 [ 89.827550][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.086624][ T5814] loop0: detected capacity change from 0 to 512 [ 90.208563][ T5814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.237128][ T5814] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.276433][ T5825] loop4: detected capacity change from 0 to 2048 [ 90.430571][ T5825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.516620][ T5811] EXT4-fs: Ignoring removed orlov option [ 90.552092][ T5814] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.673: bg 0: block 248: padding at end of block bitmap is not set [ 90.576939][ T5811] EXT4-fs (loop4): stripe (15) is not aligned with cluster size (16), stripe is disabled [ 90.635974][ T5842] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.673: bg 0: block 248: padding at end of block bitmap is not set [ 90.653148][ T5811] EXT4-fs (loop4): can't enable nombcache during remount [ 90.698575][ T5842] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 90.730148][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.799528][ T5856] xt_hashlimit: max too large, truncated to 1048576 [ 91.087201][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.111803][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.166714][ T5884] loop1: detected capacity change from 0 to 2048 [ 91.203953][ T5884] loop1: p1 < > p3 [ 91.209944][ T5884] loop1: p3 size 134217728 extends beyond EOD, truncated [ 91.305967][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.593895][ T5893] loop0: detected capacity change from 0 to 512 [ 91.600935][ T5891] loop1: detected capacity change from 0 to 512 [ 91.613097][ T5893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.621851][ T5893] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.632141][ T5891] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.688: iget: bogus i_mode (0) [ 91.647948][ T5893] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 91.656903][ T5891] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.688: couldn't read orphan inode 17 (err -117) [ 91.660583][ T5893] System zones: 0-2, 18-18, 34-34 [ 91.695807][ T5891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.709314][ T5893] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 91.761454][ T5891] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.688: bg 0: block 7: invalid block bitmap [ 91.781949][ T5893] EXT4-fs (loop0): 1 truncate cleaned up [ 91.801620][ T5893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.831105][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.852568][ T5901] loop4: detected capacity change from 0 to 1024 [ 91.859463][ T5901] EXT4-fs: Ignoring removed orlov option [ 91.860493][ T5893] EXT4-fs error (device loop0): ext4_find_dest_de:2079: inode #2: block 3: comm syz.0.700: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 91.884331][ T5901] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 91.892731][ T5893] EXT4-fs (loop0): Remounting filesystem read-only [ 91.911828][ T5901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.941571][ T5901] netlink: 'syz.4.690': attribute type 39 has an invalid length. [ 91.950422][ T5893] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 91.969648][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.986102][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.007150][ T5911] xt_hashlimit: max too large, truncated to 1048576 [ 92.125290][ T5917] loop0: detected capacity change from 0 to 512 [ 92.137938][ T5917] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 92.151657][ T5917] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 92.161394][ T5917] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.168594][ T5917] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.692: Invalid block bitmap block 0 in block_group 0 [ 92.426091][ T5917] EXT4-fs (loop0): Remounting filesystem read-only [ 92.518380][ T5917] EXT4-fs (loop0): 1 orphan inode deleted [ 92.590066][ T5917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.603444][ T5917] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 92.610307][ T5917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.656758][ T5937] : renamed from bond0 (while UP) [ 92.665018][ T5933] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 92.703150][ T5933] loop1: detected capacity change from 0 to 2048 [ 92.725466][ T5941] xt_hashlimit: max too large, truncated to 1048576 [ 93.197304][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 93.197320][ T29] audit: type=1326 audit(1733096527.511:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5973 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 93.257405][ T29] audit: type=1326 audit(1733096527.511:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 93.280807][ T29] audit: type=1326 audit(1733096527.511:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 93.304299][ T29] audit: type=1326 audit(1733096527.541:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5973 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 93.327643][ T29] audit: type=1326 audit(1733096527.541:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 93.351429][ T29] audit: type=1326 audit(1733096527.541:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 93.374849][ T29] audit: type=1326 audit(1733096527.541:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5973 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 93.398215][ T29] audit: type=1326 audit(1733096527.541:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 93.421685][ T29] audit: type=1326 audit(1733096527.541:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5973 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 93.445212][ T29] audit: type=1326 audit(1733096527.541:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5973 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 93.680755][ T5993] loop1: detected capacity change from 0 to 512 [ 93.845070][ T5993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.909461][ T5993] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.977661][ T5989] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.723: bg 0: block 248: padding at end of block bitmap is not set [ 94.261784][ T6003] loop4: detected capacity change from 0 to 2048 [ 94.307229][ T6003] loop4: p1 < > p4 [ 94.311784][ T6003] loop4: p4 size 8388608 extends beyond EOD, truncated [ 94.322882][ T2999] loop4: p1 < > p4 [ 94.327468][ T2999] loop4: p4 size 8388608 extends beyond EOD, truncated [ 94.351712][ T3467] udevd[3467]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 94.366111][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 94.389503][ T3467] udevd[3467]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 94.397342][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 94.547814][ T6019] loop0: detected capacity change from 0 to 1024 [ 94.565749][ T6019] EXT4-fs: Ignoring removed orlov option [ 94.571512][ T6019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.609874][ T6019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.614056][ T6017] lo speed is unknown, defaulting to 1000 [ 94.660811][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.805501][ T6039] loop4: detected capacity change from 0 to 512 [ 94.815972][ T6039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.832547][ T6039] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.851295][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.904692][ T6031] loop3: detected capacity change from 0 to 2048 [ 94.910204][ T6049] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.742'. [ 94.925947][ T6039] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.742'. [ 94.926358][ T6031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.936752][ T6049] syz.4.742[6049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.947981][ T6049] syz.4.742[6049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.968563][ T6049] syz.4.742[6049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.985966][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.033617][ T6059] loop3: detected capacity change from 0 to 512 [ 95.042657][ T6059] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.058510][ T6059] EXT4-fs (loop3): 1 truncate cleaned up [ 95.064792][ T6059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.067572][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.109737][ T6063] atomic_op ffff888133022528 conn xmit_atomic 0000000000000000 [ 95.131431][ T6063] usb usb5: usbfs: process 6063 (syz.1.748) did not claim interface 4 before use [ 95.333819][ T6076] bridge0: entered promiscuous mode [ 95.354605][ T6076] macvlan2: entered promiscuous mode [ 95.371705][ T6076] bridge0: port 5(macvlan2) entered blocking state [ 95.378396][ T6076] bridge0: port 5(macvlan2) entered disabled state [ 95.398245][ T6076] macvlan2: entered allmulticast mode [ 95.403718][ T6076] bridge0: entered allmulticast mode [ 95.423078][ T6076] macvlan2: left allmulticast mode [ 95.428337][ T6076] bridge0: left allmulticast mode [ 95.447133][ T6076] bridge0: left promiscuous mode [ 95.551766][ T6077] lo speed is unknown, defaulting to 1000 [ 95.734069][ T6088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.766'. [ 95.754934][ T6089] loop4: detected capacity change from 0 to 512 [ 95.761537][ T6088] all: renamed from gretap0 (while UP) [ 95.791154][ T6089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.808749][ T6089] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.828154][ T6089] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.756: bg 0: block 248: padding at end of block bitmap is not set [ 95.927732][ T6095] loop1: detected capacity change from 0 to 128 [ 96.634751][ T6108] loop0: detected capacity change from 0 to 512 [ 96.771121][ T6108] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.045623][ T6114] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.064897][ T6114] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 97.149460][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 97.162900][ T6117] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 97.162900][ T6117] program syz.4.764 not setting count and/or reply_len properly [ 97.190158][ T6120] loop1: detected capacity change from 0 to 164 [ 97.208550][ T6120] syz.1.765: attempt to access beyond end of device [ 97.208550][ T6120] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 97.235705][ T6120] syz.1.765: attempt to access beyond end of device [ 97.235705][ T6120] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.254613][ T6120] syz.1.765: attempt to access beyond end of device [ 97.254613][ T6120] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.270215][ T6120] syz.1.765: attempt to access beyond end of device [ 97.270215][ T6120] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.284339][ T6120] syz.1.765: attempt to access beyond end of device [ 97.284339][ T6120] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.298707][ T6120] syz.1.765: attempt to access beyond end of device [ 97.298707][ T6120] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.313075][ T6120] syz.1.765: attempt to access beyond end of device [ 97.313075][ T6120] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.326957][ T6120] syz.1.765: attempt to access beyond end of device [ 97.326957][ T6120] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.340866][ T6120] syz.1.765: attempt to access beyond end of device [ 97.340866][ T6120] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.354371][ T6120] syz.1.765: attempt to access beyond end of device [ 97.354371][ T6120] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.407745][ T6124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6124 comm=syz.4.768 [ 97.461157][ T6127] loop4: detected capacity change from 0 to 512 [ 97.481636][ T6127] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.494245][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 98.117612][ T6138] loop3: detected capacity change from 0 to 128 [ 98.269302][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 98.269321][ T29] audit: type=1326 audit(1733096532.607:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 98.320746][ T29] audit: type=1326 audit(1733096532.607:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.4.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5841f0849 code=0x7ffc0000 [ 98.354193][ T6152] loop4: detected capacity change from 0 to 1024 [ 98.416896][ T6159] loop0: detected capacity change from 0 to 512 [ 98.423667][ T6159] EXT4-fs: Ignoring removed i_version option [ 98.429753][ T6159] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.436499][ T6159] EXT4-fs: dax option not supported [ 98.544646][ T6156] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 98.548196][ T6160] hub 2-0:1.0: USB hub found [ 98.607825][ T6160] hub 2-0:1.0: 8 ports detected [ 98.855747][ T29] audit: type=1400 audit(1733096533.200:3699): avc: denied { map } for pid=6158 comm="syz.0.775" path="socket:[12372]" dev="sockfs" ino=12372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 99.028568][ T6164] netlink: 'syz.1.776': attribute type 27 has an invalid length. [ 99.105644][ T6164] bridge0: port 4(vlan2) entered disabled state [ 99.146233][ T6164] @: left allmulticast mode [ 99.146292][ T6166] syz.1.776[6166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.150766][ T6164] bond_slave_0: left allmulticast mode [ 99.150786][ T6164] bond_slave_1: left allmulticast mode [ 99.150803][ T6164] dummy0: left allmulticast mode [ 99.164262][ T6166] syz.1.776[6166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.167567][ T6164] @: left promiscuous mode [ 99.167586][ T6164] bond_slave_0: left promiscuous mode [ 99.167658][ T6164] bond_slave_1: left promiscuous mode [ 99.184070][ T6166] syz.1.776[6166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.189309][ T6164] dummy0: left promiscuous mode [ 99.204635][ T6166] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 99.272977][ T6152] EXT4-fs unmount: 7 callbacks suppressed [ 99.272997][ T6152] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.292740][ T6164] veth0_to_team: left promiscuous mode [ 99.298289][ T6164] veth0_to_team: left allmulticast mode [ 99.363265][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 99.402248][ T6167] 8021q: adding VLAN 0 to HW filter on device @ [ 99.434327][ T6167] @: entered allmulticast mode [ 99.439199][ T6167] bond_slave_0: entered allmulticast mode [ 99.445195][ T6167] bond_slave_1: entered allmulticast mode [ 99.451032][ T6167] dummy0: entered allmulticast mode [ 99.456290][ T6167] @: entered promiscuous mode [ 99.461038][ T6167] bond_slave_0: entered promiscuous mode [ 99.466841][ T6167] bond_slave_1: entered promiscuous mode [ 99.472680][ T6167] dummy0: entered promiscuous mode [ 99.516442][ T29] audit: type=1326 audit(1733096533.863:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 99.524866][ T6167] bridge0: port 4(vlan2) entered blocking state [ 99.539986][ T29] audit: type=1326 audit(1733096533.863:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 99.546216][ T6167] bridge0: port 4(vlan2) entered listening state [ 99.569509][ T29] audit: type=1326 audit(1733096533.863:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 99.599061][ T29] audit: type=1326 audit(1733096533.863:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 99.599155][ T29] audit: type=1326 audit(1733096533.863:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 99.599184][ T29] audit: type=1326 audit(1733096533.863:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 99.599212][ T29] audit: type=1326 audit(1733096533.863:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa093b10849 code=0x7ffc0000 [ 99.693211][ T6167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.724330][ T6175] pim6reg: entered allmulticast mode [ 99.760740][ T6175] loop3: detected capacity change from 0 to 2048 [ 99.819296][ T6175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.841699][ T6175] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.007634][ T6195] loop1: detected capacity change from 0 to 256 [ 100.023977][ T6201] loop4: detected capacity change from 0 to 128 [ 100.151694][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.245791][ T6194] loop0: detected capacity change from 0 to 2048 [ 100.346587][ T6194] loop0: p1 < > p3 [ 100.368824][ T6194] loop0: p3 size 134217728 extends beyond EOD, truncated [ 100.537426][ T6210] loop3: detected capacity change from 0 to 512 [ 100.596605][ T6210] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.613101][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.621822][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.708426][ T6216] lo speed is unknown, defaulting to 1000 [ 100.970984][ T6218] loop0: detected capacity change from 0 to 512 [ 100.978810][ T6218] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.074964][ T6218] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.205002][ T6210] EXT4-fs (loop3): mount failed [ 101.286137][ T6218] EXT4-fs (loop0): mount failed [ 101.464385][ T6224] loop4: detected capacity change from 0 to 256 [ 101.588756][ T6224] FAT-fs (loop4): Directory bread(block 64) failed [ 101.716612][ T6224] FAT-fs (loop4): Directory bread(block 65) failed [ 101.835507][ T6224] FAT-fs (loop4): Directory bread(block 66) failed [ 101.912049][ T6224] FAT-fs (loop4): Directory bread(block 67) failed [ 102.003772][ T6224] FAT-fs (loop4): Directory bread(block 68) failed [ 102.078203][ T6224] FAT-fs (loop4): Directory bread(block 69) failed [ 102.142871][ T6224] FAT-fs (loop4): Directory bread(block 70) failed [ 102.156154][ T6228] loop0: detected capacity change from 0 to 1024 [ 102.217103][ T6224] FAT-fs (loop4): Directory bread(block 71) failed [ 102.230711][ T6228] EXT4-fs: Ignoring removed orlov option [ 102.265177][ T6224] FAT-fs (loop4): Directory bread(block 72) failed [ 102.273493][ T6224] FAT-fs (loop4): Directory bread(block 73) failed [ 102.306607][ T6228] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 102.321591][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 102.338088][ T6228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.375422][ T6235] loop3: detected capacity change from 0 to 164 [ 102.392133][ T6228] smc: net device wg0 applied user defined pnetid SYZ0 [ 102.410051][ T6228] netlink: 'syz.0.795': attribute type 39 has an invalid length. [ 102.418922][ T6228] smc: removing net device wg0 with user defined pnetid SYZ0 [ 102.436595][ T6240] bio_check_eod: 23812 callbacks suppressed [ 102.436631][ T6240] syz.3.797: attempt to access beyond end of device [ 102.436631][ T6240] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 102.457340][ T6240] syz.3.797: attempt to access beyond end of device [ 102.457340][ T6240] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.470803][ T6240] syz.3.797: attempt to access beyond end of device [ 102.470803][ T6240] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.493689][ T6243] syz.3.797: attempt to access beyond end of device [ 102.493689][ T6243] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.509694][ T6240] syz.3.797: attempt to access beyond end of device [ 102.509694][ T6240] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.527006][ T6243] syz.3.797: attempt to access beyond end of device [ 102.527006][ T6243] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.556155][ T6240] syz.3.797: attempt to access beyond end of device [ 102.556155][ T6240] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.570179][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.580739][ T6243] syz.3.797: attempt to access beyond end of device [ 102.580739][ T6243] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.595299][ T6240] syz.3.797: attempt to access beyond end of device [ 102.595299][ T6240] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.633985][ T6243] syz.3.797: attempt to access beyond end of device [ 102.633985][ T6243] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.660176][ T6246] loop4: detected capacity change from 0 to 1024 [ 102.675179][ T6249] bridge0: entered promiscuous mode [ 102.682612][ T6246] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 102.692101][ T6249] macvlan0: entered promiscuous mode [ 102.694520][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 102.703686][ T6249] bridge0: port 3(macvlan0) entered blocking state [ 102.713134][ T6249] bridge0: port 3(macvlan0) entered disabled state [ 102.720263][ T6249] macvlan0: entered allmulticast mode [ 102.725837][ T6249] bridge0: entered allmulticast mode [ 102.736444][ T6249] macvlan0: left allmulticast mode [ 102.741690][ T6249] bridge0: left allmulticast mode [ 102.748682][ T6246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.761114][ T6249] bridge0: left promiscuous mode [ 102.822133][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.866656][ T6258] ªªªªª»: renamed from vlan1 [ 102.888110][ T6256] : (slave bond_slave_1): Releasing backup interface [ 102.913234][ T6256] team0: Port device team_slave_0 removed [ 102.927174][ T6256] team0: Port device team_slave_1 removed [ 102.937283][ T6262] netlink: 132 bytes leftover after parsing attributes in process `syz.4.806'. [ 103.040755][ T6269] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 103.051105][ T6269] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 103.277944][ T6283] loop3: detected capacity change from 0 to 256 [ 103.294167][ T6283] FAT-fs (loop3): Directory bread(block 64) failed [ 103.301243][ T6283] FAT-fs (loop3): Directory bread(block 65) failed [ 103.313523][ T6283] FAT-fs (loop3): Directory bread(block 66) failed [ 103.320207][ T6283] FAT-fs (loop3): Directory bread(block 67) failed [ 103.327218][ T6283] FAT-fs (loop3): Directory bread(block 68) failed [ 103.334089][ T6283] FAT-fs (loop3): Directory bread(block 69) failed [ 103.360879][ T6288] loop4: detected capacity change from 0 to 128 [ 103.370321][ T6283] FAT-fs (loop3): Directory bread(block 70) failed [ 103.378802][ T6288] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.387198][ T6283] FAT-fs (loop3): Directory bread(block 71) failed [ 103.404463][ T6283] FAT-fs (loop3): Directory bread(block 72) failed [ 103.404586][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 103.404604][ T29] audit: type=1326 audit(1733096537.772:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 103.421875][ T6283] FAT-fs (loop3): Directory bread(block 73) failed [ 103.441494][ T29] audit: type=1326 audit(1733096537.812:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 103.470720][ T29] audit: type=1326 audit(1733096537.812:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 103.494135][ T29] audit: type=1326 audit(1733096537.812:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6289 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894ad60849 code=0x7ffc0000 [ 103.650259][ T6280] ================================================================== [ 103.658407][ T6280] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 103.668272][ T6280] [ 103.670616][ T6280] read-write to 0xffffffff866089c0 of 8 bytes by interrupt on cpu 0: [ 103.678703][ T6280] tick_do_update_jiffies64+0x112/0x1b0 [ 103.684341][ T6280] tick_nohz_handler+0x7c/0x2d0 [ 103.689237][ T6280] __hrtimer_run_queues+0x20d/0x5e0 [ 103.694487][ T6280] hrtimer_interrupt+0x235/0x4a0 [ 103.699465][ T6280] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 103.705446][ T6280] sysvec_apic_timer_interrupt+0x6e/0x80 [ 103.711113][ T6280] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.717137][ T6280] kcsan_setup_watchpoint+0x404/0x410 [ 103.722540][ T6280] blk_account_io_start+0x24/0x410 [ 103.723985][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 103.727676][ T6280] blk_mq_submit_bio+0x903/0xe40 [ 103.741495][ T6280] __submit_bio+0xf2/0x470 [ 103.746053][ T6280] submit_bio_noacct_nocheck+0x295/0x6e0 [ 103.751713][ T6280] submit_bio_noacct+0x766/0x9a0 [ 103.756682][ T6280] submit_bio+0x218/0x230 [ 103.761037][ T6280] ext4_io_submit+0x8a/0xb0 [ 103.765569][ T6280] ext4_do_writepages+0x704/0x2130 [ 103.770723][ T6280] ext4_writepages+0x159/0x2e0 [ 103.775506][ T6280] do_writepages+0x1d8/0x480 [ 103.779345][ T6294] lo speed is unknown, defaulting to 1000 [ 103.780115][ T6280] __writeback_single_inode+0x89/0x850 [ 103.780146][ T6280] writeback_sb_inodes+0x461/0xa30 [ 103.780174][ T6280] __writeback_inodes_wb+0x9a/0x1a0 [ 103.801792][ T6280] wb_writeback+0x274/0x640 [ 103.806334][ T6280] wb_workfn+0x4ea/0x940 [ 103.810627][ T6280] process_scheduled_works+0x483/0x9a0 [ 103.816137][ T6280] worker_thread+0x51d/0x6f0 [ 103.820861][ T6280] kthread+0x1d1/0x210 [ 103.824957][ T6280] ret_from_fork+0x4b/0x60 [ 103.829403][ T6280] ret_from_fork_asm+0x1a/0x30 [ 103.834200][ T6280] [ 103.836545][ T6280] read to 0xffffffff866089c0 of 8 bytes by task 6280 on cpu 1: [ 103.844114][ T6280] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 103.850406][ T6280] count_shadow_nodes+0x6b/0x230 [ 103.855364][ T6280] do_shrink_slab+0x5a/0x680 [ 103.859990][ T6280] shrink_slab+0x4ea/0x850 [ 103.864438][ T6280] shrink_node+0x63f/0x1d80 [ 103.868965][ T6280] do_try_to_free_pages+0x3c6/0xc50 [ 103.874185][ T6280] try_to_free_mem_cgroup_pages+0x1e3/0x490 [ 103.880111][ T6280] try_charge_memcg+0x2bc/0x7f0 [ 103.884984][ T6280] obj_cgroup_charge_pages+0xbd/0x1a0 [ 103.890384][ T6280] __memcg_kmem_charge_page+0x9d/0x170 [ 103.895951][ T6280] __alloc_pages_noprof+0x1bc/0x340 [ 103.901182][ T6280] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 103.906605][ T6280] alloc_pages_noprof+0xe1/0x100 [ 103.911567][ T6280] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 103.917395][ T6280] __kvmalloc_node_noprof+0x121/0x170 [ 103.922790][ T6280] ip_set_alloc+0x1f/0x30 [ 103.927135][ T6280] hash_ipport_create+0x4dc/0x9f0 [ 103.932187][ T6280] ip_set_create+0x359/0x8a0 [ 103.936790][ T6280] nfnetlink_rcv_msg+0x4a9/0x570 [ 103.941738][ T6280] netlink_rcv_skb+0x12c/0x230 [ 103.946525][ T6280] nfnetlink_rcv+0x16c/0x15d0 [ 103.951209][ T6280] netlink_unicast+0x599/0x670 [ 103.955991][ T6280] netlink_sendmsg+0x5cc/0x6e0 [ 103.960783][ T6280] __sock_sendmsg+0x140/0x180 [ 103.965490][ T6280] ____sys_sendmsg+0x312/0x410 [ 103.970287][ T6280] __sys_sendmsg+0x19d/0x230 [ 103.974908][ T6280] __x64_sys_sendmsg+0x46/0x50 [ 103.979705][ T6280] x64_sys_call+0x2734/0x2dc0 [ 103.984393][ T6280] do_syscall_64+0xc9/0x1c0 [ 103.988917][ T6280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.994832][ T6280] [ 103.997154][ T6280] value changed: 0x00000000ffffb335 -> 0x00000000ffffb336 [ 104.004262][ T6280] [ 104.006587][ T6280] Reported by Kernel Concurrency Sanitizer on: [ 104.012749][ T6280] CPU: 1 UID: 0 PID: 6280 Comm: syz.0.811 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 104.022999][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.033099][ T6280] ================================================================== [ 104.676420][ T6280] syz.0.811 (6280) used greatest stack depth: 7296 bytes left