last executing test programs: 16.907436856s ago: executing program 1 (id=1746): mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/139, 0x8b, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffd}, {}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x2}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000017000be6be6b0000ff000000850000006d00000018110000", @ANYBLOB="197058b414f4507fd7c1efbc7c2b4d6396cb0888301ebf3722d905bd6709c7de09b52b6130b11abc7c4855bc6db0c8e2ef32bf3f719b96ce364b64593902fe36265c2dda0448eb155c5278d39ddce400e9181a3999012a4b4224be1b8da2412341ac951cc3", @ANYRES8=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='timer_expire_entry\x00', r6}, 0x18) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f0000000480)) rt_sigpending(&(0x7f0000000280), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r10, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="1441e1bd9cd9a04d421d47e41e95", 0x5ea, 0x0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 13.888463388s ago: executing program 1 (id=1804): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) read(r0, &(0x7f0000000c00)=""/4096, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0a500000015001002000128008000100677470001400028005000600020000000800030000800008"], 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x2400c080) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 13.73322328s ago: executing program 1 (id=1812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 13.73253944s ago: executing program 1 (id=1813): mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/78, 0x4e}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000300)=""/90, 0x5a}], 0x3, &(0x7f0000000380)=""/185, 0xb9}, 0x6f37cf70}], 0x1, 0x10100, &(0x7f00000004c0)={r1, r2+60000000}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x11, 0x713, 0xffffff80, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {}, {}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}, 0x1, 0xe, 0x0, 0x200000c0}, 0x4000000) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000140)={[{@map_off}, {@showassoc, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@session={'session', 0x3d, 0x25}}, {@session={'session', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x58}}, {@gid}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x6a2, &(0x7f0000000840)="$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") 13.376527465s ago: executing program 1 (id=1816): mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/139, 0x8b, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffd}, {}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x2}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000017000be6be6b0000ff000000850000006d00000018110000", @ANYBLOB="197058b414f4507fd7c1efbc7c2b4d6396cb0888301ebf3722d905bd6709c7de09b52b6130b11abc7c4855bc6db0c8e2ef32bf3f719b96ce364b64593902fe36265c2dda0448eb155c5278d39ddce400e9181a3999012a4b4224be1b8da2412341ac951cc3", @ANYRES8=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='timer_expire_entry\x00', r6}, 0x18) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f0000000480)) rt_sigpending(&(0x7f0000000280), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r9, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="1441e1bd9cd9a04d421d47e41e95", 0x5ea, 0x0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 13.285305286s ago: executing program 1 (id=1823): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, @void, @value}, 0x94) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 13.243498887s ago: executing program 32 (id=1823): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, @void, @value}, 0x94) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 9.222597003s ago: executing program 0 (id=1848): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x400000}]) 8.211075816s ago: executing program 0 (id=1851): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000580), 0xe8182, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) faccessat2(r5, &(0x7f0000000000)='\x00', 0x0, 0x1100) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006e80)={0x20, 0x3b, 0x107, 0x1, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x50}]}]}, 0x20}}, 0x4c000) 7.093907972s ago: executing program 0 (id=1854): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000580), 0xe8182, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) faccessat2(r6, &(0x7f0000000000)='\x00', 0x0, 0x1100) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006e80)={0x20, 0x3b, 0x107, 0x1, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x50}]}]}, 0x20}}, 0x4c000) 7.093585102s ago: executing program 2 (id=1855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$inet6(0xa, 0x2, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 7.086227112s ago: executing program 4 (id=1857): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000580), 0xe8182, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) faccessat2(r6, &(0x7f0000000000)='\x00', 0x0, 0x1100) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006e80)={0x20, 0x3b, 0x107, 0x1, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x50}]}]}, 0x20}}, 0x4c000) 7.029349763s ago: executing program 3 (id=1858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) unshare(0x24060400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00'}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x2}, &(0x7f00000001c0)=0x8000, 0x0, 0x80, 0x1000, 0x3, 0x101, 0x24, 0x100000000}}], 0x58, 0x8004}, 0x0) 5.866563789s ago: executing program 0 (id=1859): mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/139, 0x8b, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffd}, {}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x2}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000017000be6be6b0000ff000000850000006d00000018110000", @ANYBLOB="197058b414f4507fd7c1efbc7c2b4d6396cb0888301ebf3722d905bd6709c7de09b52b6130b11abc7c4855bc6db0c8e2ef32bf3f719b96ce364b64593902fe36265c2dda0448eb155c5278d39ddce400e9181a3999012a4b4224be1b8da2412341ac951cc3", @ANYRES8=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='timer_expire_entry\x00', r6}, 0x18) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f0000000480)) rt_sigpending(&(0x7f0000000280), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r9, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="1441e1bd9cd9a04d421d47e41e95", 0x5ea, 0x0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.864075689s ago: executing program 2 (id=1860): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000580), 0xe8182, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006e80)={0x20, 0x3b, 0x107, 0x1, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x50}]}]}, 0x20}}, 0x4c000) 5.863798499s ago: executing program 3 (id=1861): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$selinux_load(r0, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "d49c87cec3842e151d191cbafb24e4"}, 0x1f) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r2, r3, 0x0) 5.862440289s ago: executing program 4 (id=1862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 4.550125747s ago: executing program 2 (id=1863): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000580), 0xe8182, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) faccessat2(r5, &(0x7f0000000000)='\x00', 0x0, 0x1100) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006e80)={0x20, 0x3b, 0x107, 0x1, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x50}]}]}, 0x20}}, 0x4c000) 4.547841877s ago: executing program 3 (id=1864): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000180)=@isdn={0x22, 0x99, 0x1, 0x3, 0x5}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="ae698054e2829704ead96507aa51ddf76fc35781c569352a6bb6b37e52b2ce5933f6d9c6c60e7218cd7309f37a085bcd8efbe2fd1ca422bb2670d30ef53b2a4d3442aabd26248b4e84f1190f8fe8b3390018a367be48fb8eb4", 0x59}], 0x1, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0xa2}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff87}}, @txtime={{0x18, 0x1, 0x3d, 0xd2c}}, @mark={{0x14, 0x1, 0x24, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0xf7a}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xa}}, @mark={{0x14}}], 0xf0}, 0x440) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x301000, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000004c0)=0x10001) close(r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) mount_setattr(0xffffffffffffff9c, 0x0, 0x900, &(0x7f0000000100)={0x71, 0x78, 0x20000}, 0x20) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400280000000b00006c", @ANYRES32=r3], 0x20, 0x2400e044}, 0x0) 4.547110627s ago: executing program 4 (id=1865): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 3.132185197s ago: executing program 2 (id=1866): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$selinux_load(r0, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "d49c87cec3842e151d191cbafb24e4"}, 0x1f) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000380)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r2, r3, 0x0) 3.131899357s ago: executing program 3 (id=1867): clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x5, 0x0, &(0x7f00000001c0)={r0, r1+60000000}, &(0x7f0000000240)=0x2, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07106706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 3.128976147s ago: executing program 4 (id=1868): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000580), 0xe8182, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) faccessat2(r6, &(0x7f0000000000)='\x00', 0x0, 0x1100) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006e80)={0x20, 0x3b, 0x107, 0x1, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x50}]}]}, 0x20}}, 0x4c000) 1.615586998s ago: executing program 0 (id=1869): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v2={0x2000000, [{0x6, 0xd62e}, {0x5, 0x1}]}, 0x14, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0xee01) 1.520029209s ago: executing program 2 (id=1870): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x10000, 0x5, 0x7, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0xe8, 0x300, 0x300, 0x1f0, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x402c542c, &(0x7f0000000000)) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.519557819s ago: executing program 3 (id=1871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$inet6(0xa, 0x2, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.519157479s ago: executing program 4 (id=1872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6fc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x9, 0x6, 0xb, 0xfffffffffffffff8, 0xfffffffffffffff0}, @cb_func={0x18, 0x26c78d5e089b98ae, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xffff, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xe, 0x9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x1, 0x4}, {0x3, 0x4, 0x3, 0x1}, {0x5, 0x4, 0x1, 0x7}, {0x1, 0x1, 0x2, 0x3}], 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioperm(0x3ff, 0x1, 0x2) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) ioctl$TCXONC(r3, 0x4b3a, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) munlock(&(0x7f0000f5c000/0x3000)=nil, 0x3000) umount2(&(0x7f0000000000)='./file0\x00', 0x11) 1.27053ms ago: executing program 0 (id=1873): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) gettid() (async) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) perf_event_open(&(0x7f0000004cc0)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1f, 0x2, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x4896, &(0x7f00000004c0)={0x0, 0xbcd3, 0x2, 0x0, 0x249}) (async) io_uring_setup(0x4896, &(0x7f00000004c0)={0x0, 0xbcd3, 0x2, 0x0, 0x249}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xe9}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xb}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x800) 878.6µs ago: executing program 2 (id=1874): socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003cc0)=""/4081, 0xc26bfe8e8f6baca8}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioperm(0x1, 0xb7, 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="44ec"], 0x20) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) 448.64µs ago: executing program 3 (id=1875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 0s ago: executing program 4 (id=1876): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000580), 0xe8182, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) faccessat2(r5, &(0x7f0000000000)='\x00', 0x0, 0x1100) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006e80)={0x20, 0x3b, 0x107, 0x1, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x50}]}]}, 0x20}}, 0x4c000) kernel console output (not intermixed with test programs): 9964][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.230704][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.252852][ T5956] loop3: detected capacity change from 0 to 128 [ 78.264795][ T5955] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 78.273028][ T5955] FAT-fs (loop3): Filesystem has been set read-only [ 78.284890][ T5955] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 78.293022][ T5955] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 78.304679][ T5956] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 78.314815][ T5956] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 78.322764][ T5956] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 78.340878][ T5956] syz.3.876 (5956) used greatest stack depth: 10104 bytes left [ 78.532266][ T29] audit: type=1326 audit(1748043187.245:10732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb530f9e969 code=0x7ffc0000 [ 78.555915][ T29] audit: type=1326 audit(1748043187.245:10733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb530f9e969 code=0x7ffc0000 [ 78.579626][ T29] audit: type=1326 audit(1748043187.265:10734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb530f9e969 code=0x7ffc0000 [ 78.603255][ T29] audit: type=1326 audit(1748043187.265:10735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb530f9e969 code=0x7ffc0000 [ 78.626757][ T29] audit: type=1326 audit(1748043187.265:10736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb530f9e969 code=0x7ffc0000 [ 78.650402][ T29] audit: type=1326 audit(1748043187.265:10737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb530f9e969 code=0x7ffc0000 [ 78.675852][ T5976] netlink: set zone limit has 4 unknown bytes [ 78.715151][ T23] hid-generic 0002:FFFFFF16:0009.001F: item fetching failed at offset 5/7 [ 78.723912][ T23] hid-generic 0002:FFFFFF16:0009.001F: probe with driver hid-generic failed with error -22 [ 78.767193][ T5990] loop4: detected capacity change from 0 to 128 [ 78.781256][ T5992] loop0: detected capacity change from 0 to 1024 [ 78.789252][ T5992] EXT4-fs: Ignoring removed orlov option [ 78.800102][ T5989] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 78.808115][ T5989] FAT-fs (loop4): Filesystem has been set read-only [ 78.815178][ T5989] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 78.823107][ T5989] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 78.831804][ T5992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.832202][ T5990] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 78.852684][ T5990] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 78.855798][ T5992] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.891: bg 0: block 320: padding at end of block bitmap is not set [ 78.860729][ T5990] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 78.893924][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.046924][ T6010] loop2: detected capacity change from 0 to 164 [ 79.111310][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.118794][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.126222][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.133643][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.141102][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.148532][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.156053][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.163478][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.171028][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.178428][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.186018][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.193432][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.200843][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.208247][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.215655][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.223164][ T10] hid-generic 0400:0003:03FF.0020: unknown main item tag 0x0 [ 79.231756][ T10] hid-generic 0400:0003:03FF.0020: hidraw0: HID v0.00 Device [syz1] on syz1 [ 79.257413][ T6016] loop1: detected capacity change from 0 to 1024 [ 79.273872][ T6016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.297984][ T23] hid-generic 0002:FFFFFF16:0009.0021: item fetching failed at offset 8/10 [ 79.307706][ T23] hid-generic 0002:FFFFFF16:0009.0021: probe with driver hid-generic failed with error -22 [ 79.340632][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.387244][ T6030] loop3: detected capacity change from 0 to 128 [ 79.402349][ T6029] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 79.410274][ T6029] FAT-fs (loop3): Filesystem has been set read-only [ 79.417035][ T6029] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 79.424994][ T6029] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 79.434167][ T6030] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 79.442118][ T6030] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 79.449957][ T6030] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 79.484903][ T6035] loop3: detected capacity change from 0 to 1024 [ 79.491616][ T6035] EXT4-fs: Ignoring removed orlov option [ 79.513575][ T6035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.528682][ T6035] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.906: bg 0: block 320: padding at end of block bitmap is not set [ 79.554533][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.799928][ T6043] sel_write_load: 8 callbacks suppressed [ 79.799942][ T6043] SELinux: failed to load policy [ 79.856964][ T23] hid-generic 0002:FFFFFF16:0009.0022: hidraw0: HID v0.09 Device [syz0] on syz0 [ 79.884443][ T6049] loop4: detected capacity change from 0 to 128 [ 79.897058][ T6048] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 79.905103][ T6048] FAT-fs (loop4): Filesystem has been set read-only [ 79.912149][ T6048] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 79.920132][ T6048] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 79.929087][ T6049] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 79.937068][ T6049] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 79.944986][ T6049] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 79.981124][ T6051] SELinux: failed to load policy [ 79.990375][ T23] hid-generic 0002:FFFFFF16:0009.0023: item fetching failed at offset 8/10 [ 80.000143][ T23] hid-generic 0002:FFFFFF16:0009.0023: probe with driver hid-generic failed with error -22 [ 80.276315][ T6072] loop0: detected capacity change from 0 to 1024 [ 80.295267][ T6076] loop1: detected capacity change from 0 to 1024 [ 80.302875][ T6076] EXT4-fs: Ignoring removed orlov option [ 80.310091][ T6072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.347471][ T6081] SELinux: failed to load policy [ 80.347962][ T6076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.383111][ T6076] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.924: bg 0: block 320: padding at end of block bitmap is not set [ 80.398991][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.400481][ T10] hid-generic 0002:FFFFFF16:0009.0024: item fetching failed at offset 8/10 [ 80.418906][ T10] hid-generic 0002:FFFFFF16:0009.0024: probe with driver hid-generic failed with error -22 [ 80.451761][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.455007][ T6091] loop2: detected capacity change from 0 to 527 [ 80.468165][ T6091] EXT4-fs (loop2): failed to parse options in superblock:  [ 80.481329][ T6091] EXT4-fs (loop2): Unsupported encryption level 4 [ 80.654492][ T6102] loop0: detected capacity change from 0 to 164 [ 80.669463][ T36] hid-generic 0002:FFFFFF16:0009.0025: item fetching failed at offset 8/12 [ 80.678821][ T36] hid-generic 0002:FFFFFF16:0009.0025: probe with driver hid-generic failed with error -22 [ 80.679005][ T6116] loop2: detected capacity change from 0 to 1024 [ 80.713453][ T6116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.079088][ T6149] netlink: set zone limit has 4 unknown bytes [ 81.104733][ T23] hid-generic 0002:FFFFFF16:0009.0026: item fetching failed at offset 8/12 [ 81.114087][ T23] hid-generic 0002:FFFFFF16:0009.0026: probe with driver hid-generic failed with error -22 [ 81.163935][ T6157] loop0: detected capacity change from 0 to 128 [ 81.176175][ T6156] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.184247][ T6156] FAT-fs (loop0): Filesystem has been set read-only [ 81.195692][ T6156] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.203728][ T6156] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.217395][ T6157] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.225390][ T6157] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.233414][ T6157] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.284456][ T6161] loop4: detected capacity change from 0 to 164 [ 81.465544][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.633673][ T9] hid-generic 0002:FFFFFF16:0009.0027: item fetching failed at offset 8/12 [ 81.643598][ T9] hid-generic 0002:FFFFFF16:0009.0027: probe with driver hid-generic failed with error -22 [ 81.733184][ T6188] loop0: detected capacity change from 0 to 128 [ 81.744490][ T6187] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.752473][ T6187] FAT-fs (loop0): Filesystem has been set read-only [ 81.759649][ T6187] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.767651][ T6187] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.777227][ T6188] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.786404][ T6188] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.794446][ T6188] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 81.889186][ T6199] loop0: detected capacity change from 0 to 1024 [ 81.897202][ T6196] SELinux: failed to load policy [ 81.903111][ T6199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.940366][ T6197] loop2: detected capacity change from 0 to 164 [ 81.980327][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.037729][ T6218] loop2: detected capacity change from 0 to 128 [ 82.048959][ T6217] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 82.057115][ T6217] FAT-fs (loop2): Filesystem has been set read-only [ 82.057191][ T6214] loop0: detected capacity change from 0 to 1024 [ 82.071758][ T6217] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 82.079615][ T6217] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 82.089434][ T6218] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 82.098481][ T6218] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 82.106412][ T6218] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 82.116624][ T6214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.143228][ T6214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.267774][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.325377][ T6237] loop1: detected capacity change from 0 to 1024 [ 82.353725][ T6235] SELinux: Context system_u:object is not valid (left unmapped). [ 82.371182][ T6237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.455152][ T6247] loop0: detected capacity change from 0 to 164 [ 82.463749][ T6260] loop4: detected capacity change from 0 to 128 [ 82.477629][ T6259] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 82.485653][ T6259] FAT-fs (loop4): Filesystem has been set read-only [ 82.493448][ T6259] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 82.501412][ T6259] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 82.512976][ T6260] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 82.524865][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.527419][ T6260] bio_check_eod: 119 callbacks suppressed [ 82.527438][ T6260] syz.4.992: attempt to access beyond end of device [ 82.527438][ T6260] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 82.553934][ T6260] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 82.561824][ T6260] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 82.562960][ T6259] syz.4.992: attempt to access beyond end of device [ 82.562960][ T6259] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.584217][ T6260] syz.4.992: attempt to access beyond end of device [ 82.584217][ T6260] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.597802][ T6260] syz.4.992: attempt to access beyond end of device [ 82.597802][ T6260] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.611340][ T6260] syz.4.992: attempt to access beyond end of device [ 82.611340][ T6260] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.611393][ T6260] syz.4.992: attempt to access beyond end of device [ 82.611393][ T6260] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.617119][ T6259] syz.4.992: attempt to access beyond end of device [ 82.617119][ T6259] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.651503][ T6259] syz.4.992: attempt to access beyond end of device [ 82.651503][ T6259] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.653175][ T6260] syz.4.992: attempt to access beyond end of device [ 82.653175][ T6260] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.653231][ T6260] syz.4.992: attempt to access beyond end of device [ 82.653231][ T6260] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.805400][ T29] kauditd_printk_skb: 671 callbacks suppressed [ 82.805418][ T29] audit: type=1400 audit(1748043191.515:11407): avc: denied { write } for pid=6281 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.888620][ T29] audit: type=1400 audit(1748043191.595:11408): avc: denied { create } for pid=6285 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.909351][ T6286] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 82.921137][ T6286] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 82.946271][ T6291] loop0: detected capacity change from 0 to 527 [ 82.957757][ T6291] EXT4-fs (loop0): failed to parse options in superblock:  [ 82.970657][ T6291] EXT4-fs (loop0): Unsupported encryption level 4 [ 82.971088][ T6293] loop1: detected capacity change from 0 to 1024 [ 82.985098][ T29] audit: type=1400 audit(1748043191.695:11409): avc: denied { mounton } for pid=6290 comm="syz.0.1004" path="/205/file0" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.022314][ T6293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.052052][ T6302] loop4: detected capacity change from 0 to 128 [ 83.068153][ T6301] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 83.076104][ T6301] FAT-fs (loop4): Filesystem has been set read-only [ 83.082973][ T6301] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 83.091014][ T6301] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 83.100306][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.100537][ T6302] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 83.117938][ T6302] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 83.125992][ T6302] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 83.145048][ T9] hid-generic 0002:FFFFFF16:0009.0028: hidraw0: HID v0.09 Device [syz0] on syz0 [ 83.166683][ T6308] loop1: detected capacity change from 0 to 2048 [ 83.185180][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.350061][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.360021][ T29] audit: type=1326 audit(1748043192.065:11410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 83.391024][ T29] audit: type=1326 audit(1748043192.105:11411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 83.414816][ T29] audit: type=1326 audit(1748043192.105:11412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 83.438682][ T29] audit: type=1326 audit(1748043192.105:11413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 83.462684][ T29] audit: type=1326 audit(1748043192.105:11414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 83.468438][ T6328] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 83.486276][ T29] audit: type=1326 audit(1748043192.105:11415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 83.486321][ T29] audit: type=1326 audit(1748043192.105:11416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6321 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 83.501735][ T6328] SELinux: failed to load policy [ 83.547831][ T6322] loop0: detected capacity change from 0 to 164 [ 83.555945][ T6326] SELinux: failed to load policy [ 83.618482][ T6331] FAULT_INJECTION: forcing a failure. [ 83.618482][ T6331] name failslab, interval 1, probability 0, space 0, times 0 [ 83.631271][ T6331] CPU: 1 UID: 0 PID: 6331 Comm: syz.3.1016 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 83.631306][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.631323][ T6331] Call Trace: [ 83.631332][ T6331] [ 83.631341][ T6331] __dump_stack+0x1d/0x30 [ 83.631368][ T6331] dump_stack_lvl+0xe8/0x140 [ 83.631395][ T6331] dump_stack+0x15/0x1b [ 83.631496][ T6331] should_fail_ex+0x265/0x280 [ 83.631594][ T6331] should_failslab+0x8c/0xb0 [ 83.631635][ T6331] kmem_cache_alloc_noprof+0x50/0x310 [ 83.631687][ T6331] ? skb_clone+0x151/0x1f0 [ 83.631712][ T6331] skb_clone+0x151/0x1f0 [ 83.631736][ T6331] __netlink_deliver_tap+0x2c9/0x500 [ 83.631781][ T6331] netlink_unicast+0x64c/0x670 [ 83.631904][ T6331] netlink_sendmsg+0x58b/0x6b0 [ 83.631933][ T6331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.631953][ T6331] __sock_sendmsg+0x145/0x180 [ 83.632014][ T6331] ____sys_sendmsg+0x31e/0x4e0 [ 83.632040][ T6331] ___sys_sendmsg+0x17b/0x1d0 [ 83.632077][ T6331] __x64_sys_sendmsg+0xd4/0x160 [ 83.632110][ T6331] x64_sys_call+0x2999/0x2fb0 [ 83.632138][ T6331] do_syscall_64+0xd0/0x1a0 [ 83.632237][ T6331] ? clear_bhb_loop+0x40/0x90 [ 83.632276][ T6331] ? clear_bhb_loop+0x40/0x90 [ 83.632304][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.632332][ T6331] RIP: 0033:0x7fb530f9e969 [ 83.632351][ T6331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.632374][ T6331] RSP: 002b:00007fb52f607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.632427][ T6331] RAX: ffffffffffffffda RBX: 00007fb5311c5fa0 RCX: 00007fb530f9e969 [ 83.632444][ T6331] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 83.632463][ T6331] RBP: 00007fb52f607090 R08: 0000000000000000 R09: 0000000000000000 [ 83.632479][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.632554][ T6331] R13: 0000000000000000 R14: 00007fb5311c5fa0 R15: 00007ffe18062f88 [ 83.632644][ T6331] [ 83.639837][ T6333] loop1: detected capacity change from 0 to 1024 [ 83.862269][ T6333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.876152][ T6338] loop0: detected capacity change from 0 to 128 [ 83.886693][ T6337] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 83.894726][ T6337] FAT-fs (loop0): Filesystem has been set read-only [ 83.902114][ T6342] loop2: detected capacity change from 0 to 512 [ 83.909093][ T6342] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.919524][ T6337] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 83.927548][ T6337] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 83.941153][ T6338] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 83.949243][ T6338] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 83.957163][ T6338] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 83.958089][ T6342] EXT4-fs (loop2): 1 truncate cleaned up [ 83.971228][ T6342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.989150][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.109053][ T6358] SELinux: failed to load policy [ 84.124021][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.247328][ T6366] loop3: detected capacity change from 0 to 164 [ 84.290782][ T6363] SELinux: syz.0.1026 (6363) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 84.935992][ T6378] SELinux: policydb version 200984 does not match my version range 15-34 [ 84.944811][ T6378] SELinux: failed to load policy [ 84.969646][ T6380] loop4: detected capacity change from 0 to 128 [ 84.980291][ T6379] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 84.988362][ T6379] FAT-fs (loop4): Filesystem has been set read-only [ 84.995102][ T6379] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 85.002986][ T6379] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 85.012525][ T6380] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 85.021653][ T6380] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 85.021718][ T6382] loop0: detected capacity change from 0 to 1024 [ 85.029509][ T6380] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 85.069568][ T6382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.108501][ T6389] IPVS: stopping master sync thread 6391 ... [ 85.115448][ T6391] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 85.117431][ T6393] atomic_op ffff88811ac02928 conn xmit_atomic 0000000000000000 [ 85.136678][ T6389] atomic_op ffff888104583d28 conn xmit_atomic 0000000000000000 [ 85.224341][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.267648][ T6413] netlink: set zone limit has 4 unknown bytes [ 85.285677][ T6411] loop0: detected capacity change from 0 to 8192 [ 85.384947][ T6418] loop1: detected capacity change from 0 to 164 [ 85.429272][ T6420] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.447424][ T6424] FAULT_INJECTION: forcing a failure. [ 85.447424][ T6424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.460651][ T6424] CPU: 1 UID: 0 PID: 6424 Comm: syz.4.1047 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 85.460683][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.460752][ T6424] Call Trace: [ 85.460761][ T6424] [ 85.460771][ T6424] __dump_stack+0x1d/0x30 [ 85.460805][ T6424] dump_stack_lvl+0xe8/0x140 [ 85.460828][ T6424] dump_stack+0x15/0x1b [ 85.460844][ T6424] should_fail_ex+0x265/0x280 [ 85.460928][ T6424] should_fail+0xb/0x20 [ 85.460968][ T6424] should_fail_usercopy+0x1a/0x20 [ 85.460990][ T6424] strncpy_from_user+0x25/0x230 [ 85.461063][ T6424] path_setxattrat+0xeb/0x310 [ 85.461131][ T6424] __x64_sys_lsetxattr+0x71/0x90 [ 85.461170][ T6424] x64_sys_call+0x1e36/0x2fb0 [ 85.461198][ T6424] do_syscall_64+0xd0/0x1a0 [ 85.461226][ T6424] ? clear_bhb_loop+0x40/0x90 [ 85.461260][ T6424] ? clear_bhb_loop+0x40/0x90 [ 85.461284][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.461312][ T6424] RIP: 0033:0x7f7b3bc5e969 [ 85.461335][ T6424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.461416][ T6424] RSP: 002b:00007f7b3a2c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 85.461440][ T6424] RAX: ffffffffffffffda RBX: 00007f7b3be85fa0 RCX: 00007f7b3bc5e969 [ 85.461457][ T6424] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000000 [ 85.461469][ T6424] RBP: 00007f7b3a2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.461485][ T6424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.461501][ T6424] R13: 0000000000000000 R14: 00007f7b3be85fa0 R15: 00007fff5b8e5f48 [ 85.461526][ T6424] [ 85.654472][ T6420] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.674071][ T6411] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 85.681755][ T6411] FAT-fs (loop0): Filesystem has been set read-only [ 85.722532][ T6420] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.794336][ T6420] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.832932][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 85.841928][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 85.854385][ T6431] wireguard0: entered promiscuous mode [ 85.879938][ T6420] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.906933][ T6420] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.935845][ T6442] loop1: detected capacity change from 0 to 2048 [ 85.938363][ T6440] SELinux: failed to load policy [ 85.943463][ T6420] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.963833][ T6420] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.974644][ T6442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.136782][ T6461] loop4: detected capacity change from 0 to 128 [ 86.139823][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.146385][ T6462] random: crng reseeded on system resumption [ 86.173391][ T6464] loop3: detected capacity change from 0 to 128 [ 86.184471][ T6463] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.192551][ T6463] FAT-fs (loop3): Filesystem has been set read-only [ 86.211728][ T6463] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.219669][ T6463] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.229386][ T6459] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 86.237326][ T6459] FAT-fs (loop4): Filesystem has been set read-only [ 86.239329][ T6467] netlink: 'syz.2.1064': attribute type 3 has an invalid length. [ 86.253550][ T6459] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 86.261463][ T6459] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 86.277751][ T6461] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 86.285951][ T6464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.293920][ T6461] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 86.301806][ T6461] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 86.310258][ T6464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.318219][ T6464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.350178][ T6469] SELinux: failed to load policy [ 86.380321][ T6473] netlink: 'syz.3.1066': attribute type 21 has an invalid length. [ 86.388387][ T6473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1066'. [ 86.406580][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1066'. [ 86.415723][ T6473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1066'. [ 86.426948][ T6478] loop2: detected capacity change from 0 to 164 [ 86.442933][ T6473] 8021q: VLANs not supported on ip6_vti0 [ 86.448884][ T6480] FAULT_INJECTION: forcing a failure. [ 86.448884][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 86.461561][ T6480] CPU: 1 UID: 0 PID: 6480 Comm: syz.0.1070 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 86.461646][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.461660][ T6480] Call Trace: [ 86.461667][ T6480] [ 86.461712][ T6480] __dump_stack+0x1d/0x30 [ 86.461738][ T6480] dump_stack_lvl+0xe8/0x140 [ 86.461763][ T6480] dump_stack+0x15/0x1b [ 86.461785][ T6480] should_fail_ex+0x265/0x280 [ 86.461832][ T6480] should_failslab+0x8c/0xb0 [ 86.461866][ T6480] kmem_cache_alloc_noprof+0x50/0x310 [ 86.461924][ T6480] ? getname_flags+0x80/0x3b0 [ 86.461968][ T6480] getname_flags+0x80/0x3b0 [ 86.461999][ T6480] __se_sys_quotactl+0x16a/0x670 [ 86.462023][ T6480] __x64_sys_quotactl+0x55/0x70 [ 86.462058][ T6480] x64_sys_call+0x2886/0x2fb0 [ 86.462087][ T6480] do_syscall_64+0xd0/0x1a0 [ 86.462146][ T6480] ? clear_bhb_loop+0x40/0x90 [ 86.462170][ T6480] ? clear_bhb_loop+0x40/0x90 [ 86.462207][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.462243][ T6480] RIP: 0033:0x7f3d3266e969 [ 86.462262][ T6480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.462286][ T6480] RSP: 002b:00007f3d30cd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 86.462378][ T6480] RAX: ffffffffffffffda RBX: 00007f3d32895fa0 RCX: 00007f3d3266e969 [ 86.462403][ T6480] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000202 [ 86.462422][ T6480] RBP: 00007f3d30cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.462434][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.462449][ T6480] R13: 0000000000000001 R14: 00007f3d32895fa0 R15: 00007fffe0e5de88 [ 86.462541][ T6480] [ 86.647693][ T6486] netlink: set zone limit has 4 unknown bytes [ 86.808475][ T6508] loop3: detected capacity change from 0 to 128 [ 86.823325][ T6507] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.831230][ T6507] FAT-fs (loop3): Filesystem has been set read-only [ 86.838458][ T6507] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.846404][ T6507] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.855614][ T6508] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.872297][ T6510] loop0: detected capacity change from 0 to 1024 [ 86.880170][ T6508] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.888111][ T6508] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.909442][ T6510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.013340][ T6524] netlink: 'syz.3.1083': attribute type 10 has an invalid length. [ 87.021575][ T6524] macvlan1: entered promiscuous mode [ 87.027035][ T6524] macvlan1: entered allmulticast mode [ 87.035922][ T6524] veth1_vlan: entered allmulticast mode [ 87.043793][ T6524] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 87.279040][ T6539] loop4: detected capacity change from 0 to 128 [ 87.291681][ T6538] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 87.299705][ T6538] FAT-fs (loop4): Filesystem has been set read-only [ 87.306894][ T6538] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 87.314812][ T6538] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 87.325164][ T6539] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 87.333248][ T6539] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 87.341252][ T6539] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 87.391254][ T6545] loop4: detected capacity change from 0 to 2048 [ 87.426832][ T6548] loop3: detected capacity change from 0 to 1024 [ 87.636329][ T6560] loop1: detected capacity change from 0 to 512 [ 87.643410][ T6560] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.656993][ T6560] EXT4-fs (loop1): 1 truncate cleaned up [ 87.776366][ T6569] netlink: set zone limit has 4 unknown bytes [ 87.815404][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 87.815423][ T29] audit: type=1326 audit(1748043196.525:11983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cc24f5927 code=0x7ffc0000 [ 87.845624][ T29] audit: type=1326 audit(1748043196.545:11984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cc249ab39 code=0x7ffc0000 [ 87.869147][ T29] audit: type=1326 audit(1748043196.545:11985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7cc24fe969 code=0x7ffc0000 [ 87.893002][ T29] audit: type=1326 audit(1748043196.555:11986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cc24f5927 code=0x7ffc0000 [ 87.916672][ T29] audit: type=1326 audit(1748043196.555:11987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cc249ab39 code=0x7ffc0000 [ 87.940549][ T29] audit: type=1326 audit(1748043196.555:11988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cc24f5927 code=0x7ffc0000 [ 87.964044][ T29] audit: type=1326 audit(1748043196.555:11989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cc249ab39 code=0x7ffc0000 [ 87.987669][ T29] audit: type=1326 audit(1748043196.555:11990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7cc24fe969 code=0x7ffc0000 [ 88.012272][ T29] audit: type=1326 audit(1748043196.605:11991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cc24f5927 code=0x7ffc0000 [ 88.035776][ T29] audit: type=1326 audit(1748043196.605:11992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cc249ab39 code=0x7ffc0000 [ 88.200391][ T6578] loop2: detected capacity change from 0 to 128 [ 88.210929][ T6577] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.218880][ T6577] FAT-fs (loop2): Filesystem has been set read-only [ 88.227684][ T6577] bio_check_eod: 117 callbacks suppressed [ 88.227810][ T6577] syz.2.1103: attempt to access beyond end of device [ 88.227810][ T6577] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 88.247755][ T6577] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.255674][ T6577] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.266827][ T6578] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.275300][ T6578] syz.2.1103: attempt to access beyond end of device [ 88.275300][ T6578] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 88.289573][ T6578] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.297569][ T6578] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 88.305835][ T6578] syz.2.1103: attempt to access beyond end of device [ 88.305835][ T6578] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 88.319503][ T6578] syz.2.1103: attempt to access beyond end of device [ 88.319503][ T6578] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 88.333783][ T6578] syz.2.1103: attempt to access beyond end of device [ 88.333783][ T6578] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 88.347256][ T6577] syz.2.1103: attempt to access beyond end of device [ 88.347256][ T6577] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 88.361390][ T6578] syz.2.1103: attempt to access beyond end of device [ 88.361390][ T6578] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 88.376175][ T6577] syz.2.1103: attempt to access beyond end of device [ 88.376175][ T6577] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 88.394513][ T6577] syz.2.1103: attempt to access beyond end of device [ 88.394513][ T6577] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 88.395062][ T6590] FAULT_INJECTION: forcing a failure. [ 88.395062][ T6590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.408802][ T6578] syz.2.1103: attempt to access beyond end of device [ 88.408802][ T6578] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 88.421096][ T6590] CPU: 0 UID: 0 PID: 6590 Comm: syz.4.1108 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 88.421133][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.421149][ T6590] Call Trace: [ 88.421157][ T6590] [ 88.421168][ T6590] __dump_stack+0x1d/0x30 [ 88.421207][ T6590] dump_stack_lvl+0xe8/0x140 [ 88.421243][ T6590] dump_stack+0x15/0x1b [ 88.421267][ T6590] should_fail_ex+0x265/0x280 [ 88.421386][ T6590] should_fail+0xb/0x20 [ 88.421428][ T6590] should_fail_usercopy+0x1a/0x20 [ 88.421455][ T6590] _copy_from_user+0x1c/0xb0 [ 88.421555][ T6590] bpf_test_init+0xdf/0x160 [ 88.421619][ T6590] bpf_prog_test_run_xdp+0x274/0x8f0 [ 88.421665][ T6590] ? kstrtouint+0x76/0xc0 [ 88.421705][ T6590] ? __rcu_read_unlock+0x4f/0x70 [ 88.421738][ T6590] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.421927][ T6590] bpf_prog_test_run+0x207/0x390 [ 88.422002][ T6590] __sys_bpf+0x3dc/0x790 [ 88.422052][ T6590] __x64_sys_bpf+0x41/0x50 [ 88.422089][ T6590] x64_sys_call+0x2478/0x2fb0 [ 88.422127][ T6590] do_syscall_64+0xd0/0x1a0 [ 88.422221][ T6590] ? clear_bhb_loop+0x40/0x90 [ 88.422257][ T6590] ? clear_bhb_loop+0x40/0x90 [ 88.422287][ T6590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.422403][ T6590] RIP: 0033:0x7f7b3bc5e969 [ 88.422458][ T6590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.422481][ T6590] RSP: 002b:00007f7b3a2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.422506][ T6590] RAX: ffffffffffffffda RBX: 00007f7b3be85fa0 RCX: 00007f7b3bc5e969 [ 88.422524][ T6590] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 88.422619][ T6590] RBP: 00007f7b3a2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.422637][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.422654][ T6590] R13: 0000000000000000 R14: 00007f7b3be85fa0 R15: 00007fff5b8e5f48 [ 88.422682][ T6590] [ 88.583454][ T6593] loop4: detected capacity change from 0 to 164 [ 88.937270][ T6621] netlink: 'syz.0.1120': attribute type 13 has an invalid length. [ 89.050902][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.058532][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.067303][ T6635] netlink: set zone limit has 4 unknown bytes [ 89.121243][ T6637] loop2: detected capacity change from 0 to 1024 [ 89.148087][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.168137][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.233182][ T6621] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.241901][ T6621] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.250336][ T6621] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.259026][ T6621] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.394318][ T6655] loop0: detected capacity change from 0 to 2048 [ 89.887495][ T6678] SELinux: failed to load policy [ 89.949391][ T6690] loop1: detected capacity change from 0 to 512 [ 89.956760][ T6690] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.968454][ T6690] EXT4-fs (loop1): 1 truncate cleaned up [ 89.981729][ T6690] SELinux: syz.1.1144 (6690) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 90.016272][ T6688] loop2: detected capacity change from 0 to 164 [ 90.067697][ T6698] loop4: detected capacity change from 0 to 2048 [ 90.142478][ T6705] netlink: set zone limit has 4 unknown bytes [ 90.247393][ T6709] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 90.289301][ T6709] SELinux: failed to load policy [ 90.299974][ T6710] netlink: 'syz.3.1150': attribute type 10 has an invalid length. [ 90.301270][ T6712] loop0: detected capacity change from 0 to 1024 [ 90.307859][ T6710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1150'. [ 90.351409][ T6710] team0: Port device geneve1 added [ 90.479301][ T6706] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.544662][ T6734] loop0: detected capacity change from 0 to 128 [ 90.556690][ T6733] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 90.564747][ T6733] FAT-fs (loop0): Filesystem has been set read-only [ 90.572724][ T6733] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 90.580813][ T6733] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 90.596884][ T6732] loop1: detected capacity change from 0 to 164 [ 90.622379][ T6734] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 90.641838][ T6734] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 90.649884][ T6734] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 90.677792][ T6740] loop1: detected capacity change from 0 to 2048 [ 90.887266][ T6752] loop1: detected capacity change from 0 to 1024 [ 90.894118][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 90.906042][ T6753] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.914322][ T6753] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.922689][ T6753] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.930936][ T6753] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.962584][ T6753] vxlan0: entered promiscuous mode [ 91.167413][ T6769] loop1: detected capacity change from 0 to 164 [ 91.276874][ T6772] loop1: detected capacity change from 0 to 128 [ 91.287717][ T6771] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.295638][ T6771] FAT-fs (loop1): Filesystem has been set read-only [ 91.303707][ T6771] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.311648][ T6771] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.321724][ T6772] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.329602][ T6772] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.337541][ T6772] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.553277][ T6786] netlink: set zone limit has 4 unknown bytes [ 91.723495][ T6797] loop3: detected capacity change from 0 to 1024 [ 91.782472][ T6805] loop0: detected capacity change from 0 to 128 [ 91.793150][ T6804] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 91.801396][ T6804] FAT-fs (loop0): Filesystem has been set read-only [ 91.808313][ T6804] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 91.816220][ T6804] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 91.825387][ T6805] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 91.833331][ T6805] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 91.841290][ T6805] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 91.991575][ T6385] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 92.363581][ T6827] netlink: 'syz.1.1193': attribute type 27 has an invalid length. [ 92.442422][ T6832] SELinux: failed to load policy [ 92.468098][ T6827] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.477170][ T6827] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.486208][ T6827] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.495341][ T6827] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.545914][ T6833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.554206][ T6833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.563957][ T6833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.594437][ T6844] SELinux: failed to load policy [ 92.608782][ T6846] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 92.619321][ T6846] SELinux: failed to load policy [ 92.652984][ T6852] FAULT_INJECTION: forcing a failure. [ 92.652984][ T6852] name failslab, interval 1, probability 0, space 0, times 0 [ 92.665867][ T6852] CPU: 1 UID: 0 PID: 6852 Comm: syz.1.1203 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 92.665900][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.665917][ T6852] Call Trace: [ 92.665923][ T6852] [ 92.665930][ T6852] __dump_stack+0x1d/0x30 [ 92.665976][ T6852] dump_stack_lvl+0xe8/0x140 [ 92.666000][ T6852] dump_stack+0x15/0x1b [ 92.666060][ T6852] should_fail_ex+0x265/0x280 [ 92.666104][ T6852] should_failslab+0x8c/0xb0 [ 92.666142][ T6852] __kmalloc_noprof+0xa5/0x3e0 [ 92.666176][ T6852] ? iovec_from_user+0x84/0x210 [ 92.666228][ T6852] iovec_from_user+0x84/0x210 [ 92.666264][ T6852] __import_iovec+0xf3/0x540 [ 92.666300][ T6852] io_sendmsg_setup+0x1d1/0x290 [ 92.666326][ T6852] io_send_zc_prep+0x43b/0x840 [ 92.666436][ T6852] io_submit_sqes+0x5ce/0x1000 [ 92.666527][ T6852] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 92.666570][ T6852] ? __rcu_read_unlock+0x4f/0x70 [ 92.666600][ T6852] ? get_pid_task+0x96/0xd0 [ 92.666682][ T6852] ? proc_fail_nth_write+0x12d/0x160 [ 92.666709][ T6852] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 92.666741][ T6852] ? vfs_write+0x75e/0x8d0 [ 92.666816][ T6852] ? __rcu_read_unlock+0x4f/0x70 [ 92.666838][ T6852] ? __fget_files+0x184/0x1c0 [ 92.666867][ T6852] ? fput+0x8f/0xc0 [ 92.666929][ T6852] __x64_sys_io_uring_enter+0x78/0x90 [ 92.666969][ T6852] x64_sys_call+0x28c8/0x2fb0 [ 92.666995][ T6852] do_syscall_64+0xd0/0x1a0 [ 92.667026][ T6852] ? clear_bhb_loop+0x40/0x90 [ 92.667109][ T6852] ? clear_bhb_loop+0x40/0x90 [ 92.667131][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.667221][ T6852] RIP: 0033:0x7f7cc24fe969 [ 92.667241][ T6852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.667263][ T6852] RSP: 002b:00007f7cc0b67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 92.667282][ T6852] RAX: ffffffffffffffda RBX: 00007f7cc2725fa0 RCX: 00007f7cc24fe969 [ 92.667295][ T6852] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000003 [ 92.667307][ T6852] RBP: 00007f7cc0b67090 R08: 0000000000000000 R09: 0000000000000000 [ 92.667323][ T6852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.667339][ T6852] R13: 0000000000000000 R14: 00007f7cc2725fa0 R15: 00007ffd4b9c1b08 [ 92.667365][ T6852] [ 92.904346][ T6854] netlink: set zone limit has 4 unknown bytes [ 92.914127][ T29] kauditd_printk_skb: 1179 callbacks suppressed [ 92.914149][ T29] audit: type=1326 audit(1748043201.625:13172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fb60b5927 code=0x7ffc0000 [ 92.943892][ T29] audit: type=1326 audit(1748043201.625:13173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7fb605ab39 code=0x7ffc0000 [ 92.967664][ T29] audit: type=1326 audit(1748043201.625:13174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7fb60be969 code=0x7ffc0000 [ 92.991276][ T29] audit: type=1326 audit(1748043201.625:13175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fb60b5927 code=0x7ffc0000 [ 93.014823][ T29] audit: type=1326 audit(1748043201.625:13176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7fb605ab39 code=0x7ffc0000 [ 93.038339][ T29] audit: type=1326 audit(1748043201.625:13177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7fb60be969 code=0x7ffc0000 [ 93.064119][ T29] audit: type=1326 audit(1748043201.635:13178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fb60b5927 code=0x7ffc0000 [ 93.087835][ T29] audit: type=1326 audit(1748043201.635:13179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7fb605ab39 code=0x7ffc0000 [ 93.111362][ T29] audit: type=1326 audit(1748043201.635:13180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7fb60be969 code=0x7ffc0000 [ 93.132707][ T6860] loop4: detected capacity change from 0 to 128 [ 93.134916][ T29] audit: type=1326 audit(1748043201.655:13181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fb60b5927 code=0x7ffc0000 [ 93.179940][ T6859] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 93.188029][ T6859] FAT-fs (loop4): Filesystem has been set read-only [ 93.196666][ T6859] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 93.204575][ T6859] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 93.215850][ T6860] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 93.224158][ T6860] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 93.232068][ T6860] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 93.240455][ T6860] bio_check_eod: 41 callbacks suppressed [ 93.240498][ T6860] syz.4.1207: attempt to access beyond end of device [ 93.240498][ T6860] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.246626][ T6858] syz.1.1206 uses obsolete (PF_INET,SOCK_PACKET) [ 93.281388][ T6860] syz.4.1207: attempt to access beyond end of device [ 93.281388][ T6860] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.296070][ T6864] syz.4.1207: attempt to access beyond end of device [ 93.296070][ T6864] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.302918][ T6865] loop0: detected capacity change from 0 to 512 [ 93.311208][ T6864] syz.4.1207: attempt to access beyond end of device [ 93.311208][ T6864] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.316225][ T6865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.329966][ T6858] loop1: detected capacity change from 0 to 512 [ 93.335538][ T6860] syz.4.1207: attempt to access beyond end of device [ 93.335538][ T6860] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.355555][ T6860] syz.4.1207: attempt to access beyond end of device [ 93.355555][ T6860] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.369326][ T6859] syz.4.1207: attempt to access beyond end of device [ 93.369326][ T6859] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.382933][ T6859] syz.4.1207: attempt to access beyond end of device [ 93.382933][ T6859] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.386556][ T6858] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.396402][ T6859] syz.4.1207: attempt to access beyond end of device [ 93.396402][ T6859] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.423409][ T6865] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.438454][ T6860] syz.4.1207: attempt to access beyond end of device [ 93.438454][ T6860] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.531925][ T6876] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1211'. [ 93.541066][ T6876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1211'. [ 93.550033][ T6876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1211'. [ 93.564727][ T6878] loop3: detected capacity change from 0 to 1024 [ 93.606117][ T6880] SELinux: failed to load policy [ 93.630115][ T6883] pim6reg1: entered promiscuous mode [ 93.635581][ T6883] pim6reg1: entered allmulticast mode [ 93.942940][ T6907] netlink: set zone limit has 4 unknown bytes [ 94.334950][ T6910] loop3: detected capacity change from 0 to 128 [ 94.357937][ T6909] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 94.365975][ T6909] FAT-fs (loop3): Filesystem has been set read-only [ 94.372831][ T6909] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 94.380800][ T6909] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 94.389673][ T6910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 94.398531][ T6910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 94.406493][ T6910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 94.457671][ T6912] SELinux: failed to load policy [ 94.592813][ T6922] loop3: detected capacity change from 0 to 128 [ 94.737848][ T6928] loop1: detected capacity change from 0 to 2048 [ 94.910894][ T6948] loop4: detected capacity change from 0 to 2048 [ 94.971917][ T6956] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 94.982272][ T6956] SELinux: failed to load policy [ 95.067999][ T6963] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.124022][ T6966] loop2: detected capacity change from 0 to 128 [ 95.139833][ T6965] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 95.147877][ T6965] FAT-fs (loop2): Filesystem has been set read-only [ 95.156229][ T6965] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 95.164211][ T6965] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 95.179490][ T6966] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 95.187784][ T6966] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 95.195762][ T6966] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 95.244488][ T6973] netlink: set zone limit has 4 unknown bytes [ 95.699387][ T6993] SELinux: failed to load policy [ 95.725980][ T6995] loop1: detected capacity change from 0 to 2048 [ 95.732890][ T6995] EXT4-fs: Ignoring removed i_version option [ 95.743580][ T6995] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.757497][ T6995] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1251: bg 0: block 345: padding at end of block bitmap is not set [ 95.773861][ T6995] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 95.786511][ T6995] EXT4-fs (loop1): This should not happen!! Data will be lost [ 95.786511][ T6995] [ 95.857423][ T6995] syz.1.1251 (6995) used greatest stack depth: 9928 bytes left [ 95.897889][ T7006] syzkaller0: entered promiscuous mode [ 95.903592][ T7006] syzkaller0: entered allmulticast mode [ 95.976148][ T7015] netlink: set zone limit has 4 unknown bytes [ 95.982214][ T7014] loop0: detected capacity change from 0 to 1024 [ 95.989958][ T7014] EXT4-fs: Ignoring removed orlov option [ 96.003245][ T7014] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1258: bg 0: block 320: padding at end of block bitmap is not set [ 96.069517][ T7021] SELinux: failed to load policy [ 96.251613][ T7038] syzkaller0: entered promiscuous mode [ 96.257262][ T7038] syzkaller0: entered allmulticast mode [ 96.340169][ T7045] loop0: detected capacity change from 0 to 1024 [ 96.347324][ T7045] EXT4-fs: Ignoring removed orlov option [ 96.373033][ T7045] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1271: bg 0: block 320: padding at end of block bitmap is not set [ 96.392197][ T7049] netlink: set zone limit has 4 unknown bytes [ 96.452959][ T7053] SELinux: failed to load policy [ 96.670857][ T7077] pim6reg1: entered promiscuous mode [ 96.676265][ T7077] pim6reg1: entered allmulticast mode [ 96.731145][ T7080] loop0: detected capacity change from 0 to 1024 [ 96.737821][ T7080] EXT4-fs: Ignoring removed orlov option [ 96.768673][ T7080] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1283: bg 0: block 320: padding at end of block bitmap is not set [ 96.865555][ T7097] loop0: detected capacity change from 0 to 2048 [ 97.228243][ T7112] netlink: set zone limit has 4 unknown bytes [ 97.274877][ T7115] loop4: detected capacity change from 0 to 1024 [ 97.282865][ T7115] EXT4-fs: Ignoring removed orlov option [ 97.294090][ T7115] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1296: bg 0: block 320: padding at end of block bitmap is not set [ 97.761107][ T3316] EXT4-fs unmount: 44 callbacks suppressed [ 97.761129][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.924641][ T29] kauditd_printk_skb: 2282 callbacks suppressed [ 97.924656][ T29] audit: type=1326 audit(1748043206.635:15464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7cc24fe969 code=0x7ffc0000 [ 98.242177][ T29] audit: type=1326 audit(1748043206.665:15465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cc24f5927 code=0x7ffc0000 [ 98.265810][ T29] audit: type=1326 audit(1748043206.665:15466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cc249ab39 code=0x7ffc0000 [ 98.289298][ T29] audit: type=1326 audit(1748043206.665:15467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7cc24fe969 code=0x7ffc0000 [ 98.312718][ T29] audit: type=1326 audit(1748043206.675:15468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cc24f5927 code=0x7ffc0000 [ 98.336259][ T29] audit: type=1326 audit(1748043206.675:15469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cc249ab39 code=0x7ffc0000 [ 98.359677][ T29] audit: type=1326 audit(1748043206.675:15470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7cc24fe969 code=0x7ffc0000 [ 98.383070][ T29] audit: type=1326 audit(1748043206.685:15471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cc24f5927 code=0x7ffc0000 [ 98.406531][ T29] audit: type=1326 audit(1748043206.685:15472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cc249ab39 code=0x7ffc0000 [ 98.430058][ T29] audit: type=1326 audit(1748043206.685:15473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.1.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7cc24fe969 code=0x7ffc0000 [ 98.575085][ T7144] netlink: set zone limit has 4 unknown bytes [ 98.716192][ T7155] loop4: detected capacity change from 0 to 527 [ 98.724944][ T7155] EXT4-fs (loop4): failed to parse options in superblock:  [ 98.737862][ T7155] EXT4-fs (loop4): Unsupported encryption level 4 [ 98.780781][ T7157] loop1: detected capacity change from 0 to 2048 [ 98.803739][ T7157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.985916][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.132008][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 99.143855][ T7174] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.152690][ T7174] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.161438][ T7174] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.170325][ T7174] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.180575][ T7174] vxlan0: entered promiscuous mode [ 99.187151][ T7175] netlink: set zone limit has 4 unknown bytes [ 99.466964][ T7184] loop0: detected capacity change from 0 to 128 [ 99.478897][ T7183] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 99.486830][ T7183] FAT-fs (loop0): Filesystem has been set read-only [ 99.495697][ T7183] bio_check_eod: 27 callbacks suppressed [ 99.495713][ T7183] syz.0.1322: attempt to access beyond end of device [ 99.495713][ T7183] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 99.526266][ T7183] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 99.534256][ T7183] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 99.553599][ T7184] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 99.562846][ T7184] syz.0.1322: attempt to access beyond end of device [ 99.562846][ T7184] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 99.578974][ T7176] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 99.584790][ T7184] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 99.592834][ T7184] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 99.600979][ T7184] syz.0.1322: attempt to access beyond end of device [ 99.600979][ T7184] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.617948][ T7184] syz.0.1322: attempt to access beyond end of device [ 99.617948][ T7184] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.632242][ T7184] syz.0.1322: attempt to access beyond end of device [ 99.632242][ T7184] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.645736][ T7184] syz.0.1322: attempt to access beyond end of device [ 99.645736][ T7184] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.660239][ T7183] syz.0.1322: attempt to access beyond end of device [ 99.660239][ T7183] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.673878][ T7183] syz.0.1322: attempt to access beyond end of device [ 99.673878][ T7183] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.688115][ T7183] syz.0.1322: attempt to access beyond end of device [ 99.688115][ T7183] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.705367][ T7184] syz.0.1322: attempt to access beyond end of device [ 99.705367][ T7184] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.745324][ T7191] loop3: detected capacity change from 0 to 527 [ 99.759824][ T7191] EXT4-fs (loop3): failed to parse options in superblock:  [ 99.772913][ T7191] EXT4-fs (loop3): Unsupported encryption level 4 [ 99.825893][ T7195] loop3: detected capacity change from 0 to 2048 [ 99.842910][ T7195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.048244][ T7212] netlink: set zone limit has 4 unknown bytes [ 100.291777][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 100.303410][ T7234] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.312233][ T7234] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.320973][ T7234] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.329714][ T7234] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.338953][ T7235] netlink: set zone limit has 4 unknown bytes [ 100.340830][ T7234] vxlan0: entered promiscuous mode [ 100.667369][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.808881][ T7243] loop4: detected capacity change from 0 to 1024 [ 100.815848][ T7243] EXT4-fs: Ignoring removed orlov option [ 100.833034][ T7243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.856158][ T7243] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1343: bg 0: block 320: padding at end of block bitmap is not set [ 100.902805][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.149124][ T7270] netlink: set zone limit has 4 unknown bytes [ 101.268732][ T7279] loop1: detected capacity change from 0 to 527 [ 101.276179][ T7279] EXT4-fs (loop1): failed to parse options in superblock:  [ 101.289049][ T7279] EXT4-fs (loop1): Unsupported encryption level 4 [ 101.460919][ T7240] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 101.586708][ T7297] netlink: set zone limit has 4 unknown bytes [ 102.070174][ T7332] loop2: detected capacity change from 0 to 527 [ 102.077888][ T7332] EXT4-fs (loop2): failed to parse options in superblock:  [ 102.091009][ T7332] EXT4-fs (loop2): Unsupported encryption level 4 [ 102.202172][ T7341] netlink: set zone limit has 4 unknown bytes [ 102.930598][ T29] kauditd_printk_skb: 2309 callbacks suppressed [ 102.930618][ T29] audit: type=1326 audit(1748043211.645:17783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.3.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb530f95927 code=0x7ffc0000 [ 102.960521][ T29] audit: type=1326 audit(1748043211.645:17784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.3.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb530f3ab39 code=0x7ffc0000 [ 102.984145][ T29] audit: type=1326 audit(1748043211.645:17785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.3.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb530f9e969 code=0x7ffc0000 [ 103.007751][ T29] audit: type=1326 audit(1748043211.645:17786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fb60b5927 code=0x7ffc0000 [ 103.031457][ T29] audit: type=1326 audit(1748043211.645:17787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7fb605ab39 code=0x7ffc0000 [ 103.054961][ T29] audit: type=1326 audit(1748043211.645:17788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7fb60be969 code=0x7ffc0000 [ 103.078665][ T29] audit: type=1326 audit(1748043211.655:17789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.3.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb530f95927 code=0x7ffc0000 [ 103.102241][ T29] audit: type=1326 audit(1748043211.655:17790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.3.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb530f3ab39 code=0x7ffc0000 [ 103.125909][ T29] audit: type=1326 audit(1748043211.655:17791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.3.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb530f9e969 code=0x7ffc0000 [ 103.149331][ T29] audit: type=1326 audit(1748043211.655:17792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fb60b5927 code=0x7ffc0000 [ 103.224843][ T7387] netlink: set zone limit has 4 unknown bytes [ 103.770516][ T7413] loop0: detected capacity change from 0 to 1024 [ 103.777196][ T7413] EXT4-fs: Ignoring removed orlov option [ 103.792115][ T7413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.805774][ T7413] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1412: bg 0: block 320: padding at end of block bitmap is not set [ 103.830844][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.896122][ T7424] loop3: detected capacity change from 0 to 128 [ 103.907478][ T7423] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 103.915515][ T7423] FAT-fs (loop3): Filesystem has been set read-only [ 103.922844][ T7423] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 103.930750][ T7423] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 103.939773][ T7424] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 103.947865][ T7424] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 103.955827][ T7424] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 104.309556][ T3659] failed while handling packet from 1:16384 [ 104.309592][ T3659] failed while handling packet from 1:16384 [ 104.316960][ T3659] failed while handling packet from 1:16384 [ 104.337903][ T3659] failed while handling packet from 1:16384 [ 104.365914][ T3659] failed while handling packet from 1:16384 [ 104.373155][ T3659] failed while handling packet from 1:16384 [ 104.379216][ T3659] failed while handling packet from 1:16384 [ 104.386665][ T3659] failed while handling packet from 1:16384 [ 104.426464][ T3659] failed while handling packet from 1:16384 [ 104.432456][ T3659] failed while handling packet from 1:16384 [ 104.511279][ T7431] loop3: detected capacity change from 0 to 512 [ 104.524849][ T7431] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.592390][ T7431] EXT4-fs (loop3): 1 truncate cleaned up [ 104.598704][ T7431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.613738][ T7431] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.048745][ T7448] loop1: detected capacity change from 0 to 1024 [ 105.085522][ T7448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.205085][ T7459] netlink: set zone limit has 4 unknown bytes [ 105.224381][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.255430][ T7461] loop4: detected capacity change from 0 to 527 [ 105.263444][ T7461] EXT4-fs (loop4): failed to parse options in superblock:  [ 105.276573][ T7461] EXT4-fs (loop4): Unsupported encryption level 4 [ 105.317993][ T7463] syzkaller0: entered promiscuous mode [ 105.323609][ T7463] syzkaller0: entered allmulticast mode [ 105.385562][ T7465] loop1: detected capacity change from 0 to 527 [ 105.401304][ T7465] EXT4-fs (loop1): failed to parse options in superblock:  [ 105.414245][ T7465] EXT4-fs (loop1): Unsupported encryption level 4 [ 105.756274][ T7483] loop1: detected capacity change from 0 to 1024 [ 105.796564][ T7485] SELinux: failed to load policy [ 105.815344][ T7489] loop0: detected capacity change from 0 to 128 [ 105.823635][ T7483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.840138][ T7488] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 105.848251][ T7488] FAT-fs (loop0): Filesystem has been set read-only [ 105.856624][ T7488] bio_check_eod: 22 callbacks suppressed [ 105.856714][ T7488] syz.0.1440: attempt to access beyond end of device [ 105.856714][ T7488] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 105.876490][ T7488] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 105.884395][ T7488] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 105.894871][ T7489] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 105.902865][ T7489] syz.0.1440: attempt to access beyond end of device [ 105.902865][ T7489] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 105.917931][ T7489] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 105.925835][ T7489] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 105.934005][ T7489] syz.0.1440: attempt to access beyond end of device [ 105.934005][ T7489] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 105.947876][ T7489] syz.0.1440: attempt to access beyond end of device [ 105.947876][ T7489] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 105.961600][ T7489] syz.0.1440: attempt to access beyond end of device [ 105.961600][ T7489] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 105.975082][ T7489] syz.0.1440: attempt to access beyond end of device [ 105.975082][ T7489] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 105.990161][ T7488] syz.0.1440: attempt to access beyond end of device [ 105.990161][ T7488] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 106.003868][ T7488] syz.0.1440: attempt to access beyond end of device [ 106.003868][ T7488] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 106.033319][ T7488] syz.0.1440: attempt to access beyond end of device [ 106.033319][ T7488] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 106.047830][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.047881][ T7489] syz.0.1440: attempt to access beyond end of device [ 106.047881][ T7489] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 106.081612][ T7501] syzkaller0: entered promiscuous mode [ 106.087168][ T7501] syzkaller0: entered allmulticast mode [ 106.229988][ T7519] loop4: detected capacity change from 0 to 1024 [ 106.284220][ T7519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.300341][ T7533] loop3: detected capacity change from 0 to 128 [ 106.312184][ T7534] netlink: set zone limit has 4 unknown bytes [ 106.319200][ T7532] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 106.327195][ T7532] FAT-fs (loop3): Filesystem has been set read-only [ 106.339249][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 106.358764][ T7532] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 106.366761][ T7532] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 106.368419][ T7536] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.376831][ T7533] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 106.383411][ T7536] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.391872][ T7533] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 106.399929][ T7536] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.407806][ T7533] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 106.416522][ T7536] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.434313][ T7536] vxlan0: entered promiscuous mode [ 106.436402][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.499927][ T7543] loop0: detected capacity change from 0 to 1024 [ 106.506806][ T7543] EXT4-fs: Ignoring removed orlov option [ 106.523801][ T7543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.554524][ T7549] syzkaller0: entered promiscuous mode [ 106.558283][ T7543] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1458: bg 0: block 320: padding at end of block bitmap is not set [ 106.560048][ T7549] syzkaller0: entered allmulticast mode [ 106.596833][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.967661][ T7572] loop0: detected capacity change from 0 to 1024 [ 106.995577][ T7572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.054944][ T7581] loop3: detected capacity change from 0 to 1024 [ 107.061955][ T7581] EXT4-fs: Ignoring removed orlov option [ 107.072308][ T7581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.099643][ T7581] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1473: bg 0: block 320: padding at end of block bitmap is not set [ 107.120757][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.165674][ T7586] syzkaller0: entered promiscuous mode [ 107.171276][ T7586] syzkaller0: entered allmulticast mode [ 107.184928][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.259901][ T7595] SELinux: failed to load policy [ 107.324565][ T7608] loop4: detected capacity change from 0 to 527 [ 107.333144][ T7608] EXT4-fs (loop4): failed to parse options in superblock:  [ 107.346519][ T7608] EXT4-fs (loop4): Unsupported encryption level 4 [ 107.373299][ T7607] SELinux: failed to load policy [ 107.457535][ T7617] loop2: detected capacity change from 0 to 1024 [ 107.474469][ T7620] netlink: set zone limit has 4 unknown bytes [ 107.475263][ T7617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.587256][ T7627] loop0: detected capacity change from 0 to 128 [ 107.594537][ T7628] netlink: set zone limit has 4 unknown bytes [ 107.599056][ T7626] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 107.608667][ T7626] FAT-fs (loop0): Filesystem has been set read-only [ 107.615560][ T7626] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 107.623511][ T7626] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 107.632350][ T7627] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 107.640257][ T7627] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 107.648177][ T7627] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 107.942222][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 107.942243][ T29] audit: type=1326 audit(1748043216.655:18326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.3.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb530f95927 code=0x7ffc0000 [ 107.971968][ T29] audit: type=1326 audit(1748043216.655:18327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.3.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb530f3ab39 code=0x7ffc0000 [ 107.995371][ T29] audit: type=1326 audit(1748043216.655:18328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.3.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb530f9e969 code=0x7ffc0000 [ 108.018973][ T29] audit: type=1326 audit(1748043216.665:18329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.3.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb530f95927 code=0x7ffc0000 [ 108.042492][ T29] audit: type=1326 audit(1748043216.665:18330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.3.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb530f3ab39 code=0x7ffc0000 [ 108.065939][ T29] audit: type=1326 audit(1748043216.665:18331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.3.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb530f9e969 code=0x7ffc0000 [ 108.089374][ T29] audit: type=1326 audit(1748043216.675:18332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.3.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb530f95927 code=0x7ffc0000 [ 108.112820][ T29] audit: type=1326 audit(1748043216.675:18333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.3.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb530f3ab39 code=0x7ffc0000 [ 108.136320][ T29] audit: type=1326 audit(1748043216.675:18334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.3.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb530f9e969 code=0x7ffc0000 [ 108.159689][ T29] audit: type=1326 audit(1748043216.685:18335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.3.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb530f95927 code=0x7ffc0000 [ 108.234777][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.262945][ T7634] loop0: detected capacity change from 0 to 1024 [ 108.283147][ T7636] syzkaller0: entered promiscuous mode [ 108.288740][ T7636] syzkaller0: entered allmulticast mode [ 108.315981][ T7634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.398033][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 108.412000][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.447900][ T7655] loop3: detected capacity change from 0 to 527 [ 108.467161][ T7655] EXT4-fs (loop3): failed to parse options in superblock:  [ 108.480212][ T7655] EXT4-fs (loop3): Unsupported encryption level 4 [ 108.726256][ T7679] netlink: set zone limit has 4 unknown bytes [ 108.840170][ T7686] syzkaller0: entered promiscuous mode [ 108.845818][ T7686] syzkaller0: entered allmulticast mode [ 110.117152][ T7733] loop2: detected capacity change from 0 to 8192 [ 110.251318][ T7736] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.261786][ T7736] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.277640][ T7733] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 110.285329][ T7733] FAT-fs (loop2): Filesystem has been set read-only [ 110.314859][ T7736] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.325222][ T7736] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.373390][ T7736] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.383815][ T7736] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.433203][ T7736] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.443603][ T7736] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.497103][ T7736] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.505380][ T7736] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.516945][ T7736] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.525316][ T7736] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.536498][ T7736] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.544812][ T7736] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.556033][ T7736] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.564352][ T7736] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.659720][ T7738] loop4: detected capacity change from 0 to 2048 [ 110.675885][ T7740] loop1: detected capacity change from 0 to 1024 [ 110.692342][ T7738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.706618][ T7740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.796456][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.826062][ T7758] netlink: set zone limit has 4 unknown bytes [ 110.998499][ T36] hid-generic 0002:FFFFFF16:0009.0029: hidraw0: HID v0.09 Device [syz0] on syz0 [ 111.194620][ T7785] loop0: detected capacity change from 0 to 1024 [ 111.201805][ T7785] EXT4-fs: Ignoring removed orlov option [ 111.222215][ T7785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.236017][ T7785] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1548: bg 0: block 320: padding at end of block bitmap is not set [ 111.261607][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.420266][ T7802] syzkaller0: entered promiscuous mode [ 111.425904][ T7802] syzkaller0: entered allmulticast mode [ 111.481597][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.862099][ T7863] SELinux: failed to load policy [ 111.896616][ T7871] atomic_op ffff88811a5ddd28 conn xmit_atomic 0000000000000000 [ 111.954552][ T7882] loop4: detected capacity change from 0 to 2048 [ 111.972164][ T7882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.165497][ T7914] SELinux: failed to load policy [ 112.472968][ T7976] loop2: detected capacity change from 0 to 128 [ 112.483431][ T7975] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 112.491525][ T7975] FAT-fs (loop2): Filesystem has been set read-only [ 112.498378][ T7975] bio_check_eod: 38 callbacks suppressed [ 112.498411][ T7975] syz.2.1577: attempt to access beyond end of device [ 112.498411][ T7975] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 112.517934][ T7975] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 112.525832][ T7975] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 112.534829][ T7976] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 112.542734][ T7976] syz.2.1577: attempt to access beyond end of device [ 112.542734][ T7976] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 112.563318][ T7976] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 112.565154][ T7979] atomic_op ffff88811d853928 conn xmit_atomic 0000000000000000 [ 112.571288][ T7976] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 112.571865][ T7976] syz.2.1577: attempt to access beyond end of device [ 112.571865][ T7976] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.601653][ T7976] syz.2.1577: attempt to access beyond end of device [ 112.601653][ T7976] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.615302][ T7976] syz.2.1577: attempt to access beyond end of device [ 112.615302][ T7976] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.630663][ T7975] syz.2.1577: attempt to access beyond end of device [ 112.630663][ T7975] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.645075][ T7976] syz.2.1577: attempt to access beyond end of device [ 112.645075][ T7976] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.658476][ T7975] syz.2.1577: attempt to access beyond end of device [ 112.658476][ T7975] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.671938][ T7975] syz.2.1577: attempt to access beyond end of device [ 112.671938][ T7975] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.687371][ T7976] syz.2.1577: attempt to access beyond end of device [ 112.687371][ T7976] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.800250][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.865183][ T8000] loop4: detected capacity change from 0 to 2048 [ 112.892713][ T8000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.675489][ T8132] loop2: detected capacity change from 0 to 2048 [ 113.707172][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.723401][ T8132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.739236][ T8134] SELinux: failed to load policy [ 114.027653][ T8148] loop3: detected capacity change from 0 to 1024 [ 114.034510][ T8148] EXT4-fs: Ignoring removed orlov option [ 114.063185][ T8148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.084305][ T8148] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1599: bg 0: block 320: padding at end of block bitmap is not set [ 114.102012][ T8154] IPVS: Error connecting to the multicast addr [ 114.131301][ T8156] IPVS: Error connecting to the multicast addr [ 114.167554][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.201652][ T8162] loop0: detected capacity change from 0 to 128 [ 114.214464][ T8161] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 114.222470][ T8161] FAT-fs (loop0): Filesystem has been set read-only [ 114.222868][ T8160] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1604'. [ 114.229456][ T8161] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 114.238263][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1604'. [ 114.238285][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1604'. [ 114.264355][ T8161] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 114.274721][ T8162] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 114.283359][ T8162] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 114.291256][ T8162] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 114.454451][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 114.454470][ T29] audit: type=1326 audit(1748043223.165:18572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 114.491864][ T29] audit: type=1326 audit(1748043223.195:18573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 114.515620][ T29] audit: type=1326 audit(1748043223.195:18574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 114.539235][ T29] audit: type=1326 audit(1748043223.195:18575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 114.562923][ T29] audit: type=1326 audit(1748043223.195:18576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 114.586570][ T29] audit: type=1326 audit(1748043223.195:18577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 114.590353][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1608'. [ 114.610503][ T29] audit: type=1326 audit(1748043223.195:18578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 114.642796][ T29] audit: type=1326 audit(1748043223.195:18579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 114.666427][ T29] audit: type=1326 audit(1748043223.195:18580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 114.690165][ T29] audit: type=1326 audit(1748043223.195:18581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 114.719363][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.131669][ T8207] loop2: detected capacity change from 0 to 2048 [ 115.153961][ T8213] loop4: detected capacity change from 0 to 1024 [ 115.184974][ T8213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.210592][ T8207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.291753][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.585613][ T8258] loop1: detected capacity change from 0 to 1024 [ 115.592968][ T8258] EXT4-fs: Ignoring removed orlov option [ 115.602174][ T8258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.615809][ T8258] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1640: bg 0: block 320: padding at end of block bitmap is not set [ 115.643176][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.804773][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 115.958065][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.966938][ T8271] loop1: detected capacity change from 0 to 1024 [ 115.982523][ T8271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.049294][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.234101][ T8291] netlink: set zone limit has 4 unknown bytes [ 116.299574][ T8295] loop2: detected capacity change from 0 to 2048 [ 116.313174][ T8295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.381706][ T8304] loop0: detected capacity change from 0 to 2048 [ 116.402770][ T8304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.599199][ T8312] loop4: detected capacity change from 0 to 1024 [ 116.612324][ T8312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.662091][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.036865][ T8337] syzkaller0: entered promiscuous mode [ 117.042529][ T8337] syzkaller0: entered allmulticast mode [ 117.137440][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.190932][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1667'. [ 117.225913][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.272850][ T8352] loop0: detected capacity change from 0 to 1024 [ 117.282137][ T8352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.338241][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.378185][ T8360] netlink: 'syz.0.1671': attribute type 13 has an invalid length. [ 117.387982][ T8360] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.396978][ T8360] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.406295][ T8360] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.415132][ T8360] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.477159][ T8370] IPVS: Error connecting to the multicast addr [ 117.547156][ T8374] netlink: 'syz.2.1678': attribute type 13 has an invalid length. [ 117.578624][ T8377] loop3: detected capacity change from 0 to 128 [ 117.589499][ T8376] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 117.597466][ T8376] FAT-fs (loop3): Filesystem has been set read-only [ 117.604400][ T8376] bio_check_eod: 16 callbacks suppressed [ 117.604416][ T8376] syz.3.1679: attempt to access beyond end of device [ 117.604416][ T8376] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 117.624916][ T8376] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 117.632916][ T8376] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 117.644938][ T8377] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 117.653671][ T8377] syz.3.1679: attempt to access beyond end of device [ 117.653671][ T8377] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 117.669141][ T8377] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 117.677319][ T8377] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 117.686866][ T8377] syz.3.1679: attempt to access beyond end of device [ 117.686866][ T8377] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 117.702562][ T8376] syz.3.1679: attempt to access beyond end of device [ 117.702562][ T8376] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 117.715512][ T8380] loop0: detected capacity change from 0 to 2048 [ 117.716148][ T8377] syz.3.1679: attempt to access beyond end of device [ 117.716148][ T8377] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 117.737219][ T8376] syz.3.1679: attempt to access beyond end of device [ 117.737219][ T8376] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 117.752362][ T8377] syz.3.1679: attempt to access beyond end of device [ 117.752362][ T8377] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 117.766124][ T8376] syz.3.1679: attempt to access beyond end of device [ 117.766124][ T8376] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 117.779571][ T8381] syz.3.1679: attempt to access beyond end of device [ 117.779571][ T8381] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 117.793063][ T8377] syz.3.1679: attempt to access beyond end of device [ 117.793063][ T8377] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 117.808840][ T8380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.822231][ T8386] netlink: set zone limit has 4 unknown bytes [ 117.900606][ T8390] loop3: detected capacity change from 0 to 1024 [ 117.914909][ T8390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.009036][ T8374] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.017772][ T8374] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.026587][ T8374] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.035385][ T8374] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.046532][ T8374] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.055176][ T8374] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.063705][ T8374] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.072236][ T8374] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.178727][ T8406] IPVS: Error connecting to the multicast addr [ 118.203628][ T8408] IPVS: Error connecting to the multicast addr [ 118.210661][ T8408] atomic_op ffff88810ba22528 conn xmit_atomic 0000000000000000 [ 118.374186][ T8417] loop2: detected capacity change from 0 to 128 [ 118.385332][ T8416] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 118.393275][ T8416] FAT-fs (loop2): Filesystem has been set read-only [ 118.400014][ T8416] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 118.407988][ T8416] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 118.417610][ T8417] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 118.426592][ T8417] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 118.434509][ T8417] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 118.533558][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.535724][ T8423] IPVS: Error connecting to the multicast addr [ 118.598344][ T8431] IPVS: Error connecting to the multicast addr [ 118.633287][ T8433] syzkaller0: entered promiscuous mode [ 118.638897][ T8433] syzkaller0: entered allmulticast mode [ 118.688757][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.783829][ T8444] netlink: 'syz.4.1703': attribute type 13 has an invalid length. [ 118.836675][ T8444] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.845878][ T8444] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.854938][ T8444] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.863924][ T8444] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.099303][ T8461] netlink: set zone limit has 4 unknown bytes [ 119.317236][ T8463] IPVS: Error connecting to the multicast addr [ 119.345740][ T8465] loop2: detected capacity change from 0 to 1024 [ 119.362566][ T8465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.418222][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.442671][ T8471] IPVS: Error connecting to the multicast addr [ 119.467546][ T29] kauditd_printk_skb: 1255 callbacks suppressed [ 119.467646][ T29] audit: type=1326 audit(1748043228.175:19837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b3bc55927 code=0x7ffc0000 [ 119.497712][ T29] audit: type=1326 audit(1748043228.175:19838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7b3bbfab39 code=0x7ffc0000 [ 119.521349][ T29] audit: type=1326 audit(1748043228.175:19839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7b3bc5e969 code=0x7ffc0000 [ 119.544873][ T29] audit: type=1326 audit(1748043228.235:19840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b3bc55927 code=0x7ffc0000 [ 119.568363][ T29] audit: type=1326 audit(1748043228.235:19841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7b3bbfab39 code=0x7ffc0000 [ 119.591814][ T29] audit: type=1326 audit(1748043228.235:19842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7b3bc5e969 code=0x7ffc0000 [ 119.615388][ T29] audit: type=1326 audit(1748043228.235:19843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b3bc55927 code=0x7ffc0000 [ 119.638949][ T29] audit: type=1326 audit(1748043228.235:19844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7b3bbfab39 code=0x7ffc0000 [ 119.662391][ T29] audit: type=1326 audit(1748043228.235:19845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7b3bc5e969 code=0x7ffc0000 [ 119.686415][ T29] audit: type=1326 audit(1748043228.245:19846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b3bc55927 code=0x7ffc0000 [ 119.713198][ T8483] netlink: 'syz.3.1716': attribute type 13 has an invalid length. [ 119.776248][ T3659] failed while handling packet from 1:16385 [ 119.776314][ T3659] failed while handling packet from 1:16385 [ 119.782366][ T3659] failed while handling packet from 1:16385 [ 119.788844][ T3659] failed while handling packet from 1:16385 [ 119.795104][ T3659] failed while handling packet from 1:16385 [ 119.801572][ T3659] failed while handling packet from 1:16385 [ 119.807918][ T3659] failed while handling packet from 1:16385 [ 119.814076][ T3659] failed while handling packet from 1:16385 [ 119.821342][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.834921][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.926785][ T8483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.940958][ T8483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.991920][ T8483] veth1_vlan: left allmulticast mode [ 120.020297][ T8483] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.029389][ T8483] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.038715][ T8483] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.048157][ T8483] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.102973][ T8489] netlink: 'syz.3.1718': attribute type 13 has an invalid length. [ 120.365937][ T8500] IPVS: Error connecting to the multicast addr [ 120.393689][ T8506] IPVS: Error connecting to the multicast addr [ 120.400322][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 120.475252][ T8520] netlink: set zone limit has 4 unknown bytes [ 120.734719][ T8531] IPVS: Error connecting to the multicast addr [ 120.924214][ T8538] loop2: detected capacity change from 0 to 2048 [ 120.942583][ T8538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.201787][ T8548] IPVS: Error connecting to the multicast addr [ 121.277295][ T8558] atomic_op ffff88811d852528 conn xmit_atomic 0000000000000000 [ 121.299294][ T8563] IPVS: Error connecting to the multicast addr [ 121.321787][ T8565] loop0: detected capacity change from 0 to 1024 [ 121.328684][ T8565] EXT4-fs: Ignoring removed orlov option [ 121.555731][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 121.605180][ T8595] netlink: set zone limit has 4 unknown bytes [ 122.274297][ T8598] atomic_op ffff88810ba23928 conn xmit_atomic 0000000000000000 [ 122.421564][ T8607] syzkaller0: entered promiscuous mode [ 122.427077][ T8607] syzkaller0: entered allmulticast mode [ 122.600976][ T8627] atomic_op ffff88811d9a5928 conn xmit_atomic 0000000000000000 [ 122.659877][ T8632] loop4: detected capacity change from 0 to 1024 [ 122.666915][ T8632] EXT4-fs: Ignoring removed orlov option [ 122.755390][ T8639] netlink: set zone limit has 4 unknown bytes [ 123.320832][ T8650] syzkaller0: entered promiscuous mode [ 123.326388][ T8650] syzkaller0: entered allmulticast mode [ 123.549637][ T8657] atomic_op ffff88811c076528 conn xmit_atomic 0000000000000000 [ 123.639373][ T8666] syzkaller0: entered promiscuous mode [ 123.644922][ T8666] syzkaller0: entered allmulticast mode [ 123.688272][ T8667] syzkaller0: entered promiscuous mode [ 123.693973][ T8667] syzkaller0: entered allmulticast mode [ 123.866583][ T8676] syzkaller0: entered promiscuous mode [ 123.872239][ T8676] syzkaller0: entered allmulticast mode [ 123.929018][ T8682] atomic_op ffff88811ac00d28 conn xmit_atomic 0000000000000000 [ 123.983508][ T8691] loop4: detected capacity change from 0 to 128 [ 123.996199][ T8689] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 124.004315][ T8689] FAT-fs (loop4): Filesystem has been set read-only [ 124.012624][ T8689] bio_check_eod: 22 callbacks suppressed [ 124.012655][ T8689] syz.4.1797: attempt to access beyond end of device [ 124.012655][ T8689] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 124.033762][ T8689] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 124.041675][ T8689] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 124.051620][ T8691] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 124.059695][ T8691] syz.4.1797: attempt to access beyond end of device [ 124.059695][ T8691] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 124.073807][ T8691] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 124.081686][ T8691] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 124.089667][ T8691] syz.4.1797: attempt to access beyond end of device [ 124.089667][ T8691] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.103308][ T8691] syz.4.1797: attempt to access beyond end of device [ 124.103308][ T8691] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.126043][ T8691] syz.4.1797: attempt to access beyond end of device [ 124.126043][ T8691] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.140003][ T8691] syz.4.1797: attempt to access beyond end of device [ 124.140003][ T8691] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.164025][ T8689] syz.4.1797: attempt to access beyond end of device [ 124.164025][ T8689] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.180237][ T8689] syz.4.1797: attempt to access beyond end of device [ 124.180237][ T8689] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.194502][ T8689] syz.4.1797: attempt to access beyond end of device [ 124.194502][ T8689] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.214181][ T8691] syz.4.1797: attempt to access beyond end of device [ 124.214181][ T8691] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.345779][ T8713] atomic_op ffff88811af0b928 conn xmit_atomic 0000000000000000 [ 124.423635][ T8718] syzkaller0: entered promiscuous mode [ 124.429180][ T8718] syzkaller0: entered allmulticast mode [ 124.474073][ T29] kauditd_printk_skb: 1209 callbacks suppressed [ 124.474087][ T29] audit: type=1326 audit(1748043233.185:21056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d32665927 code=0x7ffc0000 [ 124.512477][ T8730] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1813'. [ 124.512601][ T29] audit: type=1326 audit(1748043233.195:21057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d3260ab39 code=0x7ffc0000 [ 124.522700][ T8731] netlink: set zone limit has 4 unknown bytes [ 124.545167][ T29] audit: type=1326 audit(1748043233.195:21058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 124.574950][ T29] audit: type=1326 audit(1748043233.225:21059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d32665927 code=0x7ffc0000 [ 124.598644][ T29] audit: type=1326 audit(1748043233.225:21060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d3260ab39 code=0x7ffc0000 [ 124.599074][ T8727] loop1: detected capacity change from 0 to 164 [ 124.622327][ T29] audit: type=1326 audit(1748043233.225:21061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 124.652324][ T29] audit: type=1326 audit(1748043233.235:21062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d32665927 code=0x7ffc0000 [ 124.675806][ T29] audit: type=1326 audit(1748043233.235:21063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d3260ab39 code=0x7ffc0000 [ 124.699323][ T29] audit: type=1326 audit(1748043233.235:21064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 124.722703][ T29] audit: type=1326 audit(1748043233.315:21065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d32665927 code=0x7ffc0000 [ 124.765728][ T3312] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 124.774901][ T3312] iso9660: Corrupted directory entry in block 1 of inode 1856 [ 124.782627][ T3312] VFS: Lookup of '' in iso9660 loop1 would have caused loop [ 124.790186][ T3312] VFS: Lookup of '' in iso9660 loop1 would have caused loop [ 125.918146][ T8785] FAULT_INJECTION: forcing a failure. [ 125.918146][ T8785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.931281][ T8785] CPU: 0 UID: 0 PID: 8785 Comm: syz.0.1836 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 125.931320][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.931340][ T8785] Call Trace: [ 125.931349][ T8785] [ 125.931359][ T8785] __dump_stack+0x1d/0x30 [ 125.931387][ T8785] dump_stack_lvl+0xe8/0x140 [ 125.931446][ T8785] dump_stack+0x15/0x1b [ 125.931469][ T8785] should_fail_ex+0x265/0x280 [ 125.931576][ T8785] should_fail+0xb/0x20 [ 125.931630][ T8785] should_fail_usercopy+0x1a/0x20 [ 125.931731][ T8785] _copy_to_user+0x20/0xa0 [ 125.931761][ T8785] simple_read_from_buffer+0xb5/0x130 [ 125.931794][ T8785] proc_fail_nth_read+0x100/0x140 [ 125.931936][ T8785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.931967][ T8785] vfs_read+0x19d/0x6f0 [ 125.931999][ T8785] ? __rcu_read_unlock+0x4f/0x70 [ 125.932027][ T8785] ? __fget_files+0x184/0x1c0 [ 125.932070][ T8785] ksys_read+0xda/0x1a0 [ 125.932105][ T8785] __x64_sys_read+0x40/0x50 [ 125.932143][ T8785] x64_sys_call+0x2d77/0x2fb0 [ 125.932172][ T8785] do_syscall_64+0xd0/0x1a0 [ 125.932236][ T8785] ? clear_bhb_loop+0x40/0x90 [ 125.932262][ T8785] ? clear_bhb_loop+0x40/0x90 [ 125.932378][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.932415][ T8785] RIP: 0033:0x7f3d3266d37c [ 125.932433][ T8785] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.932459][ T8785] RSP: 002b:00007f3d30cd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.932485][ T8785] RAX: ffffffffffffffda RBX: 00007f3d32895fa0 RCX: 00007f3d3266d37c [ 125.932502][ T8785] RDX: 000000000000000f RSI: 00007f3d30cd70a0 RDI: 0000000000000003 [ 125.932519][ T8785] RBP: 00007f3d30cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.932546][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.932562][ T8785] R13: 0000000000000000 R14: 00007f3d32895fa0 R15: 00007fffe0e5de88 [ 125.932584][ T8785] [ 126.537511][ T8790] netlink: 'syz.4.1841': attribute type 13 has an invalid length. [ 129.973364][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 129.973383][ T29] audit: type=1400 audit(1748043238.685:21632): avc: denied { execmem } for pid=8817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 130.005408][ T29] audit: type=1400 audit(1748043238.715:21633): avc: denied { create } for pid=8818 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 130.026274][ T29] audit: type=1400 audit(1748043238.715:21634): avc: denied { map_create } for pid=8818 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.045556][ T29] audit: type=1400 audit(1748043238.715:21635): avc: denied { prog_load } for pid=8818 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.064778][ T29] audit: type=1400 audit(1748043238.715:21636): avc: denied { prog_load } for pid=8818 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.084047][ T29] audit: type=1400 audit(1748043238.725:21637): avc: denied { prog_load } for pid=8821 comm="syz.3.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.103347][ T29] audit: type=1400 audit(1748043238.725:21638): avc: denied { execute } for pid=8821 comm="syz.3.1853" name="file0" dev="tmpfs" ino=1949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 130.125714][ T29] audit: type=1400 audit(1748043238.735:21639): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 130.150140][ T29] audit: type=1326 audit(1748043238.735:21640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.0.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 130.173713][ T29] audit: type=1326 audit(1748043238.735:21641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.0.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3266e969 code=0x7ffc0000 [ 135.054027][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 135.054047][ T29] audit: type=1400 audit(1748043243.765:21967): avc: denied { execmem } for pid=8853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 135.118733][ T29] audit: type=1400 audit(1748043243.825:21968): avc: denied { prog_load } for pid=8856 comm="syz.3.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.138443][ T29] audit: type=1326 audit(1748043243.825:21969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.4.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3bc5e969 code=0x7ffc0000 [ 135.162104][ T29] audit: type=1326 audit(1748043243.825:21970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.4.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3bc5e969 code=0x7ffc0000 [ 135.185718][ T29] audit: type=1326 audit(1748043243.835:21971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.4.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b3bc5e969 code=0x7ffc0000 [ 135.209395][ T29] audit: type=1400 audit(1748043243.835:21972): avc: denied { prog_load } for pid=8855 comm="syz.4.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.228584][ T29] audit: type=1326 audit(1748043243.835:21973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.4.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3bc5e969 code=0x7ffc0000 [ 135.252133][ T29] audit: type=1326 audit(1748043243.835:21974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.4.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3bc5e969 code=0x7ffc0000 [ 135.275642][ T29] audit: type=1326 audit(1748043243.835:21975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.4.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b3bc5e969 code=0x7ffc0000 [ 135.299133][ T29] audit: type=1400 audit(1748043243.835:21976): avc: denied { map_create } for pid=8855 comm="syz.4.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 138.219089][ T8883] ================================================================== [ 138.227241][ T8883] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 138.234884][ T8883] [ 138.237229][ T8883] write to 0xffff88811ed44000 of 4096 bytes by task 8877 on cpu 0: [ 138.245124][ T8883] _copy_from_iter+0x130/0xdd0 [ 138.249903][ T8883] copy_page_from_iter+0x15a/0x290 [ 138.255021][ T8883] process_vm_rw+0x659/0x950 [ 138.259637][ T8883] __x64_sys_process_vm_writev+0x78/0x90 [ 138.265286][ T8883] x64_sys_call+0xe80/0x2fb0 [ 138.269900][ T8883] do_syscall_64+0xd0/0x1a0 [ 138.274436][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.280355][ T8883] [ 138.282688][ T8883] write to 0xffff88811ed44000 of 4096 bytes by task 8883 on cpu 1: [ 138.290585][ T8883] _copy_from_iter+0x130/0xdd0 [ 138.295365][ T8883] copy_page_from_iter+0x15a/0x290 [ 138.300486][ T8883] process_vm_rw+0x659/0x950 [ 138.305087][ T8883] __x64_sys_process_vm_writev+0x78/0x90 [ 138.310732][ T8883] x64_sys_call+0xe80/0x2fb0 [ 138.315374][ T8883] do_syscall_64+0xd0/0x1a0 [ 138.319903][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.325806][ T8883] [ 138.328131][ T8883] Reported by Kernel Concurrency Sanitizer on: [ 138.334282][ T8883] CPU: 1 UID: 0 PID: 8883 Comm: syz.0.1873 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(voluntary) [ 138.346703][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.356769][ T8883] ================================================================== [ 139.941445][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1878'. [ 140.243833][ T3645] bridge_slave_1: left allmulticast mode [ 140.249488][ T3645] bridge_slave_1: left promiscuous mode [ 140.255184][ T3645] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.262907][ T3645] bridge_slave_0: left allmulticast mode [ 140.268544][ T3645] bridge_slave_0: left promiscuous mode [ 140.274228][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.372764][ T3645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.382170][ T3645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.391248][ T3645] bond0 (unregistering): Released all slaves [ 140.443648][ T3645] hsr_slave_0: left promiscuous mode [ 140.449287][ T3645] hsr_slave_1: left promiscuous mode [ 140.455100][ T3645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.462621][ T3645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.494813][ T3645] team0 (unregistering): Port device team_slave_1 removed [ 140.504104][ T3645] team0 (unregistering): Port device team_slave_0 removed [ 141.082686][ T3706] bond0 (unregistering): Released all slaves [ 141.123781][ T3706] hsr_slave_0: left promiscuous mode [ 141.129371][ T3706] hsr_slave_1: left promiscuous mode