last executing test programs: 3m21.956205593s ago: executing program 32 (id=203): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) 3m1.179671132s ago: executing program 33 (id=722): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x300, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085410500"], 0x38}}, 0x0) 2m59.045493112s ago: executing program 34 (id=754): r0 = socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) 2m54.083735266s ago: executing program 35 (id=843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc2a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2m46.9999922s ago: executing program 36 (id=930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x1) 2m39.455083106s ago: executing program 37 (id=838): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4164, 0x0, 0x400000, 0x8}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x4164, 0x0, 0x400000, 0x8}, r2, 0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(r3) 2m38.68489653s ago: executing program 38 (id=1074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x7}}}}]}, 0x3c}}, 0x0) 2m24.653868897s ago: executing program 39 (id=1379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 2m4.356870994s ago: executing program 9 (id=1924): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) 2m4.287476724s ago: executing program 9 (id=1927): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04ea00000000000000020000002c0004802800018007000100637400001c00028008000140000000000800024000000067722d29ac802ad6000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = eventfd(0x8800a6) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) 2m3.374933079s ago: executing program 9 (id=1947): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 2m2.883479771s ago: executing program 9 (id=1956): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 2m2.702584102s ago: executing program 9 (id=1959): r0 = socket$inet6(0xa, 0x80003, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) pivot_root(0x0, &(0x7f0000000080)='./file0/../file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2m2.396383883s ago: executing program 9 (id=1967): r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x40, 0x2, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, r1, 0x0) 2m2.378881793s ago: executing program 40 (id=1967): r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x40, 0x2, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r0, r1, 0x0) 1m35.626741821s ago: executing program 7 (id=2752): fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1m35.496465053s ago: executing program 7 (id=2757): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 1m35.304393153s ago: executing program 7 (id=2767): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000040)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {@block_validity}, {@orlov}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x556, &(0x7f0000001100)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 1m35.005468435s ago: executing program 7 (id=2774): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 1m34.820574665s ago: executing program 7 (id=2788): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m34.457527527s ago: executing program 7 (id=2784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1m34.457394118s ago: executing program 41 (id=2784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1m3.487980626s ago: executing program 0 (id=3530): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) 1m3.240671727s ago: executing program 0 (id=3525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000800), 0xfd, 0x525, &(0x7f0000000a40)="$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") listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m3.011798418s ago: executing program 0 (id=3527): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'ipvlan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 1m2.72087197s ago: executing program 0 (id=3534): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000002100)={[{@sbsector={'sbsector', 0x3d, 0x1}}, {@session={'session', 0x3d, 0x13}}, {@nocompress}, {@showassoc}, {@check_relaxed}, {@check_relaxed}, {@cruft}, {@unhide}, {@utf8}, {@gid}, {@map_off}, {@mode={'mode', 0x3d, 0x6}}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x1882, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x0) 1m2.62404104s ago: executing program 0 (id=3538): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r2 = dup2(r1, r0) sendmsg$nl_route_sched(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r2, &(0x7f0000003e80)={0x0, 0x0, 0x0}, 0x48000) 1m2.299154671s ago: executing program 0 (id=3543): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x26, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) 1m2.298982841s ago: executing program 42 (id=3543): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x26, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) 56.42234415s ago: executing program 6 (id=3662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) 56.34920503s ago: executing program 6 (id=3664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_open_dev$sg(0x0, 0x0, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000480)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0xa0600, 0x0, 0x0) 56.074052821s ago: executing program 6 (id=3667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r4, 0x1, {0x0, 0x0, 0x2}, 0xff}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 55.999678832s ago: executing program 6 (id=3670): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./file1\x00', r0, r1) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000700)={0x0, "f0176c04daeeae36e66c27a087f4a4c936987def00657e2ca9bfd8ef1caacc368637ae59c0b06ded2010b44fde59071c58350e27c03bb4abbda22349eef8fcbf", 0x1d}, 0x48, 0x0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000001c0)=@v2={0x2000000, [{0xc, 0x4}, {0x9, 0x1}]}, 0x14, 0x0) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r2) 55.871499942s ago: executing program 6 (id=3675): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x409d, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000440)}, 0x20) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="d0", 0x1}], 0x1}, 0x180) 55.336329925s ago: executing program 6 (id=3688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 55.336193915s ago: executing program 43 (id=3688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 43.204101933s ago: executing program 8 (id=3969): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x0) 43.144626563s ago: executing program 8 (id=3971): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb60b}, &(0x7f0000000340), &(0x7f0000000280)) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="c7", 0x1, 0x24048880, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10) 42.279748967s ago: executing program 8 (id=3999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'pimreg1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) 42.119310148s ago: executing program 8 (id=4007): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc097fce47d85272036dc78388e3dc177e9b496", "b732676c181c2082669dd06388bd49bd03e6bbc2ebce21aa45a7fea6180766b9"}) 41.916185099s ago: executing program 8 (id=4009): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 41.004352014s ago: executing program 8 (id=4023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 41.004213303s ago: executing program 44 (id=4023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 1.871643551s ago: executing program 5 (id=4863): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a007) 1.556492013s ago: executing program 5 (id=4870): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet(0x2, 0x3, 0x8d) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000380), &(0x7f0000000200)=r2}, 0x32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x120, 0x0, 0x0, 0x900, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.355839584s ago: executing program 5 (id=4876): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc04c5349, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.247670554s ago: executing program 2 (id=4877): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) openat(r0, &(0x7f0000000280)='./file0\x00', 0x6a1c2, 0xc4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 1.059751555s ago: executing program 2 (id=4883): io_uring_setup(0x1fe6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 931.281205ms ago: executing program 2 (id=4887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) statfs(0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) pipe(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 873.732126ms ago: executing program 2 (id=4889): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x2}}, 0x16) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 801.234676ms ago: executing program 2 (id=4892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 716.232697ms ago: executing program 4 (id=4893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000050700000000c803000000000000", @ANYRES32=0x0, @ANYBLOB="001ba6000000000008000a80", @ANYRES32, @ANYBLOB="2800128008000100736974001c00028008000100", @ANYBLOB="05"], 0x50}, 0x1, 0x4c00000000000000}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) 683.701776ms ago: executing program 2 (id=4894): syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x922, 0x12) syz_usbip_server_init(0x4) 597.742267ms ago: executing program 3 (id=4896): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000400), 0x3, 0x101) 445.038048ms ago: executing program 3 (id=4897): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x5, {{0x2, 0x4e22, @multicast2}}}, 0x88) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 438.847098ms ago: executing program 5 (id=4898): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x1, 0xf, "ff00f7000000000000000000af88008300"}) syz_open_pts(0xffffffffffffffff, 0x345680) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0xc17a) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x20000400) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r1) 435.800988ms ago: executing program 1 (id=4899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) statfs(0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) pipe(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 339.522409ms ago: executing program 1 (id=4900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2275, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 293.314769ms ago: executing program 3 (id=4901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1a53}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 273.406699ms ago: executing program 3 (id=4902): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x3, 0x4004851, 0x0, 0x9ba26bef) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xd3, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c90000090000"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x2915048, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 269.555429ms ago: executing program 1 (id=4903): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 266.600029ms ago: executing program 4 (id=4904): syz_mount_image$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0xc002, 0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81901) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000240)='./bus\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 213.130739ms ago: executing program 3 (id=4905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 186.274899ms ago: executing program 1 (id=4906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 156.51011ms ago: executing program 5 (id=4907): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000000)={@val={0x4}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "01d55e", 0x44, 0x29, 0x1, @local, @mcast2={0xff, 0x3}, {[], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0xff88}}}}}}}}}, 0x7e) 155.946049ms ago: executing program 4 (id=4917): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 92.274489ms ago: executing program 1 (id=4908): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 92.008419ms ago: executing program 4 (id=4909): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) r5 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r5, 0x7, r3, &(0x7f0000000040)={r4, r3}) 60.383559ms ago: executing program 4 (id=4910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) statfs(0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) pipe(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 60.18834ms ago: executing program 1 (id=4911): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f00000020c0)={[{@nocompress}, {@session={'session', 0x3d, 0x13}}, {@nocompress}, {@showassoc}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@cruft}, {@unhide}, {@overriderock}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@map_off}, {@mode={'mode', 0x3d, 0x6}}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$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") write$sndseq(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000022c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1882, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x0) 59.04744ms ago: executing program 3 (id=4912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)={@val={0x4}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "01d55e", 0x44, 0x29, 0x1, @local, @mcast2={0xff, 0x3}, {[], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0xff88}}}}}}}}}, 0x7e) 21.20723ms ago: executing program 5 (id=4913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) 0s ago: executing program 4 (id=4914): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x28, r4, 0x1, 0x60, 0x0, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) kernel console output (not intermixed with test programs): 934967][ T29] audit: type=1326 audit(1733030698.168:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3440849 code=0x7ffc0000 [ 189.958926][ T29] audit: type=1326 audit(1733030698.168:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3440849 code=0x7ffc0000 [ 189.982439][ T29] audit: type=1326 audit(1733030698.168:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03c3440849 code=0x7ffc0000 [ 190.006039][ T29] audit: type=1326 audit(1733030698.168:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3440849 code=0x7ffc0000 [ 190.029645][ T29] audit: type=1326 audit(1733030698.168:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c3440849 code=0x7ffc0000 [ 190.053159][ T29] audit: type=1326 audit(1733030698.168:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13785 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f03c3440849 code=0x7ffc0000 [ 190.080379][T13791] ALSA: seq fatal error: cannot create timer (-22) [ 190.115976][T13795] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 190.122451][T13795] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 190.252912][T13807] SELinux: failed to load policy [ 191.409283][T13863] vhci_hcd: invalid port number 255 [ 191.414552][T13863] vhci_hcd: default hub control req: 0400 v0000 i00ff l0 [ 191.625973][T13878] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 191.633601][T13878] vhci_hcd: invalid port number 23 [ 191.965290][T13887] vhci_hcd: invalid port number 157 [ 191.970573][T13887] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 192.155746][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 192.600981][T13919] rose0: refused to change device tx_queue_len [ 192.693635][T13928] ip6gre2: entered allmulticast mode [ 192.992490][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3885'. [ 193.033407][T13938] hsr_slave_1 (unregistering): left promiscuous mode [ 193.116174][T13944] hub 2-0:1.0: USB hub found [ 193.127895][T13944] hub 2-0:1.0: 8 ports detected [ 193.224509][T13956] rose0: refused to change device tx_queue_len [ 193.258114][T13961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13961 comm=syz.2.3895 [ 193.272503][T13961] netlink: 'syz.2.3895': attribute type 1 has an invalid length. [ 193.284596][T13959] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3894'. [ 193.287300][T13961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.333285][T13961] vlan2: entered promiscuous mode [ 193.338361][T13961] bond1: entered promiscuous mode [ 193.343649][T13961] vlan2: entered allmulticast mode [ 193.348767][T13961] bond1: entered allmulticast mode [ 193.403100][T13966] syzkaller0: entered allmulticast mode [ 193.425641][T13966] syzkaller0 (unregistering): left allmulticast mode [ 194.209318][T14005] loop8: detected capacity change from 0 to 128 [ 194.235832][T14005] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.256679][T14005] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.316200][T13449] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.329289][T14018] hub 2-0:1.0: USB hub found [ 194.334957][T14018] hub 2-0:1.0: 8 ports detected [ 194.463663][T14030] loop1: detected capacity change from 0 to 1024 [ 194.484685][T14030] __quota_error: 127 callbacks suppressed [ 194.484775][T14030] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 194.499689][T14030] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 194.509165][T14030] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3932: Failed to acquire dquot type 0 [ 194.543358][T14030] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 194.558258][T14030] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.3932: corrupted inode contents [ 194.571194][T14030] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #13: comm syz.1.3932: mark_inode_dirty error [ 194.577673][T14037] loop8: detected capacity change from 0 to 512 [ 194.590126][T14037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.618861][T14030] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.3932: corrupted inode contents [ 194.635641][T14037] EXT4-fs (loop8): orphan cleanup on readonly fs [ 194.654977][T14037] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3924: bg 0: block 248: padding at end of block bitmap is not set [ 194.669655][T14030] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.3932: mark_inode_dirty error [ 194.669873][T14037] Quota error (device loop8): write_blk: dquota write failed [ 194.688355][T14037] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 194.690915][T14030] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.3932: corrupted inode contents [ 194.698417][T14037] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.3924: Failed to acquire dquot type 1 [ 194.728610][T14030] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 194.750885][T14037] EXT4-fs (loop8): 1 truncate cleaned up [ 194.768908][T14037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.782363][T14030] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.3932: corrupted inode contents [ 194.803599][ T29] audit: type=1326 audit(1733030703.078:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.3.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 194.827168][ T29] audit: type=1326 audit(1733030703.078:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.3.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 194.858408][T14030] EXT4-fs error (device loop1): ext4_truncate:4240: inode #13: comm syz.1.3932: mark_inode_dirty error [ 194.871679][T14030] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 194.913449][T14030] EXT4-fs (loop1): 1 truncate cleaned up [ 194.920932][T14030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.933970][T13449] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.948871][ T29] audit: type=1326 audit(1733030703.078:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.3.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 194.972554][ T29] audit: type=1326 audit(1733030703.078:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.3.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 194.996122][ T29] audit: type=1326 audit(1733030703.078:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.3.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 195.019636][ T29] audit: type=1326 audit(1733030703.078:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.3.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 195.059115][T14054] tipc: Enabling of bearer rejected, failed to enable media [ 195.132885][T14030] SELinux: Context system_u:object_r:var_run_t:s0 is not valid (left unmapped). [ 195.151627][T14060] pim6reg1: entered promiscuous mode [ 195.156967][T14060] pim6reg1: entered allmulticast mode [ 195.165552][T14030] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3932: Failed to acquire dquot type 0 [ 195.195103][T14064] netlink: 'syz.8.3936': attribute type 10 has an invalid length. [ 195.206001][T14064] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.251985][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.578032][T14100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.629368][T14103] loop3: detected capacity change from 0 to 1024 [ 195.653693][T14103] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3952: Failed to acquire dquot type 0 [ 195.681422][T14103] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 195.697394][T14103] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.3952: corrupted inode contents [ 195.709830][T14103] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #13: comm syz.3.3952: mark_inode_dirty error [ 195.722169][T14100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.723627][T14103] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.3952: corrupted inode contents [ 195.745937][T14103] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.3952: mark_inode_dirty error [ 195.757582][T14103] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.3952: corrupted inode contents [ 195.771024][T14103] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 195.779966][T14103] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.3952: corrupted inode contents [ 195.792850][T14103] EXT4-fs error (device loop3): ext4_truncate:4240: inode #13: comm syz.3.3952: mark_inode_dirty error [ 195.804878][T14103] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 195.819920][T14103] EXT4-fs (loop3): 1 truncate cleaned up [ 195.826023][T14103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.849732][T14100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.868886][T14103] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3952: Failed to acquire dquot type 0 [ 195.943007][T10953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.954994][T14100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.022201][T14100] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.066925][T14100] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.120182][T14100] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.143388][T14100] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.268696][T14130] syz.5.3968[14130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.268770][T14130] syz.5.3968[14130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.292760][T14126] tipc: Enabling of bearer rejected, failed to enable media [ 196.327841][T14130] syz.5.3968[14130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.598279][T14161] 9pnet: p9_errstr2errno: server reported unknown error [ 196.839763][T14177] netlink: 'syz.3.3983': attribute type 10 has an invalid length. [ 196.855313][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.076337][T14199] 9pnet: p9_errstr2errno: server reported unknown error [ 197.136358][T14203] tipc: Started in network mode [ 197.141346][T14203] tipc: Node identity 72fdbe77bfc7, cluster identity 4711 [ 197.148669][T14203] tipc: Enabled bearer , priority 0 [ 197.201720][T14210] syzkaller0: MTU too low for tipc bearer [ 197.207516][T14210] tipc: Disabling bearer [ 197.234018][T14208] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.284470][T14208] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.315033][T14214] tipc: Enabling of bearer rejected, failed to enable media [ 197.343119][T14208] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.402059][T14208] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.421331][T14227] loop8: detected capacity change from 0 to 512 [ 197.445709][T14227] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 197.452566][T14226] loop2: detected capacity change from 0 to 4096 [ 197.457724][T14227] EXT4-fs (loop8): 1 truncate cleaned up [ 197.469127][T14227] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.489619][T14226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.521059][T14227] loop8: detected capacity change from 512 to 0 [ 197.550216][T13449] syz-executor: attempt to access beyond end of device [ 197.550216][T13449] loop8: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 197.579372][T14234] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.589335][T14234] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.610119][T13449] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 197.662234][T13449] syz-executor: attempt to access beyond end of device [ 197.662234][T13449] loop8: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 197.685148][T13449] syz-executor: attempt to access beyond end of device [ 197.685148][T13449] loop8: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 197.710302][T13449] syz-executor: attempt to access beyond end of device [ 197.710302][T13449] loop8: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 197.725918][T14234] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.735857][T14234] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.748277][ T6784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.757760][T13449] syz-executor: attempt to access beyond end of device [ 197.757760][T13449] loop8: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 197.773091][T13449] syz-executor: attempt to access beyond end of device [ 197.773091][T13449] loop8: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 197.786856][T13449] EXT4-fs error (device loop8): ext4_get_inode_loc:4573: inode #2: block 5: comm syz-executor: unable to read itable block [ 197.787872][T14234] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.799990][T13449] syz-executor: attempt to access beyond end of device [ 197.799990][T13449] loop8: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 197.809559][T14234] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.822955][T13449] buffer_io_error: 311 callbacks suppressed [ 197.822970][T13449] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 197.920419][T13449] EXT4-fs (loop8): I/O error while writing superblock [ 197.927461][T13449] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: IO failure [ 197.953855][T14234] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.963725][T14234] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.978707][T13449] syz-executor: attempt to access beyond end of device [ 197.978707][T13449] loop8: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 197.992375][T13449] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 198.002831][T13449] EXT4-fs (loop8): I/O error while writing superblock [ 198.009668][T13449] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #2: comm syz-executor: mark_inode_dirty error [ 198.021488][T13449] syz-executor: attempt to access beyond end of device [ 198.021488][T13449] loop8: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 198.034923][T13449] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 198.059267][T14234] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.067538][T14234] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.086904][T14234] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.095188][T14234] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.104914][T13449] EXT4-fs (loop8): I/O error while writing superblock [ 198.115287][T14234] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.123572][T14234] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.141830][T14234] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.150174][T14234] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.162577][ T50] kworker/u8:3: attempt to access beyond end of device [ 198.162577][ T50] loop8: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 198.176830][ T50] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4558: inode #2: block 5: comm kworker/u8:3: unable to read itable block [ 198.190922][ T50] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 198.200271][ T50] EXT4-fs (loop8): I/O error while writing superblock [ 198.236255][T13449] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.262323][T13449] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 198.270786][T13449] EXT4-fs (loop8): I/O error while writing superblock [ 198.376163][T14254] macvtap0: entered promiscuous mode [ 198.382338][T14254] macvtap0: left promiscuous mode [ 198.511732][ T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.584560][ T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.662644][ T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.740062][ T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.816747][ T11] bridge_slave_1: left allmulticast mode [ 198.822603][ T11] bridge_slave_1: left promiscuous mode [ 198.828277][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.851360][ T11] bridge_slave_0: left allmulticast mode [ 198.857133][ T11] bridge_slave_0: left promiscuous mode [ 198.863016][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.974014][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.986134][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.996208][ T11] bond0 (unregistering): Released all slaves [ 199.112994][ T11] hsr_slave_0: left promiscuous mode [ 199.118713][ T11] hsr_slave_1: left promiscuous mode [ 199.125765][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.133325][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.143797][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.151235][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.161440][ T11] veth1_macvtap: left promiscuous mode [ 199.166963][ T11] veth0_macvtap: left promiscuous mode [ 199.172610][ T11] veth1_vlan: left promiscuous mode [ 199.177838][ T11] veth0_vlan: left promiscuous mode [ 199.252927][ T11] team0 (unregistering): Port device team_slave_1 removed [ 199.265992][ T11] team0 (unregistering): Port device team_slave_0 removed [ 199.329657][T14264] chnl_net:caif_netlink_parms(): no params data found [ 199.375064][T14264] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.382303][T14264] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.389625][T14264] bridge_slave_0: entered allmulticast mode [ 199.396149][T14264] bridge_slave_0: entered promiscuous mode [ 199.403468][T14264] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.410622][T14264] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.417942][T14264] bridge_slave_1: entered allmulticast mode [ 199.424588][T14264] bridge_slave_1: entered promiscuous mode [ 199.445059][T14264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.455810][T14264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.477418][T14264] team0: Port device team_slave_0 added [ 199.483982][T14264] team0: Port device team_slave_1 added [ 199.502860][T14264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.509893][T14264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.535947][T14264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.547411][T14264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.554491][T14264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.580439][T14264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.695821][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 199.695912][ T29] audit: type=1400 audit(1733030707.968:4681): avc: denied { remount } for pid=14307 comm="syz.5.4039" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 199.725083][T14264] hsr_slave_0: entered promiscuous mode [ 199.731749][ T29] audit: type=1400 audit(1733030707.968:4682): avc: denied { bind } for pid=14306 comm="syz.2.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.751191][ T29] audit: type=1400 audit(1733030707.968:4683): avc: denied { listen } for pid=14306 comm="syz.2.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.770857][ T29] audit: type=1400 audit(1733030707.968:4684): avc: denied { accept } for pid=14306 comm="syz.2.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.790974][T14264] hsr_slave_1: entered promiscuous mode [ 199.809014][T14264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.816853][T14264] Cannot create hsr debugfs directory [ 199.976963][ T29] audit: type=1400 audit(1733030708.238:4685): avc: denied { write } for pid=14324 comm="syz.3.4047" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.084859][T14208] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.157920][T14208] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.173946][T14208] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.205643][T14208] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.304370][ T29] audit: type=1400 audit(1733030708.568:4686): avc: denied { setopt } for pid=14335 comm="syz.1.4053" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.312135][T14340] bridge0: entered allmulticast mode [ 200.358598][T14264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.404353][T14347] serio: Serial port ptm0 [ 200.409081][ T29] audit: type=1326 audit(1733030708.678:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 200.412484][T14264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.432677][ T29] audit: type=1326 audit(1733030708.678:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 200.462774][ T29] audit: type=1326 audit(1733030708.678:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 200.486452][ T29] audit: type=1326 audit(1733030708.678:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.1.4053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 200.519987][T14264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.533022][T14264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.588932][T14264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.601641][T14264] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.608477][T14351] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 200.619812][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.626898][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.628823][T14353] loop3: detected capacity change from 0 to 2048 [ 200.655070][T14353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.667327][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.667377][T14353] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.674440][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.707815][T14264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.718223][T14264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.764207][T10953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.919614][T14375] loop1: detected capacity change from 0 to 2048 [ 200.936818][T14264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.982765][T14375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.999457][T14387] loop3: detected capacity change from 0 to 512 [ 201.063707][T14387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.102559][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.132440][T14387] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.202232][T14387] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 201.268556][T10953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.401998][T14264] veth0_vlan: entered promiscuous mode [ 201.427884][T14417] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 201.430722][T14264] veth1_vlan: entered promiscuous mode [ 201.434421][T14417] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.447500][T14417] vhci_hcd vhci_hcd.0: Device attached [ 201.481703][T14418] vhci_hcd: connection closed [ 201.493268][T14264] veth0_macvtap: entered promiscuous mode [ 201.503810][ T36] vhci_hcd: stop threads [ 201.508132][ T36] vhci_hcd: release socket [ 201.512703][ T36] vhci_hcd: disconnect device [ 201.534960][T14264] veth1_macvtap: entered promiscuous mode [ 201.547274][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.557776][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.567695][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.567712][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.567729][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.567746][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.567768][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.567784][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.572303][T14264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.577974][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.652740][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.662638][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.673145][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.683149][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.693636][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.703490][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.713950][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.726252][T14264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.734999][T14264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.743789][T14264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.752644][T14264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.761479][T14264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.819170][T14431] netlink: 'syz.4.4024': attribute type 4 has an invalid length. [ 201.956243][T14438] loop4: detected capacity change from 0 to 512 [ 201.977876][T14438] EXT4-fs: Ignoring removed orlov option [ 201.989431][T14438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.009128][T14438] EXT4-fs (loop4): orphan cleanup on readonly fs [ 202.022013][T14438] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4085: bg 0: block 248: padding at end of block bitmap is not set [ 202.036831][T14438] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.4085: Failed to acquire dquot type 1 [ 202.049910][T14438] EXT4-fs (loop4): 1 truncate cleaned up [ 202.056320][T14438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.085592][T14438] EXT4-fs: Ignoring removed orlov option [ 202.091776][T14438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.102404][T14438] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 202.140834][T14438] EXT4-fs error (device loop4): __ext4_remount:6749: comm syz.4.4085: Abort forced by user [ 202.189903][T14438] EXT4-fs (loop4): Remounting filesystem read-only [ 202.196510][T14438] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 202.280224][T14438] ext4 filesystem being remounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.380827][T14264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.462022][T14463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4094'. [ 202.523048][T14467] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.617008][T14476] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4100'. [ 202.622369][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4103'. [ 202.909629][T14504] tipc: Started in network mode [ 202.914613][T14504] tipc: Node identity ac14140f, cluster identity 4711 [ 202.922885][T14504] tipc: New replicast peer: 255.255.255.5 [ 202.928758][T14504] tipc: Enabled bearer , priority 10 [ 202.960085][T14509] syz.3.4115[14509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.960155][T14509] syz.3.4115[14509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.990658][T14509] syz.3.4115[14509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.082041][T14509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.338950][T14533] xt_hashlimit: max too large, truncated to 1048576 [ 203.360224][T14528] loop3: detected capacity change from 0 to 4096 [ 203.411730][T14528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.547262][T14548] loop2: detected capacity change from 0 to 256 [ 203.577291][T14548] FAT-fs (loop2): Directory bread(block 64) failed [ 203.584109][T10953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.593580][T14548] FAT-fs (loop2): Directory bread(block 65) failed [ 203.600410][T14548] FAT-fs (loop2): Directory bread(block 66) failed [ 203.607358][T14548] FAT-fs (loop2): Directory bread(block 67) failed [ 203.614126][T14548] FAT-fs (loop2): Directory bread(block 68) failed [ 203.620895][T14548] FAT-fs (loop2): Directory bread(block 69) failed [ 203.627569][T14548] FAT-fs (loop2): Directory bread(block 70) failed [ 203.634229][T14548] FAT-fs (loop2): Directory bread(block 71) failed [ 203.660612][T14548] FAT-fs (loop2): Directory bread(block 72) failed [ 203.680531][T14548] FAT-fs (loop2): Directory bread(block 73) failed [ 203.869178][T14561] loop2: detected capacity change from 0 to 2048 [ 203.883298][T14563] loop3: detected capacity change from 0 to 512 [ 203.893338][T14565] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4139'. [ 203.908685][T14563] EXT4-fs: quotafile must be on filesystem root [ 203.918239][T14561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.023566][ T6784] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.050461][ T3449] tipc: Node number set to 2886997007 [ 204.078518][ T6784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.244802][T14588] tipc: New replicast peer: 255.255.255.5 [ 204.250638][T14588] tipc: Enabled bearer , priority 10 [ 204.463138][T14603] syzkaller0: entered allmulticast mode [ 204.470216][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4156'. [ 204.505166][T14603] syzkaller0 (unregistering): left allmulticast mode [ 204.644365][T14619] syzkaller0: entered allmulticast mode [ 204.677295][T14619] syzkaller0 (unregistering): left allmulticast mode [ 204.819009][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 204.819026][ T29] audit: type=1400 audit(1733030713.088:4885): avc: denied { mounton } for pid=14626 comm="syz.5.4164" path=2F3833382F66696C6530202864656C6574656429 dev="proc" ino=4026533465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 204.877053][ T29] audit: type=1400 audit(1733030713.128:4886): avc: denied { mount } for pid=14626 comm="syz.5.4164" name="/" dev="ramfs" ino=44467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 204.899613][ T29] audit: type=1326 audit(1733030713.148:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.4.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 204.923240][ T29] audit: type=1326 audit(1733030713.148:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.4.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 204.946809][ T29] audit: type=1326 audit(1733030713.148:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.4.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 204.970349][ T29] audit: type=1326 audit(1733030713.148:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.4.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 204.993955][ T29] audit: type=1400 audit(1733030713.148:4891): avc: denied { unmount } for pid=4094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 205.073486][ T29] audit: type=1326 audit(1733030713.338:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14632 comm="syz.3.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 205.097105][ T29] audit: type=1326 audit(1733030713.338:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14632 comm="syz.3.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 205.120770][ T29] audit: type=1326 audit(1733030713.338:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14632 comm="syz.3.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 205.381915][T14644] loop4: detected capacity change from 0 to 4096 [ 205.418548][T14644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.532801][T14657] loop3: detected capacity change from 0 to 1024 [ 205.589198][T14657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.717690][T10953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.954227][T14264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.190482][T14684] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 206.197132][T14684] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.204782][T14684] vhci_hcd vhci_hcd.0: Device attached [ 206.234265][T14687] loop4: detected capacity change from 0 to 256 [ 206.262971][T14685] vhci_hcd: connection closed [ 206.263078][ T306] vhci_hcd: stop threads [ 206.272160][ T306] vhci_hcd: release socket [ 206.276701][ T306] vhci_hcd: disconnect device [ 206.329649][T14692] loop3: detected capacity change from 0 to 2048 [ 206.342093][T14687] FAT-fs (loop4): Directory bread(block 64) failed [ 206.352072][T14687] FAT-fs (loop4): Directory bread(block 65) failed [ 206.358643][T14687] FAT-fs (loop4): Directory bread(block 66) failed [ 206.391951][T14692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.394429][T14687] FAT-fs (loop4): Directory bread(block 67) failed [ 206.432770][T14687] FAT-fs (loop4): Directory bread(block 68) failed [ 206.439627][T14692] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 206.462371][T14687] FAT-fs (loop4): Directory bread(block 69) failed [ 206.495161][T14687] FAT-fs (loop4): Directory bread(block 70) failed [ 206.520941][T10953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.530104][T14687] FAT-fs (loop4): Directory bread(block 71) failed [ 206.553886][T14687] FAT-fs (loop4): Directory bread(block 72) failed [ 206.588430][T14687] FAT-fs (loop4): Directory bread(block 73) failed [ 206.645678][T14705] syzkaller0: entered allmulticast mode [ 206.680549][T14705] syzkaller0 (unregistering): left allmulticast mode [ 206.786631][T14714] loop3: detected capacity change from 0 to 512 [ 206.858204][T14714] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 206.860684][T14724] loop1: detected capacity change from 0 to 512 [ 206.881328][T14714] EXT4-fs (loop3): mount failed [ 206.888173][T14724] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.937743][T14724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.971300][T14724] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.017877][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4206'. [ 207.053636][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.063651][T14733] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 207.081618][T14738] macvtap0: entered promiscuous mode [ 207.094337][T14738] macvtap0: left promiscuous mode [ 207.101996][T14740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.110540][T14742] syz.5.4211[14742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.110593][T14742] syz.5.4211[14742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.166118][T14742] syz.5.4211[14742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.180590][T14740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.183578][T14744] ip6gre1: entered allmulticast mode [ 207.476367][T14768] loop1: detected capacity change from 0 to 512 [ 207.482305][T14769] loop4: detected capacity change from 0 to 164 [ 207.507217][T14769] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 207.533789][T14768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.553072][T14769] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 207.610680][T14768] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.674968][T14778] loop5: detected capacity change from 0 to 512 [ 207.730212][T14778] EXT4-fs: Ignoring removed orlov option [ 207.749781][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.772612][T14778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.808637][T14778] EXT4-fs (loop5): orphan cleanup on readonly fs [ 207.817020][T14778] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4225: bg 0: block 248: padding at end of block bitmap is not set [ 207.832869][T14778] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.4225: Failed to acquire dquot type 1 [ 207.847801][T14778] EXT4-fs (loop5): 1 truncate cleaned up [ 207.864713][T14778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.874097][T14791] loop4: detected capacity change from 0 to 512 [ 207.901649][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4225'. [ 207.924475][T14778] (unnamed net_device) (uninitialized): option mode: invalid value (219) [ 207.945463][T14791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.967413][T14797] loop1: detected capacity change from 0 to 2048 [ 207.977276][T14799] syz.2.4233[14799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.977379][T14799] syz.2.4233[14799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.013359][T14797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.048428][T14799] syz.2.4233[14799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.056976][T14264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.159860][T14797] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 208.177713][T14797] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 384 with max blocks 2 with error 28 [ 208.190170][T14797] EXT4-fs (loop1): This should not happen!! Data will be lost [ 208.190170][T14797] [ 208.199873][T14797] EXT4-fs (loop1): Total free blocks count 0 [ 208.205904][T14797] EXT4-fs (loop1): Free/Dirty block details [ 208.211852][T14797] EXT4-fs (loop1): free_blocks=2415919104 [ 208.217614][T14797] EXT4-fs (loop1): dirty_blocks=16 [ 208.222786][T14797] EXT4-fs (loop1): Block reservation details [ 208.228823][T14797] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 208.251700][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.383333][T14823] bond2: entered promiscuous mode [ 208.388489][T14823] bond2: entered allmulticast mode [ 208.393835][T14823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.415426][T14823] bond2 (unregistering): Released all slaves [ 208.705801][T14842] syzkaller0: entered promiscuous mode [ 208.711470][T14842] syzkaller0: entered allmulticast mode [ 208.755135][ T4094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.997490][T14857] loop5: detected capacity change from 0 to 256 [ 209.024472][T14857] FAT-fs (loop5): count of clusters too big (2359294) [ 209.031338][T14857] FAT-fs (loop5): Can't find a valid FAT filesystem [ 209.055316][T14860] loop4: detected capacity change from 0 to 2048 [ 209.121724][T14860] loop4: p1 < > p3 [ 209.126368][T14860] loop4: p3 size 134217728 extends beyond EOD, truncated [ 209.228234][ T3481] udevd[3481]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 209.239877][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 209.256887][T14873] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4259'. [ 209.415075][T14886] pim6reg1: entered promiscuous mode [ 209.420505][T14886] pim6reg1: entered allmulticast mode [ 209.462493][T14889] loop4: detected capacity change from 0 to 512 [ 209.483659][T14889] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.506058][T14889] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 209.523839][T14889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 209.535233][T14889] System zones: 1-12 [ 209.554477][T14889] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.4265: corrupted in-inode xattr: bad e_name length [ 209.598963][T14889] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.4265: couldn't read orphan inode 15 (err -117) [ 209.647533][T14889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.748059][T14264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.043157][T14907] loop3: detected capacity change from 0 to 1024 [ 210.091783][T14907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.186423][T10953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.653014][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 210.653032][ T29] audit: type=1400 audit(1733030718.928:5042): avc: denied { create } for pid=14927 comm="syz.3.4282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.703649][ T29] audit: type=1400 audit(1733030718.958:5043): avc: denied { setopt } for pid=14927 comm="syz.3.4282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.797746][T14932] loop4: detected capacity change from 0 to 1024 [ 210.822447][T14932] EXT4-fs: Ignoring removed nobh option [ 210.826713][ T29] audit: type=1400 audit(1733030719.098:5044): avc: denied { name_bind } for pid=14933 comm="syz.3.4285" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 210.828055][T14932] EXT4-fs: Ignoring removed orlov option [ 210.897277][ T29] audit: type=1400 audit(1733030719.168:5045): avc: denied { read write } for pid=14935 comm="syz.2.4286" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 210.921564][ T29] audit: type=1400 audit(1733030719.168:5046): avc: denied { open } for pid=14935 comm="syz.2.4286" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 210.933579][T14932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.945806][ T29] audit: type=1400 audit(1733030719.168:5047): avc: denied { ioctl } for pid=14935 comm="syz.2.4286" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.023113][T14943] loop1: detected capacity change from 0 to 512 [ 211.043762][T14943] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 211.068402][T14943] EXT4-fs (loop1): 1 truncate cleaned up [ 211.078824][T14943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.110678][ T29] audit: type=1400 audit(1733030719.378:5048): avc: denied { setattr } for pid=14942 comm="syz.1.4287" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.144030][T14943] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: comm syz.1.4287: inode #1073372648: comm syz.1.4287: iget: illegal inode # [ 211.160445][T14943] EXT4-fs error (device loop1): ext4_xattr_inode_iget:445: comm syz.1.4287: error while reading EA inode 1073372648 err=-117 [ 211.175394][T14264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.175545][T14943] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm syz.1.4287: corrupted xattr block 33: invalid header [ 211.210895][T14943] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 211.292204][T14950] netlink: 'syz.2.4291': attribute type 4 has an invalid length. [ 211.307171][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.416097][T14958] loop1: detected capacity change from 0 to 1024 [ 211.458406][T14958] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 211.486269][T14961] loop4: detected capacity change from 0 to 1024 [ 211.500901][T14958] JBD2: no valid journal superblock found [ 211.506720][T14958] EXT4-fs (loop1): Could not load journal inode [ 211.545212][T14961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.570605][ T29] audit: type=1400 audit(1733030719.838:5049): avc: denied { create } for pid=14960 comm="syz.4.4296" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 211.590981][ T29] audit: type=1400 audit(1733030719.858:5050): avc: denied { write } for pid=14960 comm="syz.4.4296" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 211.609059][T14965] loop1: detected capacity change from 0 to 1024 [ 211.612744][ T29] audit: type=1400 audit(1733030719.858:5051): avc: denied { add_name } for pid=14960 comm="syz.4.4296" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 211.635168][T14965] EXT4-fs: Ignoring removed orlov option [ 211.645771][T14965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.665060][T14264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.687397][T14965] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 211.696362][T14965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.737588][T14969] loop3: detected capacity change from 0 to 2048 [ 211.777483][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.793402][T14969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.901134][T10953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.984228][T14981] pim6reg1: entered promiscuous mode [ 211.989582][T14981] pim6reg1: entered allmulticast mode [ 212.079448][T14988] loop3: detected capacity change from 0 to 128 [ 212.082611][T14985] loop4: detected capacity change from 0 to 512 [ 212.111466][T14988] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.130386][T14985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.189623][T14988] ext4 filesystem being mounted at /330/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.243576][T14264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.286287][T14995] can0: slcan on ttyS3. [ 212.298657][T10953] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.344583][T14996] loop2: detected capacity change from 0 to 2048 [ 212.352741][T14998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4311'. [ 212.380587][T14995] can0 (unregistered): slcan off ttyS3. [ 212.395856][T14996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.412065][T14995] Falling back ldisc for ttyS3. [ 212.522021][ T6784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.537837][T15011] loop3: detected capacity change from 0 to 256 [ 212.606131][ T8] kernel write not supported for file /vcs (pid: 8 comm: kworker/0:0) [ 212.671968][T15011] FAT-fs (loop3): Directory bread(block 64) failed [ 212.679950][T15011] FAT-fs (loop3): Directory bread(block 65) failed [ 212.729302][T15011] FAT-fs (loop3): Directory bread(block 66) failed [ 212.756526][T15011] FAT-fs (loop3): Directory bread(block 67) failed [ 212.782333][T15011] FAT-fs (loop3): Directory bread(block 68) failed [ 212.802796][T15011] FAT-fs (loop3): Directory bread(block 69) failed [ 212.822579][T15011] FAT-fs (loop3): Directory bread(block 70) failed [ 212.848496][T15011] FAT-fs (loop3): Directory bread(block 71) failed [ 212.878473][T15011] FAT-fs (loop3): Directory bread(block 72) failed [ 212.899744][T15011] FAT-fs (loop3): Directory bread(block 73) failed [ 213.012041][T15011] bio_check_eod: 6 callbacks suppressed [ 213.012062][T15011] syz.3.4314: attempt to access beyond end of device [ 213.012062][T15011] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 213.088189][T15028] loop2: detected capacity change from 0 to 2048 [ 213.103735][T15029] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 213.153200][T15028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.183134][T15033] loop3: detected capacity change from 0 to 2048 [ 213.207625][ T6784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.250960][T15033] loop3: p1 < > p3 [ 213.255493][T15033] loop3: p3 size 134217728 extends beyond EOD, truncated [ 213.297194][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 213.303807][T15036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4325'. [ 213.311607][ T5770] udevd[5770]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 213.350070][T15037] loop2: detected capacity change from 0 to 512 [ 213.357782][T15037] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 213.385956][T15037] EXT4-fs (loop2): 1 truncate cleaned up [ 213.395869][T15037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.398141][T15044] loop4: detected capacity change from 0 to 512 [ 213.419437][T15044] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 213.438764][T15044] EXT4-fs (loop4): 1 truncate cleaned up [ 213.471844][T15044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.543065][T15037] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: comm syz.2.4324: inode #1073372648: comm syz.2.4324: iget: illegal inode # [ 213.592709][T15037] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.4324: error while reading EA inode 1073372648 err=-117 [ 213.624491][T15037] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.4324: corrupted xattr block 33: invalid header [ 213.660872][T15057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15057 comm=syz.3.4333 [ 213.668350][T15037] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 213.721424][T15062] loop4: detected capacity change from 0 to 512 [ 213.728439][T15057] netlink: 'syz.3.4333': attribute type 5 has an invalid length. [ 213.754065][T15062] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.129824][T15098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.138583][T15098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.766732][T15117] ALSA: seq fatal error: cannot create timer (-22) [ 215.128721][T15128] loop2: detected capacity change from 0 to 512 [ 215.190101][T15128] ext4 filesystem being mounted at /661/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.265902][T15128] Process accounting resumed [ 215.317979][T15144] loop5: detected capacity change from 0 to 128 [ 215.325625][T15128] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 215.342367][T15146] netlink: 'syz.1.4365': attribute type 10 has an invalid length. [ 215.356914][T15144] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 215.379914][T15146] syz_tun: entered promiscuous mode [ 215.389221][T15146] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 215.514243][T15156] syz.5.4374: attempt to access beyond end of device [ 215.514243][T15156] loop5: rw=2049, sector=216, nr_sectors = 1 limit=128 [ 215.527865][T15156] Buffer I/O error on dev loop5, logical block 216, lost async page write [ 215.589448][T15156] syz.5.4374: attempt to access beyond end of device [ 215.589448][T15156] loop5: rw=2049, sector=217, nr_sectors = 824 limit=128 [ 215.607826][T15157] loop1: detected capacity change from 0 to 2048 [ 215.711291][T15157] loop1: unable to read partition table [ 215.740598][T15157] loop1: partition table beyond EOD, truncated [ 215.740886][ T306] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 215.746799][T15157] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 215.802372][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 215.802387][ T29] audit: type=1326 audit(1733030724.078:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 215.810533][ T3000] loop1: unable to read partition table [ 215.844809][ T3000] loop1: partition table beyond EOD, truncated [ 215.876750][ T29] audit: type=1326 audit(1733030724.108:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 215.900405][ T29] audit: type=1326 audit(1733030724.108:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 215.924095][ T29] audit: type=1326 audit(1733030724.108:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 215.948006][ T29] audit: type=1326 audit(1733030724.108:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 215.971556][ T29] audit: type=1326 audit(1733030724.108:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 215.995094][ T29] audit: type=1326 audit(1733030724.108:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 216.019006][ T29] audit: type=1326 audit(1733030724.108:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 216.042637][ T29] audit: type=1326 audit(1733030724.108:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 216.066193][ T29] audit: type=1326 audit(1733030724.108:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33d0230849 code=0x7ffc0000 [ 216.114669][T15173] loop1: detected capacity change from 0 to 1024 [ 216.117571][T15170] loop2: detected capacity change from 0 to 512 [ 216.138168][T15173] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 216.167263][T15173] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4378: Invalid block bitmap block 0 in block_group 0 [ 216.189308][T15173] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.4378: Failed to acquire dquot type 0 [ 216.210798][T15173] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.4378: Freeing blocks not in datazone - block = 0, count = 4096 [ 216.227912][T15173] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.4378: Invalid inode bitmap blk 0 in block_group 0 [ 216.241271][T15173] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 216.250062][ T3882] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:11: Failed to release dquot type 0 [ 216.254498][T15173] EXT4-fs (loop1): 1 orphan inode deleted [ 216.307612][T15170] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 216.322502][T15170] EXT4-fs (loop2): mount failed [ 216.496552][T15193] loop4: detected capacity change from 0 to 512 [ 216.507230][T15193] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 216.522228][T15193] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 216.596455][T15193] EXT4-fs (loop4): 1 truncate cleaned up [ 216.642883][T15205] macvlan0: entered promiscuous mode [ 216.669313][T15205] ipvlan0: entered promiscuous mode [ 216.690885][T15205] ipvlan0: left promiscuous mode [ 216.713625][T15205] macvlan0: left promiscuous mode [ 216.764634][T15215] loop2: detected capacity change from 0 to 512 [ 216.796805][T15215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.827504][T15215] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 216.858724][T15215] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 216.896290][T15215] EXT4-fs (loop2): 1 truncate cleaned up [ 217.017322][T15235] loop4: detected capacity change from 0 to 128 [ 217.028968][T15238] netlink: 'syz.2.4403': attribute type 10 has an invalid length. [ 217.037366][T15235] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 217.048311][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4406'. [ 217.120232][T15243] 9pnet: p9_errstr2errno: server reported unknown error [ 217.149557][T15235] syz.4.4404: attempt to access beyond end of device [ 217.149557][T15235] loop4: rw=2049, sector=216, nr_sectors = 1 limit=128 [ 217.163059][T15235] Buffer I/O error on dev loop4, logical block 216, lost async page write [ 217.174571][T15235] syz.4.4404: attempt to access beyond end of device [ 217.174571][T15235] loop4: rw=2049, sector=217, nr_sectors = 824 limit=128 [ 217.276961][ T306] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 217.357666][T15253] loop4: detected capacity change from 0 to 2048 [ 217.480649][T15256] loop1: detected capacity change from 0 to 2048 [ 217.492551][T15253] loop4: unable to read partition table [ 217.501896][T15258] loop3: detected capacity change from 0 to 1024 [ 217.510342][T15253] loop4: partition table beyond EOD, truncated [ 217.516605][T15253] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 217.550972][T15256] loop1: p1 < > p3 [ 217.562306][T15256] loop1: p3 size 134217728 extends beyond EOD, truncated [ 217.637680][ T3000] loop4: unable to read partition table [ 217.656474][ T3000] loop4: partition table beyond EOD, truncated [ 217.706959][T15264] loop1: detected capacity change from 0 to 512 [ 217.732866][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 217.737445][ T3481] udevd[3481]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 217.787158][T15264] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.807098][T15264] Process accounting resumed [ 217.818756][T15264] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 217.865648][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4417'. [ 217.998562][T15278] loop1: detected capacity change from 0 to 512 [ 218.050103][T15278] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.098482][T15283] loop5: detected capacity change from 0 to 1024 [ 218.116453][T15278] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 218.194641][T15278] EXT4-fs (loop1): 1 truncate cleaned up [ 218.256040][T15293] loop3: detected capacity change from 0 to 2048 [ 218.288625][T15294] loop2: detected capacity change from 0 to 1024 [ 218.378870][T15301] loop5: detected capacity change from 0 to 128 [ 218.392810][T15303] syz.4.4428[15303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.392868][T15303] syz.4.4428[15303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.404885][T15303] syz.4.4428[15303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.480113][T15293] loop3: unable to read partition table [ 218.531313][T15293] loop3: partition table beyond EOD, truncated [ 218.537525][T15293] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 218.636051][ T3000] loop3: unable to read partition table [ 218.643424][ T3000] loop3: partition table beyond EOD, truncated [ 218.762988][T15317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.826895][T15317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.150243][T15335] loop5: detected capacity change from 0 to 1024 [ 219.173277][T15339] 9pnet: p9_errstr2errno: server reported unknown error [ 219.274076][T15344] pim6reg1: entered promiscuous mode [ 219.279499][T15344] pim6reg1: entered allmulticast mode [ 219.483118][T15356] loop2: detected capacity change from 0 to 1024 [ 219.521630][T15358] loop5: detected capacity change from 0 to 512 [ 219.544361][T15358] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 219.560658][T15358] EXT4-fs (loop5): invalid journal inode [ 219.627242][T15363] bond_slave_1: mtu greater than device maximum [ 219.726280][T15366] loop2: detected capacity change from 0 to 2048 [ 219.749367][T15366] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.782201][T15372] 9pnet: p9_errstr2errno: server reported unknown error [ 220.039424][T15383] loop5: detected capacity change from 0 to 2048 [ 220.415569][T15383] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 220.466253][T15383] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 220.478757][T15383] EXT4-fs (loop5): This should not happen!! Data will be lost [ 220.478757][T15383] [ 220.488534][T15383] EXT4-fs (loop5): Total free blocks count 0 [ 220.494568][T15383] EXT4-fs (loop5): Free/Dirty block details [ 220.500512][T15383] EXT4-fs (loop5): free_blocks=2415919104 [ 220.506242][T15383] EXT4-fs (loop5): dirty_blocks=16 [ 220.511389][T15383] EXT4-fs (loop5): Block reservation details [ 220.517396][T15383] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 220.547949][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4468'. [ 220.959451][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 220.959470][ T29] audit: type=1400 audit(1733030729.228:5290): avc: denied { create } for pid=15409 comm="syz.2.4472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 221.023394][ T29] audit: type=1326 audit(1733030729.278:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.4.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 221.047088][ T29] audit: type=1326 audit(1733030729.278:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.4.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 221.070691][ T29] audit: type=1326 audit(1733030729.278:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.4.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 221.094253][ T29] audit: type=1326 audit(1733030729.278:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.4.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 221.117834][ T29] audit: type=1326 audit(1733030729.278:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.4.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 221.141401][ T29] audit: type=1326 audit(1733030729.278:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.4.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 221.165105][ T29] audit: type=1326 audit(1733030729.278:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.4.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 221.188711][ T29] audit: type=1326 audit(1733030729.278:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.4.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 221.212300][ T29] audit: type=1326 audit(1733030729.278:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.4.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 221.387453][T15432] loop5: detected capacity change from 0 to 512 [ 221.394004][T15432] EXT4-fs: inline encryption not supported [ 221.419393][T15432] ext4 filesystem being mounted at /900/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.433076][T15432] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.4482: corrupted inode contents [ 221.465855][T15432] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.4482: mark_inode_dirty error [ 221.479178][T15432] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.4482: corrupted inode contents [ 221.500253][T15432] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.4482: mark_inode_dirty error [ 221.568410][T15447] loop4: detected capacity change from 0 to 1024 [ 221.577886][T15447] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 221.913291][T15468] IPv4: Oversized IP packet from 127.202.26.0 [ 221.947722][T15472] syz.1.4498[15472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.947876][T15472] syz.1.4498[15472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.971617][T15463] netlink: 'syz.2.4494': attribute type 8 has an invalid length. [ 222.003933][T15472] syz.1.4498[15472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.100433][T15482] vlan3: entered promiscuous mode [ 222.272042][T15496] loop1: detected capacity change from 0 to 512 [ 222.278690][T15496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.285412][T15496] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.305132][T15496] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 222.320189][T15496] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 222.331760][T15496] EXT4-fs (loop1): 1 truncate cleaned up [ 222.355854][T15496] EXT4-fs: Ignoring removed bh option [ 222.362251][T15496] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 222.463316][T15510] loop3: detected capacity change from 0 to 128 [ 222.496199][T15510] ext4 filesystem being mounted at /374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.529368][T15512] loop5: detected capacity change from 0 to 1024 [ 222.536171][T15512] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.549619][T15512] EXT4-fs (loop5): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 222.566095][T15512] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 222.567755][T15515] loop1: detected capacity change from 0 to 512 [ 222.580617][T15512] EXT4-fs (loop5): orphan cleanup on readonly fs [ 222.593023][T15512] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.4515: Invalid inode table block 0 in block_group 0 [ 222.624822][T15515] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 222.677982][T15515] EXT4-fs (loop1): mount failed [ 222.684232][T15512] EXT4-fs (loop5): Remounting filesystem read-only [ 222.690929][T15512] EXT4-fs (loop5): 1 truncate cleaned up [ 222.737274][T15512] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 222.918683][T15540] loop5: detected capacity change from 0 to 256 [ 222.932063][T15540] msdos: Unknown parameter 'qy0M' [ 223.032743][T15549] loop3: detected capacity change from 0 to 512 [ 223.063843][T15549] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.183433][T15558] loop1: detected capacity change from 0 to 2048 [ 223.294344][T15558] loop1: unable to read partition table [ 223.300395][T15558] loop1: partition table beyond EOD, truncated [ 223.306678][T15558] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 223.367081][T15573] syz.2.4537[15573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.367208][T15573] syz.2.4537[15573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.379551][T15573] syz.2.4537[15573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.472308][T15580] loop2: detected capacity change from 0 to 512 [ 223.495348][T15580] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 223.505234][T15580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 223.514965][T15580] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.4541: corrupted in-inode xattr: e_value size too large [ 223.529625][T15580] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.4541: couldn't read orphan inode 15 (err -117) [ 223.565706][ T3000] loop1: unable to read partition table [ 223.571629][ T3000] loop1: partition table beyond EOD, truncated [ 223.613954][T15586] loop2: detected capacity change from 0 to 512 [ 223.633385][T15586] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 223.661422][T15590] IPv4: Oversized IP packet from 127.202.26.0 [ 223.686276][T15586] ext4 filesystem being mounted at /699/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.721657][T15586] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4543: bg 0: block 280: padding at end of block bitmap is not set [ 223.875036][T15603] netlink: 'syz.1.4548': attribute type 13 has an invalid length. [ 223.882952][T15603] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4548'. [ 223.917612][T15605] loop2: detected capacity change from 0 to 256 [ 223.920493][T15603] syz_tun: refused to change device tx_queue_len [ 223.930291][T15603] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 224.036448][T15607] loop2: detected capacity change from 0 to 512 [ 224.074102][T15613] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4555'. [ 224.094044][T15607] ext4 filesystem being mounted at /702/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.115366][T15618] loop1: detected capacity change from 0 to 2048 [ 224.248471][T15627] loop5: detected capacity change from 0 to 128 [ 224.253636][T15625] loop1: detected capacity change from 0 to 512 [ 224.275925][ T6784] EXT4-fs unmount: 49 callbacks suppressed [ 224.275942][ T6784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.292042][T15627] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.302719][T15625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.304650][T15627] ext4 filesystem being mounted at /919/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 224.327705][T15625] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.372152][ T4094] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.437337][T15636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.444693][T15636] IPv6: NLM_F_CREATE should be set when creating new route [ 224.451912][T15636] IPv6: NLM_F_CREATE should be set when creating new route [ 224.494676][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.595354][T15641] loop5: detected capacity change from 0 to 2048 [ 224.637329][T15644] loop1: detected capacity change from 0 to 512 [ 224.647670][T15647] loop7: detected capacity change from 0 to 16384 [ 224.657032][T15641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.675224][T15648] hsr0: entered promiscuous mode [ 224.691220][T15648] hsr_slave_0: left promiscuous mode [ 224.702505][T15647] loop7: detected capacity change from 16384 to 16383 [ 224.702946][ T4094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.719660][T15648] hsr_slave_1: left promiscuous mode [ 224.728854][T15644] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.748014][T15648] hsr0 (unregistering): left promiscuous mode [ 224.822848][T15644] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 224.851919][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4570'. [ 224.920819][T11007] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 224.958677][T15667] loop2: detected capacity change from 0 to 128 [ 224.989214][T15667] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.030308][T15667] ext4 filesystem being mounted at /707/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 225.138064][T15683] tipc: Enabling of bearer rejected, failed to enable media [ 225.141630][ T6784] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.161884][T15685] loop1: detected capacity change from 0 to 256 [ 225.172699][T15689] loop5: detected capacity change from 0 to 512 [ 225.196177][T15691] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4586'. [ 225.196650][T15689] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.4585: casefold flag without casefold feature [ 225.218345][T15689] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.4585: couldn't read orphan inode 15 (err -117) [ 225.232113][T15689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.255053][T15695] IPv6: Can't replace route, no match found [ 225.270461][ T4094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.343458][T15697] Invalid ELF header magic: != ELF [ 225.509956][T15709] usb usb7: usbfs: process 15709 (syz.4.4594) did not claim interface 0 before use [ 225.516813][T15707] loop5: detected capacity change from 0 to 2048 [ 225.596894][T15707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.606611][T15714] syzkaller0: entered promiscuous mode [ 225.614632][T15714] syzkaller0: entered allmulticast mode [ 225.644109][T15721] loop4: detected capacity change from 0 to 2048 [ 225.653796][T15707] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 225.668745][T15707] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 225.680987][T15707] EXT4-fs (loop5): This should not happen!! Data will be lost [ 225.680987][T15707] [ 225.690736][T15707] EXT4-fs (loop5): Total free blocks count 0 [ 225.696811][T15707] EXT4-fs (loop5): Free/Dirty block details [ 225.702816][T15707] EXT4-fs (loop5): free_blocks=2415919104 [ 225.708742][T15707] EXT4-fs (loop5): dirty_blocks=16 [ 225.713906][T15707] EXT4-fs (loop5): Block reservation details [ 225.719939][T15707] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 225.820910][T15721] loop4: unable to read partition table [ 225.837573][T15721] loop4: partition table beyond EOD, truncated [ 225.843827][T15721] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 225.867042][T15730] loop1: detected capacity change from 0 to 164 [ 225.904304][ T4094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.916095][T15730] syz.1.4602: attempt to access beyond end of device [ 225.916095][T15730] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 225.960577][T15730] syz.1.4602: attempt to access beyond end of device [ 225.960577][T15730] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 225.980252][T15730] syz.1.4602: attempt to access beyond end of device [ 225.980252][T15730] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 225.997447][ T3000] loop4: unable to read partition table [ 226.016823][T15730] syz.1.4602: attempt to access beyond end of device [ 226.016823][T15730] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 226.017857][ T3000] loop4: partition table beyond EOD, truncated [ 226.062925][T15730] syz.1.4602: attempt to access beyond end of device [ 226.062925][T15730] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 226.067063][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 226.067076][ T29] audit: type=1400 audit(1733030734.338:5407): avc: denied { write } for pid=15743 comm="syz.4.4606" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.114130][T15730] syz.1.4602: attempt to access beyond end of device [ 226.114130][T15730] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 226.148223][ T29] audit: type=1400 audit(1733030734.378:5408): avc: denied { open } for pid=15743 comm="syz.4.4606" path="/97/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.202751][T15730] syz.1.4602: attempt to access beyond end of device [ 226.202751][T15730] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 226.245996][T15752] loop4: detected capacity change from 0 to 1024 [ 226.253824][T15730] syz.1.4602: attempt to access beyond end of device [ 226.253824][T15730] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 226.267849][T15752] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.298225][T15752] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 226.318622][T15730] syz.1.4602: attempt to access beyond end of device [ 226.318622][T15730] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 226.355906][T15752] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 226.361183][T15730] syz.1.4602: attempt to access beyond end of device [ 226.361183][T15730] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 226.365200][T15752] EXT4-fs (loop4): orphan cleanup on readonly fs [ 226.385340][T15752] EXT4-fs error (device loop4): __ext4_get_inode_loc:4435: comm syz.4.4609: Invalid inode table block 0 in block_group 0 [ 226.398204][T15752] EXT4-fs (loop4): Remounting filesystem read-only [ 226.404808][T15752] Quota error (device loop4): write_blk: dquota write failed [ 226.412259][T15752] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 226.428678][T15752] EXT4-fs (loop4): 1 truncate cleaned up [ 226.434951][T15752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.474116][T15752] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 226.494196][T15752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.619357][ T29] audit: type=1326 audit(1733030734.888:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.4.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 226.625675][T15757] loop2: detected capacity change from 0 to 512 [ 226.666344][T15759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.667173][ T29] audit: type=1326 audit(1733030734.888:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.4.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 226.673696][T15759] IPv6: NLM_F_CREATE should be set when creating new route [ 226.704551][ T29] audit: type=1326 audit(1733030734.928:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.4.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 226.728096][ T29] audit: type=1326 audit(1733030734.928:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.4.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 226.751709][ T29] audit: type=1326 audit(1733030734.928:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.4.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 226.775265][ T29] audit: type=1326 audit(1733030734.928:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.4.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 226.816483][T15757] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.861306][T15757] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 226.913686][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4617'. [ 226.929496][ T6784] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 227.034739][T15771] loop2: detected capacity change from 0 to 512 [ 227.051375][T15779] pim6reg1: entered promiscuous mode [ 227.056801][T15779] pim6reg1: entered allmulticast mode [ 227.073165][T15771] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4618: Invalid inode bitmap blk 4 in block_group 0 [ 227.087386][T15771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.102331][T15771] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4618: bg 0: block 13: invalid block bitmap [ 227.135356][T15789] usb usb7: usbfs: process 15789 (syz.1.4624) did not claim interface 0 before use [ 227.197478][ T6784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.392182][T15806] loop4: detected capacity change from 0 to 8192 [ 227.579217][T15825] syz.2.4640[15825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.579328][T15825] syz.2.4640[15825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.629207][T15825] syz.2.4640[15825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.940250][T15843] loop5: detected capacity change from 0 to 1024 [ 227.975656][T15843] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 228.020843][T15843] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 228.048748][T15840] loop4: detected capacity change from 0 to 8192 [ 228.063318][T15843] EXT4-fs (loop5): mount failed [ 228.075757][T15840] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 228.083721][T15840] FAT-fs (loop4): Filesystem has been set read-only [ 228.110074][T15840] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 228.131854][T15840] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 228.270836][T15857] loop4: detected capacity change from 0 to 512 [ 228.271277][T15854] loop5: detected capacity change from 0 to 1024 [ 228.309011][T15854] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 228.309206][T15857] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.4651: casefold flag without casefold feature [ 228.342715][T15857] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.4651: couldn't read orphan inode 15 (err -117) [ 228.352324][T15863] loop2: detected capacity change from 0 to 1024 [ 228.374046][T15857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.407047][T15854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.421719][T15870] pim6reg1: entered promiscuous mode [ 228.422906][T15854] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.5.4654: corrupted in-inode xattr: bad magic number in in-inode xattr [ 228.427066][T15870] pim6reg1: entered allmulticast mode [ 228.479067][ T4094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.489216][T15863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.502332][T14264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.673591][ T6784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.744165][T15893] loop2: detected capacity change from 0 to 256 [ 228.913187][T15905] IPv4: Oversized IP packet from 127.202.26.0 [ 228.975158][T15907] Cannot find del_set index 0 as target [ 229.002660][ T3375] IPVS: starting estimator thread 0... [ 229.110502][T15910] IPVS: using max 1920 ests per chain, 96000 per kthread [ 229.139220][T15916] loop1: detected capacity change from 0 to 8192 [ 229.163806][T15916] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 229.171768][T15916] FAT-fs (loop1): Filesystem has been set read-only [ 229.179332][T15916] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 229.190892][T15916] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 229.405981][T15933] loop2: detected capacity change from 0 to 2048 [ 229.418705][T15935] loop1: detected capacity change from 0 to 1024 [ 229.460401][T15933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.480382][T15933] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 229.495924][T15933] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 16383 with max blocks 1 with error 28 [ 229.508494][T15933] EXT4-fs (loop2): This should not happen!! Data will be lost [ 229.508494][T15933] [ 229.515391][T15945] sd 0:0:1:0: device reset [ 229.518259][T15933] EXT4-fs (loop2): Total free blocks count 0 [ 229.528725][T15933] EXT4-fs (loop2): Free/Dirty block details [ 229.534654][T15933] EXT4-fs (loop2): free_blocks=2415919104 [ 229.540401][T15933] EXT4-fs (loop2): dirty_blocks=16 [ 229.545564][T15933] EXT4-fs (loop2): Block reservation details [ 229.551574][T15933] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 229.559936][T15935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.612623][ T6784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.643633][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.701919][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1 [ 229.709354][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.716869][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.724297][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.731811][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2 [ 229.739251][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.746860][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.754312][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.761838][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.769234][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.776744][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.784154][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.791625][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.799135][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.806584][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.814134][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.821651][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.829122][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.836623][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.844182][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.851656][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.859088][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.866583][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.874062][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.881501][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.888898][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.896320][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.903734][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.911195][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.918592][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.926120][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.933538][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.940970][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.948446][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 229.960228][ T24] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 230.021574][T15963] loop3: detected capacity change from 0 to 256 [ 230.048613][T15967] loop2: detected capacity change from 0 to 1024 [ 230.089321][T15967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.246406][T15985] qrtr: Invalid version 164 [ 230.273166][ T6784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.307397][T15989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4710'. [ 230.518617][T16008] loop1: detected capacity change from 0 to 256 [ 230.569297][T16013] pim6reg1: entered promiscuous mode [ 230.574735][T16013] pim6reg1: entered allmulticast mode [ 230.648761][T16018] loop4: detected capacity change from 0 to 512 [ 230.668495][T16018] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.680047][T16018] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 230.690245][T16018] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.4723: Corrupt directory, running e2fsck is recommended [ 230.704199][T16018] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 230.712517][T16018] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.4723: corrupted in-inode xattr: invalid ea_ino [ 230.727420][T16018] EXT4-fs (loop4): Remounting filesystem read-only [ 230.734510][T16018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.757143][T16018] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 230.764728][T16018] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.894889][T16024] loop1: detected capacity change from 0 to 8192 [ 230.907309][T16024] vfat: Unknown parameter '18446744073709551615' [ 231.147862][T16037] loop2: detected capacity change from 0 to 8192 [ 231.163721][T16039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4731'. [ 231.178021][T16037] bio_check_eod: 5297 callbacks suppressed [ 231.178039][T16037] syz.2.4730: attempt to access beyond end of device [ 231.178039][T16037] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 231.229859][T16037] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 231.237779][T16037] FAT-fs (loop2): Filesystem has been set read-only [ 231.262719][T16037] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 231.271166][T16037] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 231.353218][T16044] syzkaller0: entered allmulticast mode [ 231.367353][T16046] 9pnet: Could not find request transport: fdSe*!̿L8GfwOľϲ`hW$c\.\ר;='AnD!w "J4tF9:.VYe [ 231.427678][T16050] loop4: detected capacity change from 0 to 2048 [ 231.431704][T16044] syzkaller0 (unregistering): left allmulticast mode [ 231.497333][T16050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.510370][T16057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.523677][T16057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.570074][T16050] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 231.645572][T16067] ip6gre1: entered allmulticast mode [ 231.660333][T16050] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 16383 with max blocks 1 with error 28 [ 231.672953][T16050] EXT4-fs (loop4): This should not happen!! Data will be lost [ 231.672953][T16050] [ 231.682711][T16050] EXT4-fs (loop4): Total free blocks count 0 [ 231.688735][T16050] EXT4-fs (loop4): Free/Dirty block details [ 231.695138][T16050] EXT4-fs (loop4): free_blocks=2415919104 [ 231.700980][T16050] EXT4-fs (loop4): dirty_blocks=16 [ 231.706105][T16050] EXT4-fs (loop4): Block reservation details [ 231.712164][T16050] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 231.770842][T14264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.934518][T16084] pim6reg1: entered promiscuous mode [ 231.939862][T16084] pim6reg1: entered allmulticast mode [ 232.096290][T16088] loop3: detected capacity change from 0 to 164 [ 232.118425][T16088] syz.3.4752: attempt to access beyond end of device [ 232.118425][T16088] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 232.164574][T16088] syz.3.4752: attempt to access beyond end of device [ 232.164574][T16088] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 232.188914][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 232.188932][ T29] audit: type=1400 audit(1733030740.458:5551): avc: denied { lock } for pid=16099 comm="syz.4.4758" path="socket:[49776]" dev="sockfs" ino=49776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 232.222126][T16088] syz.3.4752: attempt to access beyond end of device [ 232.222126][T16088] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 232.236510][T16088] syz.3.4752: attempt to access beyond end of device [ 232.236510][T16088] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 232.251675][T16088] syz.3.4752: attempt to access beyond end of device [ 232.251675][T16088] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 232.265487][T16088] syz.3.4752: attempt to access beyond end of device [ 232.265487][T16088] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 232.280746][T16088] syz.3.4752: attempt to access beyond end of device [ 232.280746][T16088] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 232.328202][T16088] syz.3.4752: attempt to access beyond end of device [ 232.328202][T16088] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 232.364714][ T29] audit: type=1400 audit(1733030740.638:5552): avc: denied { read } for pid=16103 comm="syz.5.4760" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 232.396428][T16088] syz.3.4752: attempt to access beyond end of device [ 232.396428][T16088] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 232.417774][T16106] x_tables: duplicate underflow at hook 1 [ 232.423814][ T29] audit: type=1400 audit(1733030740.638:5553): avc: denied { open } for pid=16103 comm="syz.5.4760" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 232.505257][T16112] ip6gre2: entered allmulticast mode [ 232.560789][T16115] IPv4: Oversized IP packet from 127.202.26.0 [ 232.803718][T16126] rdma_op ffff88813396c980 conn xmit_rdma 0000000000000000 [ 232.907861][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4774'. [ 232.967175][T16137] loop1: detected capacity change from 0 to 1024 [ 232.989047][T16137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.106103][T16142] pim6reg1: entered promiscuous mode [ 233.111595][T16142] pim6reg1: entered allmulticast mode [ 233.128216][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.139730][ T29] audit: type=1400 audit(1733030741.408:5554): avc: denied { getopt } for pid=16144 comm="syz.2.4779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.166989][T16150] netdevsim netdevsim4: Firmware load for '../file0/file0' refused, path contains '..' component [ 233.223597][T16155] loop4: detected capacity change from 0 to 512 [ 233.368283][T16155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.400310][T16166] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4786'. [ 233.424159][T16155] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.447785][T16171] loop5: detected capacity change from 0 to 512 [ 233.495956][T16171] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 233.529269][T16150] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 233.546118][T16178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.549982][T16171] EXT4-fs (loop5): 1 truncate cleaned up [ 233.562504][T16171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.576595][T16178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.587410][T16150] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 233.623507][T16175] loop2: detected capacity change from 0 to 164 [ 233.672853][T14264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.890225][T16188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.900724][ T29] audit: type=1400 audit(1733030742.158:5555): avc: denied { read } for pid=16185 comm="syz.4.4793" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 233.914623][T16188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.023213][T16191] IPv4: Oversized IP packet from 127.202.26.0 [ 234.206359][ T29] audit: type=1326 audit(1733030742.478:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16195 comm="syz.1.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 234.255268][ T4094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.283272][ T29] audit: type=1326 audit(1733030742.498:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16195 comm="syz.1.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 234.307018][ T29] audit: type=1326 audit(1733030742.498:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16195 comm="syz.1.4798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 234.378942][T16201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4802'. [ 234.464284][ T29] audit: type=1400 audit(1733030742.728:5559): avc: denied { read } for pid=16205 comm="syz.2.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.529652][ T29] audit: type=1326 audit(1733030742.798:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.1.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 234.571193][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4803'. [ 234.607953][T16218] loop1: detected capacity change from 0 to 512 [ 234.623354][T16220] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4809'. [ 234.654521][T16218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.684408][T16226] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4810'. [ 234.701848][T16218] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.779876][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.899961][T16233] bridge_slave_0: left allmulticast mode [ 234.905892][T16233] bridge_slave_0: left promiscuous mode [ 234.911719][T16233] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.936873][T16237] loop1: detected capacity change from 0 to 512 [ 234.952292][T16237] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.967533][T16233] bridge_slave_1: left allmulticast mode [ 234.973286][T16233] bridge_slave_1: left promiscuous mode [ 234.979014][T16233] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.991743][T16233] bond0: (slave bond_slave_0): Releasing backup interface [ 234.999803][T16237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.015534][T16233] bond0: (slave bond_slave_1): Releasing backup interface [ 235.022994][T16237] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.038656][T16233] team0: Port device team_slave_0 removed [ 235.055352][T16233] team0: Port device team_slave_1 removed [ 235.068348][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.077845][T16233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.085425][T16233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.106359][T16233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.114047][T16233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.160384][T16238] geneve2: entered promiscuous mode [ 235.165780][T16238] geneve2: entered allmulticast mode [ 235.191793][T16238] batman_adv: batadv0: Adding interface: geneve2 [ 235.198179][T16238] batman_adv: batadv0: The MTU of interface geneve2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.226853][T16245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.236484][T16245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.246404][T16238] batman_adv: batadv0: Interface activated: geneve2 [ 235.491092][T16258] loop4: detected capacity change from 0 to 1024 [ 235.502980][T16258] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 235.552912][T16258] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4832: Invalid block bitmap block 0 in block_group 0 [ 235.569164][T16258] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.4832: Failed to acquire dquot type 0 [ 235.581035][T16258] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.4832: Freeing blocks not in datazone - block = 0, count = 4096 [ 235.595438][T16258] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4832: Invalid inode bitmap blk 0 in block_group 0 [ 235.608551][T16258] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 235.617592][T16258] EXT4-fs (loop4): 1 orphan inode deleted [ 235.622126][ T306] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:5: Failed to release dquot type 0 [ 235.624124][T16258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.691596][T14264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.735380][T16264] ip6gre1: entered allmulticast mode [ 235.837372][T16270] bridge0: port 3(bond0) entered blocking state [ 235.844131][T16270] bridge0: port 3(bond0) entered disabled state [ 235.856325][T16272] loop5: detected capacity change from 0 to 128 [ 235.866303][T16272] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.873397][T16270] bond0: entered allmulticast mode [ 235.883655][T16270] bond_slave_0: entered allmulticast mode [ 235.889435][T16270] bond_slave_1: entered allmulticast mode [ 235.896655][T16270] bond0: entered promiscuous mode [ 235.901786][T16270] bond_slave_0: entered promiscuous mode [ 235.907519][T16270] bond_slave_1: entered promiscuous mode [ 235.915235][T16272] ext4 filesystem being mounted at /972/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 235.916418][T16270] bridge0: port 3(bond0) entered blocking state [ 235.931821][T16270] bridge0: port 3(bond0) entered forwarding state [ 236.003688][T16279] loop4: detected capacity change from 0 to 1024 [ 236.048997][T16279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.091685][ T4094] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.232208][T16295] syz.5.4835[16295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.232304][T16295] syz.5.4835[16295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.246362][T14264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.250147][T16295] syz.5.4835[16295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.344863][T16299] ip6gre3: entered allmulticast mode [ 236.623148][T16320] loop3: detected capacity change from 0 to 128 [ 236.657809][T16320] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.691464][T16320] ext4 filesystem being mounted at /428/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.708009][T16328] loop1: detected capacity change from 0 to 1024 [ 236.773729][T16332] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4852'. [ 236.786618][T16328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.865283][T10953] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.903740][T16346] netlink: 'syz.2.4857': attribute type 1 has an invalid length. [ 236.972922][T16353] bond0: left allmulticast mode [ 236.977832][T16353] bond_slave_0: left allmulticast mode [ 236.983335][T16353] bond_slave_1: left allmulticast mode [ 236.988841][T16353] bond0: left promiscuous mode [ 236.993670][T16353] bond_slave_0: left promiscuous mode [ 236.999214][T16353] bond_slave_1: left promiscuous mode [ 237.004819][T16353] bridge0: port 3(bond0) entered disabled state [ 237.030196][T16353] bridge_slave_0: left allmulticast mode [ 237.035995][T16353] bridge_slave_0: left promiscuous mode [ 237.041754][T16353] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.042416][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.060781][T16353] bridge_slave_1: left allmulticast mode [ 237.066483][T16353] bridge_slave_1: left promiscuous mode [ 237.072143][T16353] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.090324][T16353] bond0: (slave bond_slave_0): Releasing backup interface [ 237.105027][T16353] bond0: (slave bond_slave_1): Releasing backup interface [ 237.126729][T16367] loop1: detected capacity change from 0 to 1024 [ 237.148597][T16353] team0: Port device team_slave_0 removed [ 237.154039][T16373] loop5: detected capacity change from 0 to 512 [ 237.166067][T16353] team0: Port device team_slave_1 removed [ 237.184214][T16367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.218329][T16367] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.226485][T16373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.252813][T16373] ext4 filesystem being mounted at /977/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.284057][T11007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.296529][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 237.296542][ T29] audit: type=1326 audit(1733030745.568:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16381 comm="syz.4.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 237.329238][T16346] bond2: (slave veth9): Enslaving as a backup interface with a down link [ 237.344613][ T29] audit: type=1326 audit(1733030745.618:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16381 comm="syz.4.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fbefd380849 code=0x7ffc0000 [ 237.376710][T16368] geneve2: entered promiscuous mode [ 237.382015][T16368] geneve2: entered allmulticast mode [ 237.406159][ T29] audit: type=1326 audit(1733030745.668:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 237.429871][ T29] audit: type=1326 audit(1733030745.668:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 237.453467][ T29] audit: type=1326 audit(1733030745.668:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 237.477020][ T29] audit: type=1326 audit(1733030745.668:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 237.500568][ T29] audit: type=1326 audit(1733030745.668:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 237.524227][ T29] audit: type=1326 audit(1733030745.668:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 237.547790][ T29] audit: type=1326 audit(1733030745.668:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 237.571356][ T29] audit: type=1326 audit(1733030745.668:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16384 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f463cd20849 code=0x7ffc0000 [ 237.596649][T16346] bond2: (slave veth11): Enslaving as a backup interface with a down link [ 237.632429][ T4094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.806810][T16401] bridge0: port 3(bond0) entered blocking state [ 237.813217][T16401] bridge0: port 3(bond0) entered disabled state [ 237.839027][T16401] bond0: entered allmulticast mode [ 237.844305][T16401] bond_slave_0: entered allmulticast mode [ 237.850041][T16401] bond_slave_1: entered allmulticast mode [ 237.855901][T16401] syz_tun: entered allmulticast mode [ 237.861212][T16401] dummy0: entered allmulticast mode [ 237.893821][T16401] bond0: entered promiscuous mode [ 237.898922][T16401] bond_slave_0: entered promiscuous mode [ 237.904820][T16401] bond_slave_1: entered promiscuous mode [ 237.908133][T16398] loop1: detected capacity change from 0 to 8192 [ 237.910583][T16401] dummy0: entered promiscuous mode [ 237.956553][T16401] bridge0: port 3(bond0) entered blocking state [ 237.962967][T16401] bridge0: port 3(bond0) entered forwarding state [ 237.984935][T16398] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.111735][T16409] pim6reg1: entered promiscuous mode [ 238.117095][T16409] pim6reg1: entered allmulticast mode [ 238.156398][T16413] loop3: detected capacity change from 0 to 1024 [ 238.168238][T16411] pim6reg1: entered promiscuous mode [ 238.173644][T16411] pim6reg1: entered allmulticast mode [ 238.215228][T16413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.314107][T16421] 9pnet: p9_errstr2errno: server reported unknown error [ 238.357644][T16423] loop1: detected capacity change from 0 to 2048 [ 238.369713][T10953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.556878][T16436] vlan2: entered promiscuous mode [ 238.562033][T16436] team_slave_1: entered promiscuous mode [ 238.586530][T16439] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.596644][T16436] team_slave_1: left promiscuous mode [ 238.621580][T16443] loop3: detected capacity change from 0 to 1024 [ 238.652860][T16443] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 238.710709][T16443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.853006][T16457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4893'. [ 238.927045][T16462] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 238.933664][T16462] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 238.941402][T16462] vhci_hcd vhci_hcd.0: Device attached [ 238.952915][T16457] sit1: entered promiscuous mode [ 238.957891][T16457] sit1: entered allmulticast mode [ 238.976102][T16458] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 238.982782][T16458] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 238.990293][T16458] vhci_hcd vhci_hcd.0: Device attached [ 239.071889][T16458] block device autoloading is deprecated and will be removed. [ 239.111068][T16458] bio_check_eod: 19119 callbacks suppressed [ 239.111084][T16458] syz.2.4894: attempt to access beyond end of device [ 239.111084][T16458] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 239.118483][T16462] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10) [ 239.136595][T16462] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 239.140313][T16474] loop5: detected capacity change from 0 to 512 [ 239.144232][T16462] vhci_hcd vhci_hcd.0: Device attached [ 239.150701][ T24] vhci_hcd: vhci_device speed not set [ 239.170909][T16474] EXT4-fs: Ignoring removed bh option [ 239.188961][T16474] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 239.239499][T16465] vhci_hcd: connection closed [ 239.239627][T16463] vhci_hcd: connection closed [ 239.244409][T16475] vhci_hcd: connection closed [ 239.246160][T12291] vhci_hcd: stop threads [ 239.258290][T12291] vhci_hcd: release socket [ 239.262819][T12291] vhci_hcd: disconnect device [ 239.267571][ T24] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 239.277442][T16464] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 239.285916][T12291] vhci_hcd: stop threads [ 239.290290][T12291] vhci_hcd: release socket [ 239.294968][T12291] vhci_hcd: disconnect device [ 239.303381][T12291] vhci_hcd: stop threads [ 239.307784][T12291] vhci_hcd: release socket [ 239.312271][T12291] vhci_hcd: disconnect device [ 239.317772][T16474] EXT4-fs (loop5): 1 truncate cleaned up [ 239.515596][T16504] loop1: detected capacity change from 0 to 1764 [ 239.530602][T16513] loop4: detected capacity change from 0 to 1024 [ 239.537657][T16513] EXT4-fs: Ignoring removed oldalloc option [ 239.544228][T16513] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 239.593454][ T3375] ================================================================== [ 239.601576][ T3375] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 239.608630][ T3375] [ 239.610943][ T3375] read-write to 0xffff888237c2e8a4 of 4 bytes by task 3384 on cpu 0: [ 239.619028][ T3375] wq_worker_running+0x98/0x130 [ 239.623892][ T3375] schedule_timeout+0xb8/0x160 [ 239.628663][ T3375] wait_for_common+0xfb/0x1c0 [ 239.633334][ T3375] usb_start_wait_urb+0xdc/0x190 [ 239.638302][ T3375] usb_control_msg+0x182/0x240 [ 239.643067][ T3375] hub_ext_port_status+0xbf/0x480 [ 239.648102][ T3375] hub_event+0x538/0x2910 [ 239.652435][ T3375] process_scheduled_works+0x483/0x9a0 [ 239.657896][ T3375] worker_thread+0x51d/0x6f0 [ 239.662498][ T3375] kthread+0x1d1/0x210 [ 239.666575][ T3375] ret_from_fork+0x4b/0x60 [ 239.670983][ T3375] ret_from_fork_asm+0x1a/0x30 [ 239.675741][ T3375] [ 239.678058][ T3375] read to 0xffff888237c2e8a4 of 4 bytes by task 3375 on cpu 1: [ 239.685604][ T3375] kick_pool+0x4d/0x2c0 [ 239.689762][ T3375] __queue_work+0x8bb/0xb40 [ 239.694270][ T3375] queue_work_on+0xd3/0x180 [ 239.698792][ T3375] process_srcu+0x711/0xb00 [ 239.703286][ T3375] process_scheduled_works+0x483/0x9a0 [ 239.708768][ T3375] worker_thread+0x51d/0x6f0 [ 239.713361][ T3375] kthread+0x1d1/0x210 [ 239.717425][ T3375] ret_from_fork+0x4b/0x60 [ 239.721832][ T3375] ret_from_fork_asm+0x1a/0x30 [ 239.726591][ T3375] [ 239.728906][ T3375] value changed: 0x00000000 -> 0x00000001 [ 239.734613][ T3375] [ 239.736925][ T3375] Reported by Kernel Concurrency Sanitizer on: [ 239.743085][ T3375] CPU: 1 UID: 0 PID: 3375 Comm: kworker/1:3 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 239.753503][ T3375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.763555][ T3375] Workqueue: rcu_gp process_srcu [ 239.768510][ T3375] ================================================================== [ 239.812877][T16513] netlink: 'syz.4.4914': attribute type 4 has an invalid length. [ 239.900284][T11007] bond0: (slave syz_tun): Releasing backup interface [ 244.332433][ T24] usb 5-1: enqueue for inactive port 0 [ 244.337953][ T24] usb 5-1: enqueue for inactive port 0 [ 244.440593][ T24] vhci_hcd: vhci_device speed not set