last executing test programs: 2m21.59999524s ago: executing program 1 (id=270): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) splice(r0, 0x0, r3, 0x0, 0x100000004, 0x0) 2m21.448136902s ago: executing program 1 (id=275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2m21.361490489s ago: executing program 1 (id=277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x281445c, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0x2, 0x269, &(0x7f0000000780)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) 2m21.239821419s ago: executing program 1 (id=281): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4) syz_io_uring_setup(0x22, &(0x7f00000000c0)={0x0, 0x289a, 0x10000, 0x8001, 0x31f}, 0x0, 0x0) 2m20.928083064s ago: executing program 1 (id=294): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x513, &(0x7f0000000440)="$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") close(0x3) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m20.754548409s ago: executing program 1 (id=299): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 2m20.73010621s ago: executing program 32 (id=299): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 1m58.97403336s ago: executing program 0 (id=767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 1m58.934348453s ago: executing program 0 (id=769): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) 1m58.869068369s ago: executing program 0 (id=773): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xffff7ffffffffffd}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 1m58.7304809s ago: executing program 0 (id=780): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m58.681020094s ago: executing program 0 (id=784): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x803, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m58.424295805s ago: executing program 0 (id=798): timer_create(0x3, 0x0, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_gettime(0x0, &(0x7f0000000100)) 1m58.384493878s ago: executing program 33 (id=798): timer_create(0x3, 0x0, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_gettime(0x0, &(0x7f0000000100)) 1m31.273149994s ago: executing program 5 (id=1327): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 1m31.054713742s ago: executing program 5 (id=1330): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 1m30.973495389s ago: executing program 5 (id=1332): syz_emit_ethernet(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m30.851623848s ago: executing program 5 (id=1335): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="550981c5b504c7176c9b8c9410018de7d72e"]) 1m30.602692639s ago: executing program 5 (id=1340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 1m29.511803887s ago: executing program 5 (id=1350): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 1m29.469785811s ago: executing program 34 (id=1350): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 1m4.575440506s ago: executing program 6 (id=1851): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000039c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) 1m4.473790974s ago: executing program 6 (id=1858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) 1m4.422971398s ago: executing program 6 (id=1860): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1m4.256084182s ago: executing program 6 (id=1873): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(0x0, 0x64842, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) 1m3.226527266s ago: executing program 6 (id=1875): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@nolazytime}, {@auto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@jqfmt_vfsv0}, {@nouser_xattr}, {@nogrpid}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x571, &(0x7f0000000fc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1m2.635179764s ago: executing program 6 (id=1886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f0000000640)='./bus\x00', 0x1a8) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000180)="2cd889f0", 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=[0x4], 0x0, 0x0, 0x1}}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 1m2.624763655s ago: executing program 35 (id=1886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f0000000640)='./bus\x00', 0x1a8) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000180)="2cd889f0", 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=[0x4], 0x0, 0x0, 0x1}}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 39.773913375s ago: executing program 7 (id=2211): pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 39.744446047s ago: executing program 7 (id=2212): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000900)=ANY=[], 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 39.643210305s ago: executing program 7 (id=2215): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440c0}, 0x95) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) r3 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 39.524021325s ago: executing program 7 (id=2220): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(0x0, 0x64842, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) 38.658956165s ago: executing program 7 (id=2231): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) splice(r2, 0x0, r1, 0x0, 0x2, 0x0) 36.951610824s ago: executing program 7 (id=2246): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 36.932821076s ago: executing program 36 (id=2246): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 4.642273813s ago: executing program 3 (id=2661): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000050000000300000000fbff3198f0ade7ca098e2a27b3ea8fcd00803f00080000", @ANYRES32=r4, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="fdffffff01000000040000000800"/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r7, 0x0, 0x100000000000000}, 0x38) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x2}, 0x3103, 0x10000, 0x8, 0x9, 0x8, 0x20005, 0x3c, 0x0, 0x0, 0x0, 0x20800007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72744de93d3078303030303030303030303d30303030302c7375626a5f726f6c653d7472616e733d72646d612c"]) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.603070727s ago: executing program 2 (id=2672): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = gettid() rt_sigaction(0x16, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x16) 3.56789042s ago: executing program 2 (id=2674): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) r3 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) 3.423440772s ago: executing program 2 (id=2680): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000050000000300000000fbff3198f0ade7ca098e2a27b3ea8fcd00803f00080000", @ANYRES32=r4, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="fdffffff01000000040000000800"/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000880)=r5}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r7, 0x0, 0x100000000000000}, 0x38) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x2}, 0x3103, 0x10000, 0x8, 0x9, 0x8, 0x20005, 0x3c, 0x0, 0x0, 0x0, 0x20800007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$9p_rdma(&(0x7f0000000240), 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72744de93d3078303030303030303030303d30303030302c7375626a5f726f6c653d7472616e733d72646d612c"]) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.100074798s ago: executing program 3 (id=2684): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0xb3e6d668504b329e, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRESOCT, @ANYBLOB=',mode=0x0000000000000401,norock,showassoc,hide,hide,norock,gid=', @ANYRESOCT, @ANYRES8=r0, @ANYBLOB="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"], 0xff, 0xa59, &(0x7f0000001440)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, &(0x7f0000000680), &(0x7f0000000000), 0x6c, r1}, 0x38) 2.637932516s ago: executing program 4 (id=2687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.607005889s ago: executing program 4 (id=2689): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 2.532084135s ago: executing program 9 (id=2690): mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x44000) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x3}, 0x100, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) 2.489941618s ago: executing program 3 (id=2693): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c"], 0x28}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6", 0xd}], 0x1, 0x0, 0x0, 0x4044005}}], 0x1, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 2.436053422s ago: executing program 4 (id=2694): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000050000000300000000fbff3198f0ade7ca098e2a27b3ea8fcd00803f00080000", @ANYRES32=r4, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="fdffffff01000000040000000800"/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r7, 0x0, 0x100000000000000}, 0x38) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x2}, 0x3103, 0x10000, 0x8, 0x9, 0x8, 0x20005, 0x3c, 0x0, 0x0, 0x0, 0x20800007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72744de93d3078303030303030303030303d30303030302c7375626a5f726f6c653d7472616e733d72646d612c"]) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.435841273s ago: executing program 3 (id=2695): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000050000000300000000fbff3198f0ade7ca098e2a27b3ea8fcd00803f00080000", @ANYRES32=r4, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="fdffffff01000000040000000800"/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r7, 0x0, 0x100000000000000}, 0x38) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x2}, 0x3103, 0x10000, 0x8, 0x9, 0x8, 0x20005, 0x3c, 0x0, 0x0, 0x0, 0x20800007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72744de93d3078303030303030303030303d30303030302c7375626a5f726f6c653d7472616e733d72646d612c"]) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.530257516s ago: executing program 2 (id=2698): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.143881707s ago: executing program 9 (id=2699): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x141488c, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x776, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff019) fallocate(r0, 0x0, 0x0, 0x1001f0) socket$nl_route(0x10, 0x3, 0x0) 1.032181047s ago: executing program 8 (id=2701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000180001002bbd7000000000001d010300150004000900000000000000a67494fcd3a42289070000001e01060000f8000000000000721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe16c93e15e556c2baed7f897fe841c155aab2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563"], 0x154}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010000180"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 1.031793627s ago: executing program 8 (id=2702): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1.012754359s ago: executing program 8 (id=2703): syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000580)={'#! ', '', [], 0xa, "dbc8ad21d7e2d82a40"}, 0xd) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.008115768s ago: executing program 4 (id=2704): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x2, 0x300) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 986.1864ms ago: executing program 4 (id=2705): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 914.763276ms ago: executing program 8 (id=2706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 913.597606ms ago: executing program 9 (id=2707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000380)={'pim6reg1\x00', @broadcast}) 901.036128ms ago: executing program 8 (id=2708): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001800)='@', 0x1}], 0x1}, 0x10004024) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r4}) 864.13971ms ago: executing program 8 (id=2709): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 721.192662ms ago: executing program 9 (id=2710): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d"], 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 719.174502ms ago: executing program 3 (id=2711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 711.872023ms ago: executing program 9 (id=2712): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r4, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 650.213817ms ago: executing program 2 (id=2713): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 605.245112ms ago: executing program 3 (id=2714): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000050000000300000000fbff3198f0ade7ca098e2a27b3ea8fcd00803f00080000", @ANYRES32=r4, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="fdffffff01000000040000000800"/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r7, 0x0, 0x100000000000000}, 0x38) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x2}, 0x3103, 0x10000, 0x8, 0x9, 0x8, 0x20005, 0x3c, 0x0, 0x0, 0x0, 0x20800007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 586.673223ms ago: executing program 2 (id=2715): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x2, {0x0, 0xf0, 0x3}, 0x2}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0xffffffffffffff01, 0x3, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}], 0x1}}], 0x1, 0x0) 476.902002ms ago: executing program 9 (id=2716): r0 = socket(0x18, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0x5, &(0x7f0000000240)={@remote, @empty, 0xffff, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0xb, 0x7e, 0x6b}, 0x3c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0x5, &(0x7f0000000240)={@local, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=2717): r0 = syz_io_uring_setup(0x830, &(0x7f0000000300)={0x0, 0x2, 0x10100, 0x24, 0x1d9}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6811, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) clock_gettime(0x0, &(0x7f00000000c0)) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0, priority 0 [ 109.293784][ T7475] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm wÞ£ÿ: corrupted inode contents [ 109.329624][ T7506] tipc: Disabling bearer [ 109.386830][ T7475] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm wÞ£ÿ: mark_inode_dirty error [ 109.403418][ T7475] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 109.413393][ T7475] EXT4-fs (loop2): 1 truncate cleaned up [ 109.420807][ T7475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.439031][ T7475] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.472221][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.510614][ T7512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7512 comm=syz.7.1425 [ 110.237866][ T7536] Set syz1 is full, maxelem 65536 reached [ 110.806785][ T7594] netlink: 'syz.7.1459': attribute type 4 has an invalid length. [ 111.362784][ T7618] loop2: detected capacity change from 0 to 128 [ 111.440477][ T7621] bio_check_eod: 94 callbacks suppressed [ 111.440498][ T7621] syz.2.1467: attempt to access beyond end of device [ 111.440498][ T7621] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 111.482170][ T7621] syz.2.1467: attempt to access beyond end of device [ 111.482170][ T7621] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 111.498740][ T7621] syz.2.1467: attempt to access beyond end of device [ 111.498740][ T7621] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 111.547191][ T7621] syz.2.1467: attempt to access beyond end of device [ 111.547191][ T7621] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 111.552563][ T7629] syzkaller0: entered allmulticast mode [ 111.570643][ T7629] syzkaller0 (unregistering): left allmulticast mode [ 111.604907][ T7621] syz.2.1467: attempt to access beyond end of device [ 111.604907][ T7621] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 111.644752][ T7631] loop2: detected capacity change from 0 to 1024 [ 111.659441][ T7631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.742055][ T7640] __nla_validate_parse: 15 callbacks suppressed [ 111.742070][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1473'. [ 111.782306][ T7631] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1470: Allocating blocks 449-513 which overlap fs metadata [ 111.809124][ T7630] EXT4-fs (loop2): pa ffff888106e351c0: logic 48, phys. 177, len 21 [ 111.817268][ T7630] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 111.840147][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.085043][ T7655] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1479'. [ 112.280601][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 112.280619][ T29] audit: type=1326 audit(1755936346.461:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.6.1486" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f397a28ebe9 code=0x0 [ 112.916683][ T3385] page_pool_release_retry() stalled pool shutdown: id 30, 1 inflight 60 sec [ 113.048410][ T7695] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.446452][ T7705] ref_ctr increment failed for inode: 0x63a offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811d65e1c0 [ 113.466125][ T7702] uprobe: syz.4.1498:7702 failed to unregister, leaking uprobe [ 113.518078][ T7711] syz_tun: entered allmulticast mode [ 113.531067][ T7711] dvmrp8: entered allmulticast mode [ 113.545149][ T7711] syz_tun: left allmulticast mode [ 113.557806][ T7711] dvmrp8: left allmulticast mode [ 114.003727][ T7734] ------------[ cut here ]------------ [ 114.009364][ T7734] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x17, 0x10] s64=[0x17, 0x10] u32=[0x17, 0x10] s32=[0x17, 0x10] var_off=(0x10, 0x0)(1) [ 114.026301][ T7734] WARNING: CPU: 1 PID: 7734 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 114.036696][ T7734] Modules linked in: [ 114.040644][ T7734] CPU: 1 UID: 0 PID: 7734 Comm: syz.7.1510 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.050417][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.060545][ T7734] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 114.066919][ T7734] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 72 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 114.086705][ T7734] RSP: 0018:ffffc90001d5f440 EFLAGS: 00010292 [ 114.092918][ T7734] RAX: 1773f321a7c10700 RBX: ffff888114a7c8b8 RCX: 0000000000080000 [ 114.101026][ T7734] RDX: ffffc90002101000 RSI: 000000000000909b RDI: 000000000000909c [ 114.109092][ T7734] RBP: 0000000000000010 R08: 0001c90001d5f27f R09: 0000000000000000 [ 114.117107][ T7734] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888114a7c878 [ 114.125096][ T7734] R13: ffff88811fac8000 R14: ffff88811fac8000 R15: ffff888114a7c8b0 [ 114.133131][ T7734] FS: 00007f48578d76c0(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000 [ 114.142160][ T7734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.148789][ T7734] CR2: 0000001b34e21ff8 CR3: 000000011c442000 CR4: 00000000003506f0 [ 114.156804][ T7734] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 114.164846][ T7734] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 114.172893][ T7734] Call Trace: [ 114.176194][ T7734] [ 114.179180][ T7734] reg_set_min_max+0x1eb/0x260 [ 114.184013][ T7734] check_cond_jmp_op+0x1080/0x16e0 [ 114.189233][ T7734] do_check+0x332a/0x7a10 [ 114.193693][ T7734] do_check_common+0xc3a/0x12a0 [ 114.198685][ T7734] bpf_check+0x942b/0xd9e0 [ 114.203213][ T7734] ? __rcu_read_unlock+0x4f/0x70 [ 114.208272][ T7734] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 114.214321][ T7734] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 114.220106][ T7734] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 114.226110][ T7734] ? try_charge_memcg+0x200/0x9e0 [ 114.231201][ T7734] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 114.237341][ T7734] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 114.243590][ T7734] ? css_rstat_updated+0xb7/0x240 [ 114.248694][ T7734] ? __rcu_read_unlock+0x4f/0x70 [ 114.253740][ T7734] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 114.259626][ T7734] ? should_fail_ex+0x30/0x280 [ 114.264578][ T7734] ? selinux_bpf_prog_load+0x36/0xf0 [ 114.269923][ T7734] ? should_failslab+0x8c/0xb0 [ 114.274730][ T7734] ? __kmalloc_cache_noprof+0x189/0x320 [ 114.280408][ T7734] ? selinux_bpf_prog_load+0xbf/0xf0 [ 114.285774][ T7734] ? security_bpf_prog_load+0x2c/0xa0 [ 114.291279][ T7734] bpf_prog_load+0xedd/0x1070 [ 114.295996][ T7734] ? security_bpf+0x2b/0x90 [ 114.300587][ T7734] __sys_bpf+0x462/0x7b0 [ 114.304877][ T7734] __x64_sys_bpf+0x41/0x50 [ 114.309404][ T7734] x64_sys_call+0x2aea/0x2ff0 [ 114.314117][ T7734] do_syscall_64+0xd2/0x200 [ 114.318706][ T7734] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.324847][ T7734] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.330668][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.336606][ T7734] RIP: 0033:0x7f4858e6ebe9 [ 114.341191][ T7734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.361102][ T7734] RSP: 002b:00007f48578d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.369654][ T7734] RAX: ffffffffffffffda RBX: 00007f4859095fa0 RCX: 00007f4858e6ebe9 [ 114.377693][ T7734] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 114.385769][ T7734] RBP: 00007f4858ef1e19 R08: 0000000000000000 R09: 0000000000000000 [ 114.393810][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.401856][ T7734] R13: 00007f4859096038 R14: 00007f4859095fa0 R15: 00007fff8cdc4f78 [ 114.409903][ T7734] [ 114.412940][ T7734] ---[ end trace 0000000000000000 ]--- [ 114.480556][ T29] audit: type=1326 audit(1755936348.671:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.6.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a28ebe9 code=0x7ffc0000 [ 114.507558][ T7742] loop6: detected capacity change from 0 to 164 [ 114.518106][ T7742] syz.6.1514: attempt to access beyond end of device [ 114.518106][ T7742] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 114.532153][ T29] audit: type=1326 audit(1755936348.691:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.6.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a28ebe9 code=0x7ffc0000 [ 114.555715][ T29] audit: type=1326 audit(1755936348.691:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.6.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f397a28ebe9 code=0x7ffc0000 [ 114.579419][ T29] audit: type=1326 audit(1755936348.691:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.6.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a28ebe9 code=0x7ffc0000 [ 114.603138][ T29] audit: type=1326 audit(1755936348.691:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.6.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a28ebe9 code=0x7ffc0000 [ 114.626589][ T29] audit: type=1326 audit(1755936348.691:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.6.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f397a28ebe9 code=0x7ffc0000 [ 114.649913][ T29] audit: type=1326 audit(1755936348.691:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.6.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a28ebe9 code=0x7ffc0000 [ 114.673390][ T29] audit: type=1326 audit(1755936348.691:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.6.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a28ebe9 code=0x7ffc0000 [ 114.696993][ T29] audit: type=1326 audit(1755936348.691:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.6.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f397a28ebe9 code=0x7ffc0000 [ 114.722928][ T7742] syz.6.1514: attempt to access beyond end of device [ 114.722928][ T7742] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 114.821911][ T9] IPVS: starting estimator thread 0... [ 114.861189][ T7755] 9pnet: p9_errstr2errno: server reported unknown error [ 114.903190][ T7763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.912243][ T7763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.937089][ T7745] IPVS: using max 2352 ests per chain, 117600 per kthread [ 115.113550][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1531'. [ 115.196628][ T7784] hub 6-0:1.0: USB hub found [ 115.206385][ T7784] hub 6-0:1.0: 8 ports detected [ 115.336586][ T7794] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.522890][ T7800] netlink: 'syz.2.1537': attribute type 1 has an invalid length. [ 115.689437][ T7800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 115.720586][ T7800] bond3: (slave bond4): making interface the new active one [ 115.748167][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1537'. [ 115.780168][ T7800] bond3: (slave bond4): Enslaving as an active interface with an up link [ 115.827372][ T7807] bond3: entered promiscuous mode [ 115.832469][ T7807] bond4: entered promiscuous mode [ 115.837669][ T7807] bond3: entered allmulticast mode [ 115.842869][ T7807] bond4: entered allmulticast mode [ 115.861111][ T7816] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 115.868946][ T7816] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1542'. [ 115.871442][ T7807] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.888334][ T7809] lo speed is unknown, defaulting to 1000 [ 116.099361][ T7832] netlink: 'syz.2.1549': attribute type 1 has an invalid length. [ 116.130785][ T7832] 8021q: adding VLAN 0 to HW filter on device bond5 [ 116.159884][ T7832] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 116.169824][ T7832] bond5: (slave batadv2): making interface the new active one [ 116.180517][ T7832] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 116.233281][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [ 116.244391][ T7837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.255297][ T7837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.265890][ T7837] batman_adv: batadv0: Removing interface: ip6gretap1 [ 116.420587][ T7842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=701 sclass=netlink_route_socket pid=7842 comm=syz.2.1552 [ 117.142170][ T7890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7890 comm=syz.3.1573 [ 117.158400][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'. [ 117.368234][ T7902] wg2: entered promiscuous mode [ 117.373247][ T7902] wg2: entered allmulticast mode [ 117.645099][ T7909] ÿÿÿÿÿÿ: renamed from vlan1 [ 117.893240][ T7921] loop2: detected capacity change from 0 to 8192 [ 117.938180][ T7924] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 118.288374][ T7928] loop7: detected capacity change from 0 to 128 [ 118.319896][ T7928] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.345562][ T7928] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.374472][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 118.374523][ T29] audit: type=1400 audit(1755936352.561:2305): avc: denied { mounton } for pid=7927 comm="syz.7.1586" path="/31/mnt/bus" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.490215][ T29] audit: type=1400 audit(1755936352.681:2306): avc: denied { unlink } for pid=7301 comm="syz-executor" name="bus" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.522605][ T7301] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.608945][ T7942] loop7: detected capacity change from 0 to 1024 [ 118.644197][ T7942] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.678047][ T7950] netlink: 'syz.4.1597': attribute type 10 has an invalid length. [ 118.707812][ T7942] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.1590: Allocating blocks 385-513 which overlap fs metadata [ 118.749369][ T7942] EXT4-fs (loop7): pa ffff888106e35150: logic 16, phys. 129, len 24 [ 118.757500][ T7942] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 118.841013][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.192076][ T29] audit: type=1326 audit(1755936353.381:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.2.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 119.215666][ T29] audit: type=1326 audit(1755936353.381:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.2.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 119.250842][ T8005] loop2: detected capacity change from 0 to 512 [ 119.287635][ T8005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.325569][ T8005] EXT4-fs: Ignoring removed i_version option [ 119.357738][ T29] audit: type=1326 audit(1755936353.441:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.2.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 119.360946][ T8005] EXT4-fs (loop2): 1 orphan inode deleted [ 119.381254][ T29] audit: type=1326 audit(1755936353.441:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.2.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 119.410452][ T29] audit: type=1326 audit(1755936353.441:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.2.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 119.410936][ T8005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.434038][ T29] audit: type=1326 audit(1755936353.441:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.2.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 119.470133][ T29] audit: type=1326 audit(1755936353.441:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.2.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f49bb82ec23 code=0x7ffc0000 [ 119.493546][ T29] audit: type=1326 audit(1755936353.441:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.2.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49bb82d69f code=0x7ffc0000 [ 119.540421][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.561604][ T8019] loop2: detected capacity change from 0 to 512 [ 119.587685][ T8019] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.634036][ T8019] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1624: invalid indirect mapped block 4294967295 (level 0) [ 119.662573][ T8019] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1624: invalid indirect mapped block 4294967295 (level 1) [ 119.685912][ T8019] EXT4-fs (loop2): 1 orphan inode deleted [ 119.691744][ T8019] EXT4-fs (loop2): 1 truncate cleaned up [ 119.721042][ T8036] __vm_enough_memory: pid: 8036, comm: syz.3.1632, bytes: 4503599627366400 not enough memory for the allocation [ 119.722539][ T8019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.781236][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.796640][ T8041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1635'. [ 119.846888][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1635'. [ 120.083373][ T8057] sd 0:0:1:0: device reset [ 120.096330][ T8059] netlink: 'syz.3.1643': attribute type 10 has an invalid length. [ 120.272014][ T8070] netlink: 'syz.7.1649': attribute type 30 has an invalid length. [ 120.500427][ T8081] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.972637][ T8104] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1662'. [ 121.044730][ T8114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8114 comm=syz.3.1667 [ 121.099585][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1670'. [ 121.123677][ T8124] ªªªªªª: renamed from vlan0 (while UP) [ 121.194472][ T8128] vhci_hcd: invalid port number 96 [ 121.199713][ T8128] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 121.238960][ T8133] netlink: 'syz.7.1676': attribute type 10 has an invalid length. [ 121.275532][ T8133] team0 (unregistering): Port device team_slave_0 removed [ 121.289537][ T8133] team0 (unregistering): Port device team_slave_1 removed [ 121.663636][ T8148] loop7: detected capacity change from 0 to 8192 [ 121.956444][ T8169] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 122.085263][ T8172] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.142600][ T8169] team0 (unregistering): Port device team_slave_0 removed [ 122.211484][ T8169] team0 (unregistering): Port device team_slave_1 removed [ 122.510902][ T8188] loop6: detected capacity change from 0 to 1024 [ 122.520277][ T8188] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 122.542911][ T8188] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.618786][ T8197] EXT4-fs (loop6): shut down requested (1) [ 122.687614][ T5747] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.756662][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1704'. [ 123.292868][ T8224] loop2: detected capacity change from 0 to 512 [ 123.398209][ T8224] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.421549][ T8224] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #17: comm syz.2.1709: iget: bad i_size value: -6917529027641081756 [ 123.437964][ T8224] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1709: couldn't read orphan inode 17 (err -117) [ 123.450794][ T8224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.468703][ T8224] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1709: bg 0: block 65: padding at end of block bitmap is not set [ 123.483837][ T8224] __quota_error: 37 callbacks suppressed [ 123.483901][ T8224] Quota error (device loop2): write_blk: dquota write failed [ 123.498308][ T8224] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 123.508594][ T8224] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1709: Failed to acquire dquot type 0 [ 123.567166][ T8224] Quota error (device loop2): do_check_range: Getting block 144 out of range 0-5 [ 123.577236][ T8235] loop6: detected capacity change from 0 to 512 [ 123.604433][ T8235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.626671][ T8235] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.641341][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.692050][ T8243] loop2: detected capacity change from 0 to 1024 [ 123.707741][ T8243] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 123.739894][ T5747] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.764067][ T8243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.793541][ T29] audit: type=1326 audit(1755936357.981:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 123.827084][ T29] audit: type=1326 audit(1755936357.981:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 123.850642][ T29] audit: type=1326 audit(1755936357.981:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 123.874221][ T29] audit: type=1326 audit(1755936357.981:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 123.897794][ T29] audit: type=1326 audit(1755936357.981:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 123.921232][ T29] audit: type=1326 audit(1755936357.981:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 123.944665][ T29] audit: type=1326 audit(1755936357.981:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 123.951106][ T8255] EXT4-fs (loop2): shut down requested (1) [ 124.030191][ T8258] loop7: detected capacity change from 0 to 1764 [ 124.050577][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 124.081260][ T8253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1719'. [ 124.121332][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.144238][ T8262] bridge: RTM_NEWNEIGH with invalid ether address [ 124.263434][ T8273] loop2: detected capacity change from 0 to 1764 [ 124.398087][ T8285] rdma_op ffff88811fbf2d80 conn xmit_rdma 0000000000000000 [ 124.441129][ T8289] tipc: Started in network mode [ 124.446155][ T8289] tipc: Node identity ac14140f, cluster identity 4711 [ 124.457382][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1736'. [ 124.473433][ T8289] tipc: New replicast peer: 255.255.255.255 [ 124.479682][ T8289] tipc: Enabled bearer , priority 10 [ 124.506683][ T8293] loop2: detected capacity change from 0 to 512 [ 124.564925][ T8293] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #17: comm syz.2.1736: invalid fast symlink length 37 [ 124.588533][ T8293] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1736: couldn't read orphan inode 17 (err -117) [ 124.615362][ T8293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.698633][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.742214][ T8316] veth0: entered promiscuous mode [ 124.761115][ T8315] veth0: left promiscuous mode [ 124.839525][ T8325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.850512][ T8325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.910400][ T8328] ip6gre1: entered allmulticast mode [ 125.139975][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1755'. [ 125.161294][ T8338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.179302][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1755'. [ 125.198218][ T8338] bond1 (unregistering): Released all slaves [ 125.419877][ T8351] bond_slave_1: entered promiscuous mode [ 125.427471][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1760'. [ 125.439733][ T8351] bond0: (slave bond_slave_1): Releasing backup interface [ 125.450235][ T8351] bond_slave_1 (unregistering): left promiscuous mode [ 125.477126][ T3392] tipc: Node number set to 2886997007 [ 126.008142][ T8375] vlan2: entered allmulticast mode [ 126.249277][ T8387] netlink: 'syz.2.1775': attribute type 13 has an invalid length. [ 126.259472][ T8387] gretap0: refused to change device tx_queue_len [ 126.266124][ T8387] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 127.024138][ T8394] Set syz1 is full, maxelem 65536 reached [ 127.380167][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 127.384743][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1792'. [ 127.395781][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 127.412104][ T8439] loop2: detected capacity change from 0 to 512 [ 127.432968][ T8439] EXT4-fs (loop2): 1 orphan inode deleted [ 127.439765][ T8439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.453100][ T8439] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.454493][ T6326] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:31: Failed to release dquot type 1 [ 127.519885][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.552629][ T8453] loop2: detected capacity change from 0 to 128 [ 127.607323][ T8458] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 128.284769][ T8491] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1812'. [ 128.296575][ T8491] netlink: zone id is out of range [ 128.301346][ T8489] loop6: detected capacity change from 0 to 736 [ 128.304091][ T8491] netlink: zone id is out of range [ 128.318597][ T8491] netlink: zone id is out of range [ 128.323758][ T8491] netlink: zone id is out of range [ 128.328937][ T8491] netlink: zone id is out of range [ 128.334212][ T8491] netlink: zone id is out of range [ 128.339537][ T8491] netlink: zone id is out of range [ 128.390143][ T8489] rock: directory entry would overflow storage [ 128.396397][ T8489] rock: sig=0x3b10, size=4, remaining=3 [ 128.752718][ T8515] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 128.793074][ T8515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 128.810015][ T8524] bond5: (slave gretap1): making interface the new active one [ 128.818685][ T8524] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 128.874773][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 128.874794][ T29] audit: type=1400 audit(1755936363.061:2559): avc: denied { read } for pid=8528 comm="syz.7.1828" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 128.905342][ T29] audit: type=1400 audit(1755936363.061:2560): avc: denied { open } for pid=8528 comm="syz.7.1828" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 128.935186][ T29] audit: type=1400 audit(1755936363.121:2561): avc: denied { ioctl } for pid=8528 comm="syz.7.1828" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 129.438370][ T8553] loop7: detected capacity change from 0 to 128 [ 129.531750][ T8553] syz.7.1837: attempt to access beyond end of device [ 129.531750][ T8553] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 129.546095][ T8553] syz.7.1837: attempt to access beyond end of device [ 129.546095][ T8553] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 129.559749][ T8553] syz.7.1837: attempt to access beyond end of device [ 129.559749][ T8553] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 129.573800][ T8553] syz.7.1837: attempt to access beyond end of device [ 129.573800][ T8553] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 129.589112][ T8553] syz.7.1837: attempt to access beyond end of device [ 129.589112][ T8553] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 129.602681][ T8553] syz.7.1837: attempt to access beyond end of device [ 129.602681][ T8553] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 129.616173][ T8553] syz.7.1837: attempt to access beyond end of device [ 129.616173][ T8553] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 129.629668][ T8553] syz.7.1837: attempt to access beyond end of device [ 129.629668][ T8553] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 129.648573][ T8553] syz.7.1837: attempt to access beyond end of device [ 129.648573][ T8553] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 129.662693][ T8553] syz.7.1837: attempt to access beyond end of device [ 129.662693][ T8553] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 130.235587][ T8575] vlan2: entered allmulticast mode [ 130.461570][ T29] audit: type=1326 audit(1755936620.652:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff293ebe9 code=0x7ffc0000 [ 130.485202][ T29] audit: type=1326 audit(1755936620.652:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff293ebe9 code=0x7ffc0000 [ 130.578578][ T8607] : renamed from bond0 (while UP) [ 130.585561][ T29] audit: type=1326 audit(1755936620.702:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff293ebe9 code=0x7ffc0000 [ 130.609146][ T29] audit: type=1326 audit(1755936620.702:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff293ebe9 code=0x7ffc0000 [ 130.632775][ T29] audit: type=1326 audit(1755936620.702:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff293ebe9 code=0x7ffc0000 [ 130.665997][ T8615] loop6: detected capacity change from 0 to 512 [ 130.675213][ T8615] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.687283][ T8615] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 130.740135][ T8615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 130.751765][ T8615] System zones: 1-12 [ 130.776771][ T8615] EXT4-fs (loop6): 1 truncate cleaned up [ 130.804520][ T8615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.837679][ T29] audit: type=1326 audit(1755936621.022:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.4.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f769d055ba7 code=0x7ffc0000 [ 130.861356][ T29] audit: type=1326 audit(1755936621.022:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.4.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f769cffade9 code=0x7ffc0000 [ 130.976239][ T8615] lo speed is unknown, defaulting to 1000 [ 131.695403][ T5747] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /165/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 131.761522][ T5747] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 131.811560][ T5747] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /165/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 131.868533][ T5747] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 131.889836][ T5747] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /165/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 131.913829][ T5747] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 131.946320][ T5747] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /165/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 131.975283][ T5747] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 131.995622][ T5747] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /165/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 132.020553][ T5747] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 132.188520][ T6467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.239625][ T8660] lo speed is unknown, defaulting to 1000 [ 132.510808][ T8668] lo speed is unknown, defaulting to 1000 [ 132.637897][ T56] bridge_slave_1: left allmulticast mode [ 132.643610][ T56] bridge_slave_1: left promiscuous mode [ 132.649380][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.659865][ T8695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8695 comm=syz.4.1893 [ 132.673262][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'. [ 132.673464][ T56] bridge_slave_0: left allmulticast mode [ 132.688134][ T56] bridge_slave_0: left promiscuous mode [ 132.693943][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.660889][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.671444][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.680781][ T56] bond0 (unregistering): Released all slaves [ 133.690115][ T8695] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 133.699504][ T8668] chnl_net:caif_netlink_parms(): no params data found [ 133.728505][ T56] tipc: Left network mode [ 133.779222][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1897'. [ 133.844286][ T8707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.851933][ T8707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.863473][ T8707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.870954][ T8707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.909077][ T56] hsr_slave_0: left promiscuous mode [ 133.916326][ T56] hsr_slave_1: left promiscuous mode [ 133.924988][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.934433][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.985641][ T56] team0 (unregistering): Port device team_slave_1 removed [ 134.009293][ T56] team0 (unregistering): Port device team_slave_0 removed [ 134.080839][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.087988][ T8668] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.096043][ T8668] bridge_slave_0: entered allmulticast mode [ 134.102694][ T8668] bridge_slave_0: entered promiscuous mode [ 134.111002][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.118129][ T8668] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.125397][ T8668] bridge_slave_1: entered allmulticast mode [ 134.132047][ T8668] bridge_slave_1: entered promiscuous mode [ 134.150949][ T8668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.161695][ T8668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.186633][ T8668] team0: Port device team_slave_0 added [ 134.194399][ T8668] team0: Port device team_slave_1 added [ 134.210931][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.217985][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.243915][ T8668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.255182][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.262187][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.288250][ T8668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.315019][ T8668] hsr_slave_0: entered promiscuous mode [ 134.321090][ T8668] hsr_slave_1: entered promiscuous mode [ 134.326913][ T8668] debugfs: 'hsr0' already exists in 'hsr' [ 134.332764][ T8668] Cannot create hsr debugfs directory [ 134.399115][ T8668] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 134.407664][ T8668] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 134.416706][ T8668] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 134.426183][ T8668] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 134.445984][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.453183][ T8668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.460556][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.467684][ T8668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.486433][ T8738] netlink: 'syz.7.1916': attribute type 1 has an invalid length. [ 134.522884][ T8738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.531231][ T8738] bond1: (slave bond2): making interface the new active one [ 134.539112][ T8738] bond1: (slave bond2): Enslaving as an active interface with an up link [ 134.563926][ T8668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.571061][ T8738] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1916'. [ 134.603350][ T8738] bond1: entered promiscuous mode [ 134.608477][ T8738] bond2: entered promiscuous mode [ 134.613810][ T8738] bond1: entered allmulticast mode [ 134.618987][ T8738] bond2: entered allmulticast mode [ 134.625875][ T8738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.634852][ T8748] netlink: 'gtp': attribute type 30 has an invalid length. [ 134.642846][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.661333][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.687769][ T8668] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.711941][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.719159][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.738456][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.745589][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.791311][ T8668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.801756][ T8668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.826470][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 134.904009][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1919'. [ 134.912781][ T8668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.989261][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 135.122967][ T8791] ÿÿÿÿÿÿ: renamed from vlan1 [ 135.672449][ T8797] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.949308][ T8668] veth0_vlan: entered promiscuous mode [ 135.961630][ T8668] veth1_vlan: entered promiscuous mode [ 136.037726][ T8668] veth0_macvtap: entered promiscuous mode [ 136.046507][ T8668] veth1_macvtap: entered promiscuous mode [ 136.065394][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.093696][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.153681][ T6335] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.186938][ T6335] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.205201][ T6335] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.215039][ T6335] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.240795][ T8811] netlink: 'syz.8.1887': attribute type 1 has an invalid length. [ 136.327063][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1932'. [ 136.336091][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.343670][ T8820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.351685][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.359315][ T8820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.853225][ T8844] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.927054][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 136.927073][ T29] audit: type=1400 audit(1755936627.092:2653): avc: denied { map } for pid=8843 comm="syz.4.1942" path="socket:[26916]" dev="sockfs" ino=26916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.956539][ T29] audit: type=1400 audit(1755936627.092:2654): avc: denied { read } for pid=8843 comm="syz.4.1942" path="socket:[26916]" dev="sockfs" ino=26916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.534827][ T8857] vhci_hcd: invalid port number 96 [ 137.540140][ T8857] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 137.559883][ T29] audit: type=1326 audit(1755936627.742:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.4.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 137.583388][ T29] audit: type=1326 audit(1755936627.742:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.4.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 137.607003][ T29] audit: type=1326 audit(1755936627.752:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.4.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 137.630549][ T29] audit: type=1326 audit(1755936627.752:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.4.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 137.653988][ T29] audit: type=1326 audit(1755936627.752:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.4.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 137.677477][ T29] audit: type=1326 audit(1755936627.752:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.4.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 137.700977][ T29] audit: type=1326 audit(1755936627.752:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.4.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 137.724479][ T29] audit: type=1326 audit(1755936627.752:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.4.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 137.860083][ T8865] wg2: entered promiscuous mode [ 137.865110][ T8865] wg2: entered allmulticast mode [ 138.067243][ T8881] bridge: RTM_NEWNEIGH with invalid ether address [ 138.296259][ T8893] loop8: detected capacity change from 0 to 164 [ 138.317763][ T8893] wÞ¡ÿ: attempt to access beyond end of device [ 138.317763][ T8893] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 138.331713][ T8893] wÞ¡ÿ: attempt to access beyond end of device [ 138.331713][ T8893] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.369687][ T8897] vhci_hcd: invalid port number 96 [ 138.375084][ T8897] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 139.771354][ T8958] wg2: entered promiscuous mode [ 139.776318][ T8958] wg2: entered allmulticast mode [ 139.828318][ T8961] loop7: detected capacity change from 0 to 1024 [ 139.845512][ T8961] EXT4-fs: Ignoring removed nobh option [ 139.851245][ T8961] EXT4-fs: Ignoring removed bh option [ 139.879719][ T8961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.922327][ T8961] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.1990: Allocating blocks 385-513 which overlap fs metadata [ 139.946519][ T8961] EXT4-fs (loop7): pa ffff888106e352a0: logic 16, phys. 129, len 24 [ 139.954977][ T8961] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 139.977185][ T8971] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.055595][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.476690][ T8983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8983 comm=syz.8.1998 [ 140.491738][ T8987] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1999'. [ 140.501214][ T8987] hsr_slave_0: left promiscuous mode [ 140.519033][ T8987] hsr_slave_1: left promiscuous mode [ 140.530524][ T8989] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2001'. [ 140.544518][ T8986] lo speed is unknown, defaulting to 1000 [ 140.551413][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2001'. [ 140.565099][ T8989] team0: Port device team_slave_1 removed [ 140.732435][ T8999] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 140.775611][ T9003] loop7: detected capacity change from 0 to 1024 [ 140.814226][ T9003] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.843597][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.825155][ T9027] pim6reg1: entered promiscuous mode [ 141.830593][ T9027] pim6reg1: entered allmulticast mode [ 142.088993][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 142.089007][ T29] audit: type=1326 audit(1755936632.282:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 142.122190][ T29] audit: type=1326 audit(1755936632.312:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 142.145915][ T29] audit: type=1326 audit(1755936632.312:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 142.169373][ T29] audit: type=1326 audit(1755936632.312:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 142.192888][ T29] audit: type=1326 audit(1755936632.312:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4858e6d550 code=0x7ffc0000 [ 142.216405][ T29] audit: type=1326 audit(1755936632.312:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 142.239974][ T29] audit: type=1326 audit(1755936632.312:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 142.263483][ T29] audit: type=1326 audit(1755936632.312:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4858e6d550 code=0x7ffc0000 [ 142.286988][ T29] audit: type=1326 audit(1755936632.312:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4858e70417 code=0x7ffc0000 [ 142.310437][ T29] audit: type=1326 audit(1755936632.312:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.7.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 142.342224][ T9038] net_ratelimit: 21 callbacks suppressed [ 142.342239][ T9038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.379190][ T9042] netlink: 'syz.4.2021': attribute type 30 has an invalid length. [ 142.572412][ T9054] SELinux: Context system_u:object_r:file_context_t:s0 is not valid (left unmapped). [ 142.642754][ T9056] lo speed is unknown, defaulting to 1000 [ 142.826477][ T9073] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2033'. [ 143.016225][ T9083] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.405255][ T9080] netlink: 'syz.8.2034': attribute type 30 has an invalid length. [ 143.515391][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.526541][ T9098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.831036][ T9135] netlink: 'syz.2.2057': attribute type 30 has an invalid length. [ 144.990606][ T9137] loop8: detected capacity change from 0 to 1024 [ 145.024315][ T9137] EXT4-fs: Ignoring removed nobh option [ 145.030038][ T9137] EXT4-fs: Ignoring removed bh option [ 145.128383][ T9137] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.202235][ T9137] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2068: Allocating blocks 385-513 which overlap fs metadata [ 145.246516][ T9137] EXT4-fs (loop8): pa ffff888106f1d850: logic 16, phys. 129, len 24 [ 145.250286][ T9151] rdma_op ffff8881049ce980 conn xmit_rdma 0000000000000000 [ 145.254681][ T9137] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 145.278958][ T9150] tipc: New replicast peer: 255.255.255.255 [ 145.285128][ T9150] tipc: Enabled bearer , priority 10 [ 145.351941][ T8668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.474811][ T9162] loop7: detected capacity change from 0 to 512 [ 145.520326][ T9162] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.538383][ T9165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2070'. [ 145.548654][ T9162] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #17: comm syz.7.2066: iget: bad i_size value: -6917529027641081756 [ 145.587117][ T9162] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2066: couldn't read orphan inode 17 (err -117) [ 145.656619][ T9178] bridge: RTM_NEWNEIGH with invalid ether address [ 145.703367][ T9162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.760643][ T9162] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2066: bg 0: block 65: padding at end of block bitmap is not set [ 145.780815][ T9162] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2066: Failed to acquire dquot type 0 [ 145.872317][ T9180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.938275][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.185825][ T9194] tipc: Started in network mode [ 146.190832][ T9194] tipc: Node identity ac14140f, cluster identity 4711 [ 146.202614][ T9194] tipc: New replicast peer: 255.255.255.255 [ 146.208769][ T9194] tipc: Enabled bearer , priority 10 [ 146.377809][ T3413] tipc: Node number set to 1 [ 146.530040][ T9206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.823234][ T9210] ip6gre1: entered allmulticast mode [ 147.083370][ T9216] bond_slave_1: entered promiscuous mode [ 147.090811][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2087'. [ 147.105235][ T9216] bond0: (slave bond_slave_1): Releasing backup interface [ 147.113931][ T9216] bond_slave_1 (unregistering): left promiscuous mode [ 147.134289][ T9221] loop7: detected capacity change from 0 to 1764 [ 147.292761][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 147.292781][ T29] audit: type=1326 audit(1755936637.482:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 147.294960][ T9231] veth0: entered promiscuous mode [ 147.299352][ T29] audit: type=1326 audit(1755936637.482:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 147.328565][ T9230] veth0: left promiscuous mode [ 147.355841][ T3399] tipc: Node number set to 2886997007 [ 147.388961][ T29] audit: type=1326 audit(1755936637.482:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 147.412505][ T29] audit: type=1326 audit(1755936637.482:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 147.436000][ T29] audit: type=1326 audit(1755936637.482:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 147.459508][ T29] audit: type=1326 audit(1755936637.482:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 147.483057][ T29] audit: type=1326 audit(1755936637.482:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 147.506784][ T29] audit: type=1326 audit(1755936637.482:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 147.530228][ T29] audit: type=1326 audit(1755936637.482:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 147.553701][ T29] audit: type=1326 audit(1755936637.482:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.4.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 147.624417][ T9238] ip6gre1: entered allmulticast mode [ 147.864543][ T9246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 148.070471][ T9254] vlan0: entered allmulticast mode [ 148.094207][ T9254] dummy0: entered allmulticast mode [ 149.638473][ T9288] loop8: detected capacity change from 0 to 1024 [ 149.648673][ T9288] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.699114][ T9288] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.756739][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2120'. [ 149.799317][ T8668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.840226][ T9303] loop7: detected capacity change from 0 to 512 [ 149.848197][ T9303] EXT4-fs: Ignoring removed oldalloc option [ 149.856113][ T9305] netlink: 'syz.8.2124': attribute type 13 has an invalid length. [ 149.869578][ T9303] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 149.879611][ T9305] gretap0: refused to change device tx_queue_len [ 149.888059][ T9305] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 149.896398][ T9303] EXT4-fs (loop7): 1 truncate cleaned up [ 149.911110][ T9303] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.051369][ T9325] netlink: zone id is out of range [ 150.056583][ T9325] netlink: zone id is out of range [ 150.093231][ T9328] 9pnet: p9_errstr2errno: server reported unknown error [ 150.258222][ T9337] netlink: 'syz.3.2139': attribute type 13 has an invalid length. [ 150.271123][ T9337] gretap0: refused to change device tx_queue_len [ 150.277974][ T9337] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 150.346728][ T9346] loop8: detected capacity change from 0 to 1024 [ 150.355819][ T9346] EXT4-fs: Ignoring removed bh option [ 150.396489][ T9346] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.425510][ T8668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.146516][ T9368] ref_ctr increment failed for inode: 0x87b offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811c5db3c0 [ 151.158916][ T9368] uprobe: syz.2.2148:9368 failed to unregister, leaking uprobe [ 151.269875][ T9373] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2150'. [ 151.280138][ T9373] netlink: zone id is out of range [ 151.285314][ T9373] netlink: zone id is out of range [ 151.290608][ T9373] netlink: zone id is out of range [ 151.295891][ T9373] netlink: zone id is out of range [ 151.301139][ T9373] netlink: zone id is out of range [ 151.306268][ T9373] netlink: zone id is out of range [ 151.473056][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2157'. [ 151.893066][ T9400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2174'. [ 152.008135][ T9405] ref_ctr increment failed for inode: 0x9ed offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811d65a280 [ 152.030230][ T9405] uprobe: syz.3.2163:9405 failed to unregister, leaking uprobe [ 152.149300][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2167'. [ 152.181585][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2168'. [ 152.371169][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 152.371186][ T29] audit: type=1400 audit(1755936642.562:3187): avc: denied { map } for pid=9426 comm="syz.2.2177" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.401596][ T29] audit: type=1400 audit(1755936642.562:3188): avc: denied { execute } for pid=9426 comm="syz.2.2177" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.912732][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.919510][ T9437] loop8: detected capacity change from 0 to 128 [ 152.962212][ T9443] ref_ctr increment failed for inode: 0x338 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811d65c500 [ 152.983907][ T9443] uprobe: syz.7.2181:9443 failed to unregister, leaking uprobe [ 153.091745][ T29] audit: type=1326 audit(1755936643.282:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.7.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 153.115379][ T29] audit: type=1326 audit(1755936643.282:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.7.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 153.139273][ T29] audit: type=1326 audit(1755936643.312:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.7.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 153.162863][ T29] audit: type=1326 audit(1755936643.312:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.7.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 153.186355][ T29] audit: type=1326 audit(1755936643.312:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.7.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 153.210010][ T29] audit: type=1326 audit(1755936643.312:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.7.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 153.233474][ T29] audit: type=1326 audit(1755936643.312:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.7.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 153.257102][ T29] audit: type=1326 audit(1755936643.312:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.7.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4858e6ebe9 code=0x7ffc0000 [ 153.648179][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2187'. [ 154.082837][ T9485] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 154.485982][ T9484] wg2: entered promiscuous mode [ 154.490999][ T9484] wg2: entered allmulticast mode [ 154.627631][ T9504] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.170985][ T9523] loop7: detected capacity change from 0 to 128 [ 155.178149][ T9523] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.196837][ T9523] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.257675][ T6337] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.338389][ T9537] loop8: detected capacity change from 0 to 1024 [ 155.345541][ T9537] ext4: Unknown parameter 'nouser_xattr' [ 155.355877][ T9540] loop7: detected capacity change from 0 to 512 [ 155.362589][ T9540] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.378397][ T9540] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 155.401704][ T9540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 155.413981][ T9540] System zones: 1-12 [ 155.420930][ T9540] EXT4-fs (loop7): 1 truncate cleaned up [ 155.434354][ T9540] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.494568][ T9540] lo speed is unknown, defaulting to 1000 [ 155.673241][ T9554] team0 (unregistering): Port device team_slave_0 removed [ 156.001969][ T9564] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.458588][ T9572] wireguard0: entered promiscuous mode [ 156.464493][ T9572] wireguard0: entered allmulticast mode [ 156.511945][ T7301] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /166/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 156.535431][ T7301] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 156.564693][ T7301] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /166/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 156.588187][ T7301] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 156.611355][ T7301] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /166/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 156.634424][ T7301] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 156.659617][ T7301] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /166/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 156.682817][ T7301] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 156.704237][ T7301] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /166/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 156.728732][ T7301] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 157.452296][ T9592] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.925036][ T6337] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.935903][ T9549] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.974168][ T6337] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.027635][ T6337] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.126204][ T9623] tmpfs: Bad value for 'mpol' [ 158.218142][ T6337] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.453817][ T6337] bridge_slave_1: left allmulticast mode [ 158.459660][ T6337] bridge_slave_1: left promiscuous mode [ 158.466094][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.501510][ T6337] bridge_slave_0: left allmulticast mode [ 158.507446][ T6337] bridge_slave_0: left promiscuous mode [ 158.513263][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.679750][ T6337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.704107][ T6337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.740323][ T6337] bond0 (unregistering): Released all slaves [ 158.761494][ T6337] bond1 (unregistering): (slave bond2): Releasing backup interface [ 158.791568][ T6337] bond2 (unregistering): left promiscuous mode [ 158.797893][ T6337] bond2 (unregistering): left allmulticast mode [ 158.815171][ T6337] bond1 (unregistering): Released all slaves [ 158.832617][ T6337] bond2 (unregistering): Released all slaves [ 158.905584][ T6337] tipc: Disabling bearer [ 158.910651][ T6337] tipc: Left network mode [ 158.931284][ T9615] lo speed is unknown, defaulting to 1000 [ 158.974300][ T9644] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2257'. [ 159.008651][ T6337] hsr_slave_0: left promiscuous mode [ 159.025314][ T6337] hsr_slave_1: left promiscuous mode [ 159.046615][ T6337] veth1_macvtap: left promiscuous mode [ 159.101513][ T6337] veth0_macvtap: left promiscuous mode [ 159.117722][ T6337] veth1_vlan: left promiscuous mode [ 159.126342][ T6337] veth0_vlan: left promiscuous mode [ 159.242201][ T9648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9648 comm=syz.3.2259 [ 159.257770][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2259'. [ 159.352309][ T9644] 0ªX¹¦D: renamed from gretap0 (while UP) [ 159.360017][ T9644] 0ªX¹¦D: entered allmulticast mode [ 159.365553][ T9644] net_ratelimit: 23 callbacks suppressed [ 159.365567][ T9644] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 159.431575][ T9615] chnl_net:caif_netlink_parms(): no params data found [ 159.463738][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 159.463757][ T29] audit: type=1400 audit(1755936649.652:3209): avc: denied { listen } for pid=9656 comm="syz.2.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.515524][ T9657] bond0: entered promiscuous mode [ 159.517703][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2263'. [ 159.520652][ T9657] bond0: entered allmulticast mode [ 159.534848][ T9657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.544456][ T9657] bond0 (unregistering): Released all slaves [ 159.552903][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 159.561849][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 159.575634][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 159.586824][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 159.595844][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 159.624331][ T9615] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.631623][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.640885][ T9615] bridge_slave_0: entered allmulticast mode [ 159.648970][ T9615] bridge_slave_0: entered promiscuous mode [ 159.656792][ T9615] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.663918][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.673467][ T9615] bridge_slave_1: entered allmulticast mode [ 159.680686][ T9615] bridge_slave_1: entered promiscuous mode [ 159.760157][ T9615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.770848][ T9615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.819675][ T9615] team0: Port device team_slave_0 added [ 159.833658][ T9615] team0: Port device team_slave_1 added [ 159.872291][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.879413][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.905368][ T9615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.152180][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.159321][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.185840][ T9615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.282717][ T9615] hsr_slave_0: entered promiscuous mode [ 160.290621][ T9615] hsr_slave_1: entered promiscuous mode [ 160.462553][ T9615] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 160.483214][ T9615] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 160.492682][ T9615] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 160.502434][ T9615] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 160.588006][ T9700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2274'. [ 160.619792][ T9615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.639081][ T29] audit: type=1326 audit(1755936650.822:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 160.662666][ T29] audit: type=1326 audit(1755936650.822:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 160.686174][ T29] audit: type=1326 audit(1755936650.832:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 160.709634][ T29] audit: type=1326 audit(1755936650.832:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 160.733106][ T29] audit: type=1326 audit(1755936650.832:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 160.756753][ T29] audit: type=1326 audit(1755936650.832:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 160.780301][ T29] audit: type=1326 audit(1755936650.832:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 160.803921][ T29] audit: type=1326 audit(1755936650.832:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 160.827925][ T29] audit: type=1326 audit(1755936650.832:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 160.831409][ T9615] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.882540][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.890471][ T6347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.918519][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.925771][ T6353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.948411][ T9615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.958871][ T9615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.029611][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2279'. [ 161.055155][ T9615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.276546][ T9615] veth0_vlan: entered promiscuous mode [ 161.286127][ T9615] veth1_vlan: entered promiscuous mode [ 161.305714][ T9615] veth0_macvtap: entered promiscuous mode [ 161.324881][ T9615] veth1_macvtap: entered promiscuous mode [ 161.338795][ T9615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.359171][ T9615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.379849][ T6337] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.390496][ T6337] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.414713][ T6337] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.433943][ T6337] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.468833][ T9733] loop9: detected capacity change from 0 to 1024 [ 161.477221][ T9733] ext4: Unknown parameter 'nouser_xattr' [ 161.529756][ T9736] wg2: left promiscuous mode [ 161.534432][ T9736] wg2: left allmulticast mode [ 161.574361][ T9736] wg2: entered promiscuous mode [ 161.579370][ T9736] wg2: entered allmulticast mode [ 161.792359][ T9751] syzkaller0: entered allmulticast mode [ 161.798930][ T9751] syzkaller0: entered promiscuous mode [ 161.817001][ T9751] syzkaller0 (unregistering): left allmulticast mode [ 161.823845][ T9751] syzkaller0 (unregistering): left promiscuous mode [ 161.901695][ T9764] netlink: 'syz.3.2295': attribute type 1 has an invalid length. [ 161.963949][ T9764] 8021q: adding VLAN 0 to HW filter on device bond8 [ 162.056313][ T9770] bond8: (slave geneve2): making interface the new active one [ 162.112243][ T9770] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 162.125165][ T6353] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.153532][ T6353] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.172235][ T6353] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.202053][ T6310] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.541050][ T9806] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.193905][ T9863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.201340][ T9863] IPv6: NLM_F_CREATE should be set when creating new route [ 163.475526][ T9882] IPVS: Error connecting to the multicast addr [ 163.976632][ T9914] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 165.233113][ T9933] tipc: Enabling of bearer rejected, failed to enable media [ 165.760579][ T9938] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.090882][ T9959] wg2: entered promiscuous mode [ 166.095810][ T9959] wg2: entered allmulticast mode [ 166.306687][ T9962] netlink: 'syz.3.2344': attribute type 7 has an invalid length. [ 166.314630][ T9962] __nla_validate_parse: 17 callbacks suppressed [ 166.314650][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'. [ 167.308217][ T9990] netlink: 'syz.4.2354': attribute type 4 has an invalid length. [ 167.596792][ T9963] Set syz1 is full, maxelem 65536 reached [ 168.266362][T10022] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.804259][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 168.804276][ T29] audit: type=1400 audit(1755936658.992:3241): avc: denied { bind } for pid=10030 comm="syz.3.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.469340][T10067] netlink: 'syz.9.2387': attribute type 2 has an invalid length. [ 169.477141][T10067] netlink: 'syz.9.2387': attribute type 1 has an invalid length. [ 169.484968][T10067] netlink: 'syz.9.2387': attribute type 2 has an invalid length. [ 169.570018][T10067] loop9: detected capacity change from 0 to 8192 [ 169.799222][T10071] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 170.857518][T10080] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.152464][T10099] wg2: left promiscuous mode [ 171.157260][T10099] wg2: left allmulticast mode [ 171.203685][T10102] wg2: entered promiscuous mode [ 171.208626][T10102] wg2: entered allmulticast mode [ 171.351912][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2401'. [ 171.608479][ T29] audit: type=1326 audit(1755936661.802:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 171.640734][ T29] audit: type=1326 audit(1755936661.812:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 171.664330][ T29] audit: type=1326 audit(1755936661.812:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 171.674890][T10121] loop9: detected capacity change from 0 to 128 [ 171.688067][ T29] audit: type=1326 audit(1755936661.812:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 171.718058][ T29] audit: type=1326 audit(1755936661.812:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 171.741712][ T29] audit: type=1326 audit(1755936661.812:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 171.765267][ T29] audit: type=1326 audit(1755936661.812:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 171.788889][ T29] audit: type=1326 audit(1755936661.812:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 171.812409][ T29] audit: type=1326 audit(1755936661.812:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 171.836688][T10121] siw: device registration error -23 [ 172.016662][T10131] 9pnet: p9_errstr2errno: server reported unknown error [ 172.151667][T10137] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 172.198398][T10139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2414'. [ 172.635923][T10153] loop9: detected capacity change from 0 to 164 [ 172.666747][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2421'. [ 172.686444][T10153] Unable to read rock-ridge attributes [ 172.703062][T10153] veth0: entered promiscuous mode [ 172.708819][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2419'. [ 172.838490][T10170] siw: device registration error -23 [ 173.013080][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2435'. [ 173.403114][T10212] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 173.986654][T10222] lo speed is unknown, defaulting to 1000 [ 174.623196][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 174.623214][ T29] audit: type=1326 audit(1755936664.812:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.9.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2ecaebe9 code=0x7ffc0000 [ 174.653308][ T29] audit: type=1326 audit(1755936664.812:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.9.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2ecaebe9 code=0x7ffc0000 [ 174.677500][ T29] audit: type=1326 audit(1755936664.872:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.9.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7e2ecaebe9 code=0x7ffc0000 [ 174.701240][ T29] audit: type=1326 audit(1755936664.872:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.9.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2ecaebe9 code=0x7ffc0000 [ 174.724839][ T29] audit: type=1326 audit(1755936664.872:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.9.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2ecaebe9 code=0x7ffc0000 [ 174.748476][ T29] audit: type=1326 audit(1755936664.872:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.9.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f7e2ecaebe9 code=0x7ffc0000 [ 174.771995][ T29] audit: type=1326 audit(1755936664.872:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.9.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2ecaebe9 code=0x7ffc0000 [ 174.796033][ T29] audit: type=1326 audit(1755936664.872:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.9.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2ecaebe9 code=0x7ffc0000 [ 174.819600][ T29] audit: type=1326 audit(1755936664.872:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.9.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f7e2ecaebe9 code=0x7ffc0000 [ 174.843208][ T29] audit: type=1326 audit(1755936664.872:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.9.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2ecaebe9 code=0x7ffc0000 [ 174.917769][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2463'. [ 175.189357][T10284] random: crng reseeded on system resumption [ 175.691726][T10294] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2475'. [ 175.760883][T10294] loop8: detected capacity change from 0 to 8192 [ 176.218657][T10315] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 176.505025][T10318] tipc: Started in network mode [ 176.510125][T10318] tipc: Node identity f64d95a384df, cluster identity 4711 [ 176.517412][T10318] tipc: Enabled bearer , priority 0 [ 176.598677][T10321] tipc: Disabling bearer [ 176.850842][T10331] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.933046][T10331] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.989489][T10337] wg2: left promiscuous mode [ 176.994227][T10337] wg2: left allmulticast mode [ 177.011939][T10341] wg2: left promiscuous mode [ 177.016605][T10341] wg2: left allmulticast mode [ 177.046695][ T6319] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.063723][T10331] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.085851][T10341] wg2: entered promiscuous mode [ 177.090861][T10341] wg2: entered allmulticast mode [ 177.103642][ T6319] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.123179][T10331] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.160261][ T6319] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.199703][ T6319] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.238711][ T6308] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.250771][T10351] $Hÿ: renamed from bond0 [ 177.276409][T10351] $Hÿ: entered promiscuous mode [ 177.282930][ T6308] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.318726][ T6355] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.329585][ T6355] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.478154][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2500'. [ 177.543543][T10369] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2505'. [ 177.552804][T10369] 0ªî{X¹¦: renamed from gretap0 [ 177.579343][T10369] 0ªî{X¹¦: entered allmulticast mode [ 177.585502][T10369] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 177.863932][T10379] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.405629][T10392] $Hÿ: renamed from bond0 (while UP) [ 178.421966][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2511'. [ 178.422620][T10392] $Hÿ: entered promiscuous mode [ 178.436149][T10392] bond_slave_0: entered promiscuous mode [ 178.442565][T10392] bond_slave_1: entered promiscuous mode [ 178.524057][T10394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.555354][T10397] vlan1: entered allmulticast mode [ 178.560654][T10397] bond1: entered allmulticast mode [ 178.903400][T10417] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2520'. [ 178.981749][T10417] loop9: detected capacity change from 0 to 8192 [ 179.637314][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 179.637331][ T29] audit: type=1400 audit(1755936669.822:3457): avc: denied { open } for pid=10440 comm="syz.9.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 179.662928][ T29] audit: type=1400 audit(1755936669.822:3458): avc: denied { kernel } for pid=10440 comm="syz.9.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 179.721107][T10444] wg2: left promiscuous mode [ 179.725783][T10444] wg2: left allmulticast mode [ 179.727876][ T29] audit: type=1400 audit(1755936669.872:3459): avc: denied { tracepoint } for pid=10440 comm="syz.9.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 179.750399][ T29] audit: type=1400 audit(1755936669.902:3460): avc: denied { create } for pid=10440 comm="syz.9.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.772016][T10444] ip6gre1: left allmulticast mode [ 179.779049][ T3385] syz2: Port: 1 Link DOWN [ 179.808752][ T29] audit: type=1400 audit(1755936670.002:3461): avc: denied { create } for pid=10447 comm="syz.9.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.829103][ T29] audit: type=1400 audit(1755936670.002:3462): avc: denied { bind } for pid=10447 comm="syz.9.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.848837][ T29] audit: type=1400 audit(1755936670.002:3463): avc: denied { listen } for pid=10447 comm="syz.9.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.868740][ T29] audit: type=1400 audit(1755936670.002:3464): avc: denied { connect } for pid=10447 comm="syz.9.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.888594][ T29] audit: type=1400 audit(1755936670.002:3465): avc: denied { write } for pid=10447 comm="syz.9.2533" path="socket:[32874]" dev="sockfs" ino=32874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.912168][ T29] audit: type=1400 audit(1755936670.002:3466): avc: denied { accept } for pid=10447 comm="syz.9.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.087128][T10452] 0ªX¹¦D: left allmulticast mode [ 180.107144][T10452] wg2: left promiscuous mode [ 180.111920][T10452] wg2: left allmulticast mode [ 180.157834][T10452] bond3: left promiscuous mode [ 180.162668][T10452] bond4: left promiscuous mode [ 180.167588][T10452] bond3: left allmulticast mode [ 180.172503][T10452] bond4: left allmulticast mode [ 180.424936][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2539'. [ 180.449358][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2539'. [ 180.566006][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2542'. [ 180.582417][T10470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.598363][T10470] vlan1: entered allmulticast mode [ 180.603748][T10470] bond0: entered allmulticast mode [ 180.730775][T10475] tipc: Enabling of bearer rejected, failed to enable media [ 181.805286][T10494] loop9: detected capacity change from 0 to 512 [ 181.981045][T10494] EXT4-fs (loop9): orphan cleanup on readonly fs [ 181.997699][T10494] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2550: bg 0: block 248: padding at end of block bitmap is not set [ 182.013905][T10494] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.2550: Failed to acquire dquot type 1 [ 182.026060][T10494] EXT4-fs (loop9): 1 truncate cleaned up [ 182.033505][T10494] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.065528][T10494] EXT4-fs error (device loop9): ext4_lookup:1787: inode #15: comm syz.9.2550: iget: bad i_size value: 360287970189639690 [ 182.129141][ T9615] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.725809][T10521] vlan2: entered allmulticast mode [ 182.815359][T10523] bond_slave_1: entered promiscuous mode [ 182.821663][T10525] netlink: 'syz.9.2562': attribute type 1 has an invalid length. [ 182.834558][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2561'. [ 182.851228][T10525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.860610][T10523] bond_slave_1 (unregistering): left promiscuous mode [ 182.875070][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2562'. [ 182.893847][T10525] bond0 (unregistering): Released all slaves [ 183.043043][ T1035] Process accounting resumed [ 183.141676][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2566'. [ 183.307634][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2567'. [ 183.329685][T10537] team1: entered promiscuous mode [ 183.334821][T10537] team1: entered allmulticast mode [ 183.428751][T10543] loop8: detected capacity change from 0 to 512 [ 183.459516][T10543] EXT4-fs (loop8): orphan cleanup on readonly fs [ 183.473252][T10543] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2570: bg 0: block 248: padding at end of block bitmap is not set [ 183.504104][T10543] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.2570: Failed to acquire dquot type 1 [ 183.662081][T10548] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 184.073541][T10543] EXT4-fs (loop8): 1 truncate cleaned up [ 184.240423][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2573'. [ 184.278007][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'. [ 184.504172][T10543] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.525890][T10543] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.2570: iget: bad i_size value: 360287970189639690 [ 184.568428][ T8668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.657389][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 184.657408][ T29] audit: type=1326 audit(1755936674.852:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 184.691704][ T29] audit: type=1326 audit(1755936674.852:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 184.715467][ T29] audit: type=1326 audit(1755936674.852:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb82ebe9 code=0x7ffc0000 [ 184.790584][ T29] audit: type=1400 audit(1755936674.982:3598): avc: denied { create } for pid=10567 comm="syz.2.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.828877][ T29] audit: type=1400 audit(1755936674.982:3599): avc: denied { setopt } for pid=10567 comm="syz.2.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.848664][ T29] audit: type=1400 audit(1755936674.982:3600): avc: denied { bind } for pid=10567 comm="syz.2.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.868137][ T29] audit: type=1400 audit(1755936675.012:3601): avc: denied { setopt } for pid=10569 comm="syz.9.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.930391][ T29] audit: type=1400 audit(1755936675.122:3602): avc: denied { create } for pid=10573 comm="syz.9.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.968166][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2582'. [ 184.987946][ T29] audit: type=1326 audit(1755936675.162:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10576 comm="syz.4.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 185.011533][ T29] audit: type=1326 audit(1755936675.162:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10576 comm="syz.4.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769d05ebe9 code=0x7ffc0000 [ 185.131539][T10572] netlink: 29 bytes leftover after parsing attributes in process `syz.2.2581'. [ 185.207834][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2587'. [ 185.266497][T10593] random: crng reseeded on system resumption [ 185.279524][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2589'. [ 185.290623][ T3413] IPVS: starting estimator thread 0... [ 185.387008][T10596] IPVS: using max 2112 ests per chain, 105600 per kthread [ 185.698884][T10615] loop9: detected capacity change from 0 to 128 [ 185.731838][T10615] FAT-fs (loop9): Directory bread(block 32) failed [ 185.738475][T10615] FAT-fs (loop9): Directory bread(block 33) failed [ 185.745023][T10615] FAT-fs (loop9): Directory bread(block 34) failed [ 185.753029][T10615] FAT-fs (loop9): Directory bread(block 35) failed [ 185.760297][T10615] FAT-fs (loop9): Directory bread(block 36) failed [ 185.773818][T10615] FAT-fs (loop9): Directory bread(block 37) failed [ 185.780600][T10615] FAT-fs (loop9): Directory bread(block 38) failed [ 185.788342][T10615] FAT-fs (loop9): Directory bread(block 39) failed [ 185.821311][T10615] FAT-fs (loop9): Directory bread(block 40) failed [ 185.850570][T10615] FAT-fs (loop9): Directory bread(block 41) failed [ 186.391410][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.404482][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.486220][T10638] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 186.929902][T10644] lo speed is unknown, defaulting to 1000 [ 187.315959][T10682] loop9: detected capacity change from 0 to 512 [ 187.386585][T10682] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.2620: corrupted inode contents [ 187.415828][T10682] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.2620: mark_inode_dirty error [ 187.444568][T10682] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.2620: corrupted inode contents [ 187.463842][T10682] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.2620: mark_inode_dirty error [ 187.465304][T10682] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.2620: corrupted inode contents [ 187.478370][T10682] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 187.480678][T10682] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.2620: corrupted inode contents [ 187.481161][T10682] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.2620: mark_inode_dirty error [ 187.483369][T10682] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 187.485304][T10682] EXT4-fs (loop9): 1 truncate cleaned up [ 187.485744][T10682] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.485887][T10682] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.527151][ T6359] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:62: Failed to release dquot type 1 [ 187.719199][ T9615] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.735159][T10698] loop8: detected capacity change from 0 to 512 [ 187.789356][T10698] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.821083][T10698] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.161164][T10719] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 188.546071][ T8668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.521599][T10772] loop9: detected capacity change from 0 to 1024 [ 189.531966][T10773] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.550089][T10772] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.570107][T10775] __nla_validate_parse: 6 callbacks suppressed [ 189.570126][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2654'. [ 189.620873][T10773] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.671443][T10786] 9pnet: p9_errstr2errno: server reported unknown error [ 189.734746][T10773] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.754160][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 189.754177][ T29] audit: type=1400 audit(1755936679.942:3772): avc: denied { create } for pid=10770 comm="syz.9.2651" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 189.759340][T10772] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, [ 189.760494][ T29] audit: type=1400 audit(1755936679.942:3773): avc: denied { read write open } for pid=10770 comm="syz.9.2651" path="/92/file1/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 189.780755][T10772] inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 189.851497][ T29] audit: type=1400 audit(1755936680.042:3774): avc: denied { create } for pid=10791 comm="syz.4.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 189.874075][T10792] rdma_rxe: rxe_newlink: failed to add lo [ 189.883412][ T29] audit: type=1400 audit(1755936680.062:3775): avc: denied { write } for pid=10791 comm="syz.4.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 189.913440][T10773] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.963384][ T9615] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.989359][ T6351] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.065342][T10799] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 190.453371][ T6351] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.462111][ T6351] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.864983][ T29] audit: type=1400 audit(1755936681.052:3776): avc: denied { mount } for pid=10812 comm="syz.8.2663" name="/" dev="configfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 190.915692][T10815] 9pnet_fd: Insufficient options for proto=fd [ 190.975348][ T6351] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.996384][ T29] audit: type=1400 audit(1755936681.102:3777): avc: denied { search } for pid=10812 comm="syz.8.2663" name="/" dev="configfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.019204][ T29] audit: type=1400 audit(1755936681.102:3778): avc: denied { search } for pid=10812 comm="syz.8.2663" name="/" dev="configfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.041944][ T29] audit: type=1400 audit(1755936681.102:3779): avc: denied { read open } for pid=10812 comm="syz.8.2663" path="/" dev="configfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.082432][ T29] audit: type=1400 audit(1755936681.272:3780): avc: denied { mount } for pid=10820 comm="syz.4.2667" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 191.115453][ T29] audit: type=1400 audit(1755936681.282:3781): avc: denied { connect } for pid=10816 comm="syz.8.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.495032][T10853] loop9: detected capacity change from 0 to 8192 [ 191.701544][T10858] netlink: 'syz.8.2681': attribute type 1 has an invalid length. [ 191.784888][T10864] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 191.819459][T10858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.832707][T10861] bond1: (slave dummy0): making interface the new active one [ 191.896893][T10861] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 192.181201][T10870] bridge0: entered allmulticast mode [ 192.213641][T10866] pim6reg: entered allmulticast mode [ 192.237561][T10873] netlink: 'syz.9.2686': attribute type 30 has an invalid length. [ 192.363896][T10880] cgroup: Invalid name [ 193.792361][T10910] loop9: detected capacity change from 0 to 2048 [ 193.819313][T10910] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.849433][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2701'. [ 193.929171][T10924] @: renamed from vlan0 (while UP) [ 193.995073][ T9615] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.045363][T10932] pim6reg1: entered promiscuous mode [ 194.050821][T10932] pim6reg1: entered allmulticast mode [ 194.069203][T10934] loop8: detected capacity change from 0 to 1024 [ 194.076128][T10934] EXT4-fs: Ignoring removed orlov option [ 194.087943][T10934] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.223492][T10943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10943 comm=syz.9.2712 [ 194.261282][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2712'. [ 194.697551][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8f4c00: rx timeout, send abort [ 194.761398][T10955] 9pnet_virtio: no channels available for device 127.0.0.1 [ 194.989981][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 194.990000][ T29] audit: type=1400 audit(1755936685.182:3843): avc: denied { read } for pid=10956 comm="syz.4.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.075321][T10934] ================================================================== [ 195.083470][T10934] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 195.091501][T10934] [ 195.093929][T10934] write to 0xffff888106ddbb04 of 4 bytes by task 10937 on cpu 1: [ 195.101661][T10934] xas_set_mark+0x12b/0x140 [ 195.106212][T10934] tag_pages_for_writeback+0xc2/0x290 [ 195.111615][T10934] ext4_do_writepages+0x6b2/0x2750 [ 195.116748][T10934] ext4_writepages+0x176/0x300 [ 195.121517][T10934] do_writepages+0x1c3/0x310 [ 195.126143][T10934] file_write_and_wait_range+0x156/0x2c0 [ 195.131797][T10934] generic_buffers_fsync_noflush+0x45/0x120 [ 195.137702][T10934] ext4_sync_file+0x1ab/0x690 [ 195.142411][T10934] vfs_fsync_range+0x10a/0x130 [ 195.147184][T10934] ext4_buffered_write_iter+0x34f/0x3c0 [ 195.152775][T10934] ext4_file_write_iter+0x383/0xf00 [ 195.158001][T10934] iter_file_splice_write+0x666/0xa60 [ 195.163383][T10934] direct_splice_actor+0x156/0x2a0 [ 195.168499][T10934] splice_direct_to_actor+0x312/0x680 [ 195.173896][T10934] do_splice_direct+0xda/0x150 [ 195.178666][T10934] do_sendfile+0x380/0x650 [ 195.183102][T10934] __x64_sys_sendfile64+0x105/0x150 [ 195.188315][T10934] x64_sys_call+0x2bb0/0x2ff0 [ 195.193000][T10934] do_syscall_64+0xd2/0x200 [ 195.197518][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.203416][T10934] [ 195.205745][T10934] read to 0xffff888106ddbb04 of 4 bytes by task 10934 on cpu 0: [ 195.213382][T10934] file_write_and_wait_range+0x10e/0x2c0 [ 195.219068][T10934] generic_buffers_fsync_noflush+0x45/0x120 [ 195.224999][T10934] ext4_sync_file+0x1ab/0x690 [ 195.229713][T10934] vfs_fsync_range+0x10a/0x130 [ 195.234496][T10934] ext4_buffered_write_iter+0x34f/0x3c0 [ 195.240069][T10934] ext4_file_write_iter+0x383/0xf00 [ 195.245287][T10934] iter_file_splice_write+0x666/0xa60 [ 195.250662][T10934] direct_splice_actor+0x156/0x2a0 [ 195.255790][T10934] splice_direct_to_actor+0x312/0x680 [ 195.261173][T10934] do_splice_direct+0xda/0x150 [ 195.265939][T10934] do_sendfile+0x380/0x650 [ 195.270368][T10934] __x64_sys_sendfile64+0x105/0x150 [ 195.275582][T10934] x64_sys_call+0x2bb0/0x2ff0 [ 195.280265][T10934] do_syscall_64+0xd2/0x200 [ 195.284781][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.290681][T10934] [ 195.293011][T10934] value changed: 0x02000021 -> 0x04000021 [ 195.298736][T10934] [ 195.301058][T10934] Reported by Kernel Concurrency Sanitizer on: [ 195.307211][T10934] CPU: 0 UID: 0 PID: 10934 Comm: syz.8.2709 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.318596][T10934] Tainted: [W]=WARN [ 195.322403][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.332463][T10934] ================================================================== [ 195.340661][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8f4a00: rx timeout, send abort [ 195.348854][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8f4c00: abort rx timeout. Force session deactivation [ 195.382410][ T8668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.848871][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8f4a00: abort rx timeout. Force session deactivation