last executing test programs: 2m22.124031453s ago: executing program 3 (id=152): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r1, r1, 0x0, 0xaca) 2m22.090215996s ago: executing program 3 (id=153): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) fallocate(r3, 0x0, 0xbf5, 0x2000402) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x7}, 0x18) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="44c33b69ebc9e05e9bdec0c288a8", 0x1d, 0x830, &(0x7f0000000440)={0x11, 0x2, r7, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 2m21.792237253s ago: executing program 3 (id=157): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x10, 0x6, 0xffffffff, 0x40, 0x3, 0x0, 0x6, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x151625, 0xd, 0x2, 0x20107, 0x6, 0x5, 0x0, 0x4, 0x3}) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x800) getdents(r3, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x40001) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 2m20.635634665s ago: executing program 3 (id=169): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x2000000000020000}, 0x103328, 0x6, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) 2m20.450000102s ago: executing program 3 (id=170): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_unlink(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000001c0)="5122dfb5a85e76ee7abd6050e5bac524c4698a8d1058790d31fc430f0fdb3f5e06787a910e938e7dff62b3cffabac4e5147ff905bc7005590c8043e1209b5e00d97eee4606ac06e4b96e7e396ed27ece28eacdfa2ecc8397aa859e732765", 0x0, 0x4}, 0x20) unshare(0x2a020400) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe9, 0x400) syz_usb_disconnect(r1) 2m19.615833855s ago: executing program 3 (id=177): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r0) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fffffff000"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) r9 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r9) tkill(r9, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) 2m19.615434385s ago: executing program 32 (id=177): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r0) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fffffff000"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) r9 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r9) tkill(r9, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) 2m17.695089196s ago: executing program 1 (id=192): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x10, 0x6, 0xffffffff, 0x40, 0x3, 0x0, 0x6, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x151625, 0xd, 0x2, 0x20107, 0x6, 0x5, 0x0, 0x4, 0x3}) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x800) getdents(r3, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x40001) ftruncate(0xffffffffffffffff, 0x2007ffb) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 2m16.551293197s ago: executing program 1 (id=197): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffe1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) open(0x0, 0x64842, 0x389b0d52417bb201) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = gettid() timer_create(0x7, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x1, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x80000000000030, 0x4c008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x2, @perf_config_ext={0x9, 0x200006}, 0x102382, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write(r7, 0x0, 0x0) close(r6) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000200)=0x10, 0x4) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x8020000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) 2m16.40033348s ago: executing program 1 (id=199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) ioperm(0x5, 0x8, 0x8000000000005) r3 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000), &(0x7f0000000300)) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYRESDEC=r2, @ANYRESHEX=r5, @ANYRES16=r3, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffee6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) syz_clone3(&(0x7f0000000880)={0x2900080, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x0], 0x1}, 0x58) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) getpid() 2m15.846007019s ago: executing program 1 (id=202): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x2000000000020000}, 0x103328, 0x6, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 2m15.682355284s ago: executing program 1 (id=204): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) ioperm(0x5, 0x8, 0x8000000000005) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000), &(0x7f0000000300)) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r2, @ANYRESHEX=r4, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) syz_clone3(&(0x7f0000000880)={0x2900080, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x0], 0x1}, 0x58) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) getpid() 2m15.0479509s ago: executing program 1 (id=211): syz_clone(0x40108000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000010c0), r3, r2}}, 0x18) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r5, &(0x7f0000000400)=""/165, 0xa5, 0x7) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000000000fddbdf2554"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000306010200000000000000000a00000605000100070000000900020073797a3200000000050001000700000005000100070000000900020073797a30000000000900020073797a3200000040"], 0x58}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYBLOB="2cd63a4a98c3a1daf98806f9718eab222c145e372c", @ANYBLOB="eaee636a1d232412d7e0383e5d2c7e3e4c95905f301d2a32432661a70036806a95d8637bd51c26b749d0d7de26ff651615a82d3b9a74a5baea44e0fdbcd1c2dd4ef34d1a7a2d31cf1a5beeb153131e87f00e8e67a7467953b2a1b2e666e6dfccb0efb1511b32d43cc66a8a818747a4c79a4a452e9d5cf502da7309cffc83c9ab98", @ANYRESHEX=r5], 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000380)}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x40824) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x80, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd, 0x29, 0x0, @loopback, @rand_addr=0x3}}}}) 2m14.987627635s ago: executing program 33 (id=211): syz_clone(0x40108000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000010c0), r3, r2}}, 0x18) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r5, &(0x7f0000000400)=""/165, 0xa5, 0x7) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000000000fddbdf2554"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000306010200000000000000000a00000605000100070000000900020073797a3200000000050001000700000005000100070000000900020073797a30000000000900020073797a3200000040"], 0x58}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYBLOB="2cd63a4a98c3a1daf98806f9718eab222c145e372c", @ANYBLOB="eaee636a1d232412d7e0383e5d2c7e3e4c95905f301d2a32432661a70036806a95d8637bd51c26b749d0d7de26ff651615a82d3b9a74a5baea44e0fdbcd1c2dd4ef34d1a7a2d31cf1a5beeb153131e87f00e8e67a7467953b2a1b2e666e6dfccb0efb1511b32d43cc66a8a818747a4c79a4a452e9d5cf502da7309cffc83c9ab98", @ANYRESHEX=r5], 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000380)}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x40824) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x80, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd, 0x29, 0x0, @loopback, @rand_addr=0x3}}}}) 3.630646819s ago: executing program 5 (id=2075): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xc000000b}) 3.525971548s ago: executing program 5 (id=2077): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = memfd_secret(0x80000) fchownat(r0, 0x0, 0x0, 0x0, 0x1000) 3.427883727s ago: executing program 5 (id=2083): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) r1 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x9e}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000240)=[{0x3}, {0x1, 0xe65b}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x0, @fd_index, 0xb9, 0x8, 0xa0, 0x2}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x364, &(0x7f0000000b00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000030000000800000000000000", @ANYRES32, @ANYBLOB="04000100008d00ff010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.550549705s ago: executing program 5 (id=2093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r1}, 0x18) mount$nfs4(&(0x7f0000000580)='\x00', &(0x7f0000000100)='.\x00', &(0x7f00000003c0), 0x0, 0x0) setitimer(0x1, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0xa8, 0x400) read$usbmon(r5, &(0x7f00000000c0)=""/57, 0x39) 2.333466174s ago: executing program 6 (id=2098): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) io_setup(0x973, &(0x7f0000000380)=0x0) r1 = eventfd2(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000180)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_setup(0x1ff, &(0x7f0000000200)=0x0) io_getevents(r3, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0xc615, 0x101, 0x0) 1.981804575s ago: executing program 2 (id=2110): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) removexattr(0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000640), 0x940, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @mcast1, 0x6}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x20000000000000be, &(0x7f0000000840)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 1.916110851s ago: executing program 2 (id=2111): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1.888111403s ago: executing program 2 (id=2112): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x9e}, 0x0, &(0x7f0000000000)=0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000240)=[{0x3}, {0x1, 0xe65b}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, r0, &(0x7f00000004c0)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x0, @fd_index, 0xb9, 0x8, 0xa0, 0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x364, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.647259494s ago: executing program 5 (id=2116): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioperm(0x5, 0xa, 0x100000000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xe359, 0x0, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000380), 0x800) 1.36009505s ago: executing program 6 (id=2120): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) io_setup(0x1ff, &(0x7f0000000200)) 1.287038426s ago: executing program 6 (id=2121): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) removexattr(0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000640), 0x940, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @mcast1, 0x6}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x20000000000000be, &(0x7f0000000840)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 1.232558401s ago: executing program 6 (id=2122): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) io_setup(0x973, &(0x7f0000000380)=0x0) eventfd2(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xc615, 0x101, 0x0) 1.058090966s ago: executing program 6 (id=2123): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioperm(0x5, 0xa, 0x100000000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xe359, 0x0, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r4 = fsmount(r0, 0x0, 0x5) mount_setattr(r4, &(0x7f0000000000)='.\x00', 0x8800, &(0x7f0000000080)={0x5, 0x0, 0x0, {r4}}, 0x20) 1.015338881s ago: executing program 2 (id=2124): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000640)='kfree\x00', r1, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d103"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 974.648614ms ago: executing program 2 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r1}, 0x18) mount$nfs4(&(0x7f0000000580)='\x00', &(0x7f0000000100)='.\x00', &(0x7f00000003c0), 0x0, 0x0) setitimer(0x1, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0xa8, 0x400) read$usbmon(r5, &(0x7f00000000c0)=""/57, 0x39) 785.183011ms ago: executing program 5 (id=2126): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioperm(0x5, 0xa, 0x100000000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xe359, 0x0, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) r5 = fsmount(r0, 0x0, 0x5) mount_setattr(r5, &(0x7f0000000000)='.\x00', 0x8800, &(0x7f0000000080)={0x5, 0x0, 0x0, {r5}}, 0x20) 576.801489ms ago: executing program 0 (id=2132): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) fstat(r0, &(0x7f00000000c0)) 507.655595ms ago: executing program 0 (id=2133): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x4080172, 0xffffffffffffffff, 0x6acc3000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)={[{@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0x2e7}}, {@shortname_lower}, {@uni_xlate}, {@fat=@check_strict}]}, 0x11, 0x31c, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143642, 0x1b2) writev(r2, &(0x7f0000001240)=[{&(0x7f0000001740)="9b", 0x1}], 0x1) 494.709547ms ago: executing program 4 (id=2134): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) io_setup(0x973, &(0x7f0000000380)) eventfd2(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000180)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc615, 0x101, 0x0) 486.091317ms ago: executing program 0 (id=2135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rpc_buf_alloc\x00', r0, 0x0, 0x5}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r9, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0xfffffff2, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) 337.475071ms ago: executing program 4 (id=2136): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x24040000) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7d5}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4810}, 0x40091) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) 198.206383ms ago: executing program 4 (id=2137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 178.429054ms ago: executing program 4 (id=2138): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 169.277405ms ago: executing program 0 (id=2139): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioperm(0x5, 0xa, 0x100000000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=""/111, 0x6f) 164.944056ms ago: executing program 6 (id=2140): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioperm(0x5, 0xa, 0x100000000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xe359, 0x0, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_read_part_table(0x5d1, &(0x7f0000000880)="$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") 128.704679ms ago: executing program 4 (id=2141): syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) write(r0, 0x0, 0x0) 116.60183ms ago: executing program 0 (id=2142): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) 103.512561ms ago: executing program 2 (id=2143): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x7, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="f3171a75e016d18a79c0"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$eJzs3U9oHOfZAPBnFMmWFfAX8n3kM8ZxxnZKbeoqu1KiVOSQbFYjeRJpV+yuik0pSYhtMJaTEBPS+NDEl6QtLaWnHtNcQy6FHgo9lPbQFgqF5tBLD4VATiWFFkpLCajM7K71x1pJTmQrTX8/Yb2z7z7zzjOzo3l21ruzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEUp+pVKrJwYhYOpsOVp9pNRe2uL8/3s/XNVssNyIp/sXoaBzqdh36v9W77yt+HY8j3VtHYrRoRuPa3ffd89j/Dg/1598ioU/q2A7jkog3iqQuPzcUcTsSuYO+87NbnuWfK8XvuayRt5v5Qm0uS/N2M52emqo8dGa2nc7m81n7XLuTLaT1VlbrNFvpyfqptDo9PZlm4+eaS425mdp81u989MsTlcpU+tT4YlZrtZuNh54ab9fP5PPzeWOujJmovBpFzKPFjvh03kk7WW0hTS9eWr4wuV2qRVB1Xc/+dY/XkQfv+fCVD/526UKxQw4aJOntmBPV6sREdeqR6UcerVSGJyoT6zsqG8SNiBiKKCJuy07LZ92B1YPE7h284VMa6tb/iPnIoxFLcTbSSGOo/L36MxKjMROtaMZCcfsPIxvuv6n+f+Ghv/xuq+WW9futoqiP3qjyh1bvPhxl/T/avXV0QP0vDsob89jZz4FbnePKbyPe62aztv9qvBbX4nI8F8uxHBfi5U+Yzx37Gdph3Gj/kdg6bi6yaEQe7WhGHgtRK3vSXk8a0zEVU1GJZ+JMzEY70piNPOYji3aci3Z0Iiv3qHq0IotadKIZrUjjZNTjVKRRjemYjslII4vxOBfNWIpGzMVM1MpRLsalcrtPbsjrvm8+m7zx+w/fLqZvBFW3WJGkeDJXBP11Xff6/aRXzB+IHdX/A70tuD4iiXR4j2sRu6r/p7LT+F04asPuWCnr//BepwEAAADcRkn56nsSESNxfzk1m89nX9vrtAAAAIBdVL6v+UjRjBRT90dSnP9XNol8/47nBgAAAOyOpPyMXRIRY/FAd6r/canNXgQAAAAA/gOV//9/tGjGIl4vO5z/AwAAwOfMtwZdY/+Dfb1r7LcX9yd39aIXzz6YXKkVU7Urvb5e89UbI3ZmDycHe4OUzdTwtbuTiBiuZ0eS/tUvP97fbT8qRzi8egHCQdf6T1qtkeT64ARi6wTKW/HdONaNOXa+257v39NdythsPp+N15vzj1WT3osjnVdeuPSNiGLp324sHEzi4qXlC+PPv7h8vszlejHK9Su9y8Mnt5DLSm8LxP2br/FI+UGM3nLHusutrF3/oe7sQ1svM1m7zDfjeDfm+Fi3HVu//qPFMqvjj1WjVjs41MnOdl5ZWbP2vSyqn3LN34wT3ZgTJ090m02ymFiXxQs3ZzGxNoudbYstsyj0s3j72Otn//6rZpJNbpfF5KfMAmCvXCyv+rNahQ6UVehfK11F/d9Qd/tXNd/0KPfFn/SOoRuOchdXn2X0519T64Zjd6r7m3GyDPnFye7zieHD6+rKE2VdqWxyRH/p0ku/7h3RH373hz/6+tHf/Hi1um04Rj/RfVYwOIt341Q3stfEvb+8qboVQ1TLLfu9DVX1nWKOdwZW1fb8RDISESv/c+Pu8nGKiInJqcrDlcojEzFSPlXoNYMz3b/zvQSAz5ttv2NnB9/C8/DmZ9XRr3j33nhLwXg8Hy/GcpyP0+WnDSLigc1HHVvzNoTT25y1jq35hpfT25xbrsZObIzdfyKJAbGTa7bY//+gbP5x+x4TALjdjm9Th3dS/0/3zrtj8/PuDbX8VPeLc/tnxzG4lm/mK7d7gwDAf4Gs9VEy1nkrabXyxWeq09PVWudMlraa9afTVj4zl6V5o5O16mdqjbksXWw1O816/wXxmaydtpcWF5sfd9LZZitdbLbzs+U3v6e9r35vZwu1xqtRby/OZ7V2ltabjU6t3kln8nY9XVx6cj5vn8la5cztxayez+b1WidvNtJ2c6lVz8bTtJ1lawLzmazRyWfzYrKRLrbyhVrrekTMLy1k6UzWrrfyxU6zO2B/WXljttlaqA1Y/T/fwU0NAJ8ZV1+7dvm55eULL6+fWEk29mw+8ccdxFyNWNnr1QQA1lhbpQEAAAAAAAAAAAAAgM+mmz+uV/Ru+5G+tRMjcQvBGyb2xyeZ6/M78aX3ug/Lbgy4yTj7tpzrrtWeA+se0329nWXvt88tTzz7+OOXB8U8+fqhM3/KIrYfZ/O/lKt337T3xlsHI/b99Pvdnifu1Jq+H921iOFbmn0l2SJmzw5JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDQvwMAAP//wexOyQ==") 297.56µs ago: executing program 4 (id=2144): mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x8800, 0x0, 0x0) 0s ago: executing program 0 (id=2145): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x4080172, 0xffffffffffffffff, 0x6acc3000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)={[{@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0x2e7}}, {@shortname_lower}, {@uni_xlate}, {@fat=@check_strict}]}, 0x11, 0x31c, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143642, 0x1b2) writev(r2, &(0x7f0000001240)=[{&(0x7f0000001740)="9b", 0x1}], 0x1) kernel console output (not intermixed with test programs): rw=2049, sector=177, nr_sectors = 8 limit=128 [ 158.681537][ T9434] syz.4.1438: attempt to access beyond end of device [ 158.681537][ T9434] loop4: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 158.695237][ T9434] syz.4.1438: attempt to access beyond end of device [ 158.695237][ T9434] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 158.708843][ T9434] syz.4.1438: attempt to access beyond end of device [ 158.708843][ T9434] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 158.722387][ T9434] syz.4.1438: attempt to access beyond end of device [ 158.722387][ T9434] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 158.735880][ T9434] syz.4.1438: attempt to access beyond end of device [ 158.735880][ T9434] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 158.759052][ T9434] syz.4.1438: attempt to access beyond end of device [ 158.759052][ T9434] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 158.772999][ T9434] syz.4.1438: attempt to access beyond end of device [ 158.772999][ T9434] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 158.786824][ T9434] syz.4.1438: attempt to access beyond end of device [ 158.786824][ T9434] loop4: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 158.806220][ T9434] syz.4.1438: attempt to access beyond end of device [ 158.806220][ T9434] loop4: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 158.825339][ T9437] vhci_hcd vhci_hcd.2: invalid port number 96 [ 158.831482][ T9437] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 158.965480][ T9449] vcan0 speed is unknown, defaulting to 1000 [ 159.025273][ T9455] netlink: 'syz.5.1447': attribute type 10 has an invalid length. [ 159.043158][ T9455] bond0: (slave dummy0): Releasing backup interface [ 159.067560][ T9455] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 159.076864][ T9455] team0: Failed to send options change via netlink (err -105) [ 159.084429][ T9455] team0: Port device dummy0 added [ 159.102590][ T9455] netlink: 'syz.5.1447': attribute type 10 has an invalid length. [ 159.128833][ T9455] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 159.180531][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1447'. [ 159.199492][ T9455] team0: Failed to send options change via netlink (err -105) [ 159.207225][ T9455] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 159.226913][ T9455] team0: Port device dummy0 removed [ 159.237789][ T9455] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 159.277507][ T9475] netlink: 'syz.0.1450': attribute type 1 has an invalid length. [ 159.287187][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1451'. [ 159.330280][ T9475] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.361724][ T9475] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.379844][ T9455] EXT4-fs: Ignoring removed orlov option [ 159.469047][ T9475] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 159.484793][ T9475] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 159.543672][ T9499] vhci_hcd vhci_hcd.2: invalid port number 96 [ 159.549925][ T9499] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 159.674285][ T9504] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1455: bad orphan inode 134217728 [ 159.761530][ T9506] set_capacity_and_notify: 11 callbacks suppressed [ 159.761545][ T9506] loop5: detected capacity change from 0 to 1024 [ 159.785095][ T9506] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1456: bad orphan inode 134217728 [ 160.204134][ T9549] loop0: detected capacity change from 0 to 512 [ 160.340206][ T9563] loop4: detected capacity change from 0 to 128 [ 160.393556][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 160.491736][ T9577] vhci_hcd vhci_hcd.2: invalid port number 96 [ 160.497982][ T9577] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 160.540725][ T4429] EXT4-fs unmount: 71 callbacks suppressed [ 160.540756][ T4429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.631125][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1466'. [ 160.960864][ T9611] loop6: detected capacity change from 0 to 128 [ 161.180933][ T9624] loop4: detected capacity change from 0 to 1024 [ 161.190589][ T9624] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.204194][ T9624] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #11: comm syz.4.1470: iget: bogus i_mode (1) [ 161.216452][ T9624] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1470: couldn't read orphan inode 11 (err -117) [ 161.243202][ T9624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.294286][ T9624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.337784][ T29] kauditd_printk_skb: 1085 callbacks suppressed [ 161.337800][ T29] audit: type=1326 audit(1767600114.854:22245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 161.380881][ T29] audit: type=1326 audit(1767600114.864:22246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 161.400352][ T9631] vcan0 speed is unknown, defaulting to 1000 [ 161.403913][ T29] audit: type=1326 audit(1767600114.884:22247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 161.432148][ T29] audit: type=1326 audit(1767600114.884:22248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 161.454804][ T29] audit: type=1326 audit(1767600114.884:22249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 161.477446][ T29] audit: type=1326 audit(1767600114.884:22250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 161.500312][ T29] audit: type=1326 audit(1767600114.884:22251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 161.523022][ T29] audit: type=1326 audit(1767600114.884:22252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 161.545749][ T29] audit: type=1326 audit(1767600114.884:22253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 161.568371][ T29] audit: type=1326 audit(1767600114.884:22254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 161.632461][ T9634] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 161.683763][ T8939] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.754798][ T9642] loop5: detected capacity change from 0 to 512 [ 161.761788][ T9639] vhci_hcd vhci_hcd.2: invalid port number 96 [ 161.767993][ T9639] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 161.890498][ T9648] loop6: detected capacity change from 0 to 1024 [ 161.916669][ T9648] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1477: bad orphan inode 134217728 [ 161.932689][ T9654] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 161.945198][ T8984] Bluetooth: hci1: Frame reassembly failed (-84) [ 161.961876][ T9652] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 161.978098][ T3781] Bluetooth: hci2: Frame reassembly failed (-84) [ 161.991221][ T9648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.199081][ T9682] vhci_hcd vhci_hcd.2: invalid port number 96 [ 162.205319][ T9682] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 162.238697][ T9684] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 162.254726][ T9684] 8021q: adding VLAN 0 to HW filter on device bond7 [ 162.272270][ T9684] 8021q: adding VLAN 0 to HW filter on device bond7 [ 162.279632][ T9684] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address [ 162.292046][ T9684] bond7: (slave vxcan7): Error -95 calling set_mac_address [ 162.434457][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.085670][ T9690] loop0: detected capacity change from 0 to 32768 [ 163.134643][ T6169] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 163.140005][ T6169] loop0: p1 start 460800 is beyond EOD, truncated [ 163.146588][ T6169] loop0: p2 size 83886080 extends beyond EOD, truncated [ 163.156388][ T6169] loop0: p5 start 460800 is beyond EOD, truncated [ 163.163078][ T6169] loop0: p6 size 83886080 extends beyond EOD, truncated [ 163.173841][ T9690] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 163.179265][ T9690] loop0: p1 start 460800 is beyond EOD, truncated [ 163.185760][ T9690] loop0: p2 size 83886080 extends beyond EOD, truncated [ 163.195061][ T9690] loop0: p5 start 460800 is beyond EOD, truncated [ 163.201598][ T9690] loop0: p6 size 83886080 extends beyond EOD, truncated [ 163.329725][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 163.337667][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 163.353281][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 163.353746][ T4012] udevd[4012]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 163.384826][ T9701] loop6: detected capacity change from 0 to 128 [ 163.416133][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 163.427548][ T4012] udevd[4012]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 163.428072][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 163.448866][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 163.449041][ T9705] netlink: 'syz.0.1487': attribute type 10 has an invalid length. [ 163.499035][ T9705] bond0: (slave dummy0): Releasing backup interface [ 163.523819][ T9705] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 163.524710][ T9712] netlink: 'syz.0.1487': attribute type 10 has an invalid length. [ 163.545273][ T9705] team0: Failed to send options change via netlink (err -105) [ 163.552789][ T9705] team0: Port device dummy0 added [ 163.559845][ T9712] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 163.583641][ T9712] team0: Failed to send options change via netlink (err -105) [ 163.598675][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 163.607834][ T9712] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 163.618848][ T9712] team0: Port device dummy0 removed [ 163.628326][ T9712] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 163.675603][ T9701] bio_check_eod: 314 callbacks suppressed [ 163.675619][ T9701] syz.6.1486: attempt to access beyond end of device [ 163.675619][ T9701] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 163.694983][ T9701] syz.6.1486: attempt to access beyond end of device [ 163.694983][ T9701] loop6: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 163.710028][ T9701] syz.6.1486: attempt to access beyond end of device [ 163.710028][ T9701] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 163.724217][ T3553] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.726386][ T9665] Bluetooth: hci0: command 0x1003 tx timeout [ 163.755462][ T9705] loop0: detected capacity change from 0 to 1024 [ 163.761977][ T9701] syz.6.1486: attempt to access beyond end of device [ 163.761977][ T9701] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 163.789021][ T9705] EXT4-fs: Ignoring removed orlov option [ 163.795689][ T9701] syz.6.1486: attempt to access beyond end of device [ 163.795689][ T9701] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 163.813557][ T9705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.828942][ T9730] bond3: option resend_igmp: invalid value (1024) [ 163.832258][ T9701] syz.6.1486: attempt to access beyond end of device [ 163.832258][ T9701] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 163.835453][ T9730] bond3: option resend_igmp: allowed values 0 - 255 [ 163.858320][ T9701] syz.6.1486: attempt to access beyond end of device [ 163.858320][ T9701] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 163.863316][ T9730] bond3 (unregistering): Released all slaves [ 163.871807][ T9701] syz.6.1486: attempt to access beyond end of device [ 163.871807][ T9701] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 163.893442][ T9701] syz.6.1486: attempt to access beyond end of device [ 163.893442][ T9701] loop6: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 163.907799][ T9701] syz.6.1486: attempt to access beyond end of device [ 163.907799][ T9701] loop6: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 163.931864][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.964091][ T6384] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 163.983527][ T9737] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1489: bad orphan inode 134217728 [ 164.004998][ T9737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.019549][ T9734] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1488: bad orphan inode 134217728 [ 164.034181][ T3553] Bluetooth: hci2: command 0x1003 tx timeout [ 164.044329][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 164.068409][ T9734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.091959][ T9741] vhci_hcd vhci_hcd.2: invalid port number 96 [ 164.098187][ T9741] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 164.136001][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.351810][ T9761] siw: device registration error -23 [ 164.360273][ T9762] netlink: 'syz.2.1500': attribute type 10 has an invalid length. [ 164.377366][ T9762] bond0: (slave dummy0): Releasing backup interface [ 164.387031][ T9762] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.396138][ T9762] team0: Failed to send options change via netlink (err -105) [ 164.403651][ T9762] team0: Port device dummy0 added [ 164.413220][ T9762] netlink: 'syz.2.1500': attribute type 10 has an invalid length. [ 164.421753][ T9762] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.440860][ T9762] team0: Failed to send options change via netlink (err -105) [ 164.458366][ T9762] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.481766][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1500'. [ 164.482817][ T9762] team0: Port device dummy0 removed [ 164.533434][ T9762] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 164.563474][ T9766] EXT4-fs: Ignoring removed orlov option [ 164.621162][ T9766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.671383][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.781112][ T9791] bond3: option resend_igmp: invalid value (1024) [ 164.787707][ T9791] bond3: option resend_igmp: allowed values 0 - 255 [ 164.795828][ T9791] bond3 (unregistering): Released all slaves [ 164.825090][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.848132][ T9791] set_capacity_and_notify: 7 callbacks suppressed [ 164.848147][ T9791] loop2: detected capacity change from 0 to 1024 [ 164.866064][ T9791] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1504: bad orphan inode 134217728 [ 164.881969][ T9791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.926379][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.029959][ T9802] vcan0 speed is unknown, defaulting to 1000 [ 165.187392][ T9804] vcan0 speed is unknown, defaulting to 1000 [ 165.313088][ T9817] loop6: detected capacity change from 0 to 1024 [ 165.330864][ T9817] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1513: bad orphan inode 134217728 [ 165.342958][ T9817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.440206][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.470846][ T9829] bond2: option resend_igmp: invalid value (1024) [ 165.477479][ T9829] bond2: option resend_igmp: allowed values 0 - 255 [ 165.488170][ T9832] loop4: detected capacity change from 0 to 764 [ 165.498708][ T9829] bond2 (unregistering): Released all slaves [ 165.526031][ T9833] loop6: detected capacity change from 0 to 1024 [ 165.547649][ T9833] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1517: bad orphan inode 134217728 [ 165.562972][ T9833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.577013][ T9835] siw: device registration error -23 [ 165.628506][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.844648][ T9862] vhci_hcd vhci_hcd.2: invalid port number 96 [ 165.850867][ T9862] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 165.975255][ T9881] bond3: option resend_igmp: invalid value (1024) [ 165.981749][ T9881] bond3: option resend_igmp: allowed values 0 - 255 [ 165.992299][ T9881] bond3 (unregistering): Released all slaves [ 166.006732][ T9880] loop0: detected capacity change from 0 to 512 [ 166.045663][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1529'. [ 166.083463][ T9889] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 166.100533][ T9891] bond8: option resend_igmp: invalid value (1024) [ 166.107207][ T9891] bond8: option resend_igmp: allowed values 0 - 255 [ 166.119644][ T9889] loop6: detected capacity change from 0 to 512 [ 166.126965][ T9891] bond8 (unregistering): Released all slaves [ 166.150095][ T9894] loop0: detected capacity change from 0 to 1024 [ 166.158543][ T9889] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 166.168269][ T9894] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1530: bad orphan inode 134217728 [ 166.182627][ T9894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.187896][ T9889] EXT4-fs (loop6): orphan cleanup on readonly fs [ 166.203287][ T9889] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1531: error while reading EA inode 32 err=-116 [ 166.221915][ T9889] EXT4-fs (loop6): Remounting filesystem read-only [ 166.228700][ T9889] EXT4-fs (loop6): 1 orphan inode deleted [ 166.235255][ T9889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 166.252412][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1531'. [ 166.265179][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.280568][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.353619][ T9904] vhci_hcd vhci_hcd.2: invalid port number 96 [ 166.359900][ T9904] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 166.370443][ T9901] vhci_hcd vhci_hcd.2: invalid port number 96 [ 166.376888][ T9901] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 166.385624][ T9906] loop6: detected capacity change from 0 to 1024 [ 166.397468][ T9906] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 166.413833][ T9906] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #11: comm syz.6.1536: iget: bogus i_mode (1) [ 166.426821][ T9906] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1536: couldn't read orphan inode 11 (err -117) [ 166.439525][ T9906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.459813][ T9906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.499345][ T29] kauditd_printk_skb: 1227 callbacks suppressed [ 166.499380][ T29] audit: type=1400 audit(1767600120.014:23482): avc: denied { create } for pid=9910 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.578692][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1541'. [ 166.603045][ T29] audit: type=1400 audit(1767600120.014:23483): avc: denied { write } for pid=9910 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.623766][ T29] audit: type=1400 audit(1767600120.014:23484): avc: denied { read } for pid=9910 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.644345][ T29] audit: type=1400 audit(1767600120.014:23485): avc: denied { prog_load } for pid=9910 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.663642][ T29] audit: type=1400 audit(1767600120.014:23486): avc: denied { bpf } for pid=9910 comm="syz.0.1538" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.684407][ T29] audit: type=1400 audit(1767600120.014:23487): avc: denied { perfmon } for pid=9910 comm="syz.0.1538" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.705432][ T29] audit: type=1400 audit(1767600120.024:23488): avc: denied { open } for pid=9910 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 166.724836][ T29] audit: type=1400 audit(1767600120.024:23489): avc: denied { kernel } for pid=9910 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 166.744483][ T29] audit: type=1400 audit(1767600120.024:23490): avc: denied { prog_run } for pid=9912 comm="syz.4.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.763645][ T29] audit: type=1400 audit(1767600120.044:23491): avc: denied { cpu } for pid=9910 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 166.822112][ T9924] vhci_hcd vhci_hcd.2: invalid port number 96 [ 166.828376][ T9924] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 166.877359][ T9928] loop2: detected capacity change from 0 to 1024 [ 166.895815][ T9928] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1545: bad orphan inode 134217728 [ 166.913546][ T9928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.933322][ T9926] bond2: option resend_igmp: invalid value (1024) [ 166.940044][ T9926] bond2: option resend_igmp: allowed values 0 - 255 [ 166.952263][ T9926] bond2 (unregistering): Released all slaves [ 166.966336][ T9933] loop6: detected capacity change from 0 to 1024 [ 166.977337][ T9933] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1544: bad orphan inode 134217728 [ 167.001551][ T9933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.021876][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.052877][ T9938] netlink: 'syz.2.1547': attribute type 10 has an invalid length. [ 167.062635][ T9938] bond0: (slave dummy0): Releasing backup interface [ 167.073373][ T9938] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 167.083857][ T9938] team0: Failed to send options change via netlink (err -105) [ 167.091445][ T9938] team0: Port device dummy0 added [ 167.100773][ T9938] netlink: 'syz.2.1547': attribute type 10 has an invalid length. [ 167.112133][ T9938] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 167.132624][ T9938] team0: Failed to send options change via netlink (err -105) [ 167.141752][ T9938] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 167.142957][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.151342][ T9938] team0: Port device dummy0 removed [ 167.166990][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 167.197108][ T9938] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 167.260839][ T9938] EXT4-fs: Ignoring removed orlov option [ 167.277925][ T9938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.341232][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.453010][ T9960] vhci_hcd vhci_hcd.2: invalid port number 96 [ 167.459378][ T9960] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 167.506149][ T9964] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1557: bad orphan inode 134217728 [ 167.524019][ T9964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.546035][ T9967] bond3: option resend_igmp: invalid value (1024) [ 167.552609][ T9967] bond3: option resend_igmp: allowed values 0 - 255 [ 167.567105][ T9967] bond3 (unregistering): Released all slaves [ 167.598541][ T9969] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1558: bad orphan inode 134217728 [ 167.601882][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.617351][ T9969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.692808][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.762473][ T9978] vhci_hcd vhci_hcd.2: invalid port number 96 [ 167.768805][ T9978] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 167.806373][ T9981] siw: device registration error -23 [ 168.153526][T10003] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.166677][T10003] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.1573: iget: bogus i_mode (1) [ 168.179099][T10003] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1573: couldn't read orphan inode 11 (err -117) [ 168.192197][T10003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.213051][T10003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.291931][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1576'. [ 168.382931][T10019] netlink: 'syz.2.1579': attribute type 10 has an invalid length. [ 168.393752][T10019] bond0: (slave dummy0): Releasing backup interface [ 168.403457][T10019] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.412635][T10019] team0: Failed to send options change via netlink (err -105) [ 168.420242][T10019] team0: Port device dummy0 added [ 168.432028][T10019] netlink: 'syz.2.1579': attribute type 10 has an invalid length. [ 168.440771][T10019] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.453605][T10019] team0: Failed to send options change via netlink (err -105) [ 168.461345][T10019] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.474512][T10019] team0: Port device dummy0 removed [ 168.481808][T10019] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 168.485370][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1579'. [ 168.548447][T10019] EXT4-fs: Ignoring removed orlov option [ 168.563044][T10022] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.590901][T10019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.604338][T10022] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #11: comm syz.4.1580: iget: bogus i_mode (1) [ 168.614209][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 168.615794][ T3553] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 168.628222][T10022] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1580: couldn't read orphan inode 11 (err -117) [ 168.640814][T10022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.665853][T10022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.680183][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.823730][T10034] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1584: bad orphan inode 134217728 [ 168.835308][T10034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.875879][T10038] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.890238][T10038] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #11: comm syz.6.1585: iget: bogus i_mode (1) [ 168.902114][T10038] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1585: couldn't read orphan inode 11 (err -117) [ 168.915802][T10038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.950854][T10038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.961165][T10041] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 169.010115][T10041] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 169.034323][T10041] EXT4-fs (loop4): orphan cleanup on readonly fs [ 169.051206][T10041] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1586: error while reading EA inode 32 err=-116 [ 169.066450][T10041] EXT4-fs (loop4): Remounting filesystem read-only [ 169.081325][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1588'. [ 169.081326][T10041] EXT4-fs (loop4): 1 orphan inode deleted [ 169.098696][T10041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 169.113054][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1586'. [ 169.139763][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.194376][T10051] vcan0 speed is unknown, defaulting to 1000 [ 169.234580][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1590'. [ 169.420770][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 169.635730][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.743482][T10077] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1600: bad orphan inode 134217728 [ 169.762918][T10077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.818721][T10081] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 169.840856][T10072] bio_check_eod: 206 callbacks suppressed [ 169.840874][T10072] syz.5.1597: attempt to access beyond end of device [ 169.840874][T10072] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 169.860439][T10081] set_capacity_and_notify: 22 callbacks suppressed [ 169.860454][T10081] loop0: detected capacity change from 0 to 512 [ 169.861426][T10072] syz.5.1597: attempt to access beyond end of device [ 169.861426][T10072] loop5: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 169.887954][T10072] syz.5.1597: attempt to access beyond end of device [ 169.887954][T10072] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 169.901898][T10081] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 169.910236][T10081] EXT4-fs (loop0): orphan cleanup on readonly fs [ 169.917333][T10081] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1601: error while reading EA inode 32 err=-116 [ 169.929997][T10072] syz.5.1597: attempt to access beyond end of device [ 169.929997][T10072] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 169.944104][T10081] EXT4-fs (loop0): Remounting filesystem read-only [ 169.950786][T10081] EXT4-fs (loop0): 1 orphan inode deleted [ 169.957306][T10072] syz.5.1597: attempt to access beyond end of device [ 169.957306][T10072] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 169.971484][T10081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 169.986272][T10072] syz.5.1597: attempt to access beyond end of device [ 169.986272][T10072] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 170.006749][T10072] syz.5.1597: attempt to access beyond end of device [ 170.006749][T10072] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 170.023029][T10072] syz.5.1597: attempt to access beyond end of device [ 170.023029][T10072] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 170.036632][T10072] syz.5.1597: attempt to access beyond end of device [ 170.036632][T10072] loop5: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 170.043077][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.050376][T10072] syz.5.1597: attempt to access beyond end of device [ 170.050376][T10072] loop5: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 170.147473][T10086] vcan0 speed is unknown, defaulting to 1000 [ 170.167437][T10090] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 170.186929][ T3781] Bluetooth: hci0: Frame reassembly failed (-84) [ 170.335201][T10100] loop4: detected capacity change from 0 to 512 [ 170.380222][T10103] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 170.391623][T10103] loop4: detected capacity change from 0 to 512 [ 170.400041][T10103] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 170.408387][T10103] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.415470][T10103] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1609: error while reading EA inode 32 err=-116 [ 170.419403][T10101] vcan0 speed is unknown, defaulting to 1000 [ 170.429276][T10103] EXT4-fs (loop4): Remounting filesystem read-only [ 170.443685][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.455870][T10103] EXT4-fs (loop4): 1 orphan inode deleted [ 170.464862][T10103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 170.560512][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.598593][T10108] netlink: 'syz.2.1610': attribute type 1 has an invalid length. [ 170.630847][T10115] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 170.642949][T10115] loop4: detected capacity change from 0 to 512 [ 170.655567][T10108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.664366][T10115] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 170.674398][T10115] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.681474][T10115] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1613: error while reading EA inode 32 err=-116 [ 170.694035][T10115] EXT4-fs (loop4): Remounting filesystem read-only [ 170.700913][T10115] EXT4-fs (loop4): 1 orphan inode deleted [ 170.707321][T10115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 170.746576][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.751724][T10116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.769737][T10116] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 170.782411][T10116] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 170.836233][T10125] netlink: 'syz.5.1616': attribute type 10 has an invalid length. [ 170.844386][T10122] loop4: detected capacity change from 0 to 764 [ 170.859072][T10125] bond0: (slave dummy0): Releasing backup interface [ 170.886189][T10125] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 170.895868][T10125] team0: Failed to send options change via netlink (err -105) [ 170.903407][T10125] team0: Port device dummy0 added [ 170.914614][T10125] netlink: 'syz.5.1616': attribute type 10 has an invalid length. [ 170.923072][T10125] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 170.939802][T10125] team0: Failed to send options change via netlink (err -105) [ 170.947832][T10125] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 170.957701][T10125] team0: Port device dummy0 removed [ 170.963670][T10127] siw: device registration error -23 [ 170.968043][T10125] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 171.031445][T10125] loop5: detected capacity change from 0 to 1024 [ 171.038899][T10125] EXT4-fs: Ignoring removed orlov option [ 171.051673][T10125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.084658][ T4429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.117097][T10131] vhci_hcd vhci_hcd.2: invalid port number 96 [ 171.123380][T10131] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 171.174174][T10135] loop5: detected capacity change from 0 to 512 [ 171.227181][T10137] loop5: detected capacity change from 0 to 764 [ 171.279170][T10141] bond2: option resend_igmp: invalid value (1024) [ 171.285862][T10141] bond2: option resend_igmp: allowed values 0 - 255 [ 171.293638][T10141] bond2 (unregistering): Released all slaves [ 171.330185][T10143] loop5: detected capacity change from 0 to 1024 [ 171.340682][T10143] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1622: bad orphan inode 134217728 [ 171.352523][T10143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.435540][ T4429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.459811][T10148] loop2: detected capacity change from 0 to 128 [ 171.489967][T10151] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 171.507996][T10151] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 171.524475][T10151] EXT4-fs (loop5): orphan cleanup on readonly fs [ 171.531043][T10151] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1625: error while reading EA inode 32 err=-116 [ 171.544078][T10151] EXT4-fs (loop5): Remounting filesystem read-only [ 171.550692][T10151] EXT4-fs (loop5): 1 orphan inode deleted [ 171.557139][T10151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 171.571011][T10151] __nla_validate_parse: 5 callbacks suppressed [ 171.571026][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1625'. [ 171.601218][ T4429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.621006][ T29] kauditd_printk_skb: 1465 callbacks suppressed [ 171.621021][ T29] audit: type=1326 audit(1767600125.134:24957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 171.651289][ T29] audit: type=1326 audit(1767600125.134:24958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 171.676318][ T29] audit: type=1326 audit(1767600125.134:24959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 171.699973][ T29] audit: type=1326 audit(1767600125.134:24960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 171.723623][ T29] audit: type=1326 audit(1767600125.134:24961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 171.747226][ T29] audit: type=1326 audit(1767600125.134:24962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 171.770820][ T29] audit: type=1326 audit(1767600125.134:24963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 171.794560][ T29] audit: type=1326 audit(1767600125.134:24964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 171.818097][ T29] audit: type=1326 audit(1767600125.134:24965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 171.841757][ T29] audit: type=1326 audit(1767600125.134:24966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.5.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 171.921904][T10158] netlink: 'syz.0.1628': attribute type 10 has an invalid length. [ 171.933767][T10158] bond0: (slave dummy0): Releasing backup interface [ 171.943128][T10158] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 171.952275][T10158] team0: Failed to send options change via netlink (err -105) [ 171.959859][T10158] team0: Port device dummy0 added [ 171.970019][T10158] netlink: 'syz.0.1628': attribute type 10 has an invalid length. [ 171.978496][T10158] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 171.989008][T10158] team0: Failed to send options change via netlink (err -105) [ 171.997730][T10158] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 172.008969][T10158] team0: Port device dummy0 removed [ 172.016813][T10158] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 172.029741][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 172.070729][T10158] EXT4-fs: Ignoring removed orlov option [ 172.082684][T10158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.114016][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.145366][T10162] ªªªªªª: renamed from vlan0 [ 172.186234][T10164] vhci_hcd vhci_hcd.2: invalid port number 96 [ 172.192479][T10164] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 172.200699][ T6384] Bluetooth: hci0: command 0x1003 tx timeout [ 172.206878][ T3553] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 172.270784][T10169] vhci_hcd vhci_hcd.2: invalid port number 96 [ 172.276972][T10169] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 172.308733][T10170] bond8: option resend_igmp: invalid value (1024) [ 172.315374][T10170] bond8: option resend_igmp: allowed values 0 - 255 [ 172.328718][T10170] bond8 (unregistering): Released all slaves [ 172.336131][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1635'. [ 172.373826][T10178] FAULT_INJECTION: forcing a failure. [ 172.373826][T10178] name failslab, interval 1, probability 0, space 0, times 0 [ 172.386748][T10178] CPU: 1 UID: 0 PID: 10178 Comm: syz.6.1636 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.386784][T10178] Tainted: [W]=WARN [ 172.386791][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.386803][T10178] Call Trace: [ 172.386831][T10178] [ 172.386838][T10178] __dump_stack+0x1d/0x30 [ 172.386869][T10178] dump_stack_lvl+0x95/0xd0 [ 172.386906][T10178] dump_stack+0x15/0x1b [ 172.386988][T10178] should_fail_ex+0x265/0x280 [ 172.387012][T10178] should_failslab+0x8c/0xb0 [ 172.387040][T10178] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 172.387068][T10178] ? __alloc_skb+0x2ff/0x4b0 [ 172.387156][T10178] __alloc_skb+0x2ff/0x4b0 [ 172.387182][T10178] ? __alloc_skb+0x228/0x4b0 [ 172.387232][T10178] netlink_alloc_large_skb+0xbf/0xf0 [ 172.387264][T10178] netlink_sendmsg+0x3cf/0x6b0 [ 172.387359][T10178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.387435][T10178] __sock_sendmsg+0x145/0x180 [ 172.387454][T10178] ____sys_sendmsg+0x31e/0x4a0 [ 172.387494][T10178] ___sys_sendmsg+0x17b/0x1d0 [ 172.387580][T10178] __x64_sys_sendmsg+0xd4/0x160 [ 172.387617][T10178] x64_sys_call+0x17ba/0x3000 [ 172.387641][T10178] do_syscall_64+0xca/0x2b0 [ 172.387777][T10178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.387801][T10178] RIP: 0033:0x7f3b5739f749 [ 172.387827][T10178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.387850][T10178] RSP: 002b:00007f3b55dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.387868][T10178] RAX: ffffffffffffffda RBX: 00007f3b575f5fa0 RCX: 00007f3b5739f749 [ 172.387880][T10178] RDX: 000000002000c800 RSI: 0000200000000380 RDI: 0000000000000006 [ 172.387961][T10178] RBP: 00007f3b55dff090 R08: 0000000000000000 R09: 0000000000000000 [ 172.387974][T10178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.387989][T10178] R13: 00007f3b575f6038 R14: 00007f3b575f5fa0 R15: 00007ffea261ea98 [ 172.388012][T10178] [ 172.480003][T10172] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1635'. [ 172.853463][T10197] openvswitch: netlink: Flow actions attr not present in new flow. [ 172.916229][T10201] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 172.929831][T10201] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 172.938244][T10201] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.944816][T10201] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1643: error while reading EA inode 32 err=-116 [ 172.958161][T10201] EXT4-fs (loop4): Remounting filesystem read-only [ 172.964770][T10201] EXT4-fs (loop4): 1 orphan inode deleted [ 172.971131][T10201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 172.984829][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1643'. [ 173.605517][T10249] netlink: 'syz.6.1650': attribute type 10 has an invalid length. [ 173.644371][T10249] bond0: (slave dummy0): Releasing backup interface [ 173.659127][T10249] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 173.670140][T10249] team0: Failed to send options change via netlink (err -105) [ 173.677816][T10249] team0: Port device dummy0 added [ 173.706317][T10249] netlink: 'syz.6.1650': attribute type 10 has an invalid length. [ 173.715046][ T6384] Bluetooth: hci1: command 0x1003 tx timeout [ 173.715630][T10249] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 173.721271][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 173.770970][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1650'. [ 173.776102][T10260] FAULT_INJECTION: forcing a failure. [ 173.776102][T10260] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 173.793051][T10260] CPU: 0 UID: 0 PID: 10260 Comm: syz.2.1655 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 173.793094][T10260] Tainted: [W]=WARN [ 173.793103][T10260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.793116][T10260] Call Trace: [ 173.793121][T10260] [ 173.793128][T10260] __dump_stack+0x1d/0x30 [ 173.793202][T10260] dump_stack_lvl+0x95/0xd0 [ 173.793281][T10260] dump_stack+0x15/0x1b [ 173.793307][T10260] should_fail_ex+0x265/0x280 [ 173.793337][T10260] should_fail+0xb/0x20 [ 173.793361][T10260] should_fail_usercopy+0x1a/0x20 [ 173.793389][T10260] _copy_to_user+0x20/0xa0 [ 173.793464][T10260] simple_read_from_buffer+0xb5/0x130 [ 173.793532][T10260] proc_fail_nth_read+0x10e/0x150 [ 173.793561][T10260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.793664][T10260] vfs_read+0x1a8/0x770 [ 173.793683][T10260] ? __rcu_read_unlock+0x4f/0x70 [ 173.793708][T10260] ? __fget_files+0x184/0x1c0 [ 173.793736][T10260] ? mutex_lock+0x58/0x90 [ 173.793822][T10260] ksys_read+0xda/0x1a0 [ 173.793846][T10260] __x64_sys_read+0x40/0x50 [ 173.793869][T10260] x64_sys_call+0x2889/0x3000 [ 173.793901][T10260] do_syscall_64+0xca/0x2b0 [ 173.793963][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.793985][T10260] RIP: 0033:0x7f6cd4a0e15c [ 173.793999][T10260] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 173.794021][T10260] RSP: 002b:00007f6cd346f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.794050][T10260] RAX: ffffffffffffffda RBX: 00007f6cd4c65fa0 RCX: 00007f6cd4a0e15c [ 173.794119][T10260] RDX: 000000000000000f RSI: 00007f6cd346f0a0 RDI: 0000000000000007 [ 173.794134][T10260] RBP: 00007f6cd346f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.794147][T10260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.794162][T10260] R13: 00007f6cd4c66038 R14: 00007f6cd4c65fa0 R15: 00007ffdacffa2a8 [ 173.794188][T10260] [ 173.813586][T10261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 173.944876][T10264] EXT4-fs: Ignoring removed orlov option [ 174.009450][T10265] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 174.024313][T10265] EXT4-fs (loop5): orphan cleanup on readonly fs [ 174.029538][T10249] team0: Failed to send options change via netlink (err -105) [ 174.033488][T10265] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1654: error while reading EA inode 32 err=-116 [ 174.040326][T10249] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 174.059651][T10249] team0: Port device dummy0 removed [ 174.066991][T10249] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 174.136738][T10275] openvswitch: netlink: Flow actions attr not present in new flow. [ 174.154265][T10265] EXT4-fs (loop5): Remounting filesystem read-only [ 174.160885][T10265] EXT4-fs (loop5): 1 orphan inode deleted [ 174.223009][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1654'. [ 174.305601][ T3834] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.313149][ T3834] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.320689][ T3834] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.332763][ T3834] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.340342][ T3834] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.347841][ T3834] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.355365][ T3834] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.362767][ T3834] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.370354][ T3834] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.377850][ T3834] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.395059][T10290] vcan0 speed is unknown, defaulting to 1000 [ 174.409909][ T3834] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 174.468524][T10288] syz.0.1661 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 174.535852][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 174.552072][ T6384] Bluetooth: hci0: sending frame failed (-49) [ 174.558443][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 174.634407][T10307] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 174.642641][T10307] System zones: 0-1, 3-36 [ 174.678494][T10300] fido_id[10300]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.878488][T10333] set_capacity_and_notify: 13 callbacks suppressed [ 174.878558][T10333] loop5: detected capacity change from 0 to 512 [ 175.130406][T10362] nfs4: Bad value for 'source' [ 175.164691][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1681'. [ 175.177260][T10366] vhci_hcd vhci_hcd.2: invalid port number 96 [ 175.183383][T10366] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 175.210965][T10370] loop6: detected capacity change from 0 to 512 [ 175.219785][T10367] vcan0 speed is unknown, defaulting to 1000 [ 175.231020][T10370] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 175.248395][T10373] netlink: 'syz.2.1683': attribute type 1 has an invalid length. [ 175.268151][T10370] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1682: inode has both inline data and extents flags [ 175.282773][T10370] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1682: couldn't read orphan inode 15 (err -117) [ 175.295987][T10373] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.335288][T10376] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.342608][T10376] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 175.354007][T10376] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 175.560893][T10402] loop6: detected capacity change from 0 to 512 [ 175.689213][T10414] loop6: detected capacity change from 0 to 128 [ 175.959459][T10433] ªªªªªª: renamed from vlan0 [ 176.009856][T10439] vhci_hcd vhci_hcd.2: invalid port number 96 [ 176.016135][T10439] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 176.017278][T10438] netlink: 'syz.4.1692': attribute type 10 has an invalid length. [ 176.055859][T10441] loop0: detected capacity change from 0 to 1024 [ 176.063032][T10438] bond0: (slave dummy0): Releasing backup interface [ 176.070676][T10442] netlink: 'syz.4.1692': attribute type 10 has an invalid length. [ 176.071267][T10441] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.091177][T10441] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #11: comm syz.0.1694: iget: bogus i_mode (1) [ 176.098382][T10438] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 176.111892][T10438] team0: Failed to send options change via netlink (err -105) [ 176.116792][T10441] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1694: couldn't read orphan inode 11 (err -117) [ 176.119431][T10438] team0: Port device dummy0 added [ 176.134525][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 176.152806][T10442] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 176.177846][T10442] team0: Failed to send options change via netlink (err -105) [ 176.181984][T10446] loop5: detected capacity change from 0 to 1024 [ 176.193464][T10442] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 176.202543][T10442] team0: Port device dummy0 removed [ 176.210497][T10442] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 176.219470][T10446] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1695: bad orphan inode 134217728 [ 176.273249][T10449] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.285941][T10449] loop0: detected capacity change from 0 to 512 [ 176.294876][T10449] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 176.303120][T10449] EXT4-fs (loop0): orphan cleanup on readonly fs [ 176.309853][T10449] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1697: error while reading EA inode 32 err=-116 [ 176.322558][T10449] EXT4-fs (loop0): Remounting filesystem read-only [ 176.323941][T10438] loop4: detected capacity change from 0 to 1024 [ 176.329252][T10449] EXT4-fs (loop0): 1 orphan inode deleted [ 176.352113][T10438] EXT4-fs: Ignoring removed orlov option [ 176.396949][T10453] loop5: detected capacity change from 0 to 1024 [ 176.421924][T10453] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1696: bad orphan inode 134217728 [ 176.451919][T10458] loop4: detected capacity change from 0 to 512 [ 176.459395][T10458] EXT4-fs: dax option not supported [ 176.621232][T10467] nfs4: Bad value for 'source' [ 176.626392][ T29] kauditd_printk_skb: 678 callbacks suppressed [ 176.626404][ T29] audit: type=1326 audit(1767600130.144:25645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10457 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 176.656837][ T29] audit: type=1326 audit(1767600130.174:25646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10457 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 176.680958][ T29] audit: type=1326 audit(1767600130.204:25647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 176.704633][ T29] audit: type=1326 audit(1767600130.204:25648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 176.728421][ T29] audit: type=1326 audit(1767600130.204:25649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 176.752121][ T29] audit: type=1326 audit(1767600130.204:25650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 176.775751][ T29] audit: type=1326 audit(1767600130.204:25651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 176.799487][ T29] audit: type=1326 audit(1767600130.204:25652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 176.823177][ T29] audit: type=1326 audit(1767600130.204:25653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10457 comm="syz.4.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 176.847034][ T29] audit: type=1326 audit(1767600130.204:25654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.5.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a08e0f749 code=0x7ffc0000 [ 176.930571][T10475] vhci_hcd vhci_hcd.2: invalid port number 96 [ 176.936941][T10475] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 176.981538][T10477] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1706: bad orphan inode 134217728 [ 177.090483][T10480] vcan0 speed is unknown, defaulting to 1000 [ 177.127916][T10481] __nla_validate_parse: 2 callbacks suppressed [ 177.127934][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 177.233138][T10484] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 177.248354][T10484] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 177.256963][T10484] EXT4-fs (loop2): orphan cleanup on readonly fs [ 177.263532][T10484] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1708: error while reading EA inode 32 err=-116 [ 177.283055][T10484] EXT4-fs (loop2): Remounting filesystem read-only [ 177.289988][T10484] EXT4-fs (loop2): 1 orphan inode deleted [ 177.313880][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1708'. [ 177.399587][T10494] vhci_hcd vhci_hcd.2: invalid port number 96 [ 177.405851][T10494] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 177.494481][T10499] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1714: bad orphan inode 134217728 [ 177.580298][T10492] bio_check_eod: 530 callbacks suppressed [ 177.580312][T10492] syz.4.1709: attempt to access beyond end of device [ 177.580312][T10492] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 177.614010][T10492] syz.4.1709: attempt to access beyond end of device [ 177.614010][T10492] loop4: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 177.627768][T10492] syz.4.1709: attempt to access beyond end of device [ 177.627768][T10492] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 177.641304][T10492] syz.4.1709: attempt to access beyond end of device [ 177.641304][T10492] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 177.655033][T10492] syz.4.1709: attempt to access beyond end of device [ 177.655033][T10492] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 177.678429][T10502] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1715: bad orphan inode 134217728 [ 177.709812][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1716'. [ 177.716207][T10492] syz.4.1709: attempt to access beyond end of device [ 177.716207][T10492] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 177.743700][T10492] syz.4.1709: attempt to access beyond end of device [ 177.743700][T10492] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 177.764209][T10492] syz.4.1709: attempt to access beyond end of device [ 177.764209][T10492] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 177.778122][T10492] syz.4.1709: attempt to access beyond end of device [ 177.778122][T10492] loop4: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 177.787829][T10505] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1716'. [ 177.792314][T10492] syz.4.1709: attempt to access beyond end of device [ 177.792314][T10492] loop4: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 177.860741][T10508] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1717: bad orphan inode 134217728 [ 177.892431][T10511] vcan0 speed is unknown, defaulting to 1000 [ 177.934301][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'. [ 178.074582][T10517] loop5: p1 p2 p3 p4 [ 178.080167][T10517] loop5: p2 start 117440512 is beyond EOD, truncated [ 178.087646][T10517] loop5: p4 size 589824 extends beyond EOD, truncated [ 178.100627][ T3005] loop5: p1 p2 p3 p4 [ 178.105323][ T3005] loop5: p2 start 117440512 is beyond EOD, truncated [ 178.113120][ T3005] loop5: p4 size 589824 extends beyond EOD, truncated [ 178.190877][T10527] nfs4: Bad value for 'source' [ 178.229542][T10525] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.263226][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1725'. [ 178.272673][T10525] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #11: comm syz.0.1723: iget: bogus i_mode (1) [ 178.309454][T10530] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1725'. [ 178.341121][T10525] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1723: couldn't read orphan inode 11 (err -117) [ 178.356117][T10532] blkio.reset_stats is deprecated [ 178.371622][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1727'. [ 178.412591][T10537] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1726'. [ 178.442074][T10539] vhci_hcd vhci_hcd.2: invalid port number 96 [ 178.448332][T10539] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 178.796033][T10589] vhci_hcd vhci_hcd.2: invalid port number 96 [ 178.802186][T10589] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 178.872657][T10594] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 178.880542][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1736'. [ 178.899495][T10594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.915672][T10594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.923067][T10594] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 178.934852][T10594] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 179.421896][T10610] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.454336][T10610] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #11: comm syz.6.1742: iget: bogus i_mode (1) [ 179.465261][T10613] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1743: bad orphan inode 134217728 [ 179.467634][T10610] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1742: couldn't read orphan inode 11 (err -117) [ 179.569167][T10621] vhci_hcd vhci_hcd.2: invalid port number 96 [ 179.575356][T10621] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 179.747625][T10635] vcan0 speed is unknown, defaulting to 1000 [ 179.896087][T10659] netlink: 'syz.4.1754': attribute type 10 has an invalid length. [ 179.908003][T10659] bond0: (slave dummy0): Releasing backup interface [ 179.916700][T10659] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 179.925982][T10659] team0: Failed to send options change via netlink (err -105) [ 179.933490][T10659] team0: Port device dummy0 added [ 179.941218][T10659] netlink: 'syz.4.1754': attribute type 10 has an invalid length. [ 179.949767][T10659] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 179.961399][T10659] team0: Failed to send options change via netlink (err -105) [ 179.969150][T10659] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 179.978284][T10659] team0: Port device dummy0 removed [ 179.985422][T10659] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 180.037023][T10662] set_capacity_and_notify: 14 callbacks suppressed [ 180.037039][T10662] loop0: detected capacity change from 0 to 1024 [ 180.063025][T10662] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1755: bad orphan inode 134217728 [ 180.099948][T10659] loop4: detected capacity change from 0 to 1024 [ 180.110527][T10659] EXT4-fs: Ignoring removed orlov option [ 180.155122][T10666] loop0: detected capacity change from 0 to 1024 [ 180.162385][T10666] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.174744][T10666] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #11: comm syz.0.1756: iget: bogus i_mode (1) [ 180.186395][T10666] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1756: couldn't read orphan inode 11 (err -117) [ 180.220460][T10669] vhci_hcd vhci_hcd.2: invalid port number 96 [ 180.226675][T10669] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 180.348000][ T9] hid_parser_main: 19 callbacks suppressed [ 180.348018][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 180.361408][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 180.368982][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 180.376659][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 180.384172][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 180.391627][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 180.399437][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 180.407099][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 180.414768][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 180.422191][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 180.430310][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 180.457310][T10682] fido_id[10682]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 180.563467][T10689] loop6: detected capacity change from 0 to 512 [ 180.610864][T10693] netlink: 'syz.6.1767': attribute type 10 has an invalid length. [ 180.628836][T10693] bond0: (slave dummy0): Releasing backup interface [ 180.637693][T10693] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 180.646843][T10693] team0: Failed to send options change via netlink (err -105) [ 180.654417][T10693] team0: Port device dummy0 added [ 180.654821][T10694] loop2: detected capacity change from 0 to 128 [ 180.676086][T10695] netlink: 'syz.6.1767': attribute type 10 has an invalid length. [ 180.714871][T10695] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 180.745612][T10695] team0: Failed to send options change via netlink (err -105) [ 180.753252][T10695] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 180.762422][T10695] team0: Port device dummy0 removed [ 180.770315][T10695] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 180.799892][T10693] loop6: detected capacity change from 0 to 1024 [ 180.807316][T10693] EXT4-fs: Ignoring removed orlov option [ 180.981788][T10714] loop6: detected capacity change from 0 to 128 [ 181.218352][T10726] loop0: detected capacity change from 0 to 1024 [ 181.228058][T10726] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.242851][T10726] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #11: comm syz.0.1777: iget: bogus i_mode (1) [ 181.254466][T10726] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1777: couldn't read orphan inode 11 (err -117) [ 181.299619][T10729] loop0: detected capacity change from 0 to 512 [ 181.369774][T10733] nfs4: Bad value for 'source' [ 181.460770][T10741] loop4: detected capacity change from 0 to 128 [ 182.060161][T10781] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 182.072715][T10781] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #11: comm syz.6.1789: iget: bogus i_mode (1) [ 182.086425][T10781] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1789: couldn't read orphan inode 11 (err -117) [ 182.160973][T10786] bond2: option resend_igmp: invalid value (1024) [ 182.167473][T10786] bond2: option resend_igmp: allowed values 0 - 255 [ 182.175206][T10786] bond2 (unregistering): Released all slaves [ 182.212213][ T29] kauditd_printk_skb: 1330 callbacks suppressed [ 182.212247][ T29] audit: type=1326 audit(1767600135.724:26985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.6.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5739f749 code=0x7ffc0000 [ 182.253760][ T29] audit: type=1326 audit(1767600135.724:26986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.6.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5739f749 code=0x7ffc0000 [ 182.277624][ T29] audit: type=1326 audit(1767600135.724:26987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.6.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b5739f749 code=0x7ffc0000 [ 182.301378][ T29] audit: type=1326 audit(1767600135.724:26988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.6.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5739f749 code=0x7ffc0000 [ 182.325368][ T29] audit: type=1326 audit(1767600135.724:26989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.6.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5739f749 code=0x7ffc0000 [ 182.349182][ T29] audit: type=1326 audit(1767600135.724:26990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.6.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5739f749 code=0x7ffc0000 [ 182.373129][ T29] audit: type=1326 audit(1767600135.724:26991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.6.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5739f749 code=0x7ffc0000 [ 182.396816][ T29] audit: type=1326 audit(1767600135.724:26992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.6.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b5739f749 code=0x7ffc0000 [ 182.420629][ T29] audit: type=1326 audit(1767600135.724:26993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.6.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5739f749 code=0x7ffc0000 [ 182.444253][ T29] audit: type=1326 audit(1767600135.724:26994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.6.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5739f749 code=0x7ffc0000 [ 182.566908][T10803] siw: device registration error -23 [ 182.603326][T10805] netlink: 'syz.0.1799': attribute type 10 has an invalid length. [ 182.649953][T10805] bond0: (slave dummy0): Releasing backup interface [ 182.657553][T10808] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.671233][T10809] netlink: 'syz.0.1799': attribute type 10 has an invalid length. [ 182.678642][T10805] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.698206][T10808] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 182.710983][T10808] EXT4-fs (loop6): orphan cleanup on readonly fs [ 182.721280][T10808] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1800: error while reading EA inode 32 err=-116 [ 182.734629][T10805] team0: Failed to send options change via netlink (err -105) [ 182.742237][T10805] team0: Port device dummy0 added [ 182.748113][T10808] EXT4-fs (loop6): Remounting filesystem read-only [ 182.754720][ T6384] Bluetooth: hci0: command 0x1003 tx timeout [ 182.760790][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.778233][T10808] EXT4-fs (loop6): 1 orphan inode deleted [ 182.788748][T10809] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.802118][T10805] __nla_validate_parse: 14 callbacks suppressed [ 182.802205][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 182.825743][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1800'. [ 182.844867][T10806] bio_check_eod: 314 callbacks suppressed [ 182.844883][T10806] syz.2.1798: attempt to access beyond end of device [ 182.844883][T10806] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 182.856656][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1801'. [ 182.865088][T10806] syz.2.1798: attempt to access beyond end of device [ 182.865088][T10806] loop2: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 182.888817][T10809] team0: Failed to send options change via netlink (err -105) [ 182.914185][T10809] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.933309][T10816] EXT4-fs: Ignoring removed orlov option [ 182.940360][T10806] syz.2.1798: attempt to access beyond end of device [ 182.940360][T10806] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 182.972615][T10809] team0: Port device dummy0 removed [ 182.980562][T10809] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.980927][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1802'. [ 182.994718][T10806] syz.2.1798: attempt to access beyond end of device [ 182.994718][T10806] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 183.032968][T10806] syz.2.1798: attempt to access beyond end of device [ 183.032968][T10806] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 183.047531][T10825] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1802'. [ 183.052651][T10806] syz.2.1798: attempt to access beyond end of device [ 183.052651][T10806] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 183.071340][T10806] syz.2.1798: attempt to access beyond end of device [ 183.071340][T10806] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 183.085137][T10806] syz.2.1798: attempt to access beyond end of device [ 183.085137][T10806] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 183.101490][T10806] syz.2.1798: attempt to access beyond end of device [ 183.101490][T10806] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 183.115205][T10806] syz.2.1798: attempt to access beyond end of device [ 183.115205][T10806] loop2: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 183.225364][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1807'. [ 183.309496][T10827] vcan0 speed is unknown, defaulting to 1000 [ 183.313276][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1809'. [ 183.417719][T10844] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1809'. [ 183.502592][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1812'. [ 183.633312][T10857] bond2: option resend_igmp: invalid value (1024) [ 183.639918][T10857] bond2: option resend_igmp: allowed values 0 - 255 [ 183.647470][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'. [ 183.659895][T10857] bond2 (unregistering): Released all slaves [ 183.795502][ T6169] loop5: p1 p2 p3 p4 [ 183.805012][ T6169] loop5: p2 start 117440512 is beyond EOD, truncated [ 183.812728][ T6169] loop5: p4 size 589824 extends beyond EOD, truncated [ 183.834977][T10876] netlink: 'syz.0.1820': attribute type 1 has an invalid length. [ 183.858984][T10871] loop5: p1 p2 p3 p4 [ 183.864088][T10871] loop5: p2 start 117440512 is beyond EOD, truncated [ 183.877234][T10871] loop5: p4 size 589824 extends beyond EOD, truncated [ 183.877801][T10876] 8021q: adding VLAN 0 to HW filter on device bond8 [ 183.904622][T10880] 8021q: adding VLAN 0 to HW filter on device bond8 [ 183.915584][T10880] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address [ 183.929935][T10880] bond8: (slave vxcan7): Error -95 calling set_mac_address [ 184.104486][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 184.152493][T10903] fido_id[10903]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.168079][T10905] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.195833][T10905] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #11: comm syz.6.1824: iget: bogus i_mode (1) [ 184.208682][T10905] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1824: couldn't read orphan inode 11 (err -117) [ 184.694542][T10931] vhci_hcd vhci_hcd.2: invalid port number 96 [ 184.700809][T10931] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 184.792637][T10944] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.818458][T10944] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.1837: iget: bogus i_mode (1) [ 184.831845][T10944] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1837: couldn't read orphan inode 11 (err -117) [ 184.946195][T10959] bond6: option resend_igmp: invalid value (1024) [ 184.952751][T10959] bond6: option resend_igmp: allowed values 0 - 255 [ 184.966221][T10959] bond6 (unregistering): Released all slaves [ 185.041909][T10973] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 185.053188][T10973] set_capacity_and_notify: 13 callbacks suppressed [ 185.053202][T10973] loop2: detected capacity change from 0 to 512 [ 185.068372][T10973] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 185.076624][T10973] EXT4-fs (loop2): orphan cleanup on readonly fs [ 185.083247][T10973] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1841: error while reading EA inode 32 err=-116 [ 185.097956][T10973] EXT4-fs (loop2): Remounting filesystem read-only [ 185.119625][T10973] EXT4-fs (loop2): 1 orphan inode deleted [ 185.300161][T10987] loop4: detected capacity change from 0 to 128 [ 185.449712][T11012] bond2: option resend_igmp: invalid value (1024) [ 185.456342][T11012] bond2: option resend_igmp: allowed values 0 - 255 [ 185.464468][T11012] bond2 (unregistering): Released all slaves [ 185.595300][ T8984] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.664990][T11030] loop5: detected capacity change from 0 to 512 [ 185.739933][T11034] loop5: detected capacity change from 0 to 2048 [ 185.784490][ T6169] loop5: p1 p2 p3 p4 [ 185.789501][ T6169] loop5: p2 start 117440512 is beyond EOD, truncated [ 185.798413][ T6169] loop5: p4 size 589824 extends beyond EOD, truncated [ 185.808808][T11034] loop5: p1 p2 p3 p4 [ 185.813479][T11034] loop5: p2 start 117440512 is beyond EOD, truncated [ 185.821229][T11034] loop5: p4 size 589824 extends beyond EOD, truncated [ 185.895681][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 185.907474][ T4012] udevd[4012]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 185.918922][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 185.939231][T11040] loop5: detected capacity change from 0 to 764 [ 186.116610][T11048] vcan0 speed is unknown, defaulting to 1000 [ 186.291613][T11061] loop6: detected capacity change from 0 to 1024 [ 186.304128][T11065] loop4: detected capacity change from 0 to 1024 [ 186.312504][T11061] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1873: bad orphan inode 134217728 [ 186.335142][T11065] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1875: bad orphan inode 134217728 [ 186.375740][T11069] loop2: detected capacity change from 0 to 764 [ 186.969526][T11095] loop5: detected capacity change from 0 to 1024 [ 186.978722][T11095] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1887: bad orphan inode 134217728 [ 186.996349][T11098] netlink: 'syz.6.1888': attribute type 10 has an invalid length. [ 187.010918][T11098] bond0: (slave dummy0): Releasing backup interface [ 187.021937][T11098] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 187.030992][T11098] team0: Failed to send options change via netlink (err -105) [ 187.038528][T11098] team0: Port device dummy0 added [ 187.046643][T11098] netlink: 'syz.6.1888': attribute type 10 has an invalid length. [ 187.055590][T11098] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 187.078986][T11098] team0: Failed to send options change via netlink (err -105) [ 187.087845][T11098] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 187.097356][T11098] team0: Port device dummy0 removed [ 187.104945][T11098] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 187.134441][T11101] loop5: detected capacity change from 0 to 764 [ 187.159377][T11098] EXT4-fs: Ignoring removed orlov option [ 187.215183][ T29] kauditd_printk_skb: 3082 callbacks suppressed [ 187.215197][ T29] audit: type=1326 audit(1767600140.734:30077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 187.245396][ T29] audit: type=1326 audit(1767600140.744:30078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 187.269494][ T29] audit: type=1326 audit(1767600140.764:30079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 187.293160][ T29] audit: type=1326 audit(1767600140.764:30080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 187.316935][ T29] audit: type=1326 audit(1767600140.764:30081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 187.340643][ T29] audit: type=1326 audit(1767600140.764:30082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 187.364341][ T29] audit: type=1326 audit(1767600140.764:30083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 187.387944][ T29] audit: type=1326 audit(1767600140.764:30084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 187.411671][ T29] audit: type=1326 audit(1767600140.774:30085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 187.435425][ T29] audit: type=1326 audit(1767600140.774:30086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 187.491800][T11112] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.510046][T11112] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 187.537112][T11112] EXT4-fs (loop6): orphan cleanup on readonly fs [ 187.543957][T11112] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1894: error while reading EA inode 32 err=-116 [ 187.605262][T11122] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.615978][T11112] EXT4-fs (loop6): Remounting filesystem read-only [ 187.622771][T11112] EXT4-fs (loop6): 1 orphan inode deleted [ 187.640961][ T6384] Bluetooth: hci0: command 0x1003 tx timeout [ 187.647189][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.665025][T11122] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.1897: iget: bogus i_mode (1) [ 187.685361][T11126] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1899: bad orphan inode 134217728 [ 187.749527][T11122] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1897: couldn't read orphan inode 11 (err -117) [ 187.926735][T11146] __nla_validate_parse: 22 callbacks suppressed [ 187.926754][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1909'. [ 188.031563][T11161] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1913: bad orphan inode 134217728 [ 188.145233][T11168] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1916: bad orphan inode 134217728 [ 188.218545][T11171] netlink: 'syz.4.1917': attribute type 10 has an invalid length. [ 188.236049][T11171] bond0: (slave dummy0): Releasing backup interface [ 188.245058][T11171] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 188.253923][T11171] team0: Failed to send options change via netlink (err -105) [ 188.261444][T11171] team0: Port device dummy0 added [ 188.268880][T11171] netlink: 'syz.4.1917': attribute type 10 has an invalid length. [ 188.277689][T11171] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 188.290633][T11171] team0: Failed to send options change via netlink (err -105) [ 188.298934][T11171] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 188.316461][T11171] team0: Port device dummy0 removed [ 188.323949][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 188.336056][T11171] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 188.376668][T11171] EXT4-fs: Ignoring removed orlov option [ 188.682576][T11194] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.696914][T11194] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #11: comm syz.4.1926: iget: bogus i_mode (1) [ 188.708708][T11194] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1926: couldn't read orphan inode 11 (err -117) [ 188.753647][T11199] bond9: option resend_igmp: invalid value (1024) [ 188.760295][T11199] bond9: option resend_igmp: allowed values 0 - 255 [ 188.768177][T11199] bond9 (unregistering): Released all slaves [ 188.826639][T11206] netlink: 'syz.2.1931': attribute type 10 has an invalid length. [ 188.877587][T11206] bond0: (slave dummy0): Releasing backup interface [ 188.897305][ T36] hid_parser_main: 48 callbacks suppressed [ 188.897326][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.910768][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.918279][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.925716][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.933207][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.940681][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.948117][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.955592][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.963077][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.970563][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.985937][T11206] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 188.989201][T11217] netlink: 'syz.2.1931': attribute type 10 has an invalid length. [ 189.006770][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 189.027412][T11206] team0: Failed to send options change via netlink (err -105) [ 189.035279][T11206] team0: Port device dummy0 added [ 189.042166][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1931'. [ 189.080340][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 189.090636][T11219] fido_id[11219]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 189.127204][T11217] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 189.176581][T11227] fido_id[11227]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 189.190394][T11217] team0: Failed to send options change via netlink (err -105) [ 189.203617][T11217] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 189.208928][T11206] EXT4-fs: Ignoring removed orlov option [ 189.216565][T11217] team0: Port device dummy0 removed [ 189.225162][T11217] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 189.364882][T11242] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.378247][T11242] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.1941: iget: bogus i_mode (1) [ 189.395128][T11242] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1941: couldn't read orphan inode 11 (err -117) [ 189.583791][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 189.752105][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 189.833689][T11293] bond6: option resend_igmp: invalid value (1024) [ 189.840241][T11293] bond6: option resend_igmp: allowed values 0 - 255 [ 189.848444][T11293] bond6 (unregistering): Released all slaves [ 189.899591][T11299] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.967455][T11299] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.982519][T11302] netlink: 'syz.6.1957': attribute type 10 has an invalid length. [ 190.050500][T11305] netlink: 'syz.6.1957': attribute type 10 has an invalid length. [ 190.063161][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1959'. [ 190.072077][T11302] bond0: (slave dummy0): Releasing backup interface [ 190.082158][T11302] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.094968][T11302] team0: Failed to send options change via netlink (err -105) [ 190.102485][T11302] team0: Port device dummy0 added [ 190.108196][T11307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1959'. [ 190.108706][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1957'. [ 190.129390][T11299] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.168561][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'. [ 190.179996][T11305] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.221094][T11305] team0: Failed to send options change via netlink (err -105) [ 190.230556][T11305] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.239787][T11305] team0: Port device dummy0 removed [ 190.248646][T11305] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.272039][T11302] set_capacity_and_notify: 18 callbacks suppressed [ 190.272059][T11302] loop6: detected capacity change from 0 to 1024 [ 190.287152][T11299] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.302259][T11302] EXT4-fs: Ignoring removed orlov option [ 190.334411][ T1708] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.346586][ T1708] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.358888][ T1708] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.371914][ T1708] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.450076][T11322] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.473455][T11326] bond9: option resend_igmp: invalid value (1024) [ 190.480139][T11326] bond9: option resend_igmp: allowed values 0 - 255 [ 190.495506][T11322] loop2: detected capacity change from 0 to 512 [ 190.509861][T11326] bond9 (unregistering): Released all slaves [ 190.530067][T11335] loop5: detected capacity change from 0 to 128 [ 190.538522][T11331] loop6: detected capacity change from 0 to 1024 [ 190.552086][T11322] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 190.584720][T11322] EXT4-fs (loop2): orphan cleanup on readonly fs [ 190.584745][T11331] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1967: bad orphan inode 134217728 [ 190.602467][T11322] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1965: error while reading EA inode 32 err=-116 [ 190.615166][T11322] EXT4-fs (loop2): Remounting filesystem read-only [ 190.621770][T11322] EXT4-fs (loop2): 1 orphan inode deleted [ 190.628783][T11322] EXT4-fs mount: 85 callbacks suppressed [ 190.628832][T11322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.647735][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 190.669587][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.676014][T11331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.736238][T11342] loop2: detected capacity change from 0 to 1024 [ 190.744608][T11344] loop4: detected capacity change from 0 to 764 [ 190.773871][T11342] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1972: bad orphan inode 134217728 [ 190.786667][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.815566][T11342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.891351][T11357] netlink: 'syz.0.1979': attribute type 10 has an invalid length. [ 190.901922][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.912923][T11357] bond0: (slave dummy0): Releasing backup interface [ 190.924991][T11357] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.934825][T11357] team0: Failed to send options change via netlink (err -105) [ 190.942459][T11357] team0: Port device dummy0 added [ 190.949529][T11359] netlink: 'syz.0.1979': attribute type 10 has an invalid length. [ 190.958577][T11359] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 191.000807][T11359] team0: Failed to send options change via netlink (err -105) [ 191.015025][T11359] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 191.024725][T11359] team0: Port device dummy0 removed [ 191.032508][T11359] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 191.051096][T11363] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.062288][T11365] loop4: detected capacity change from 0 to 1024 [ 191.093489][T11367] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.102786][T11365] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.114852][T11367] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.126259][T11367] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 191.134821][T11359] loop0: detected capacity change from 0 to 1024 [ 191.136891][T11365] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #11: comm syz.4.1982: iget: bogus i_mode (1) [ 191.143543][T11359] EXT4-fs: Ignoring removed orlov option [ 191.165824][T11365] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1982: couldn't read orphan inode 11 (err -117) [ 191.199969][T11365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.220058][T11365] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.242859][T11359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.272405][T11375] loop6: detected capacity change from 0 to 1024 [ 191.285422][T11375] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1985: bad orphan inode 134217728 [ 191.319833][T11375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.345407][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.392702][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.489023][T11391] loop5: detected capacity change from 0 to 2048 [ 191.518754][T11395] vhci_hcd vhci_hcd.2: invalid port number 96 [ 191.524961][T11395] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 191.548562][ T4017] loop5: p1 p2 p3 p4 [ 191.553899][ T4017] loop5: p2 start 117440512 is beyond EOD, truncated [ 191.562321][ T4017] loop5: p4 size 589824 extends beyond EOD, truncated [ 191.570417][T11394] loop0: p1 p2 p3 p4 [ 191.576985][T11394] loop0: p2 start 117440512 is beyond EOD, truncated [ 191.585404][T11391] loop5: p1 p2 p3 p4 [ 191.588603][T11394] loop0: p4 size 589824 extends beyond EOD, truncated [ 191.594788][T11391] loop5: p2 start 117440512 is beyond EOD, truncated [ 191.603358][T11397] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.605233][T11391] loop5: p4 size 589824 extends beyond EOD, truncated [ 191.646867][T11397] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 191.664190][T11397] EXT4-fs (loop6): orphan cleanup on readonly fs [ 191.671201][T11397] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1993: error while reading EA inode 32 err=-116 [ 191.684228][T11397] EXT4-fs (loop6): Remounting filesystem read-only [ 191.684598][ T4012] loop4: p1 p2 p3 p4 [ 191.697741][T11397] EXT4-fs (loop6): 1 orphan inode deleted [ 191.704554][T11397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 191.719383][ T4012] loop4: p2 start 117440512 is beyond EOD, truncated [ 191.749537][ T4012] loop4: p4 size 589824 extends beyond EOD, truncated [ 191.759561][T11398] loop4: p1 p2 p3 p4 [ 191.765036][T11398] loop4: p2 start 117440512 is beyond EOD, truncated [ 191.779747][T11398] loop4: p4 size 589824 extends beyond EOD, truncated [ 191.799592][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.092501][T11417] validate_nla: 1 callbacks suppressed [ 192.092515][T11417] netlink: 'syz.6.1999': attribute type 10 has an invalid length. [ 192.117309][T11417] bond0: (slave dummy0): Releasing backup interface [ 192.129317][T11417] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 192.141267][T11417] team0: Failed to send options change via netlink (err -105) [ 192.148955][T11417] team0: Port device dummy0 added [ 192.157313][T11422] netlink: 'syz.6.1999': attribute type 10 has an invalid length. [ 192.188343][T11425] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2000: bad orphan inode 134217728 [ 192.200637][T11425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.214559][T11422] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 192.224181][ T29] kauditd_printk_skb: 3159 callbacks suppressed [ 192.224199][ T29] audit: type=1326 audit(1767600145.734:33246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 192.312632][ T29] audit: type=1326 audit(1767600145.744:33247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f27fb6b2005 code=0x7ffc0000 [ 192.336377][ T29] audit: type=1326 audit(1767600145.744:33248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f27fb67f749 code=0x7ffc0000 [ 192.336415][T11422] team0: Failed to send options change via netlink (err -105) [ 192.336441][ T29] audit: type=1326 audit(1767600145.744:33249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f27fb6b2005 code=0x7ffc0000 [ 192.391214][ T29] audit: type=1326 audit(1767600145.744:33250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f27fb67f749 code=0x7ffc0000 [ 192.414889][ T29] audit: type=1326 audit(1767600145.774:33251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd728432005 code=0x7ffc0000 [ 192.438641][ T29] audit: type=1326 audit(1767600145.774:33252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd7283ff749 code=0x7ffc0000 [ 192.462443][ T29] audit: type=1326 audit(1767600145.774:33253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd728432005 code=0x7ffc0000 [ 192.486108][ T29] audit: type=1326 audit(1767600145.774:33254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f27fb67f749 code=0x7ffc0000 [ 192.509807][ T29] audit: type=1326 audit(1767600145.774:33255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11389 comm="syz.4.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd728432005 code=0x7ffc0000 [ 192.579459][T11438] EXT4-fs: Ignoring removed orlov option [ 192.611069][T11422] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 192.629926][T11422] team0: Port device dummy0 removed [ 192.637080][T11422] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 192.684577][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.760436][T11438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.905455][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.954846][T11482] loop0: p1 p2 p3 p4 [ 192.966596][T11482] loop0: p2 start 117440512 is beyond EOD, truncated [ 192.974736][T11482] loop0: p4 size 589824 extends beyond EOD, truncated [ 192.995789][T11484] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.010213][T11486] __nla_validate_parse: 7 callbacks suppressed [ 193.010287][T11486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2017'. [ 193.040167][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2018'. [ 193.049087][T11478] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2016: bad orphan inode 134217728 [ 193.050212][T11478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.106485][T11484] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 193.135219][T11484] EXT4-fs (loop6): orphan cleanup on readonly fs [ 193.154904][T11484] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2015: error while reading EA inode 32 err=-116 [ 193.174499][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.180093][T11484] EXT4-fs (loop6): Remounting filesystem read-only [ 193.204126][T11484] EXT4-fs (loop6): 1 orphan inode deleted [ 193.213246][T11484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 193.236890][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2015'. [ 193.314616][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.338966][T11501] bond2: option resend_igmp: invalid value (1024) [ 193.345484][T11501] bond2: option resend_igmp: allowed values 0 - 255 [ 193.355795][T11501] bond2 (unregistering): Released all slaves [ 193.468136][T11512] netlink: 'syz.6.2025': attribute type 10 has an invalid length. [ 193.477620][T11512] bond0: (slave dummy0): Releasing backup interface [ 193.488707][T11512] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 193.498329][T11512] team0: Failed to send options change via netlink (err -105) [ 193.506027][T11512] team0: Port device dummy0 added [ 193.580812][T11512] netlink: 'syz.6.2025': attribute type 10 has an invalid length. [ 193.591267][T11512] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 193.606586][T11512] team0: Failed to send options change via netlink (err -105) [ 193.615830][T11512] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 193.627461][T11512] team0: Port device dummy0 removed [ 193.644196][T11512] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 193.657637][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2025'. [ 193.763824][T11522] vcan0 speed is unknown, defaulting to 1000 [ 194.059289][T11515] EXT4-fs: Ignoring removed orlov option [ 194.208751][T11515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.426311][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.485860][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2033'. [ 194.510564][T11530] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2030: bad orphan inode 134217728 [ 194.559638][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 194.569019][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 194.587335][T11530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.652824][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 194.689786][T11536] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2035: bad orphan inode 134217728 [ 194.746342][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.756010][T11536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.814983][T11542] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 194.861337][T11544] bond9: option resend_igmp: invalid value (1024) [ 194.867833][T11544] bond9: option resend_igmp: allowed values 0 - 255 [ 194.892258][ T4429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.902427][T11542] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.2037: iget: bogus i_mode (1) [ 194.942832][T11542] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2037: couldn't read orphan inode 11 (err -117) [ 194.959049][T11544] bond9 (unregistering): Released all slaves [ 195.001426][T11542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.049744][T11542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.164618][ T6169] loop6: p1 p2 p3 p4 [ 195.169473][ T6169] loop6: p2 start 117440512 is beyond EOD, truncated [ 195.196976][ T6169] loop6: p4 size 589824 extends beyond EOD, truncated [ 195.217719][T11561] loop6: p1 p2 p3 p4 [ 195.222451][T11561] loop6: p2 start 117440512 is beyond EOD, truncated [ 195.229772][T11561] loop6: p4 size 589824 extends beyond EOD, truncated [ 195.335998][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2045'. [ 195.379973][T11569] set_capacity_and_notify: 17 callbacks suppressed [ 195.379993][T11569] loop0: detected capacity change from 0 to 512 [ 195.486374][T11571] vcan0 speed is unknown, defaulting to 1000 [ 195.621782][T11575] vcan0 speed is unknown, defaulting to 1000 [ 195.939314][T11582] loop6: detected capacity change from 0 to 1024 [ 196.004433][T11582] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 196.059179][T11586] loop5: detected capacity change from 0 to 512 [ 196.082990][T11582] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #11: comm syz.6.2050: iget: bogus i_mode (1) [ 196.162745][T11582] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2050: couldn't read orphan inode 11 (err -117) [ 196.226912][T11595] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.259147][T11582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.296936][T11599] loop5: detected capacity change from 0 to 512 [ 196.330185][T11599] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 196.423330][T11599] EXT4-fs (loop5): orphan cleanup on readonly fs [ 196.436005][T11582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.458472][T11606] loop2: detected capacity change from 0 to 512 [ 196.477533][T11599] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2055: error while reading EA inode 32 err=-116 [ 196.571018][T11599] EXT4-fs (loop5): Remounting filesystem read-only [ 196.627308][T11599] EXT4-fs (loop5): 1 orphan inode deleted [ 196.669847][T11599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.702307][T11617] loop2: detected capacity change from 0 to 512 [ 196.745305][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2055'. [ 196.865166][ T4429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.161935][T11656] loop0: detected capacity change from 0 to 2048 [ 197.198679][T11666] loop4: detected capacity change from 0 to 512 [ 197.205952][ T6169] loop0: p1 p2 p3 p4 [ 197.217543][ T6169] loop0: p2 start 117440512 is beyond EOD, truncated [ 197.234828][ T29] kauditd_printk_skb: 668 callbacks suppressed [ 197.234845][ T29] audit: type=1326 audit(1767600150.754:33924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.0.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f27fb67f749 code=0x7ffc0000 [ 197.265219][ T6169] loop0: p4 size 589824 extends beyond EOD, truncated [ 197.294240][ T29] audit: type=1326 audit(1767600150.754:33925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 197.317987][ T29] audit: type=1326 audit(1767600150.754:33926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 197.341751][ T29] audit: type=1326 audit(1767600150.754:33927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 197.365430][ T29] audit: type=1326 audit(1767600150.764:33928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 197.389136][ T29] audit: type=1326 audit(1767600150.764:33929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.0.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f27fb67f749 code=0x7ffc0000 [ 197.412768][ T29] audit: type=1326 audit(1767600150.764:33930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 197.436443][ T29] audit: type=1326 audit(1767600150.764:33931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 197.460094][ T29] audit: type=1326 audit(1767600150.764:33932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 197.483816][ T29] audit: type=1326 audit(1767600150.764:33933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6cd4a42005 code=0x7ffc0000 [ 197.513780][T11656] loop_reread_partitions: partition scan of loop0 () failed (rc=-16) [ 197.609144][T11663] vcan0 speed is unknown, defaulting to 1000 [ 197.619631][ T3005] loop0: p1 p2 p3 p4 [ 197.624486][ T3005] loop0: p2 start 117440512 is beyond EOD, truncated [ 197.631855][ T3005] loop0: p4 size 589824 extends beyond EOD, truncated [ 198.020709][T11711] loop6: detected capacity change from 0 to 1024 [ 198.045316][T11711] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2079: bad orphan inode 134217728 [ 198.060047][T11711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.112850][T11725] loop0: detected capacity change from 0 to 764 [ 198.185006][ T6169] loop2: p1 p2 p3 p4 [ 198.211649][ T6169] loop2: p2 start 117440512 is beyond EOD, truncated [ 198.225053][ T6169] loop2: p4 size 589824 extends beyond EOD, truncated [ 198.246802][T11730] loop2: p1 p2 p3 p4 [ 198.251869][T11730] loop2: p2 start 117440512 is beyond EOD, truncated [ 198.260824][T11730] loop2: p4 size 589824 extends beyond EOD, truncated [ 198.270875][T11729] bio_check_eod: 314 callbacks suppressed [ 198.270891][T11729] syz.5.2083: attempt to access beyond end of device [ 198.270891][T11729] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 198.290704][T11729] syz.5.2083: attempt to access beyond end of device [ 198.290704][T11729] loop5: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 198.342620][T11729] syz.5.2083: attempt to access beyond end of device [ 198.342620][T11729] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 198.390407][T11729] syz.5.2083: attempt to access beyond end of device [ 198.390407][T11729] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 198.404849][T11729] syz.5.2083: attempt to access beyond end of device [ 198.404849][T11729] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 198.428389][T11729] syz.5.2083: attempt to access beyond end of device [ 198.428389][T11729] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 198.450328][T11729] syz.5.2083: attempt to access beyond end of device [ 198.450328][T11729] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 198.465059][T11729] syz.5.2083: attempt to access beyond end of device [ 198.465059][T11729] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 198.479325][T11729] syz.5.2083: attempt to access beyond end of device [ 198.479325][T11729] loop5: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 198.479707][T11760] __nla_validate_parse: 4 callbacks suppressed [ 198.479746][T11760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2087'. [ 198.496631][T11729] syz.5.2083: attempt to access beyond end of device [ 198.496631][T11729] loop5: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 198.575798][T11763] netlink: 'syz.4.2088': attribute type 10 has an invalid length. [ 198.586853][T11763] bond0: (slave dummy0): Releasing backup interface [ 198.598317][T11763] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 198.608045][T11763] team0: Failed to send options change via netlink (err -105) [ 198.615711][T11763] team0: Port device dummy0 added [ 198.628136][T11763] netlink: 'syz.4.2088': attribute type 10 has an invalid length. [ 198.637384][T11763] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 198.648780][T11763] team0: Failed to send options change via netlink (err -105) [ 198.656510][T11763] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 198.665744][T11763] team0: Port device dummy0 removed [ 198.672672][T11763] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 198.684775][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2088'. [ 198.730166][T11763] EXT4-fs: Ignoring removed orlov option [ 198.743321][T11763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.766238][ T4749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.800916][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.826205][T11768] netlink: 'syz.4.2090': attribute type 3 has an invalid length. [ 198.834150][T11768] netlink: 'syz.4.2090': attribute type 1 has an invalid length. [ 198.841893][T11768] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2090'. [ 198.888231][T11770] vcan0 speed is unknown, defaulting to 1000 [ 198.940379][T11772] vcan0 speed is unknown, defaulting to 1000 [ 198.968102][T11776] nfs4: Bad value for 'source' [ 199.074878][T11779] vhci_hcd vhci_hcd.2: invalid port number 96 [ 199.081032][T11779] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 199.161178][T11787] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2097: bad orphan inode 134217728 [ 199.173475][T11787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.224140][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 199.246075][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.296367][T11801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2103'. [ 199.462498][T11815] vcan0 speed is unknown, defaulting to 1000 [ 199.516355][T11819] vhci_hcd vhci_hcd.2: invalid port number 96 [ 199.522512][T11819] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 199.538562][T11817] vcan0 speed is unknown, defaulting to 1000 [ 199.632841][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 199.764411][T11832] loop4: p1 p2 p3 p4 [ 199.775183][T11832] loop4: p2 start 117440512 is beyond EOD, truncated [ 199.785911][T11832] loop4: p4 size 589824 extends beyond EOD, truncated [ 199.976070][ T6169] loop0: p1 p2 p3 p4 [ 199.981101][ T6169] loop0: p2 start 117440512 is beyond EOD, truncated [ 199.989750][ T6169] loop0: p4 size 589824 extends beyond EOD, truncated [ 200.007377][T11850] loop0: p1 p2 p3 p4 [ 200.013136][T11850] loop0: p2 start 117440512 is beyond EOD, truncated [ 200.016360][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 200.022577][T11850] loop0: p4 size 589824 extends beyond EOD, truncated [ 200.044539][ T3005] loop0: p1 p2 p3 p4 [ 200.049729][ T3005] loop0: p2 start 117440512 is beyond EOD, truncated [ 200.058933][ T3005] loop0: p4 size 589824 extends beyond EOD, truncated [ 200.204021][T11855] vhci_hcd vhci_hcd.2: invalid port number 96 [ 200.210228][T11855] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 200.463043][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'. [ 200.497216][T11866] nfs4: Bad value for 'source' [ 200.748850][T11871] set_capacity_and_notify: 8 callbacks suppressed [ 200.748957][T11871] loop0: detected capacity change from 0 to 1024 [ 200.770014][T11871] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2127: bad orphan inode 134217728 [ 200.788156][T11871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.826242][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.926013][T11885] loop0: detected capacity change from 0 to 512 [ 200.949032][T11885] SELinux: Context › is not valid (left unmapped). [ 201.132326][T11893] netlink: 'syz.4.2136': attribute type 27 has an invalid length. [ 201.149385][T11893] gretap1: left promiscuous mode [ 201.175995][T11893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.184806][T11893] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.195422][T11893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.211819][ T9] vcan0 speed is unknown, defaulting to 1000 [ 201.217998][ T9] syz1: Port: 1 Link ACTIVE [ 201.274265][ T3834] vcan0 speed is unknown, defaulting to 1000 [ 201.337516][T11899] loop6: detected capacity change from 0 to 2048 [ 201.362730][T11904] loop4: detected capacity change from 0 to 1024 [ 201.374584][T11904] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2141: bad orphan inode 134217728 [ 201.386892][T11904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.401003][ T6169] loop6: p1 p2 p3 p4 [ 201.424581][T11908] loop2: detected capacity change from 0 to 764 [ 201.432658][ T6169] loop6: p2 start 117440512 is beyond EOD, truncated [ 201.446263][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.464711][ T6169] loop6: p4 size 589824 extends beyond EOD, truncated [ 201.487829][ T4017] ================================================================== [ 201.495971][ T4017] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 201.502703][ T4017] [ 201.505099][ T4017] write to 0xffff88811a9a6b50 of 8 bytes by task 3005 on cpu 1: [ 201.512758][ T4017] __dentry_kill+0x142/0x4b0 [ 201.517380][ T4017] finish_dput+0x2b/0x200 [ 201.521736][ T4017] dput+0x52/0x60 [ 201.525394][ T4017] lookup_one_qstr_excl+0x15a/0x250 [ 201.530625][ T4017] do_unlinkat+0x148/0x4b0 [ 201.535067][ T4017] __x64_sys_unlink+0x2e/0x40 [ 201.539771][ T4017] x64_sys_call+0x2f48/0x3000 [ 201.544472][ T4017] do_syscall_64+0xca/0x2b0 [ 201.549008][ T4017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.554935][ T4017] [ 201.557285][ T4017] read to 0xffff88811a9a6b50 of 8 bytes by task 4017 on cpu 0: [ 201.564852][ T4017] fast_dput+0x5f/0x2c0 [ 201.569115][ T4017] dput+0x24/0x60 [ 201.572790][ T4017] do_unlinkat+0x202/0x4b0 [ 201.577231][ T4017] __x64_sys_unlink+0x2e/0x40 [ 201.581922][ T4017] x64_sys_call+0x2f48/0x3000 [ 201.586624][ T4017] do_syscall_64+0xca/0x2b0 [ 201.591258][ T4017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.597178][ T4017] [ 201.599518][ T4017] value changed: 0xffff8882375a9ac8 -> 0x0000000000000000 [ 201.606669][ T4017] [ 201.609008][ T4017] Reported by Kernel Concurrency Sanitizer on: [ 201.615178][ T4017] CPU: 0 UID: 0 PID: 4017 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.626046][ T4017] Tainted: [W]=WARN [ 201.629939][ T4017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.640009][ T4017] ================================================================== [ 201.667278][T11899] loop6: p1 p2 p3 p4 [ 201.681424][T11912] loop0: detected capacity change from 0 to 512 [ 201.688537][T11899] loop6: p2 start 117440512 is beyond EOD, truncated [ 201.696166][T11899] loop6: p4 size 589824 extends beyond EOD, truncated [ 201.788474][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 201.791528][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 201.810016][ T4012] udevd[4012]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory