last executing test programs: 7.468478726s ago: executing program 1 (id=2332): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0xf, 0xb, 0x7, 0xff}, {0x3ff, 0x2, 0x7c, 0xffffffff}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x4602, 0x13290, 0x0, 0x1e3}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="30000000130001000000000000000000080000000900000008000000ffffffff080013006e"], 0x30}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x35a, &(0x7f0000000b00)="$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") shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 6.59846679s ago: executing program 1 (id=2352): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000b80)='./file0\x00', 0xc2) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0xc5594286d776c8c5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbd}]}}}]}, 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x0, 0x5eb, &(0x7f0000000bc0)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket(0x200000000000011, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x5e13, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty}}}], 0x20, 0x74}}], 0x1, 0x0) 6.430449114s ago: executing program 1 (id=2357): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001000)=ANY=[@ANYBLOB="14000000010400020100eeff0b8b97ffcfcd018bea0d080074495a623d2089d63ec0ca"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000190000032bbd700002001e00801480000001ff060000000008000f00550f0000"], 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000080000000900000000000000", @ANYRES32, @ANYBLOB="00f50000000000000000b7620000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000400), &(0x7f0000000340)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="10010000070a0102"], 0x110}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="4000000010001fff000000000000668800000000", @ANYRES32=r10, @ANYBLOB="0000000000000000200012800e00010069703665727370616e0000000c000280060002"], 0x40}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[], 0x50) 6.110474091s ago: executing program 1 (id=2367): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000090085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 6.087120013s ago: executing program 1 (id=2369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) 6.023678089s ago: executing program 1 (id=2371): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$inet_udplite(0x2, 0x2, 0x88) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000180), &(0x7f00000004c0)=r7}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.020676838s ago: executing program 0 (id=2399): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {0x0}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 3.139472483s ago: executing program 0 (id=2413): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000120379000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000500)) close(r1) 3.138967733s ago: executing program 0 (id=2414): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = gettid() r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80e85411, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x2, 0x0, 0x9, '\x00', {0x7, 0x6, "87918b", 0xb, 0x32, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], "11f39b91aa5b615b"}}}}}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03f6ffe0ff64120200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) fcntl$setown(0xffffffffffffffff, 0x8, r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) tkill(r0, 0x13) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000268b5c3d54d41d614c6ca144c27ec3ea33096eee42524b101051022565b65612a382796adcc795432247747f80ca2e782ad618178ab90a0fee58d5c207ed30a43d457e53a46de0b54b1cd2375df7ee2901775613fc72bb5e34d62e7e2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.540206309s ago: executing program 3 (id=2447): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) socket(0x10, 0x80003, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x94}}, 0x0) 1.211372417s ago: executing program 2 (id=2452): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000500000006", @ANYRESHEX=r0], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x4}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2c7f666f3d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) setns(r5, 0x4000000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = pidfd_getfd(r5, r8, 0x0) recvmsg(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f0000002780)=""/4111, 0x100f}, {&(0x7f00000006c0)=""/241, 0xf1}, {&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f00000007c0)=""/143, 0x8f}], 0x6, &(0x7f0000000c40)=""/106, 0x6a}, 0x40000141) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r11 = openat(r10, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r11, 0x40047211, &(0x7f0000000000)) sendto$inet6(r8, &(0x7f0000000c00)="e9ce217156fb49000000005f2b5c0080bee86eee9f9871aeed5c1f9f7a96b755c037d42336c33da0ad0000000000", 0x2e, 0x0, &(0x7f0000000880)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) 1.154858101s ago: executing program 2 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a43b18910883ff000000000004000060ffa772"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f0000000500)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') recvmsg$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) gettid() 1.116778215s ago: executing program 2 (id=2456): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.106595546s ago: executing program 2 (id=2458): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)={0x48, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x20000001) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@barrier}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x10}}, {@nomblk_io_submit}]}, 0x0, 0x4be, &(0x7f0000000ac0)="$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") sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200bb636e020000000006000000000000000000000000000000e0000002000000000067700000000000ff02002000000000000000000000000105000500004000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600ff4700000a000200000000000000000000000000cd"], 0xa0}}, 0x0) sendto$inet6(r0, 0x0, 0x4, 0x0, 0x0, 0x0) 959.097008ms ago: executing program 3 (id=2463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000b0c0d0e0f10"], 0x48, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000002000000000000000000000002008000000000000140400000c000000000000000a000000000000040000000000000000000000000000080000000000000000000000000000b085da05d603888318a0cce400000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000fdffffffff00000000000000000000e4ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000006fb7cd02b734bcce41ef6e95bd000000008000000000000000000000000000000000000000000000000000000000000000eeff3f000000008fc7660c490587b3ab213098a6767c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f8f0000000000000000dbd5a834b3ab2a0cc27081310000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a05000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4f016fa70c1255400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f000000000feffffff00000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000062f75a00627f34dd71012eed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff00000000000000000000000000000000000000000000001b00000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000f200000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a330000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000cb33322c9c564ae5f8eef74d5aa7cc9c000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c00000000000000000000000000000000ecffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000afe96d981b6f119c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000844caab24e79bd260000000000000000000000000000000000000000005080000000000000000000000000000000010000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0xfffe], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf365, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 900.874013ms ago: executing program 3 (id=2464): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)={0x48, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x20000001) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@barrier}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x10}}, {@nomblk_io_submit}]}, 0x0, 0x4be, &(0x7f0000000ac0)="$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") sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200bb636e020000000006000000000000000000000000000000e0000002000000000067700000000000ff02002000000000000000000000000105000500004000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600ff4700000a000200000000000000000000000000cd"], 0xa0}}, 0x0) sendto$inet6(r0, 0x0, 0x4, 0x0, 0x0, 0x0) 867.596116ms ago: executing program 4 (id=2466): ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x11) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/32, 0x20}, {&(0x7f00000000c0)=""/188, 0xbc}, {&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f00000002c0)=""/162, 0xa2}], &(0x7f0000000400)=[0x0, 0xb, 0x9, 0x4, 0x6, 0x1000, 0x6, 0x82]}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x8, 0x0, 0x800, 0x80000000, {{0x9, 0x4, 0x1, 0x4, 0x24, 0x66, 0x0, 0x80, 0x29, 0x0, @remote, @multicast1, {[@cipso={0x86, 0xf, 0x3, [{0x7, 0x9, "1d9a213acda5fb"}]}]}}}}}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000540)={@empty, r1}, 0x14) mknodat$null(r0, &(0x7f0000000580)='./file0/file0\x00', 0x8, 0x103) r2 = openat$cgroup_ro(r0, &(0x7f00000005c0)='pids.events\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000600)={0xd, 0xb, 0x0, 0x7}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x1e, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x3d, 0x3, 0x0, 0x3, 0x4e32}, @call={0x85, 0x0, 0x0, 0x88}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x7, 0x58, &(0x7f0000000780)=""/88, 0x40f00, 0x9, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000800)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r2], &(0x7f0000000880)=[{0x5, 0x3, 0x4}, {0x1, 0x1, 0x5, 0x5}], 0x10, 0x6, @void, @value}, 0x94) syz_emit_ethernet(0x26, &(0x7f0000000980)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x7, 0x1}}, {@can={0xc, {{0x0, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "5b9469651042a7b9"}}}}, 0x0) openat$cgroup_type(r2, &(0x7f00000009c0), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a40)={0xffffffffffffffff, r0, 0x0, 0xc, &(0x7f0000000a00)='cgroup.type\x00'}, 0x30) recvmsg$kcm(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a80)=""/203, 0xcb}, {&(0x7f0000000b80)=""/134, 0x86}], 0x2}, 0x2000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r4 = semget$private(0x0, 0x2, 0xa4) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000000dc0)=0x2) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000e40)={0x0, 0x0}) fcntl$lock(r5, 0x24, &(0x7f0000000ec0)={0x0, 0x1, 0xfffffffffffffffe, 0x9, r6}) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000f00)={0x0, 0x39, "9b561b346b1b96c63eb3dc9bf2caf34487305071a3886736041476f8a858b3e00f8d5a8cbcd2c2be99c2b5a1417a19c9e8f1c9e68dfcd73354"}) sendto$inet6(r2, &(0x7f0000000f40)="a50f48f113e8adc6f65a8fe871aa08d6f5925ea3481a9a59a609edf4e3e21c3f4e7c80b010338ac729e5d80c5f6f03e633956a948c8a9802e2b6", 0x3a, 0x6008000, &(0x7f0000000f80)={0xa, 0x4e22, 0x2e, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000fc0)=0x7, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001040), r2) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r8, 0x400, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc800) socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001140), 0x80801, 0x0) pwritev2(r9, &(0x7f0000001280)=[{&(0x7f0000001180)="498a03f98e908c5d9aac5575ccaa10ea15207631807751d7a4680aa9bcda58c3690bcb9d58ed9c5af9bb4a008e5704b07795f0d4efb0b04bb0083926ad14d174cbfdd1e81b13d06bddcc0a4b7b5b0c6fa447e11db5e39082bf1a2e098a5768c4f82663bc72d353043214c38b8ae88e84450d917b191fd39b796b8479fafdbbf0e705b78c82dd1d1696e7ad2ab32a804220f2f13d9c6cd4119cb3e0877cf792677b5719e7980eebb1a28256640948d1b52ba289201cbe7d91cc66e599c12aa112c19ac6a367040e11c6c6153d1fadeb8770031c776dc76d1beb2e5659715cd93c42bef7f8d4cf0ed904873c6de5f72e59", 0xf0}], 0x1, 0x101, 0x4000000, 0x18) sendmsg$can_bcm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x5, 0x48, 0x8, {0x0, 0x2710}, {0x0, 0x2710}, {0x1, 0x0, 0x1}, 0x1, @can={{0x8, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "f6e1e2436debe3b8"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004041) 834.530359ms ago: executing program 4 (id=2467): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000140)="26000000220047010500000781ff000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 834.079219ms ago: executing program 4 (id=2468): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000d40)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103, 0x1}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) 833.446859ms ago: executing program 4 (id=2469): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500005c0000000100119078000000000000000000004e200048907803000000000000006d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8ddec71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea413c128364c"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x5, 0xb, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="b04b8457506f97d8e01bc6020a8383cda311a8c8f52e45095ec72ab4abe5aa065a0b5098f0ac1ee7d636e712da36cff283f33136d85bbfa3051c124bf67b97cbc77816409866ab49c153ed23f462f39d46c13f18e797e2ef0fc5dd381a079368f746830e4c2e4eac82d04be415e08a2618e8c89c5994bd753541679710f4859bfdf653b300000000000000947cc2373a4ce226dff449661935940d76e6941294f84b62bb31aba25167325b59a55688b8ffe248a42a5ff1cef3ec6d616d58d3d7d10bc7cec4aceaf5e9c2990a4e422eec6066208b0d4e9e71b86a9916753372f1ea26f3824e48cc29808a6a092b2a85626065229f31a0f71b309609934eefa85c470cddf752480ab2a1b7f00d9c3cb8040e9019d29df66405710151518caabf43102311afa9ea42c487acf3ea2caa7b90f83431f2d7919ed7e41e34a88f1c72cc336710dafd5fca7e1ef01de523c560b9bd94055e9c9da685eb6709a769ee7982b630e79061e76a29532c5087eb75c74d36f6c2", @ANYRESOCT=r3, @ANYRES16=r1, @ANYRESOCT=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000400)={[{@data_err_abort}, {@noblock_validity}]}, 0x9, 0x5f2, &(0x7f0000002540)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000100033f20000000000000000fe80000000000000000000000000002cfc0200000000000000000000000000004e2200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d232000000ac1414aa00000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000800000000000000800000000000000000000000000000000000000000000000000000000000000838600000000000000000000000000000500000000000000000000000000000000000000020000000000000002000406000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x200080c0) 737.423647ms ago: executing program 4 (id=2470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a43b18910883ff000000000004000060ffa772"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f0000000500)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') recvmsg$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) gettid() 671.875873ms ago: executing program 4 (id=2471): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {0x0}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 258.791018ms ago: executing program 2 (id=2472): r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000001400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x34, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x2, 0x0, 0x9, '\x00', {0x7, 0x6, "87918b", 0xb, 0x32, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], "11f39b91"}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) socket$packet(0x11, 0x3, 0x300) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) fcntl$setown(r1, 0x8, r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) tkill(r0, 0x13) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x20000000}, 0x20) 182.369514ms ago: executing program 2 (id=2473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4], 0x28}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000340)={'syzkaller0\x00'}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x6, &(0x7f0000000100)=[{0x3, 0xcd, 0x8, 0x2}, {0x3ff, 0x3, 0x6, 0x80000001}, {0xe3, 0x7, 0x7, 0x5}, {0x9, 0x4e, 0xa1}, {0x8, 0x2, 0xc, 0x9}, {0x0, 0x8, 0x0, 0x4}]}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_MIGRATE(r12, 0x6609) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='svcsock_marker\x00', r11}, 0x1d) close(r5) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x158}}, 0x0) 130.628069ms ago: executing program 0 (id=2474): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 119.38633ms ago: executing program 0 (id=2475): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0xfffffffffffffffe, 0x400000}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000540)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r9 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r10, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000400)={0x9, {{0x2, 0x0, @multicast2}}, 0x1, 0x1, [{{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x110) r11 = openat(r9, &(0x7f0000000380)='./bus\x00', 0x4e1401, 0xc1) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=@gettaction={0x54, 0x32, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x55}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)={0x9, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @broadcast}}]}, 0x210) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000450776bee94bc24f774b8503"], 0x90) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_enter(r2, 0x54, 0x0, 0x0, 0x0, 0x0) 97.803262ms ago: executing program 3 (id=2476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) 25.322998ms ago: executing program 3 (id=2477): r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000001400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x34, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x2, 0x0, 0x9, '\x00', {0x7, 0x6, "87918b", 0xb, 0x32, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], "11f39b91"}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) socket$packet(0x11, 0x3, 0x300) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) fcntl$setown(r1, 0x8, r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) tkill(r0, 0x13) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000268b5c3d54d41d614c6ca144c27ec3ea33096eee42524b101051022565b65612a382796adcc795432247747f80ca2e782ad618178ab90a0fee58d5c207ed30a43d457e53a46de0b54b1cd2375df7ee2901775613fc72bb5e34d62e7e2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x20000000}, 0x20) 545.96µs ago: executing program 0 (id=2478): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xfff5, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=2479): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x30) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x170}, 0x18) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x8c, 0x30, 0x10, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/41, 0x29}], 0x1, 0x20}}], 0x48}, 0x0) iopl(0x3) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r11, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) kernel console output (not intermixed with test programs): 9846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.574640][ T9850] syzkaller0: entered promiscuous mode [ 160.585959][ T9850] syzkaller0: entered allmulticast mode [ 160.586800][ T9846] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.602988][ T7807] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.652452][ T9856] syzkaller0: entered promiscuous mode [ 160.658000][ T9856] syzkaller0: entered allmulticast mode [ 160.661362][ T9854] loop1: detected capacity change from 0 to 8192 [ 160.682399][ T8847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.684306][ T9856] loop2: detected capacity change from 0 to 512 [ 160.711070][ T9856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.723992][ T9856] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.768660][ T9868] loop1: detected capacity change from 0 to 512 [ 160.786687][ T9868] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1729: corrupted in-inode xattr: invalid ea_ino [ 160.800448][ T9868] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1729: couldn't read orphan inode 15 (err -117) [ 160.813219][ T9868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.862392][ T8895] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.916400][ T9874] loop2: detected capacity change from 0 to 512 [ 160.924467][ T9874] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1731: corrupted in-inode xattr: invalid ea_ino [ 160.938141][ T9874] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1731: couldn't read orphan inode 15 (err -117) [ 160.950926][ T9874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.987506][ T8895] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.025537][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.083641][ T9886] syzkaller0: entered promiscuous mode [ 161.089158][ T9886] syzkaller0: entered allmulticast mode [ 161.102786][ T9886] loop4: detected capacity change from 0 to 512 [ 161.116489][ T9886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.129942][ T9886] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.221353][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.238284][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1736'. [ 161.363658][ T9893] loop4: detected capacity change from 0 to 512 [ 161.376429][ T9893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.389019][ T9893] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.415448][ T9897] syz.3.1738[9897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.415562][ T9897] syz.3.1738[9897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.427082][ T9897] syz.3.1738[9897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.459607][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.506302][ T9900] loop4: detected capacity change from 0 to 512 [ 161.516644][ T9900] EXT4-fs error (device loop4): __ext4_iget:4952: inode #3: block 127754: comm syz.4.1739: invalid block [ 161.528091][ T9900] EXT4-fs error (device loop4): ext4_quota_enable:7056: comm syz.4.1739: Bad quota inode: 3, type: 0 [ 161.539223][ T9900] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 161.554119][ T9900] EXT4-fs (loop4): mount failed [ 161.563479][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'. [ 161.606673][ T7807] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.628128][ T9915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.640470][ T9915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.661449][ T9915] vlan0: entered promiscuous mode [ 161.668034][ T9915] bond0: entered promiscuous mode [ 161.673154][ T9915] bond_slave_0: entered promiscuous mode [ 161.678851][ T9915] bond_slave_1: entered promiscuous mode [ 161.684587][ T9915] bridge0: entered promiscuous mode [ 161.693050][ T9915] bond0: left promiscuous mode [ 161.697844][ T9915] bond_slave_0: left promiscuous mode [ 161.703276][ T9915] bond_slave_1: left promiscuous mode [ 161.708789][ T9915] bridge0: left promiscuous mode [ 161.725511][ T9922] loop4: detected capacity change from 0 to 512 [ 161.737054][ T9922] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1746: corrupted in-inode xattr: invalid ea_ino [ 161.752202][ T9922] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1746: couldn't read orphan inode 15 (err -117) [ 161.752674][ T9927] netlink: 'syz.0.1748': attribute type 10 has an invalid length. [ 161.764934][ T9922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.784639][ T9927] veth0_macvtap: left promiscuous mode [ 161.793433][ T9927] veth0_macvtap: entered promiscuous mode [ 161.800222][ T9927] team0: Device macvtap0 failed to register rx_handler [ 161.807319][ T9927] veth0_macvtap: left promiscuous mode [ 161.848832][ T9929] loop3: detected capacity change from 0 to 4096 [ 161.870308][ T9934] loop0: detected capacity change from 0 to 1024 [ 161.877703][ T9937] syz.2.1752[9937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.878329][ T9929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.889615][ T9934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.918431][ T9929] siw: device registration error -23 [ 161.924525][ T8847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.945987][ T9941] loop0: detected capacity change from 0 to 512 [ 161.957378][ T9941] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.034712][ T9949] loop2: detected capacity change from 0 to 1024 [ 162.142468][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.162014][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.187541][ T9961] vlan2: entered promiscuous mode [ 162.193363][ T9961] bond0: entered promiscuous mode [ 162.198467][ T9961] bond_slave_0: entered promiscuous mode [ 162.204259][ T9961] bond_slave_1: entered promiscuous mode [ 162.211886][ T9961] bond0: left promiscuous mode [ 162.216805][ T9961] bond_slave_0: left promiscuous mode [ 162.222302][ T9961] bond_slave_1: left promiscuous mode [ 162.270117][ T9966] bond4: entered promiscuous mode [ 162.275308][ T9966] bond4: entered allmulticast mode [ 162.280576][ T9966] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.290303][ T9966] bond4 (unregistering): Released all slaves [ 162.327631][ T9970] loop1: detected capacity change from 0 to 1024 [ 162.362177][ T9975] loop1: detected capacity change from 0 to 512 [ 162.370393][ T9975] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1766: corrupted in-inode xattr: invalid ea_ino [ 162.384505][ T9975] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1766: couldn't read orphan inode 15 (err -117) [ 162.458482][ T9979] loop3: detected capacity change from 0 to 4096 [ 162.469500][ T9979] siw: device registration error -23 [ 162.496327][ T9983] bpf_get_probe_write_proto: 2 callbacks suppressed [ 162.496338][ T9983] syz.3.1768[9983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.503055][ T9983] syz.3.1768[9983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.514529][ T9983] syz.3.1768[9983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.631443][ T9987] loop4: detected capacity change from 0 to 1024 [ 162.673045][ T9991] bond4: entered promiscuous mode [ 162.677548][ T9994] loop4: detected capacity change from 0 to 512 [ 162.678124][ T9991] bond4: entered allmulticast mode [ 162.679054][ T9991] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.697278][ T9994] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.710454][ T9991] bond4 (unregistering): Released all slaves [ 162.777239][ T9998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.785929][ T9998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.799006][ T9998] vlan0: entered promiscuous mode [ 162.800314][T10002] loop0: detected capacity change from 0 to 512 [ 162.804678][ T9998] bond0: entered promiscuous mode [ 162.815562][ T9998] bond_slave_0: entered promiscuous mode [ 162.821381][ T9998] bond_slave_1: entered promiscuous mode [ 162.828903][ T9998] bond0: left promiscuous mode [ 162.833683][ T9998] bond_slave_0: left promiscuous mode [ 162.839144][ T9998] bond_slave_1: left promiscuous mode [ 162.847295][T10002] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.934198][T10009] loop4: detected capacity change from 0 to 1024 [ 162.962124][T10012] loop0: detected capacity change from 0 to 512 [ 162.986127][T10014] loop4: detected capacity change from 0 to 128 [ 162.987254][T10012] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.077096][T10020] syzkaller0: entered promiscuous mode [ 163.082670][T10020] syzkaller0: entered allmulticast mode [ 163.171339][T10024] loop2: detected capacity change from 0 to 1024 [ 163.198113][T10024] __nla_validate_parse: 4 callbacks suppressed [ 163.198127][T10024] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1782'. [ 163.233366][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.243248][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.254277][T10031] vlan0: entered promiscuous mode [ 163.259854][T10031] bond0: entered promiscuous mode [ 163.264985][T10031] bond_slave_0: entered promiscuous mode [ 163.270673][T10031] bond_slave_1: entered promiscuous mode [ 163.276440][T10031] bridge0: entered promiscuous mode [ 163.287281][T10031] bond0: left promiscuous mode [ 163.292119][T10031] bond_slave_0: left promiscuous mode [ 163.297676][T10031] bond_slave_1: left promiscuous mode [ 163.303102][T10031] bridge0: left promiscuous mode [ 163.322720][T10035] loop2: detected capacity change from 0 to 1024 [ 163.352416][T10035] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1785'. [ 163.483056][T10042] loop3: detected capacity change from 0 to 1024 [ 163.490221][T10040] syzkaller0: entered promiscuous mode [ 163.495864][T10040] syzkaller0: entered allmulticast mode [ 163.512868][T10040] loop2: detected capacity change from 0 to 512 [ 163.548692][T10040] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.693684][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1790'. [ 163.702627][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1790'. [ 163.787092][ T29] kauditd_printk_skb: 1105 callbacks suppressed [ 163.787104][ T29] audit: type=1326 audit(1728897307.708:21012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10051 comm="syz.0.1792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca2f20dff9 code=0x0 [ 163.897258][ T29] audit: type=1326 audit(1728897307.818:21013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097f6ddff9 code=0x7ffc0000 [ 163.920902][ T29] audit: type=1326 audit(1728897307.818:21014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097f6ddff9 code=0x7ffc0000 [ 163.970395][ T29] audit: type=1326 audit(1728897307.868:21015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f097f6ddff9 code=0x7ffc0000 [ 163.993910][ T29] audit: type=1326 audit(1728897307.868:21016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097f6ddff9 code=0x7ffc0000 [ 164.021775][T10060] loop1: detected capacity change from 0 to 512 [ 164.029602][T10060] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1794: corrupted in-inode xattr: invalid ea_ino [ 164.063563][T10046] loop3: detected capacity change from 0 to 512 [ 164.071592][T10060] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1794: couldn't read orphan inode 15 (err -117) [ 164.072482][T10046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.108106][T10066] lo speed is unknown, defaulting to 1000 [ 164.114860][T10046] EXT4-fs (loop3): 1 truncate cleaned up [ 164.185898][T10070] loop4: detected capacity change from 0 to 1024 [ 164.204786][T10070] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1796'. [ 164.224860][T10074] loop2: detected capacity change from 0 to 4096 [ 164.231025][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1798'. [ 164.243468][ T29] audit: type=1326 audit(1728897308.158:21017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 164.267273][ T29] audit: type=1326 audit(1728897308.158:21018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 164.290948][ T29] audit: type=1326 audit(1728897308.158:21019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 164.315031][ T29] audit: type=1326 audit(1728897308.158:21020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 164.338660][ T29] audit: type=1326 audit(1728897308.158:21021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 164.386567][T10081] syz.4.1799[10081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.386624][T10081] syz.4.1799[10081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.398204][T10081] syz.4.1799[10081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.398562][T10083] syzkaller0: entered promiscuous mode [ 164.416626][T10085] loop2: detected capacity change from 0 to 512 [ 164.421185][T10083] syzkaller0: entered allmulticast mode [ 164.439384][T10085] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1800: corrupted in-inode xattr: invalid ea_ino [ 164.453866][T10085] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1800: couldn't read orphan inode 15 (err -117) [ 164.472782][T10083] loop3: detected capacity change from 0 to 512 [ 164.487850][T10083] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.536720][T10094] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 164.561399][T10096] vlan0: entered promiscuous mode [ 164.567264][T10096] bond0: entered promiscuous mode [ 164.572384][T10096] bond_slave_0: entered promiscuous mode [ 164.578250][T10096] bond_slave_1: entered promiscuous mode [ 164.586280][T10096] bond0: left promiscuous mode [ 164.591141][T10096] bond_slave_0: left promiscuous mode [ 164.591359][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.596706][T10096] bond_slave_1: left promiscuous mode [ 164.610617][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.628844][T10101] vlan0: entered promiscuous mode [ 164.634831][T10101] bond0: entered promiscuous mode [ 164.639954][T10101] bond_slave_0: entered promiscuous mode [ 164.645777][T10101] bond_slave_1: entered promiscuous mode [ 164.652512][T10101] bond0: left promiscuous mode [ 164.657329][T10101] bond_slave_0: left promiscuous mode [ 164.662857][T10101] bond_slave_1: left promiscuous mode [ 164.679021][T10107] loop0: detected capacity change from 0 to 512 [ 164.683108][T10105] bond4: entered promiscuous mode [ 164.690417][T10105] bond4: entered allmulticast mode [ 164.695898][T10105] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.706265][T10105] bond4 (unregistering): Released all slaves [ 164.708732][T10107] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.804106][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 164.835772][T10116] loop0: detected capacity change from 0 to 128 [ 164.859925][T10118] syz.0.1813[10118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.860006][T10118] syz.0.1813[10118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.871887][T10118] syz.0.1813[10118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.891116][T10120] bond1: entered promiscuous mode [ 164.907654][T10120] bond1: entered allmulticast mode [ 164.913938][T10120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.926958][T10120] bond1 (unregistering): Released all slaves [ 164.970528][T10125] bond4: entered promiscuous mode [ 164.975640][T10125] bond4: entered allmulticast mode [ 164.981028][T10125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.993190][T10125] bond4 (unregistering): Released all slaves [ 165.121905][T10144] loop3: detected capacity change from 0 to 1024 [ 165.145660][T10138] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1819'. [ 165.158310][T10149] loop0: detected capacity change from 0 to 512 [ 165.176564][T10149] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1822: corrupted in-inode xattr: invalid ea_ino [ 165.190463][T10149] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1822: couldn't read orphan inode 15 (err -117) [ 165.202648][T10152] loop3: detected capacity change from 0 to 128 [ 165.240480][T10158] loop3: detected capacity change from 0 to 512 [ 165.252781][T10154] loop4: detected capacity change from 0 to 512 [ 165.259803][T10158] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1825: corrupted in-inode xattr: invalid ea_ino [ 165.261533][T10160] loop2: detected capacity change from 0 to 2048 [ 165.274744][T10158] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1825: couldn't read orphan inode 15 (err -117) [ 165.318328][T10154] EXT4-fs error (device loop4): __ext4_iget:4952: inode #3: block 127754: comm syz.4.1824: invalid block [ 165.329992][T10154] EXT4-fs error (device loop4): ext4_quota_enable:7056: comm syz.4.1824: Bad quota inode: 3, type: 0 [ 165.347581][T10154] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 165.350293][T10168] loop3: detected capacity change from 0 to 4096 [ 165.362652][T10154] EXT4-fs (loop4): mount failed [ 165.372416][T10170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1828'. [ 165.382847][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1828'. [ 165.395304][T10168] siw: device registration error -23 [ 165.428137][T10177] loop2: detected capacity change from 0 to 512 [ 165.457587][T10177] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.472933][T10184] loop4: detected capacity change from 0 to 128 [ 165.480186][T10183] syz.3.1833 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 165.481091][T10184] vfat: Unknown parameter 'ÿ|ÿÿÿÿ' [ 165.513667][T10188] loop3: detected capacity change from 0 to 512 [ 165.521292][T10186] syzkaller0: entered promiscuous mode [ 165.526956][T10186] syzkaller0: entered allmulticast mode [ 165.532987][T10188] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1835: corrupted in-inode xattr: invalid ea_ino [ 165.547994][T10188] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1835: couldn't read orphan inode 15 (err -117) [ 165.553644][T10186] loop2: detected capacity change from 0 to 512 [ 165.587316][T10186] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.590656][T10191] loop3: detected capacity change from 0 to 512 [ 165.618509][T10191] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1836: corrupted in-inode xattr: invalid ea_ino [ 165.632301][T10191] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1836: couldn't read orphan inode 15 (err -117) [ 165.679824][T10196] loop3: detected capacity change from 0 to 512 [ 165.698050][T10196] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1837: corrupted in-inode xattr: invalid ea_ino [ 165.712306][T10196] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1837: couldn't read orphan inode 15 (err -117) [ 165.785871][T10207] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 165.824535][T10211] loop2: detected capacity change from 0 to 512 [ 165.824584][T10205] loop3: detected capacity change from 0 to 1024 [ 165.850543][T10211] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.900618][T10218] batadv0: entered promiscuous mode [ 165.902021][T10218] batadv_slave_0: entered promiscuous mode [ 165.902113][T10218] batadv_slave_0: left promiscuous mode [ 165.902351][T10218] batadv0: left promiscuous mode [ 165.931601][T10216] syz.3.1845[10216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.940718][T10222] syzkaller0: entered promiscuous mode [ 165.957674][T10222] syzkaller0: entered allmulticast mode [ 165.966631][T10218] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 165.989375][T10222] loop1: detected capacity change from 0 to 512 [ 166.022419][T10222] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.058199][T10242] raw_sendmsg: syz.2.1850 forgot to set AF_INET. Fix it! [ 166.088639][T10244] loop3: detected capacity change from 0 to 512 [ 166.113083][T10248] loop0: detected capacity change from 0 to 1024 [ 166.120576][T10244] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.174680][T10259] loop1: detected capacity change from 0 to 512 [ 166.193081][T10259] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1862: corrupted in-inode xattr: invalid ea_ino [ 166.207257][T10259] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1862: couldn't read orphan inode 15 (err -117) [ 166.237853][T10266] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 166.282269][T10271] loop0: detected capacity change from 0 to 128 [ 166.287185][T10274] vlan0: entered promiscuous mode [ 166.294195][T10274] bond0: entered promiscuous mode [ 166.299318][T10274] bond_slave_0: entered promiscuous mode [ 166.305087][T10274] bond_slave_1: entered promiscuous mode [ 166.311828][T10274] bond0: left promiscuous mode [ 166.316748][T10274] bond_slave_0: left promiscuous mode [ 166.322388][T10274] bond_slave_1: left promiscuous mode [ 166.404715][T10285] loop3: detected capacity change from 0 to 1024 [ 166.422600][T10289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.432056][T10289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.443948][T10289] vlan2: entered promiscuous mode [ 166.449675][T10289] bond0: entered promiscuous mode [ 166.454752][T10289] bond_slave_0: entered promiscuous mode [ 166.460511][T10289] bond_slave_1: entered promiscuous mode [ 166.467128][T10289] bond0: left promiscuous mode [ 166.471961][T10289] bond_slave_0: left promiscuous mode [ 166.477617][T10289] bond_slave_1: left promiscuous mode [ 166.479918][T10295] loop3: detected capacity change from 0 to 512 [ 166.491164][T10295] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1876: corrupted in-inode xattr: invalid ea_ino [ 166.504948][T10295] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1876: couldn't read orphan inode 15 (err -117) [ 166.588067][T10300] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 166.624912][T10302] loop3: detected capacity change from 0 to 4096 [ 166.636805][T10302] siw: device registration error -23 [ 166.952465][T10327] loop2: detected capacity change from 0 to 128 [ 166.989698][T10330] loop4: detected capacity change from 0 to 1024 [ 166.991585][T10327] syz.2.1889: attempt to access beyond end of device [ 166.991585][T10327] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 167.022255][T10329] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 167.036463][T10326] syz.2.1889: attempt to access beyond end of device [ 167.036463][T10326] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 167.076261][T10333] syzkaller0: entered promiscuous mode [ 167.081796][T10333] syzkaller0: entered allmulticast mode [ 167.090669][T10326] syz.2.1889: attempt to access beyond end of device [ 167.090669][T10326] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 167.122200][T10333] loop3: detected capacity change from 0 to 512 [ 167.129268][T10326] syz.2.1889: attempt to access beyond end of device [ 167.129268][T10326] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 167.143520][T10326] syz.2.1889: attempt to access beyond end of device [ 167.143520][T10326] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 167.157934][T10326] syz.2.1889: attempt to access beyond end of device [ 167.157934][T10326] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 167.164660][T10357] loop4: detected capacity change from 0 to 512 [ 167.171423][T10326] syz.2.1889: attempt to access beyond end of device [ 167.171423][T10326] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 167.185355][T10333] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.190604][T10326] syz.2.1889: attempt to access beyond end of device [ 167.190604][T10326] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 167.214180][T10326] syz.2.1889: attempt to access beyond end of device [ 167.214180][T10326] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 167.228523][T10326] syz.2.1889: attempt to access beyond end of device [ 167.228523][T10326] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 167.229732][T10357] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.265729][T10357] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 167.276549][T10327] netlink: 'syz.2.1889': attribute type 10 has an invalid length. [ 167.295695][T10327] team0: Failed to send options change via netlink (err -105) [ 167.303206][T10327] team0: Port device netdevsim1 added [ 167.306015][T10364] loop0: detected capacity change from 0 to 4096 [ 167.326742][T10364] siw: device registration error -23 [ 167.342910][T10370] loop4: detected capacity change from 0 to 512 [ 167.353706][T10370] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1902: corrupted in-inode xattr: invalid ea_ino [ 167.368156][T10370] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1902: couldn't read orphan inode 15 (err -117) [ 167.377826][T10372] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 167.427486][T10379] loop3: detected capacity change from 0 to 512 [ 167.436087][T10379] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1906: corrupted in-inode xattr: invalid ea_ino [ 167.450024][T10379] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1906: couldn't read orphan inode 15 (err -117) [ 167.477703][T10382] loop0: detected capacity change from 0 to 1024 [ 167.754451][T10393] loop0: detected capacity change from 0 to 512 [ 167.766168][T10393] EXT4-fs error (device loop0): __ext4_iget:4952: inode #3: block 127754: comm syz.0.1910: invalid block [ 167.777832][T10393] EXT4-fs error (device loop0): ext4_quota_enable:7056: comm syz.0.1910: Bad quota inode: 3, type: 0 [ 167.789032][T10393] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 167.803753][T10393] EXT4-fs (loop0): mount failed [ 167.827170][T10397] syzkaller0: entered promiscuous mode [ 167.832658][T10397] syzkaller0: entered allmulticast mode [ 167.845576][T10397] loop2: detected capacity change from 0 to 512 [ 167.876892][T10397] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.023097][T10406] loop0: detected capacity change from 0 to 4096 [ 168.034035][T10406] siw: device registration error -23 [ 168.068190][T10415] loop2: detected capacity change from 0 to 128 [ 168.074735][T10415] vfat: Unknown parameter '' [ 168.118536][T10419] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 168.193082][T10423] bond1: entered promiscuous mode [ 168.198322][T10423] bond1: entered allmulticast mode [ 168.204009][T10423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.213829][T10423] bond1 (unregistering): Released all slaves [ 168.278666][T10426] __nla_validate_parse: 7 callbacks suppressed [ 168.278679][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 168.279801][T10428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.303165][T10428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.317168][T10428] vlan0: entered promiscuous mode [ 168.371606][T10430] loop3: detected capacity change from 0 to 1024 [ 168.683756][T10439] loop3: detected capacity change from 0 to 1024 [ 168.880637][T10454] loop2: detected capacity change from 0 to 512 [ 168.889227][T10454] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1932: corrupted in-inode xattr: invalid ea_ino [ 168.902776][T10454] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1932: couldn't read orphan inode 15 (err -117) [ 168.933065][T10457] loop4: detected capacity change from 0 to 1024 [ 168.939892][T10457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.957387][T10458] process 'syz.4.1933' launched './file0/file0' with NULL argv: empty string added [ 168.957673][ T29] kauditd_printk_skb: 731 callbacks suppressed [ 168.957686][ T29] audit: type=1400 audit(1728897312.878:21753): avc: denied { execute } for pid=10456 comm="syz.4.1933" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.995694][ T29] audit: type=1400 audit(1728897312.878:21754): avc: denied { execute_no_trans } for pid=10456 comm="syz.4.1933" path="/68/file1/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.020551][ T29] audit: type=1400 audit(1728897312.888:21755): avc: denied { setattr } for pid=10456 comm="syz.4.1933" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.028566][T10462] loop0: detected capacity change from 0 to 512 [ 169.056683][T10462] EXT4-fs error (device loop0): __ext4_iget:4952: inode #3: block 127754: comm syz.0.1935: invalid block [ 169.068373][T10462] EXT4-fs error (device loop0): ext4_quota_enable:7056: comm syz.0.1935: Bad quota inode: 3, type: 0 [ 169.080267][T10462] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 169.095571][T10462] EXT4-fs (loop0): mount failed [ 169.113262][T10469] loop4: detected capacity change from 0 to 1024 [ 169.130177][ T29] audit: type=1326 audit(1728897313.048:21756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 169.130480][T10466] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1934'. [ 169.153796][ T29] audit: type=1326 audit(1728897313.048:21757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 169.186932][ T29] audit: type=1326 audit(1728897313.088:21758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 169.210605][ T29] audit: type=1326 audit(1728897313.088:21759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 169.234535][ T29] audit: type=1326 audit(1728897313.088:21760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 169.258186][ T29] audit: type=1326 audit(1728897313.088:21761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 169.282108][ T29] audit: type=1326 audit(1728897313.088:21762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10471 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 169.336579][T10480] loop4: detected capacity change from 0 to 512 [ 169.347028][T10480] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.391921][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1941'. [ 169.403390][T10485] loop0: detected capacity change from 0 to 128 [ 169.410531][T10485] vfat: Unknown parameter '' [ 169.427357][T10487] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1942'. [ 169.436442][T10487] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1942'. [ 169.471010][T10489] loop4: detected capacity change from 0 to 4096 [ 169.556157][T10493] loop4: detected capacity change from 0 to 1024 [ 169.584330][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.592857][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.603826][T10498] vlan2: entered promiscuous mode [ 169.609410][T10498] bond0: entered promiscuous mode [ 169.614453][T10498] bond_slave_0: entered promiscuous mode [ 169.620276][T10498] bond_slave_1: entered promiscuous mode [ 169.626764][T10498] bond0: left promiscuous mode [ 169.631540][T10498] bond_slave_0: left promiscuous mode [ 169.637104][T10498] bond_slave_1: left promiscuous mode [ 169.731308][T10500] bond1: entered promiscuous mode [ 169.736440][T10500] bond1: entered allmulticast mode [ 169.741710][T10500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.752463][T10500] bond1 (unregistering): Released all slaves [ 169.818970][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.827473][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.839256][T10503] vlan0: entered promiscuous mode [ 169.844742][T10503] bond0: entered promiscuous mode [ 169.849950][T10503] bond_slave_0: entered promiscuous mode [ 169.855677][T10503] bond_slave_1: entered promiscuous mode [ 169.861890][T10503] bond0: left promiscuous mode [ 169.866718][T10503] bond_slave_0: left promiscuous mode [ 169.872172][T10503] bond_slave_1: left promiscuous mode [ 170.271359][T10518] loop4: detected capacity change from 0 to 1024 [ 170.433386][T10530] loop3: detected capacity change from 0 to 512 [ 170.440360][T10530] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 170.449298][T10530] EXT4-fs (loop3): orphan cleanup on readonly fs [ 170.456064][T10530] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm +}[@: bad orphan inode 15 [ 170.465716][T10530] ext4_test_bit(bit=14, block=18) = 1 [ 170.471102][T10530] is_bad_inode(inode)=0 [ 170.475271][T10530] NEXT_ORPHAN(inode)=1023 [ 170.479582][T10530] max_ino=32 [ 170.482758][T10530] i_nlink=0 [ 170.486062][T10530] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 170.500711][T10530] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 170.514099][T10530] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm +}[@: deleted inode referenced: 15 [ 170.586399][T10542] 9pnet_fd: Insufficient options for proto=fd [ 170.629259][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.639032][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.650179][T10546] vlan2: entered promiscuous mode [ 170.656713][T10546] bond0: entered promiscuous mode [ 170.661760][T10546] bond_slave_0: entered promiscuous mode [ 170.667521][T10546] bond_slave_1: entered promiscuous mode [ 170.673740][T10546] bond0: left promiscuous mode [ 170.678550][T10546] bond_slave_0: left promiscuous mode [ 170.683949][T10546] bond_slave_1: left promiscuous mode [ 170.695216][T10548] loop2: detected capacity change from 0 to 512 [ 170.705889][T10548] EXT4-fs error (device loop2): __ext4_iget:4952: inode #3: block 127754: comm syz.2.1966: invalid block [ 170.717467][T10548] EXT4-fs error (device loop2): ext4_quota_enable:7056: comm syz.2.1966: Bad quota inode: 3, type: 0 [ 170.728793][T10548] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 170.743566][T10548] EXT4-fs (loop2): mount failed [ 171.040546][T10561] loop2: detected capacity change from 0 to 1024 [ 171.051171][T10561] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1970'. [ 171.112721][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 171.188349][T10577] loop1: detected capacity change from 0 to 1024 [ 171.240211][T10582] bpf_get_probe_write_proto: 7 callbacks suppressed [ 171.240226][T10582] syz.1.1978[10582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.262635][T10582] syz.1.1978[10582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.277308][T10582] syz.1.1978[10582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.366735][T10594] loop3: detected capacity change from 0 to 1024 [ 171.413171][T10589] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1981'. [ 171.459777][T10596] lo speed is unknown, defaulting to 1000 [ 171.490756][T10608] syz.3.1987[10608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.490883][T10608] syz.3.1987[10608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.502974][T10608] syz.3.1987[10608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.531212][T10612] loop4: detected capacity change from 0 to 512 [ 171.550646][T10612] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1988: corrupted in-inode xattr: invalid ea_ino [ 171.564291][T10612] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1988: couldn't read orphan inode 15 (err -117) [ 171.631310][T10624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.651269][T10624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.660225][T10626] loop1: detected capacity change from 0 to 512 [ 171.671844][T10627] loop4: detected capacity change from 0 to 1024 [ 171.689048][T10626] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.754159][T10632] syzkaller0: entered promiscuous mode [ 171.759734][T10632] syzkaller0: entered allmulticast mode [ 171.802641][T10638] loop1: detected capacity change from 0 to 512 [ 171.811056][T10638] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1998: corrupted in-inode xattr: invalid ea_ino [ 171.825209][T10638] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1998: couldn't read orphan inode 15 (err -117) [ 171.969351][T10650] loop4: detected capacity change from 0 to 1024 [ 171.995739][T10654] syz.4.2002[10654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.995794][T10654] syz.4.2002[10654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.007342][T10654] syz.4.2002[10654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.085915][T10658] loop4: detected capacity change from 0 to 512 [ 172.105243][T10658] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2003: corrupted in-inode xattr: invalid ea_ino [ 172.118878][T10658] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.2003: couldn't read orphan inode 15 (err -117) [ 172.126846][T10661] loop2: detected capacity change from 0 to 1024 [ 172.137529][T10661] EXT4-fs: Ignoring removed orlov option [ 172.143312][T10661] EXT4-fs: Ignoring removed bh option [ 172.326297][T10684] loop0: detected capacity change from 0 to 512 [ 172.336628][T10684] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.576650][T10691] loop3: detected capacity change from 0 to 512 [ 172.584617][T10691] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2015: corrupted in-inode xattr: invalid ea_ino [ 172.598173][T10691] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2015: couldn't read orphan inode 15 (err -117) [ 172.956809][T10696] loop4: detected capacity change from 0 to 512 [ 172.986644][T10696] EXT4-fs error (device loop4): __ext4_iget:4952: inode #3: block 127754: comm syz.4.2017: invalid block [ 172.999047][T10696] EXT4-fs error (device loop4): ext4_quota_enable:7056: comm syz.4.2017: Bad quota inode: 3, type: 0 [ 173.010279][T10696] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 173.025694][T10696] EXT4-fs (loop4): mount failed [ 173.133132][T10710] syzkaller0: entered promiscuous mode [ 173.138760][T10710] syzkaller0: entered allmulticast mode [ 173.312786][T10725] loop0: detected capacity change from 0 to 1024 [ 173.330028][T10723] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2027'. [ 173.461681][T10738] loop3: detected capacity change from 0 to 512 [ 173.476932][T10738] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.623231][T10752] bond4: entered promiscuous mode [ 173.628420][T10752] bond4: entered allmulticast mode [ 173.636333][T10752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.647414][T10752] bond4 (unregistering): Released all slaves [ 173.758530][T10761] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 173.793683][T10763] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 173.932506][T10767] loop3: detected capacity change from 0 to 4096 [ 174.098324][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 174.098336][ T29] audit: type=1326 audit(1728897318.018:22297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 174.128290][ T29] audit: type=1326 audit(1728897318.018:22298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 174.195097][ T29] audit: type=1326 audit(1728897318.048:22299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 174.218819][ T29] audit: type=1326 audit(1728897318.048:22300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 174.242760][ T29] audit: type=1326 audit(1728897318.048:22301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 174.251409][T10789] loop2: detected capacity change from 0 to 1024 [ 174.266349][ T29] audit: type=1326 audit(1728897318.078:22302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 174.296246][ T29] audit: type=1326 audit(1728897318.078:22303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 174.319899][ T29] audit: type=1326 audit(1728897318.078:22304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 174.343608][ T29] audit: type=1326 audit(1728897318.078:22305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 174.367221][ T29] audit: type=1326 audit(1728897318.078:22306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09de8dff9 code=0x7ffc0000 [ 174.437997][T10788] loop3: detected capacity change from 0 to 512 [ 174.464051][T10788] EXT4-fs error (device loop3): __ext4_iget:4952: inode #3: block 127754: comm syz.3.2051: invalid block [ 174.488961][T10788] EXT4-fs error (device loop3): ext4_quota_enable:7056: comm syz.3.2051: Bad quota inode: 3, type: 0 [ 174.505918][T10801] syzkaller0: entered promiscuous mode [ 174.511421][T10801] syzkaller0: entered allmulticast mode [ 174.519343][T10788] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 174.540041][T10805] loop0: detected capacity change from 0 to 1024 [ 174.550169][T10788] EXT4-fs (loop3): mount failed [ 174.679001][T10812] syzkaller0: entered promiscuous mode [ 174.684521][T10812] syzkaller0: entered allmulticast mode [ 174.712158][T10812] loop0: detected capacity change from 0 to 512 [ 174.727916][T10812] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.731410][T10819] loop3: detected capacity change from 0 to 512 [ 174.755568][T10819] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2058: corrupted in-inode xattr: invalid ea_ino [ 174.772975][T10819] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2058: couldn't read orphan inode 15 (err -117) [ 174.883121][T10830] loop1: detected capacity change from 0 to 512 [ 174.901197][T10830] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 174.916148][T10830] EXT4-fs (loop1): orphan cleanup on readonly fs [ 174.931245][T10833] loop4: detected capacity change from 0 to 512 [ 174.938638][T10830] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.2062: bad orphan inode 15 [ 174.949834][T10837] loop0: detected capacity change from 0 to 1024 [ 174.957118][T10830] ext4_test_bit(bit=14, block=18) = 1 [ 174.962521][T10830] is_bad_inode(inode)=0 [ 174.966760][T10830] NEXT_ORPHAN(inode)=1023 [ 174.971088][T10830] max_ino=32 [ 174.974378][T10830] i_nlink=0 [ 174.977886][T10830] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm syz.1.2062: corrupted xattr block 19: e_value size too large [ 174.979612][T10833] EXT4-fs error (device loop4): __ext4_iget:4952: inode #3: block 127754: comm syz.4.2064: invalid block [ 174.993005][T10830] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 175.006885][T10833] EXT4-fs error (device loop4): ext4_quota_enable:7056: comm syz.4.2064: Bad quota inode: 3, type: 0 [ 175.024164][T10833] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 175.039151][T10833] EXT4-fs (loop4): mount failed [ 175.088093][T10845] loop0: detected capacity change from 0 to 4096 [ 175.140799][T10859] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 175.189549][T10866] loop0: detected capacity change from 0 to 512 [ 175.191360][T10864] syzkaller0: entered promiscuous mode [ 175.201415][T10864] syzkaller0: entered allmulticast mode [ 175.208909][T10866] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.224252][T10864] loop4: detected capacity change from 0 to 512 [ 175.247148][T10864] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.300033][T10872] loop0: detected capacity change from 0 to 512 [ 175.307126][T10872] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 175.327372][T10872] EXT4-fs (loop0): orphan cleanup on readonly fs [ 175.334654][T10872] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.2076: bad orphan inode 15 [ 175.345808][T10872] ext4_test_bit(bit=14, block=18) = 1 [ 175.351263][T10872] is_bad_inode(inode)=0 [ 175.355457][T10872] NEXT_ORPHAN(inode)=1023 [ 175.359794][T10872] max_ino=32 [ 175.362991][T10872] i_nlink=0 [ 175.366740][T10872] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.2076: corrupted xattr block 19: e_value size too large [ 175.368003][T10876] loop2: detected capacity change from 0 to 1024 [ 175.389748][T10872] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 175.461482][T10885] loop0: detected capacity change from 0 to 4096 [ 175.478972][T10893] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 175.490816][T10892] loop2: detected capacity change from 0 to 4096 [ 175.522594][T10897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.532256][T10897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.547392][T10897] vlan2: entered promiscuous mode [ 175.553979][T10897] bond0: entered promiscuous mode [ 175.559076][T10897] bond_slave_0: entered promiscuous mode [ 175.562204][T10901] loop4: detected capacity change from 0 to 512 [ 175.564769][T10897] bond_slave_1: entered promiscuous mode [ 175.578747][T10897] bond0: left promiscuous mode [ 175.583608][T10897] bond_slave_0: left promiscuous mode [ 175.589103][T10897] bond_slave_1: left promiscuous mode [ 175.599024][T10903] loop3: detected capacity change from 0 to 512 [ 175.599104][T10907] loop2: detected capacity change from 0 to 512 [ 175.611946][T10903] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 175.623257][T10901] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.633158][T10903] EXT4-fs (loop3): orphan cleanup on readonly fs [ 175.640277][T10903] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm +}[@: bad orphan inode 15 [ 175.641655][T10907] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.663293][T10903] ext4_test_bit(bit=14, block=18) = 1 [ 175.668737][T10903] is_bad_inode(inode)=0 [ 175.672906][T10903] NEXT_ORPHAN(inode)=1023 [ 175.677450][T10903] max_ino=32 [ 175.680650][T10903] i_nlink=0 [ 175.705898][T10903] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 175.720076][T10903] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 175.762971][T10914] loop2: detected capacity change from 0 to 512 [ 175.771857][T10914] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2092: corrupted in-inode xattr: invalid ea_ino [ 175.785742][T10914] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.2092: couldn't read orphan inode 15 (err -117) [ 175.829608][T10920] loop3: detected capacity change from 0 to 1024 [ 175.875997][T10924] loop3: detected capacity change from 0 to 512 [ 175.896675][T10924] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.918174][T10928] loop1: detected capacity change from 0 to 4096 [ 175.992724][T10936] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 176.242111][T10950] loop3: detected capacity change from 0 to 512 [ 176.278537][T10950] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.291882][T10956] loop0: detected capacity change from 0 to 4096 [ 176.455635][T10965] loop3: detected capacity change from 0 to 512 [ 176.481290][T10965] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2110: corrupted in-inode xattr: invalid ea_ino [ 176.496034][T10965] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2110: couldn't read orphan inode 15 (err -117) [ 176.661651][T10972] loop2: detected capacity change from 0 to 512 [ 176.677631][T10974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.678267][T10972] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.697395][T10974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.709032][T10974] vlan2: entered promiscuous mode [ 176.714607][T10974] bond0: entered promiscuous mode [ 176.719699][T10974] bond_slave_0: entered promiscuous mode [ 176.725432][T10974] bond_slave_1: entered promiscuous mode [ 176.734268][T10974] bond0: left promiscuous mode [ 176.739114][T10974] bond_slave_0: left promiscuous mode [ 176.744531][T10974] bond_slave_1: left promiscuous mode [ 176.752111][T10978] loop0: detected capacity change from 0 to 4096 [ 176.759500][T10978] EXT4-fs: Ignoring removed nobh option [ 176.765243][T10978] EXT4-fs: Ignoring removed i_version option [ 176.798279][T10981] bond1: entered promiscuous mode [ 176.803415][T10981] bond1: entered allmulticast mode [ 176.809583][T10981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.838187][T10981] bond1 (unregistering): Released all slaves [ 176.849404][T10978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2115'. [ 176.906791][T10986] loop1: detected capacity change from 0 to 1024 [ 176.909447][T10991] usb usb7: usbfs: process 10991 (syz.2.2120) did not claim interface 0 before use [ 176.947666][T10996] loop1: detected capacity change from 0 to 512 [ 176.981774][T10996] EXT4-fs error (device loop1): __ext4_iget:4952: inode #3: block 127754: comm syz.1.2122: invalid block [ 176.993578][T10996] EXT4-fs error (device loop1): ext4_quota_enable:7056: comm syz.1.2122: Bad quota inode: 3, type: 0 [ 177.004062][T11002] syzkaller0: entered promiscuous mode [ 177.008127][T10996] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 177.009918][T11002] syzkaller0: entered allmulticast mode [ 177.024818][T10996] EXT4-fs (loop1): mount failed [ 177.041880][T11002] loop0: detected capacity change from 0 to 512 [ 177.057104][T11002] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.143194][T11015] loop2: detected capacity change from 0 to 512 [ 177.163724][T11015] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2126: corrupted in-inode xattr: invalid ea_ino [ 177.178132][T11015] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.2126: couldn't read orphan inode 15 (err -117) [ 177.259579][T11017] lo speed is unknown, defaulting to 1000 [ 177.354499][T11030] loop3: detected capacity change from 0 to 1024 [ 177.376469][T11029] syzkaller0: entered promiscuous mode [ 177.382036][T11029] syzkaller0: entered allmulticast mode [ 177.395512][T11028] loop0: detected capacity change from 0 to 512 [ 177.426293][T11028] EXT4-fs error (device loop0): __ext4_iget:4952: inode #3: block 127754: comm syz.0.2131: invalid block [ 177.438350][T11028] EXT4-fs error (device loop0): ext4_quota_enable:7056: comm syz.0.2131: Bad quota inode: 3, type: 0 [ 177.451484][T11028] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 177.466555][T11028] EXT4-fs (loop0): mount failed [ 177.559014][T11043] loop0: detected capacity change from 0 to 1024 [ 177.580090][T11043] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2135'. [ 177.607505][T11046] loop0: detected capacity change from 0 to 512 [ 177.625948][T11046] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2136: corrupted in-inode xattr: invalid ea_ino [ 177.639599][T11046] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.2136: couldn't read orphan inode 15 (err -117) [ 177.939296][T11050] loop2: detected capacity change from 0 to 512 [ 177.956712][T11050] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.019522][T11056] loop1: detected capacity change from 0 to 4096 [ 178.048088][T11060] loop1: detected capacity change from 0 to 512 [ 178.054972][T11060] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 178.073719][T11060] EXT4-fs (loop1): orphan cleanup on readonly fs [ 178.080530][T11060] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm +}[@: bad orphan inode 15 [ 178.090407][T11060] ext4_test_bit(bit=14, block=18) = 1 [ 178.095830][T11060] is_bad_inode(inode)=0 [ 178.100076][T11060] NEXT_ORPHAN(inode)=1023 [ 178.104431][T11060] max_ino=32 [ 178.107647][T11060] i_nlink=0 [ 178.110915][T11060] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 178.124783][T11060] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 178.141337][T11067] loop2: detected capacity change from 0 to 512 [ 178.159162][T11067] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2142: corrupted in-inode xattr: invalid ea_ino [ 178.172906][T11067] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.2142: couldn't read orphan inode 15 (err -117) [ 178.440425][T11084] loop3: detected capacity change from 0 to 1024 [ 178.558220][T11077] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2146'. [ 178.661214][T11089] loop3: detected capacity change from 0 to 512 [ 178.672709][T11087] syzkaller0: entered promiscuous mode [ 178.674505][T11091] loop4: detected capacity change from 0 to 512 [ 178.678253][T11087] syzkaller0: entered allmulticast mode [ 178.692270][T11089] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.705586][T11091] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.710800][T11087] loop0: detected capacity change from 0 to 512 [ 178.749918][T11087] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.773417][T11097] loop4: detected capacity change from 0 to 4096 [ 178.889515][T11110] loop0: detected capacity change from 0 to 512 [ 178.896620][T11110] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 178.906299][T11110] EXT4-fs (loop0): orphan cleanup on readonly fs [ 178.917948][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2153'. [ 178.927352][T11110] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm +}[@: bad orphan inode 15 [ 178.929645][T11111] loop3: detected capacity change from 0 to 128 [ 178.943008][T11110] ext4_test_bit(bit=14, block=18) = 1 [ 178.946437][T11111] vfat: Unknown parameter '' [ 178.949184][T11110] is_bad_inode(inode)=0 [ 178.958108][T11110] NEXT_ORPHAN(inode)=1023 [ 178.962435][T11110] max_ino=32 [ 178.965646][T11110] i_nlink=0 [ 178.969986][T11110] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 178.988807][T11110] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 179.034215][T11117] loop0: detected capacity change from 0 to 512 [ 179.046445][T11117] EXT4-fs error (device loop0): __ext4_iget:4952: inode #3: block 127754: comm syz.0.2156: invalid block [ 179.058360][T11117] EXT4-fs error (device loop0): ext4_quota_enable:7056: comm syz.0.2156: Bad quota inode: 3, type: 0 [ 179.070341][T11117] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 179.089746][T11122] loop2: detected capacity change from 0 to 512 [ 179.101718][T11122] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2155: corrupted in-inode xattr: invalid ea_ino [ 179.116313][T11117] EXT4-fs (loop0): mount failed [ 179.122686][T11122] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.2155: couldn't read orphan inode 15 (err -117) [ 179.124725][T11121] syzkaller0: entered promiscuous mode [ 179.140181][T11121] syzkaller0: entered allmulticast mode [ 179.177937][T11129] loop0: detected capacity change from 0 to 512 [ 179.196721][T11129] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2160: corrupted in-inode xattr: invalid ea_ino [ 179.212198][T11129] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.2160: couldn't read orphan inode 15 (err -117) [ 179.221110][T11131] loop1: detected capacity change from 0 to 1024 [ 179.245882][T11127] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2159'. [ 179.265752][T11135] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 179.297983][T11137] loop1: detected capacity change from 0 to 4096 [ 179.393255][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 179.393269][ T29] audit: type=1326 audit(1728897323.308:22589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7fc00000 [ 179.423121][ T29] audit: type=1326 audit(1728897323.308:22590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca2f20dff9 code=0x7fc00000 [ 179.446629][ T29] audit: type=1326 audit(1728897323.308:22591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7fc00000 [ 179.457046][T11150] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 179.470497][ T29] audit: type=1326 audit(1728897323.308:22592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7fc00000 [ 179.501993][ T29] audit: type=1326 audit(1728897323.308:22593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7fc00000 [ 179.525836][ T29] audit: type=1326 audit(1728897323.308:22594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7fc00000 [ 179.549524][ T29] audit: type=1326 audit(1728897323.308:22595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7fc00000 [ 179.573495][ T29] audit: type=1326 audit(1728897323.308:22596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7fc00000 [ 179.597108][ T29] audit: type=1326 audit(1728897323.308:22597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7fc00000 [ 179.620693][ T29] audit: type=1326 audit(1728897323.308:22598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7fc00000 [ 179.678322][T11157] loop0: detected capacity change from 0 to 128 [ 179.692805][T11157] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.734121][T11153] loop1: detected capacity change from 0 to 1024 [ 179.817787][T11170] loop3: detected capacity change from 0 to 2048 [ 179.822647][T11171] loop0: detected capacity change from 0 to 1024 [ 179.830681][T11170] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.830806][T11170] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 179.854465][T11170] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 179.859196][T11165] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2173'. [ 179.862628][T11170] System zones: 0-19 [ 179.889545][T11170] syz.3.2175[11170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.889693][T11170] syz.3.2175[11170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.899904][T11175] pim6reg1: entered promiscuous mode [ 179.918057][T11175] pim6reg1: entered allmulticast mode [ 179.924244][T11170] syz.3.2175[11170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.928698][T11175] bridge_slave_1: left allmulticast mode [ 179.946052][T11175] bridge_slave_1: left promiscuous mode [ 179.951898][T11175] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.954472][T11179] loop4: detected capacity change from 0 to 512 [ 179.960997][T11170] program syz.3.2175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.976429][T11179] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 179.985944][T11175] bridge_slave_0: left allmulticast mode [ 179.991751][T11175] bridge_slave_0: left promiscuous mode [ 179.997575][T11175] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.006183][T11179] EXT4-fs (loop4): orphan cleanup on readonly fs [ 180.012670][T11179] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm +}[@: bad orphan inode 15 [ 180.015440][T11182] loop0: detected capacity change from 0 to 4096 [ 180.022518][T11179] ext4_test_bit(bit=14, block=18) = 1 [ 180.034044][T11179] is_bad_inode(inode)=0 [ 180.038254][T11179] NEXT_ORPHAN(inode)=1023 [ 180.042583][T11179] max_ino=32 [ 180.045780][T11179] i_nlink=0 [ 180.049102][T11179] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 180.063055][T11179] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 180.143127][T11192] syzkaller0: entered promiscuous mode [ 180.148712][T11192] syzkaller0: entered allmulticast mode [ 180.164064][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2182'. [ 180.167512][T11192] loop3: detected capacity change from 0 to 512 [ 180.175780][T11193] loop4: detected capacity change from 0 to 128 [ 180.186470][T11193] vfat: Unknown parameter '' [ 180.202858][T11192] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.204386][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.223005][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.256905][T11198] vlan2: entered promiscuous mode [ 180.262516][T11198] bond0: entered promiscuous mode [ 180.267577][T11198] bond_slave_0: entered promiscuous mode [ 180.273336][T11198] bond_slave_1: entered promiscuous mode [ 180.279694][T11198] bond0: left promiscuous mode [ 180.284456][T11198] bond_slave_0: left promiscuous mode [ 180.290058][T11198] bond_slave_1: left promiscuous mode [ 180.328528][T11205] loop2: detected capacity change from 0 to 512 [ 180.357480][T11205] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.470226][T11209] loop3: detected capacity change from 0 to 1024 [ 180.490602][T11209] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2188'. [ 180.527159][T11218] loop3: detected capacity change from 0 to 512 [ 180.533941][T11218] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 180.552983][T11218] EXT4-fs (loop3): orphan cleanup on readonly fs [ 180.559686][T11218] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm +}[@: bad orphan inode 15 [ 180.569454][T11218] ext4_test_bit(bit=14, block=18) = 1 [ 180.574834][T11218] is_bad_inode(inode)=0 [ 180.579008][T11218] NEXT_ORPHAN(inode)=1023 [ 180.583325][T11218] max_ino=32 [ 180.586540][T11218] i_nlink=0 [ 180.589959][T11218] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 180.603859][T11218] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 180.630454][T11223] loop1: detected capacity change from 0 to 512 [ 180.657119][T11223] EXT4-fs error (device loop1): __ext4_iget:4952: inode #3: block 127754: comm syz.1.2193: invalid block [ 180.668994][T11223] EXT4-fs error (device loop1): ext4_quota_enable:7056: comm syz.1.2193: Bad quota inode: 3, type: 0 [ 180.681488][T11223] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 180.709908][T11223] EXT4-fs (loop1): mount failed [ 180.748642][T11238] loop1: detected capacity change from 0 to 512 [ 180.769582][T11242] loop3: detected capacity change from 0 to 512 [ 180.796234][T11238] EXT4-fs error (device loop1): __ext4_iget:4952: inode #3: block 127754: comm syz.1.2197: invalid block [ 180.807683][T11242] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.807771][T11238] EXT4-fs error (device loop1): ext4_quota_enable:7056: comm syz.1.2197: Bad quota inode: 3, type: 0 [ 180.829336][T11238] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 180.845422][T11238] EXT4-fs (loop1): mount failed [ 180.871885][T11252] loop0: detected capacity change from 0 to 512 [ 180.888581][T11252] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 180.901768][T11252] EXT4-fs (loop0): orphan cleanup on readonly fs [ 180.913160][T11252] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm +}[@: bad orphan inode 15 [ 180.923951][T11252] ext4_test_bit(bit=14, block=18) = 1 [ 180.929467][T11252] is_bad_inode(inode)=0 [ 180.931224][T11258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.933675][T11252] NEXT_ORPHAN(inode)=1023 [ 180.946363][T11252] max_ino=32 [ 180.949590][T11252] i_nlink=0 [ 180.952929][T11252] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 180.955174][T11258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.967991][T11252] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 180.998189][T11263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.006870][T11263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.018583][T11265] syzkaller0: entered promiscuous mode [ 181.024097][T11265] syzkaller0: entered allmulticast mode [ 181.036662][T11265] loop0: detected capacity change from 0 to 512 [ 181.046140][T11265] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.174522][T11270] loop0: detected capacity change from 0 to 512 [ 181.181099][T11270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.188698][T11270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.197407][T11270] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 181.509419][T11272] syzkaller0: entered promiscuous mode [ 181.514945][T11272] syzkaller0: entered allmulticast mode [ 181.623028][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 181.637859][T11283] loop2: detected capacity change from 0 to 128 [ 181.660933][T11283] bio_check_eod: 177 callbacks suppressed [ 181.660943][T11283] syz.2.2212: attempt to access beyond end of device [ 181.660943][T11283] loop2: rw=0, sector=121, nr_sectors = 127 limit=128 [ 181.762095][ T169] kworker/u8:5: attempt to access beyond end of device [ 181.762095][ T169] loop2: rw=1, sector=249, nr_sectors = 792 limit=128 [ 181.787383][T11286] loop2: detected capacity change from 0 to 512 [ 181.796519][T11286] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.949555][T11295] loop2: detected capacity change from 0 to 1024 [ 181.960201][T11295] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2216'. [ 182.009101][T11302] loop2: detected capacity change from 0 to 4096 [ 182.022848][T11304] loop0: detected capacity change from 0 to 4096 [ 182.054623][T11308] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 182.071256][T11310] bond2: entered promiscuous mode [ 182.076788][T11310] bond2: entered allmulticast mode [ 182.082477][T11310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.093872][T11310] bond2 (unregistering): Released all slaves [ 182.165923][T11325] loop0: detected capacity change from 0 to 512 [ 182.173953][T11325] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2228: corrupted in-inode xattr: invalid ea_ino [ 182.189188][T11325] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.2228: couldn't read orphan inode 15 (err -117) [ 182.218668][T11327] loop2: detected capacity change from 0 to 1024 [ 182.231294][T11324] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2229'. [ 182.267361][T11333] loop2: detected capacity change from 0 to 512 [ 182.274132][T11333] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 182.283070][T11333] EXT4-fs (loop2): orphan cleanup on readonly fs [ 182.289806][T11333] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm +}[@: bad orphan inode 15 [ 182.299527][T11333] ext4_test_bit(bit=14, block=18) = 1 [ 182.304934][T11333] is_bad_inode(inode)=0 [ 182.309096][T11333] NEXT_ORPHAN(inode)=1023 [ 182.313487][T11333] max_ino=32 [ 182.316764][T11333] i_nlink=0 [ 182.320117][T11333] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 182.334073][T11333] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 182.369303][T11336] loop3: detected capacity change from 0 to 4096 [ 182.397282][T11340] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 182.444317][T11347] loop2: detected capacity change from 0 to 256 [ 182.444394][T11349] loop3: detected capacity change from 0 to 128 [ 182.451744][T11347] msdos: Bad value for 'gid' [ 182.461660][T11347] msdos: Bad value for 'gid' [ 182.477804][T11349] syz.3.2238: attempt to access beyond end of device [ 182.477804][T11349] loop3: rw=0, sector=121, nr_sectors = 127 limit=128 [ 182.551994][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 182.562924][T11355] loop2: detected capacity change from 0 to 128 [ 182.569481][T11355] vfat: Unknown parameter '' [ 182.575438][ T11] kworker/u8:0: attempt to access beyond end of device [ 182.575438][ T11] loop3: rw=1, sector=249, nr_sectors = 792 limit=128 [ 182.628070][T11361] loop3: detected capacity change from 0 to 512 [ 182.634996][T11361] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.645866][T11361] EXT4-fs (loop3): 1 truncate cleaned up [ 182.661890][T11361] team_slave_1: entered promiscuous mode [ 182.670291][T11361] team0: Port device team_slave_1 removed [ 182.820061][T11368] loop3: detected capacity change from 0 to 512 [ 182.826924][T11368] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 182.845769][T11368] EXT4-fs (loop3): orphan cleanup on readonly fs [ 182.852329][T11368] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm +}[@: bad orphan inode 15 [ 182.861980][T11368] ext4_test_bit(bit=14, block=18) = 1 [ 182.867417][T11368] is_bad_inode(inode)=0 [ 182.871627][T11368] NEXT_ORPHAN(inode)=1023 [ 182.875968][T11368] max_ino=32 [ 182.879143][T11368] i_nlink=0 [ 182.882374][T11368] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 182.896191][T11368] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 182.947133][T11373] loop3: detected capacity change from 0 to 512 [ 182.956645][T11373] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.533918][T11392] loop2: detected capacity change from 0 to 128 [ 183.576157][T11398] syz.2.2256[11398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.576195][T11398] syz.2.2256[11398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.587652][T11398] syz.2.2256[11398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.601014][T11398] batadv_slave_1: entered promiscuous mode [ 183.627705][T11398] lo speed is unknown, defaulting to 1000 [ 183.676692][T11401] syzkaller0: entered promiscuous mode [ 183.682235][T11401] syzkaller0: entered allmulticast mode [ 183.747557][T11403] loop2: detected capacity change from 0 to 512 [ 183.757003][T11403] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2258: corrupted in-inode xattr: invalid ea_ino [ 183.770564][T11403] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.2258: couldn't read orphan inode 15 (err -117) [ 184.021413][T11417] loop1: detected capacity change from 0 to 512 [ 184.039487][T11417] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2263: corrupted in-inode xattr: invalid ea_ino [ 184.063437][T11412] lo speed is unknown, defaulting to 1000 [ 184.096918][T11399] batadv_slave_1: left promiscuous mode [ 184.103537][T11417] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.2263: couldn't read orphan inode 15 (err -117) [ 184.404037][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 184.404050][ T29] audit: type=1326 audit(1728897328.318:22833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 184.408968][T11435] loop0: detected capacity change from 0 to 512 [ 184.410361][ T29] audit: type=1326 audit(1728897328.318:22834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 184.464027][ T29] audit: type=1326 audit(1728897328.318:22835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 184.487604][ T29] audit: type=1326 audit(1728897328.318:22836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 184.511383][ T29] audit: type=1326 audit(1728897328.318:22837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 184.518935][T11437] loop0: detected capacity change from 0 to 512 [ 184.534974][ T29] audit: type=1326 audit(1728897328.318:22838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 184.564982][ T29] audit: type=1326 audit(1728897328.318:22839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 184.588726][ T29] audit: type=1326 audit(1728897328.318:22840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 184.597238][T11437] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.612285][ T29] audit: type=1326 audit(1728897328.318:22841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 184.612307][ T29] audit: type=1326 audit(1728897328.318:22842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2f20dff9 code=0x7ffc0000 [ 184.796949][T11448] syzkaller0: entered promiscuous mode [ 184.802483][T11448] syzkaller0: entered allmulticast mode [ 184.819051][T11448] loop3: detected capacity change from 0 to 512 [ 184.822743][T11450] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 184.853114][T11447] lo speed is unknown, defaulting to 1000 [ 184.858280][T11448] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.939063][T11462] loop1: detected capacity change from 0 to 128 [ 185.068177][T11470] loop3: detected capacity change from 0 to 512 [ 185.091269][T11470] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2281: corrupted in-inode xattr: invalid ea_ino [ 185.119197][T11470] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2281: couldn't read orphan inode 15 (err -117) [ 185.173147][T11479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2282'. [ 185.215694][T11478] loop1: detected capacity change from 0 to 512 [ 185.273830][T11478] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.425611][T11490] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 185.553152][T11496] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 185.634850][T11508] loop1: detected capacity change from 0 to 512 [ 185.679795][T11508] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.743842][T11517] loop4: detected capacity change from 0 to 1024 [ 185.861585][T11510] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2297'. [ 185.998127][T11531] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 186.021357][T11535] loop3: detected capacity change from 0 to 512 [ 186.033209][T11535] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2303: corrupted in-inode xattr: invalid ea_ino [ 186.050243][T11535] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2303: couldn't read orphan inode 15 (err -117) [ 186.082184][T11543] loop1: detected capacity change from 0 to 128 [ 186.094016][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 186.105961][T11544] loop4: detected capacity change from 0 to 128 [ 186.112408][T11544] vfat: Unknown parameter '' [ 186.143966][T11543] syz.1.2309: attempt to access beyond end of device [ 186.143966][T11543] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 186.188897][T11547] loop0: detected capacity change from 0 to 1024 [ 186.216901][T11550] loop0: detected capacity change from 0 to 512 [ 186.224887][T11550] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2311: corrupted in-inode xattr: invalid ea_ino [ 186.238618][T11550] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.2311: couldn't read orphan inode 15 (err -117) [ 186.252654][ T11] kworker/u8:0: attempt to access beyond end of device [ 186.252654][ T11] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 186.278328][T11553] loop1: detected capacity change from 0 to 512 [ 186.297335][T11553] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.637824][T11562] loop2: detected capacity change from 0 to 128 [ 186.660276][T11562] syz.2.2315: attempt to access beyond end of device [ 186.660276][T11562] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 186.741727][ T11] kworker/u8:0: attempt to access beyond end of device [ 186.741727][ T11] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 186.844690][T11570] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 186.869110][T11576] loop4: detected capacity change from 0 to 128 [ 186.891281][T11576] syz.4.2322: attempt to access beyond end of device [ 186.891281][T11576] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 186.932396][T11580] loop3: detected capacity change from 0 to 128 [ 186.952108][T11580] syz.3.2323: attempt to access beyond end of device [ 186.952108][T11580] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 187.002451][ T169] kworker/u8:5: attempt to access beyond end of device [ 187.002451][ T169] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 187.031541][T11584] loop4: detected capacity change from 0 to 512 [ 187.039307][T11584] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 187.048129][T11585] syzkaller0: entered promiscuous mode [ 187.049390][T11584] EXT4-fs (loop4): orphan cleanup on readonly fs [ 187.053627][T11585] syzkaller0: entered allmulticast mode [ 187.070398][T11584] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm +}[@: bad orphan inode 15 [ 187.075705][ T8847] EXT4-fs unmount: 311 callbacks suppressed [ 187.075720][ T8847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.081384][T11584] ext4_test_bit(bit=14, block=18) = 1 [ 187.100349][T11584] is_bad_inode(inode)=0 [ 187.104517][T11584] NEXT_ORPHAN(inode)=1023 [ 187.108963][T11584] max_ino=32 [ 187.112161][T11584] i_nlink=0 [ 187.116206][ T169] kworker/u8:5: attempt to access beyond end of device [ 187.116206][ T169] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 187.128527][T11584] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm +}[@: corrupted xattr block 19: e_value size too large [ 187.133901][T11588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.152808][T11584] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 187.162280][T11584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 187.174858][T11588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.192371][T11592] loop1: detected capacity change from 0 to 512 [ 187.203040][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.216600][T11588] vlan2: entered promiscuous mode [ 187.223099][T11592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.227225][T11588] bond0: entered promiscuous mode [ 187.240695][T11588] bond_slave_0: entered promiscuous mode [ 187.246475][T11588] bond_slave_1: entered promiscuous mode [ 187.252247][T11592] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.268665][T11599] loop4: detected capacity change from 0 to 512 [ 187.278037][T11588] bond0: left promiscuous mode [ 187.282836][T11588] bond_slave_0: left promiscuous mode [ 187.288339][T11588] bond_slave_1: left promiscuous mode [ 187.340617][T11602] loop3: detected capacity change from 0 to 1024 [ 187.349662][T11599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.363159][T11599] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.386862][T11602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.407056][ T7807] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.422254][T11597] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2330'. [ 187.434043][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.444045][ T8539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.463571][T11606] lo speed is unknown, defaulting to 1000 [ 187.471250][T11612] vlan2: entered promiscuous mode [ 187.477921][T11612] bond0: entered promiscuous mode [ 187.482996][T11612] bond_slave_0: entered promiscuous mode [ 187.488737][T11612] bond_slave_1: entered promiscuous mode [ 187.495525][T11612] bond0: left promiscuous mode [ 187.500325][T11612] bond_slave_0: left promiscuous mode [ 187.505918][T11612] bond_slave_1: left promiscuous mode [ 187.520564][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'. [ 187.538617][T11615] loop1: detected capacity change from 0 to 128 [ 187.545435][T11615] vfat: Unknown parameter '' [ 187.553591][T11618] loop3: detected capacity change from 0 to 128 [ 187.571438][T11618] syz.3.2336: attempt to access beyond end of device [ 187.571438][T11618] loop3: rw=0, sector=121, nr_sectors = 127 limit=128 [ 187.671663][ T1040] kworker/u8:6: attempt to access beyond end of device [ 187.671663][ T1040] loop3: rw=1, sector=249, nr_sectors = 792 limit=128 [ 187.699158][T11621] loop3: detected capacity change from 0 to 512 [ 187.707184][T11621] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2337: corrupted in-inode xattr: invalid ea_ino [ 187.721030][T11621] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2337: couldn't read orphan inode 15 (err -117) [ 187.733541][T11621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.773533][ T8539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.069446][T11640] loop0: detected capacity change from 0 to 1024 [ 188.077639][T11640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.091989][T11640] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2344'. [ 188.103556][T11643] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.112215][ T8847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.129258][T11643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2345'. [ 188.144366][T11645] loop0: detected capacity change from 0 to 512 [ 188.153295][T11645] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 188.170786][T11645] EXT4-fs (loop0): orphan cleanup on readonly fs [ 188.178406][T11645] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.2346: bad orphan inode 15 [ 188.199041][T11645] ext4_test_bit(bit=14, block=18) = 1 [ 188.204450][T11645] is_bad_inode(inode)=0 [ 188.208627][T11645] NEXT_ORPHAN(inode)=1023 [ 188.212968][T11645] max_ino=32 [ 188.216185][T11645] i_nlink=0 [ 188.221292][T11645] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.2346: corrupted xattr block 19: e_value size too large [ 188.235965][T11645] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 188.253597][T11654] loop4: detected capacity change from 0 to 512 [ 188.261913][T11645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 188.274602][T11656] loop2: detected capacity change from 0 to 512 [ 188.284663][T11654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.302721][T11654] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.303148][ T8847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.328904][T11656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.343024][T11660] loop1: detected capacity change from 0 to 1024 [ 188.350140][T11656] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.362612][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.373184][T11660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.387614][T11660] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.409331][ T8895] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.516670][T11676] loop2: detected capacity change from 0 to 1024 [ 188.537014][T11676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.567824][T11681] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2357'. [ 188.601685][T11671] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2356'. [ 188.637208][T11687] loop4: detected capacity change from 0 to 512 [ 188.650163][ T8895] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.665311][T11691] loop3: detected capacity change from 0 to 128 [ 188.680473][T11693] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 188.689084][T11687] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2361: corrupted in-inode xattr: invalid ea_ino [ 188.710275][T11687] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.2361: couldn't read orphan inode 15 (err -117) [ 188.733506][T11687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.749213][T11698] loop2: detected capacity change from 0 to 512 [ 188.767069][T11698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.786135][T11691] syz.3.2365: attempt to access beyond end of device [ 188.786135][T11691] loop3: rw=0, sector=121, nr_sectors = 127 limit=128 [ 188.793608][T11698] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.813246][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.850671][ T8895] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.851616][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2371'. [ 188.872867][ C0] ------------[ cut here ]------------ [ 188.878374][ C0] refcount_t: underflow; use-after-free. [ 188.884247][ C0] WARNING: CPU: 0 PID: 11 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 188.893510][ C0] Modules linked in: [ 188.897428][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 188.908225][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.918292][ C0] Workqueue: bat_events batadv_nc_worker [ 188.923948][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 188.930132][ C0] Code: 72 ff ff ff e8 ab 85 71 ff 48 c7 c7 3e d9 b2 86 e8 2f 6b 8a ff c6 05 16 31 f4 04 01 90 48 c7 c7 85 a2 1b 86 e8 ab 4b 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 7c 85 71 ff 48 c7 c7 3b d9 b2 86 e8 [ 188.949750][ C0] RSP: 0018:ffffc90000003b60 EFLAGS: 00010246 [ 188.955812][ C0] RAX: 8ca9b4e551632c00 RBX: ffff8881188a76e4 RCX: ffff8881001c3180 [ 188.963793][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.971773][ C0] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 188.977234][T11716] vhci_hcd: invalid port number 157 [ 188.979735][ C0] R10: 0001ffffffffffff R11: ffff8881001c3180 R12: 0000000000000001 [ 188.979753][ C0] R13: ffff888115250c00 R14: ffff8881188a76e4 R15: 0000000000000000 [ 188.979765][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 188.979781][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.979809][ C0] CR2: 0000001b2eb1fffc CR3: 0000000116bca000 CR4: 00000000003506f0 [ 188.985010][T11716] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 188.992934][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.039766][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.039784][ C0] Call Trace: [ 189.039811][ C0] [ 189.039819][ C0] ? __warn+0x141/0x350 [ 189.039869][ C0] ? report_bug+0x315/0x420 [ 189.039891][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 189.039919][ C0] ? handle_bug+0x60/0x90 [ 189.039938][ C0] ? exc_invalid_op+0x1a/0x50 [ 189.039962][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 189.082207][ C0] ? __warn_printk+0x167/0x1b0 [ 189.082246][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 189.082271][ C0] sk_skb_reason_drop+0xe9/0x290 [ 189.082333][ C0] j1939_xtp_rx_cts+0x3c4/0x6c0 [ 189.082374][ C0] j1939_tp_recv+0x699/0xa80 [ 189.107058][ C0] j1939_can_recv+0x45f/0x550 [ 189.111766][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 189.117022][ C0] can_rcv_filter+0x225/0x4c0 [ 189.121722][ C0] can_receive+0x182/0x1f0 [ 189.126163][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 189.130679][ C0] can_rcv+0xe7/0x180 [ 189.134668][ C0] ? __pfx_can_rcv+0x10/0x10 [ 189.139283][ C0] __netif_receive_skb+0x123/0x280 [ 189.144420][ C0] process_backlog+0x22e/0x440 [ 189.149219][ C0] __napi_poll+0x63/0x3c0 [ 189.153578][ C0] ? net_rx_action+0x376/0x7f0 [ 189.158357][ C0] net_rx_action+0x3a1/0x7f0 [ 189.162983][ C0] handle_softirqs+0xbf/0x280 [ 189.167690][ C0] do_softirq+0x5e/0x90 [ 189.171859][ C0] [ 189.174808][ C0] [ 189.177766][ C0] __local_bh_enable_ip+0x6e/0x70 [ 189.182803][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 189.187780][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 189.194667][ C0] batadv_nc_purge_paths+0x220/0x270 [ 189.200001][ C0] batadv_nc_worker+0x3db/0xad0 [ 189.204915][ C0] ? try_to_wake_up+0x348/0x550 [ 189.209783][ C0] ? kick_pool+0x268/0x2c0 [ 189.214219][ C0] process_scheduled_works+0x483/0x9a0 [ 189.219722][ C0] worker_thread+0x51d/0x6f0 [ 189.224321][ C0] ? __pfx_worker_thread+0x10/0x10 [ 189.229472][ C0] kthread+0x1d1/0x210 [ 189.233572][ C0] ? __pfx_kthread+0x10/0x10 [ 189.238187][ C0] ret_from_fork+0x4b/0x60 [ 189.242639][ C0] ? __pfx_kthread+0x10/0x10 [ 189.247265][ C0] ret_from_fork_asm+0x1a/0x30 [ 189.252054][ C0] [ 189.255089][ C0] ---[ end trace 0000000000000000 ]--- [ 189.265350][ T4106] kworker/u8:8: attempt to access beyond end of device [ 189.265350][ T4106] loop3: rw=1, sector=249, nr_sectors = 792 limit=128 [ 189.304564][T11718] loop2: detected capacity change from 0 to 2048 [ 189.339373][T11715] loop4: detected capacity change from 0 to 1024 [ 189.346527][T11718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.350803][T11718] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 189.382148][T11715] EXT4-fs: Ignoring removed orlov option [ 189.388387][T11715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.402370][ T8895] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /207/file0: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 189.422739][ T8895] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 189.441095][ T8895] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 189.463220][T11715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.478314][T11350] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.496820][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.518996][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.539268][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 189.539282][ T29] audit: type=1400 audit(1728897333.458:22996): avc: denied { setopt } for pid=11739 comm="syz.4.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.569574][ T29] audit: type=1400 audit(1728897333.488:22997): avc: denied { mounton } for pid=11744 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 189.618837][T11747] loop4: detected capacity change from 0 to 128 [ 189.618912][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.640580][T11747] syz.4.2384: attempt to access beyond end of device [ 189.640580][T11747] loop4: rw=0, sector=121, nr_sectors = 127 limit=128 [ 189.677631][T11744] lo speed is unknown, defaulting to 1000 [ 189.697386][ T50] team0: Port device netdevsim1 removed [ 189.704254][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.764155][T11757] syzkaller0: entered promiscuous mode [ 189.769738][T11757] syzkaller0: entered allmulticast mode [ 189.776887][ T1040] syzkaller0: tun_net_xmit 48 [ 189.784533][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.798186][T11744] chnl_net:caif_netlink_parms(): no params data found [ 189.806987][T11757] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 189.818964][T11757] syzkaller0: tun_net_xmit 1280 [ 189.846949][T11744] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.854057][T11744] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.861283][T11744] bridge_slave_0: entered allmulticast mode [ 189.867958][T11744] bridge_slave_0: entered promiscuous mode [ 189.874577][T11744] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.881754][T11744] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.888987][T11744] bridge_slave_1: entered allmulticast mode [ 189.895557][T11744] bridge_slave_1: entered promiscuous mode [ 189.919211][T11744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.935709][T11744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.983512][T11744] team0: Port device team_slave_0 added [ 190.036806][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.047394][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.058014][ T50] bond0 (unregistering): Released all slaves [ 190.067083][T11744] team0: Port device team_slave_1 added [ 190.087546][T11744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.094497][T11744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.120516][T11744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.131181][T11768] lo speed is unknown, defaulting to 1000 [ 190.144102][T11744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.151150][T11744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.177184][T11744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.205648][ T50] hsr_slave_0: left promiscuous mode [ 190.211421][ T50] hsr_slave_1: left promiscuous mode [ 190.217211][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.224617][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.232676][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.240231][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.249764][ T50] veth1_macvtap: left promiscuous mode [ 190.255315][ T50] veth1_vlan: left allmulticast mode [ 190.260667][ T50] veth1_vlan: left promiscuous mode [ 190.265979][ T50] veth0_vlan: left promiscuous mode [ 190.287456][T11774] loop3: detected capacity change from 0 to 512 [ 190.295534][T11774] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2390: corrupted in-inode xattr: invalid ea_ino [ 190.310103][T11774] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2390: couldn't read orphan inode 15 (err -117) [ 190.322644][T11774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.341355][ T50] pim6reg (unregistering): left allmulticast mode [ 190.363279][ T50] macvlan0 (unregistering): left allmulticast mode [ 190.388015][ T50] team0 (unregistering): Port device team_slave_1 removed [ 190.398128][ T50] team0 (unregistering): Port device team_slave_0 removed [ 190.438358][T11771] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 190.446311][ T3344] lo speed is unknown, defaulting to 1000 [ 190.454606][T11744] hsr_slave_0: entered promiscuous mode [ 190.462175][T11744] hsr_slave_1: entered promiscuous mode [ 190.468909][T11744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.476850][T11744] Cannot create hsr debugfs directory [ 190.660351][T11787] loop0: detected capacity change from 0 to 1024 [ 190.668538][T11787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.690513][ T8847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.781340][T11790] netlink: 'syz.0.2396': attribute type 10 has an invalid length. [ 190.796956][T11790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.816999][T11792] loop4: detected capacity change from 0 to 512 [ 190.830182][T11744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.837743][T11792] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2397: corrupted in-inode xattr: invalid ea_ino [ 190.852540][T11792] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.2397: couldn't read orphan inode 15 (err -117) [ 190.855347][T11744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.872562][T11792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.874250][T11744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.894534][T11744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.911960][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.935425][T11799] vlan2: entered promiscuous mode [ 190.940888][T11799] bond0: entered promiscuous mode [ 190.946012][T11799] bond_slave_0: entered promiscuous mode [ 190.951722][T11799] bond_slave_1: entered promiscuous mode [ 190.958184][T11799] bond0: left promiscuous mode [ 190.962976][T11799] bond_slave_0: left promiscuous mode [ 190.968472][T11799] bond_slave_1: left promiscuous mode [ 190.991812][T11744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.004386][T11744] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.013069][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.020152][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.030303][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.037359][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.061087][T11744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.104270][T11744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.128732][ T8539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.152173][T11809] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 191.168672][T11744] veth0_vlan: entered promiscuous mode [ 191.178839][T11744] veth1_vlan: entered promiscuous mode [ 191.196034][T11744] veth0_macvtap: entered promiscuous mode [ 191.203352][T11744] veth1_macvtap: entered promiscuous mode [ 191.213549][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.224095][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.233927][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.244468][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.254402][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.264823][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.276228][T11744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.288459][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.298933][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.308814][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.319443][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.330190][T11744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.339556][T11744] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.348326][T11744] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.357179][T11744] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.366010][T11744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.380688][T11819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2405'. [ 191.393608][ T29] audit: type=1400 audit(1728897335.308:22998): avc: denied { mounton } for pid=11744 comm="syz-executor" path="/root/syzkaller.x1oloA/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 191.419602][ T29] audit: type=1400 audit(1728897335.308:22999): avc: denied { mount } for pid=11744 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 191.442009][ T29] audit: type=1400 audit(1728897335.308:23000): avc: denied { mounton } for pid=11744 comm="syz-executor" path="/root/syzkaller.x1oloA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 191.468893][ T29] audit: type=1400 audit(1728897335.308:23001): avc: denied { mounton } for pid=11744 comm="syz-executor" path="/root/syzkaller.x1oloA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=52330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 191.496720][ T29] audit: type=1400 audit(1728897335.338:23002): avc: denied { mounton } for pid=11744 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 191.538347][T11824] loop2: detected capacity change from 0 to 512 [ 191.546534][ T29] audit: type=1400 audit(1728897335.468:23003): avc: denied { read } for pid=11821 comm="syz.3.2406" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 191.571137][ T29] audit: type=1400 audit(1728897335.468:23004): avc: denied { open } for pid=11821 comm="syz.3.2406" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 191.596275][ T29] audit: type=1400 audit(1728897335.468:23005): avc: denied { ioctl } for pid=11821 comm="syz.3.2406" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 191.634840][T11824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.647900][T11824] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.663299][T11826] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 191.693059][T11744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.746540][T11838] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 191.769829][T11847] bio_check_eod: 1 callbacks suppressed [ 191.769844][T11847] syz.2.2415: attempt to access beyond end of device [ 191.769844][T11847] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 191.798311][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 191.807019][T11847] loop2: detected capacity change from 0 to 128 [ 191.850137][T11858] loop4: detected capacity change from 0 to 2048 [ 191.860264][T11860] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 191.869848][T11858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.888626][T11858] EXT4-fs error (device loop4): ext4_find_dest_de:2069: inode #12: block 9: comm syz.4.2420: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 191.922491][T11863] loop2: detected capacity change from 0 to 512 [ 191.947157][T11863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.959745][T11863] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.960585][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.993473][T11744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.014597][T11873] loop2: detected capacity change from 0 to 512 [ 192.021383][T11873] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.042525][T11873] EXT4-fs (loop2): 1 truncate cleaned up [ 192.048575][T11873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.067817][T11875] loop4: detected capacity change from 0 to 1024 [ 192.075286][T11744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.086292][T11875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.113423][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.177132][T11887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.186236][T11887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.197656][T11887] vlan2: entered promiscuous mode [ 192.583663][T11898] loop4: detected capacity change from 0 to 1024 [ 192.591888][T11898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.606368][T11898] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2434'. [ 192.622037][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.639746][T11902] loop4: detected capacity change from 0 to 512 [ 192.656453][T11902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.668967][T11902] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.699600][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.723027][T11907] loop4: detected capacity change from 0 to 512 [ 192.732513][T11907] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 192.741329][T11907] EXT4-fs (loop4): orphan cleanup on readonly fs [ 192.749341][T11907] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.2436: bad orphan inode 15 [ 192.759642][T11907] ext4_test_bit(bit=14, block=18) = 1 [ 192.765040][T11907] is_bad_inode(inode)=0 [ 192.769185][T11907] NEXT_ORPHAN(inode)=1023 [ 192.773518][T11907] max_ino=32 [ 192.776778][T11907] i_nlink=0 [ 192.781407][T11907] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.2436: corrupted xattr block 19: e_value size too large [ 192.790524][T11910] loop2: detected capacity change from 0 to 1024 [ 192.805101][T11907] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 192.808603][T11910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.814616][T11907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.855752][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.877410][T11912] SELinux: policydb magic number 0x66667830 does not match expected magic number 0xf97cff8c [ 192.887838][T11912] SELinux: failed to load policy [ 192.920990][T11744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.931760][T11917] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.938902][T11917] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.946752][T11917] bridge0: entered allmulticast mode [ 192.964857][T11917] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.972008][T11917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.979463][T11917] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.986619][T11917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.994138][T11917] bridge0: entered promiscuous mode [ 193.017150][T11920] bridge_slave_0: left allmulticast mode [ 193.022960][T11920] bridge_slave_0: left promiscuous mode [ 193.028569][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.038192][T11920] bridge_slave_1: left allmulticast mode [ 193.043859][T11920] bridge_slave_1: left promiscuous mode [ 193.049674][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.051208][T11922] loop3: detected capacity change from 0 to 128 [ 193.067665][T11920] bond0: (slave bond_slave_0): Releasing backup interface [ 193.078892][T11920] bond0: (slave bond_slave_1): Releasing backup interface [ 193.079764][T11922] syz.3.2442: attempt to access beyond end of device [ 193.079764][T11922] loop3: rw=0, sector=121, nr_sectors = 127 limit=128 [ 193.104466][T11920] team0: Port device team_slave_0 removed [ 193.113014][T11920] team0: Port device team_slave_1 removed [ 193.119538][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.127030][T11920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.135548][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.142940][T11920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.169841][T11923] wg2: entered promiscuous mode [ 193.176661][T11923] team0: Refused to change device type [ 193.288657][T11933] loop2: detected capacity change from 0 to 1024 [ 193.296998][T11933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.311692][T11933] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2445'. [ 193.330308][T11744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.340734][ T11] kworker/u8:0: attempt to access beyond end of device [ 193.340734][ T11] loop3: rw=1, sector=249, nr_sectors = 792 limit=128 [ 193.369633][T11938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.379765][T11938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.391436][T11938] vlan0: entered promiscuous mode [ 193.459568][T11942] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 193.480591][T11944] loop2: detected capacity change from 0 to 512 [ 193.487468][T11944] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 193.497624][T11944] EXT4-fs (loop2): orphan cleanup on readonly fs [ 193.504094][T11944] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2450: bad orphan inode 15 [ 193.514404][T11944] ext4_test_bit(bit=14, block=18) = 1 [ 193.519864][T11944] is_bad_inode(inode)=0 [ 193.524046][T11944] NEXT_ORPHAN(inode)=1023 [ 193.528450][T11944] max_ino=32 [ 193.531639][T11944] i_nlink=0 [ 193.535224][T11944] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.2450: corrupted xattr block 19: e_value size too large [ 193.549711][T11944] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 193.559242][T11944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 193.577416][T11744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.670229][T11950] 9pnet_fd: Insufficient options for proto=fd [ 193.678865][T11950] loop2: detected capacity change from 0 to 256 [ 193.775279][T11965] loop2: detected capacity change from 0 to 512 [ 193.783613][T11965] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2458: corrupted in-inode xattr: invalid ea_ino [ 193.797323][T11965] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.2458: couldn't read orphan inode 15 (err -117) [ 193.810060][T11965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.917201][T11979] ebt_among: dst integrity fail: 1cd [ 193.937359][T11981] loop3: detected capacity change from 0 to 512 [ 193.945226][T11981] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2464: corrupted in-inode xattr: invalid ea_ino [ 193.958854][T11981] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2464: couldn't read orphan inode 15 (err -117) [ 193.971355][T11981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.104831][T11994] loop4: detected capacity change from 0 to 1024 [ 194.112939][T11994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.135278][ T8879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.614713][T11744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.709638][T12006] syzkaller0: entered promiscuous mode [ 194.715179][T12006] syzkaller0: entered allmulticast mode [ 194.761006][T12010] loop0: detected capacity change from 0 to 128 [ 194.782059][T12010] syz.0.2475: attempt to access beyond end of device [ 194.782059][T12010] loop0: rw=0, sector=121, nr_sectors = 127 limit=128 [ 194.872587][ T50] kworker/u8:3: attempt to access beyond end of device [ 194.872587][ T50] loop0: rw=1, sector=249, nr_sectors = 792 limit=128 [ 194.901686][T12021] ================================================================== [ 194.909769][T12019] loop3: detected capacity change from 0 to 4096 [ 194.909802][T12021] BUG: KCSAN: data-race in sg_common_write / sg_finish_rem_req [ 194.923699][T12021] [ 194.926021][T12021] write to 0xffff888113c3b31d of 1 bytes by task 3726 on cpu 1: [ 194.933641][T12021] sg_finish_rem_req+0x117/0x270 [ 194.938581][T12021] sg_rq_end_io_usercontext+0x36/0x1c0 [ 194.944042][T12021] process_scheduled_works+0x483/0x9a0 [ 194.949503][T12021] worker_thread+0x51d/0x6f0 [ 194.954090][T12021] kthread+0x1d1/0x210 [ 194.958152][T12021] ret_from_fork+0x4b/0x60 [ 194.962567][T12021] ret_from_fork_asm+0x1a/0x30 [ 194.967327][T12021] [ 194.969637][T12021] read to 0xffff888113c3b31d of 1 bytes by task 12021 on cpu 0: [ 194.977257][T12021] sg_common_write+0x659/0x8d0 [ 194.982019][T12021] sg_new_write+0x82b/0x8e0 [ 194.986521][T12021] sg_ioctl+0xe22/0x1870 [ 194.990764][T12021] __se_sys_ioctl+0xcd/0x140 [ 194.995357][T12021] __x64_sys_ioctl+0x43/0x50 [ 194.999942][T12021] x64_sys_call+0x15cc/0x2d60 [ 195.004614][T12021] do_syscall_64+0xc9/0x1c0 [ 195.009110][T12021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.015007][T12021] [ 195.017319][T12021] value changed: 0x01 -> 0x00 [ 195.021984][T12021] [ 195.024291][T12021] Reported by Kernel Concurrency Sanitizer on: [ 195.030429][T12021] CPU: 0 UID: 0 PID: 12021 Comm: syz.0.2478 Tainted: G W 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 195.042662][T12021] Tainted: [W]=WARN [ 195.046450][T12021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 195.056501][T12021] ==================================================================