last executing test programs: 5.731748096s ago: executing program 2 (id=994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5d17, 0x0, 0x0, 0x0, 0x800}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @generic={0x6, 0x9, 0x3, 0x19, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0xb, 0x7, 0xb, 0x30}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x58, &(0x7f0000000180)=""/88, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x8, 0x1, 0x3809}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=[{0x5, 0x2, 0xd, 0x3}, {0x4, 0x3, 0xb, 0x1}], 0x10, 0x7}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB], 0x1028}}, 0x20000050) 5.730963056s ago: executing program 2 (id=995): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x5f}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r6, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7fffeffd) 4.402481664s ago: executing program 2 (id=1007): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r0, 0x0, 0x8000000000000003}, 0x18) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) utime(&(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) close_range(r7, 0xffffffffffffffff, 0x0) 4.356603467s ago: executing program 2 (id=1008): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0x0) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) socket$inet6(0x10, 0x3, 0x0) listxattr(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000000), 0x0, 0x0, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 3.83637361s ago: executing program 0 (id=1012): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x104, 0x10820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5}, 0x2300, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xfffffffefffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x0, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0xa}, 0x18) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x9) 2.991011728s ago: executing program 0 (id=1018): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x5f}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r6, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7fffeffd) 2.990562198s ago: executing program 2 (id=1019): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) unshare(0x20000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r3, 0x401, 0x3) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = getpgid(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sched_rr_get_interval(r7, 0x0) 2.990222388s ago: executing program 3 (id=1020): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) 2.96832165s ago: executing program 2 (id=1021): r0 = gettid() fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e1faff0000000000e8ff1d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f5", 0x1}], 0x1}}], 0x1, 0x8011) recvmmsg(r4, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) shutdown(r4, 0x0) tkill(r0, 0x13) 2.83754516s ago: executing program 3 (id=1022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000a2c5fdefe65250efda0da98e7602c2d2af50bcaca88cb4b07f451b8bbe0c5d108c51a42f6aaa9f7f0065282f024aa47b3b2b25d7051ef628eae42d8a6f5ceb1100485f8900915af4af21a78ee1ed52a2991058dd5af5c229c56da0d44b2fc5bd8b4284483703b52cc640fa13c918db12de80fad01f6c03a63e21d11ae4558031a568c5c5abded2828a404759079d37ee90be8e574faaf105f5f232a99b509dc47520f2e83d1d066a39", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00068008000600ffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r2 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) unshare(0x22020600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) clock_getres(0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = syz_pidfd_open(r2, 0x0) setns(r5, 0x24020000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) eventfd2(0x3, 0x8549b62144b92195) semctl$IPC_RMID(0x0, 0x0, 0x0) 2.71059728s ago: executing program 3 (id=1023): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = openat(r0, &(0x7f00000002c0)='./mnt\x00', 0x1e1a41, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, 0x0, r3, &(0x7f0000000100)='./mnt\x00') unlinkat(r3, 0x0, 0x200) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000d6ad", @ANYRES16=r4, @ANYBLOB="00002abd7000fedbdf25020000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000000000000000000000000800000000000000000000000000500000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500fe880000000000000000000000000101000004d62b000000020000000a0101020000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc0000000000000000000000000000010135000002007300018000000400000006000000ff010000000000000000000000000001000004d43200000002010400008000000000000000000000000000bb02350000b9010700050000000300000005000000"], 0x17c}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 2.358429159s ago: executing program 4 (id=1026): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.254637297s ago: executing program 4 (id=1027): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000985000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg$inet(r1, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001200)}}], 0x2, 0x4) 2.253833808s ago: executing program 3 (id=1028): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x104, 0x10820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5}, 0x2300, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xfffffffefffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x0, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0xa}, 0x18) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x9) 2.118126419s ago: executing program 0 (id=1029): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x104, 0x10820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5}, 0x2300, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xfffffffefffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x0, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0xa}, 0x18) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x9) 1.673216085s ago: executing program 1 (id=1031): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r0, 0x0, 0x8000000000000003}, 0x18) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) utime(&(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.614625749s ago: executing program 1 (id=1032): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) 1.537013906s ago: executing program 1 (id=1033): r0 = eventfd2(0xfffffffe, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, r1) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r1, r2, 0xfffffffffffffffc, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) write$eventfd(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, 0x0, 0x44040004) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1.526235986s ago: executing program 1 (id=1034): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000080)=0x7fffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="4fa3176756113369df8b913f2c0f5bc12e941d0000", 0x15}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a49", 0xb0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="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", 0x133}], 0x1}}], 0x2, 0x400c0) r4 = timerfd_create(0x7, 0x80800) timerfd_settime(r4, 0x3, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0xdf9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.448301443s ago: executing program 4 (id=1035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='svcrdma_decode_short_err\x00', r1, 0x0, 0x5}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x550, &(0x7f0000001780)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000efff000000000000000000000000000000fefffffffa00000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0xa, 0x0, 0xcc, 0x0, r3, 0x8000c, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x1000000000000e) 1.414187076s ago: executing program 3 (id=1036): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) removexattr(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="3105ae380ea344a393c2781351bfc39b12421dbf73c5a93424", @ANYRES8=r2, @ANYRESDEC=r1, @ANYRESDEC=r4, @ANYRESOCT=0x0, @ANYRESHEX], 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00', @ANYBLOB="56cb0ed42fb629413e18cdd4"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") 1.351067541s ago: executing program 4 (id=1037): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000080)=0x7fffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="4fa3176756113369df8b913f2c0f5bc12e941d0000", 0x15}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a49", 0xb0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="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", 0x133}], 0x1}}], 0x2, 0x400c0) r4 = timerfd_create(0x7, 0x80800) timerfd_settime(r4, 0x3, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0xdf9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.270952987s ago: executing program 0 (id=1038): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x8}}, 0x0, 0x2, 0xfe, &(0x7f0000000e00)=""/254}, 0x94) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xa) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000580)={'a', ' *:* ', 'w\x00'}, 0x8) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='lon\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x4f2, &(0x7f0000000b00)="$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") 656.478227ms ago: executing program 1 (id=1039): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='mm_page_free\x00', r3, 0x0, 0x5}, 0x18) read(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ca3000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00004b6000/0x4000)=nil, 0x4000, 0x8d348b7d2e649c4b, 0x1010, 0xffffffffffffffff, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x34, 0x0, @fd_index=0x8, 0x0, 0x0, 0x7, 0x8, 0x1, {0x0, r6, r2}}) socket$inet_sctp(0x2, 0x5, 0x84) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v1={0x1000000, [{0xffffffff, 0x6}]}, 0xc, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x1010, r1, 0x1a651000) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@sr0, r0, &(0x7f00000002c0)='./file0/file1\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 487.792411ms ago: executing program 3 (id=1040): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x5f}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r6, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7fffeffd) 386.758929ms ago: executing program 4 (id=1041): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x6, 0x20402) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x34}}, 0x48882) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ftruncate(0xffffffffffffffff, 0xc17a) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffff, 0x4, @perf_config_ext={0xa, 0x7}, 0x1100, 0x7, 0x3a25, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0xfffffffe, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={0x0}) 385.863169ms ago: executing program 1 (id=1051): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd}, 0x1c) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x6}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x10) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2, {0x3}}, 0x18) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000009b1168bca192533fdd788516d4d92a94e92b7dd2aaf305c73dfb19e0972a"], 0x14}}, 0x10) 75.552764ms ago: executing program 0 (id=1042): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r0, 0x0, 0x8000000000000003}, 0x18) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) utime(&(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) close_range(r7, 0xffffffffffffffff, 0x0) 4.00158ms ago: executing program 4 (id=1043): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) sendfile(0xffffffffffffffff, r5, 0x0, 0x3a) getdents(r5, &(0x7f0000000380)=""/169, 0xa9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x6a020000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) 0s ago: executing program 0 (id=1054): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r0, &(0x7f0000000300)="f7", 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1], 0x0, 0x0, 0x1}}, 0x40) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277031ebe9 code=0x7ffc0000 [ 47.279067][ T29] audit: type=1326 audit(1754944310.420:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f277031ebe9 code=0x7ffc0000 [ 47.302309][ T29] audit: type=1326 audit(1754944310.420:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277031ebe9 code=0x7ffc0000 [ 47.325588][ T29] audit: type=1326 audit(1754944310.420:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277031ebe9 code=0x7ffc0000 [ 47.348927][ T29] audit: type=1326 audit(1754944310.420:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f277031ebe9 code=0x7ffc0000 [ 47.372212][ T29] audit: type=1326 audit(1754944310.420:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277031ebe9 code=0x7ffc0000 [ 47.395568][ T29] audit: type=1326 audit(1754944310.420:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277031ebe9 code=0x7ffc0000 [ 47.418856][ T29] audit: type=1326 audit(1754944310.430:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f277031ebe9 code=0x7ffc0000 [ 47.442144][ T29] audit: type=1326 audit(1754944310.430:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277031ebe9 code=0x7ffc0000 [ 47.468567][ T2215] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.603550][ T2215] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.611772][ T2215] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.763448][ T4216] siw: device registration error -23 [ 47.777886][ T4216] loop3: detected capacity change from 0 to 1024 [ 47.796953][ T4216] ext4: Invalid gid '0x00000000ffffffff' [ 47.909216][ T4220] loop3: detected capacity change from 0 to 512 [ 47.925341][ T4220] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.958433][ T4220] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 47.973652][ T4220] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.200: bg 0: block 248: padding at end of block bitmap is not set [ 47.988879][ T4220] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.200: Failed to acquire dquot type 1 [ 48.001071][ T4220] EXT4-fs (loop3): 1 truncate cleaned up [ 48.007414][ T4220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 48.035356][ T4220] syz.3.200 (4220) used greatest stack depth: 9200 bytes left [ 48.056689][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 48.068199][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 48.104427][ T4229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 48.145196][ T4229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 48.343810][ T4235] lo speed is unknown, defaulting to 1000 [ 48.507395][ T4239] loop3: detected capacity change from 0 to 512 [ 48.534683][ T4239] EXT4-fs: Ignoring removed oldalloc option [ 48.582713][ T4239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.595765][ T4239] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.621238][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.708912][ T4246] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 48.717287][ T4246] tipc: Enabled bearer , priority 10 [ 48.803346][ T4276] siw: device registration error -23 [ 48.867726][ T4275] loop2: detected capacity change from 0 to 2048 [ 48.875388][ T4275] ext4: Unknown parameter 'uid' [ 48.915457][ T4275] bond0: entered promiscuous mode [ 48.920637][ T4275] bond0: entered allmulticast mode [ 48.926155][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.935239][ T4275] bond0 (unregistering): Released all slaves [ 48.950095][ T4261] lo speed is unknown, defaulting to 1000 [ 49.034661][ T4294] loop2: detected capacity change from 0 to 512 [ 49.042285][ T4296] cgroup: Need name or subsystem set [ 49.061757][ T4294] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.123950][ T3588] Process accounting resumed [ 49.125819][ T4294] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.164159][ T4294] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.215: bg 0: block 248: padding at end of block bitmap is not set [ 49.245494][ T4294] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.215: Failed to acquire dquot type 1 [ 49.258881][ T4294] EXT4-fs (loop2): 1 truncate cleaned up [ 49.264969][ T4294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 49.378509][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 49.439985][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 49.700712][ T4296] Set syz1 is full, maxelem 65536 reached [ 49.717005][ T3381] tipc: Node number set to 132884307 [ 49.874347][ T4315] loop4: detected capacity change from 0 to 1024 [ 49.888288][ T4315] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 49.932485][ T4320] loop3: detected capacity change from 0 to 2048 [ 49.980660][ T4320] ext4: Unknown parameter 'uid' [ 50.007848][ T4321] lo speed is unknown, defaulting to 1000 [ 50.127238][ T4320] bond1: entered promiscuous mode [ 50.132297][ T4320] bond1: entered allmulticast mode [ 50.310770][ T4320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.343604][ T4320] bond1 (unregistering): Released all slaves [ 50.409922][ T4326] lo speed is unknown, defaulting to 1000 [ 50.704151][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 50.740180][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 52.249951][ T29] kauditd_printk_skb: 649 callbacks suppressed [ 52.249961][ T29] audit: type=1400 audit(1754944315.460:4187): avc: denied { read write } for pid=4343 comm="syz.2.238" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 52.256565][ T4344] loop7: detected capacity change from 0 to 7 [ 52.279680][ T29] audit: type=1400 audit(1754944315.460:4188): avc: denied { open } for pid=4343 comm="syz.2.238" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 52.316722][ T29] audit: type=1326 audit(1754944315.520:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 52.340341][ T29] audit: type=1326 audit(1754944315.520:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 52.373295][ T29] audit: type=1326 audit(1754944315.580:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 52.396647][ T29] audit: type=1326 audit(1754944315.580:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 52.420000][ T29] audit: type=1326 audit(1754944315.580:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 52.420018][ T29] audit: type=1326 audit(1754944315.580:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 52.420472][ T29] audit: type=1326 audit(1754944315.580:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 52.463427][ T4346] loop4: detected capacity change from 0 to 8192 [ 52.466754][ T29] audit: type=1326 audit(1754944315.580:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 52.528777][ T4349] @: renamed from vlan0 (while UP) [ 52.586479][ T4347] lo speed is unknown, defaulting to 1000 [ 52.672148][ T4360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 52.702168][ T4363] netlink: 'syz.1.243': attribute type 10 has an invalid length. [ 52.745345][ T4367] loop4: detected capacity change from 0 to 512 [ 52.790113][ T4367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.810873][ T4367] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.867450][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 52.902350][ T4380] loop2: detected capacity change from 0 to 512 [ 52.917335][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 52.926356][ T4382] loop0: detected capacity change from 0 to 512 [ 52.938028][ T4385] netlink: 'syz.4.252': attribute type 3 has an invalid length. [ 52.947051][ T4380] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.947251][ T4385] netlink: 'syz.4.252': attribute type 3 has an invalid length. [ 52.988046][ T4382] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.087276][ T4392] bridge1: entered promiscuous mode [ 53.092501][ T4392] bridge1: entered allmulticast mode [ 53.099806][ T4392] team0: Port device bridge1 added [ 53.138002][ T4395] loop0: detected capacity change from 0 to 512 [ 53.181763][ T4394] lo speed is unknown, defaulting to 1000 [ 53.316180][ T4400] loop4: detected capacity change from 0 to 512 [ 53.404060][ T4400] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.422188][ T4395] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.253: error while reading EA inode 32 err=-116 [ 53.435083][ T4395] EXT4-fs (loop0): Remounting filesystem read-only [ 53.441717][ T4395] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 53.452272][ T4395] EXT4-fs (loop0): 1 orphan inode deleted [ 54.372098][ T4423] loop3: detected capacity change from 0 to 2048 [ 54.588951][ T4427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 54.615591][ T4429] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.644087][ T4431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 54.665490][ T4427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 54.697581][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 54.760337][ T4429] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.134091][ T4438] loop2: detected capacity change from 0 to 128 [ 55.142499][ T4438] syz.2.263: attempt to access beyond end of device [ 55.142499][ T4438] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 55.168532][ T4429] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.184035][ T4446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 55.193910][ T4446] lo: Caught tx_queue_len zero misconfig [ 55.268428][ T4453] lo speed is unknown, defaulting to 1000 [ 55.303575][ T4429] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.414544][ T2215] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.443707][ T2215] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.473067][ T2215] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.511751][ T2215] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.976248][ T4467] pim6reg: entered allmulticast mode [ 56.041475][ T4466] pim6reg: left allmulticast mode [ 56.099345][ T4469] $Hÿ: renamed from bond0 (while UP) [ 56.117672][ T4469] $Hÿ: entered promiscuous mode [ 56.122702][ T4469] bond_slave_0: entered promiscuous mode [ 56.128520][ T4469] bond_slave_1: entered promiscuous mode [ 56.152275][ T4473] __nla_validate_parse: 1 callbacks suppressed [ 56.152289][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 56.183420][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 56.211749][ T4477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 56.256770][ T4477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 56.493505][ T4486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.284'. [ 56.504983][ T4486] vlan0: entered promiscuous mode [ 56.510059][ T4486] gretap0: entered promiscuous mode [ 56.589863][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 57.142916][ T4496] team0 (unregistering): Port device team_slave_0 removed [ 57.151932][ T4496] team0 (unregistering): Port device team_slave_1 removed [ 57.224657][ T4498] lo speed is unknown, defaulting to 1000 [ 57.313948][ T4500] pim6reg: entered allmulticast mode [ 57.368426][ T4499] pim6reg: left allmulticast mode [ 57.558977][ T4507] loop0: detected capacity change from 0 to 512 [ 57.565589][ T4507] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.573361][ T4507] EXT4-fs (loop0): failed to initialize system zone (-117) [ 57.580887][ T4507] EXT4-fs (loop0): mount failed [ 57.973176][ T4510] loop4: detected capacity change from 0 to 512 [ 57.982112][ T4510] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.989125][ T4510] __quota_error: 156 callbacks suppressed [ 57.989135][ T4510] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 58.005277][ T4510] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 58.014869][ T4510] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.295: Failed to acquire dquot type 1 [ 58.026670][ T4510] EXT4-fs (loop4): 1 truncate cleaned up [ 58.040277][ T29] audit: type=1400 audit(1754944321.251:4353): avc: denied { bind } for pid=4509 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.060226][ T29] audit: type=1400 audit(1754944321.281:4354): avc: denied { listen } for pid=4509 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.080355][ T29] audit: type=1400 audit(1754944321.301:4355): avc: denied { read } for pid=4509 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.133234][ T4516] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 58.142784][ T4516] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8 [ 58.163264][ T29] audit: type=1400 audit(1754944321.371:4356): avc: denied { bind } for pid=4517 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.182634][ T29] audit: type=1400 audit(1754944321.371:4357): avc: denied { node_bind } for pid=4517 comm="syz.3.297" saddr=172.20.20.170 src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 58.182897][ T4518] loop3: detected capacity change from 0 to 256 [ 58.205466][ T29] audit: type=1400 audit(1754944321.371:4358): avc: denied { listen } for pid=4517 comm="syz.3.297" laddr=172.20.20.170 lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.213721][ T4518] vfat: Unknown parameter 'sh†rtname' [ 58.318081][ T4523] loop4: detected capacity change from 0 to 1024 [ 58.339269][ T4523] EXT4-fs: Ignoring removed nobh option [ 58.344921][ T4523] EXT4-fs: Ignoring removed bh option [ 58.439183][ T4534] pim6reg: entered allmulticast mode [ 58.518258][ T4533] pim6reg: left allmulticast mode [ 58.525261][ T4535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.301'. [ 58.538158][ T4535] vlan2: entered promiscuous mode [ 58.543186][ T4535] gretap0: entered promiscuous mode [ 58.627401][ T4539] loop2: detected capacity change from 0 to 512 [ 58.638045][ T4539] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.652732][ T4539] netlink: 'syz.2.305': attribute type 5 has an invalid length. [ 58.676526][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.683804][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.703191][ T29] audit: type=1400 audit(1754944321.911:4359): avc: denied { ioctl } for pid=4538 comm="syz.2.305" path="socket:[8906]" dev="sockfs" ino=8906 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.764468][ T3588] lo speed is unknown, defaulting to 1000 [ 58.770269][ T3588] syz0: Port: 1 Link DOWN [ 58.776490][ T58] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.790267][ T58] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.804995][ T58] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.818594][ T58] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.008444][ T4551] loop2: detected capacity change from 0 to 512 [ 59.122793][ T4551] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.363951][ T4562] loop2: detected capacity change from 0 to 512 [ 59.371294][ T4562] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.405354][ T4562] EXT4-fs (loop2): failed to initialize system zone (-117) [ 59.426113][ T4562] EXT4-fs (loop2): mount failed [ 59.938454][ T4573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 59.954487][ T4573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 60.326409][ T29] audit: type=1400 audit(1754944323.541:4360): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 60.850962][ T4594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.323'. [ 60.862202][ T4594] vlan2: entered promiscuous mode [ 60.867272][ T4594] gretap0: entered promiscuous mode [ 61.099578][ T4601] loop3: detected capacity change from 0 to 1024 [ 61.208183][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 61.334338][ T4605] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.327: Allocating blocks 465-513 which overlap fs metadata [ 61.350716][ T4605] EXT4-fs (loop3): pa ffff8881072d3770: logic 256, phys. 369, len 9 [ 61.358916][ T4605] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 61.370216][ T4605] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 61.443416][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 61.505786][ T4608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 61.579358][ T4612] loop0: detected capacity change from 0 to 512 [ 61.597156][ T4612] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.614777][ T4616] loop2: detected capacity change from 0 to 512 [ 61.628502][ T4616] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.635160][ T4616] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.331: Failed to acquire dquot type 1 [ 61.647778][ T4616] EXT4-fs (loop2): 1 truncate cleaned up [ 61.666685][ T4619] loop0: detected capacity change from 0 to 512 [ 61.673430][ T4619] ext4: Unknown parameter 'delalloc.dax' [ 61.720722][ T4625] loop0: detected capacity change from 0 to 512 [ 61.737289][ T4626] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 61.747369][ T4625] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.747818][ T4626] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 8 [ 61.857874][ T4635] loop3: detected capacity change from 0 to 512 [ 61.875369][ T4635] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.905171][ T4635] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 32: comm syz.3.337: path /66/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 61.905330][ T4635] EXT4-fs (loop3): Remounting filesystem read-only [ 62.046437][ T4645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 62.761244][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 62.768522][ T4657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 62.801968][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 62.892090][ T4657] lo speed is unknown, defaulting to 1000 [ 62.986354][ T4662] loop0: detected capacity change from 0 to 512 [ 63.004342][ T4662] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.110497][ T4669] lo speed is unknown, defaulting to 1000 [ 63.185036][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 63.185047][ T29] audit: type=1326 audit(1754944326.392:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac6e7ebe9 code=0x7ffc0000 [ 63.215608][ T29] audit: type=1326 audit(1754944326.392:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac6e7ebe9 code=0x7ffc0000 [ 63.239022][ T29] audit: type=1326 audit(1754944326.392:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdac6e7ebe9 code=0x7ffc0000 [ 63.262464][ T29] audit: type=1326 audit(1754944326.392:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac6e7ebe9 code=0x7ffc0000 [ 63.285833][ T29] audit: type=1326 audit(1754944326.392:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac6e7ebe9 code=0x7ffc0000 [ 63.309189][ T29] audit: type=1326 audit(1754944326.392:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdac6e7ebe9 code=0x7ffc0000 [ 63.332650][ T29] audit: type=1326 audit(1754944326.412:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac6e7ebe9 code=0x7ffc0000 [ 63.356284][ T29] audit: type=1326 audit(1754944326.412:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdac6eb14a5 code=0x7ffc0000 [ 63.379728][ T29] audit: type=1326 audit(1754944326.412:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdac6e7ebe9 code=0x7ffc0000 [ 63.403249][ T29] audit: type=1326 audit(1754944326.412:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.0.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac6e7ebe9 code=0x7ffc0000 [ 63.584082][ T4696] loop4: detected capacity change from 0 to 2048 [ 64.449726][ T4696] EXT4-fs mount: 31 callbacks suppressed [ 64.449745][ T4696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.499731][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 64.722029][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 65.917216][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.408562][ T4741] batadv_slave_0: entered promiscuous mode [ 66.422589][ T4740] batadv_slave_0: left promiscuous mode [ 66.923259][ T4753] loop4: detected capacity change from 0 to 512 [ 66.962659][ T4753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.054458][ T4753] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.222072][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.317990][ T4767] loop4: detected capacity change from 0 to 1024 [ 67.335964][ T4767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 67.348450][ T4767] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.361128][ T4767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.377'. [ 67.507213][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 67.529769][ T4784] loop4: detected capacity change from 0 to 512 [ 67.533947][ T4782] geneve2: entered promiscuous mode [ 67.549382][ T4784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.562051][ T4784] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.589356][ T4787] loop3: detected capacity change from 0 to 512 [ 67.606251][ T4784] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz.4.383: path /68/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 67.632738][ T4784] EXT4-fs (loop4): Remounting filesystem read-only [ 67.640910][ T4787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.654040][ T4787] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.697137][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.737577][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.780736][ T4797] loop3: detected capacity change from 0 to 512 [ 67.797128][ T4797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.809896][ T4797] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.845765][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.299433][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 68.299445][ T29] audit: type=1326 audit(1754944331.512:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 68.342418][ T29] audit: type=1326 audit(1754944331.512:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 68.365757][ T29] audit: type=1326 audit(1754944331.512:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 68.389147][ T29] audit: type=1326 audit(1754944331.512:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 68.412544][ T29] audit: type=1326 audit(1754944331.512:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 68.436044][ T29] audit: type=1326 audit(1754944331.512:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 68.459434][ T29] audit: type=1326 audit(1754944331.512:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 68.482713][ T29] audit: type=1326 audit(1754944331.512:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 68.506078][ T29] audit: type=1326 audit(1754944331.512:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 68.529783][ T29] audit: type=1326 audit(1754944331.512:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 68.690967][ T4818] lo speed is unknown, defaulting to 1000 [ 68.740692][ T4820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.395'. [ 68.901953][ T4823] geneve2: entered promiscuous mode [ 68.972637][ T4827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 68.987049][ T4829] loop0: detected capacity change from 0 to 512 [ 68.994708][ T4827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 69.003990][ T4829] EXT4-fs: Ignoring removed bh option [ 69.015537][ T4829] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.024596][ T4829] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 69.046466][ T4829] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 69.060881][ T4829] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 69.069949][ T4829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.085675][ T4829] batadv_slave_0: entered promiscuous mode [ 69.094696][ T4828] batadv_slave_0: left promiscuous mode [ 69.106155][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.124437][ T4837] loop0: detected capacity change from 0 to 1024 [ 69.149509][ T4837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.167550][ T4837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 69.271755][ T4844] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.403: Allocating blocks 465-513 which overlap fs metadata [ 69.286240][ T4844] EXT4-fs (loop0): pa ffff888107196310: logic 256, phys. 369, len 9 [ 69.294302][ T4844] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 69.304399][ T4844] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 69.333995][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.456629][ T4848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.467429][ T4848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.496666][ T4851] netlink: 76 bytes leftover after parsing attributes in process `syz.4.409'. [ 69.517348][ T4851] loop4: detected capacity change from 0 to 2048 [ 69.525242][ T4851] msdos: Unknown parameter ' [ 69.525242][ T4851] ' [ 69.920672][ T4855] geneve2: entered promiscuous mode [ 69.926406][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.935399][ T2215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.944188][ T2215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.953263][ T2215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.018552][ T4864] loop2: detected capacity change from 0 to 1024 [ 70.035912][ T4864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.048139][ T4864] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.060386][ T4864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 70.166055][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 70.176089][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.180025][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 70.194045][ T4874] loop3: detected capacity change from 0 to 2048 [ 70.224838][ T3285] loop3: p1 < > p4 [ 70.229205][ T3285] loop3: p4 size 8388608 extends beyond EOD, truncated [ 70.239246][ T4874] loop3: p1 < > p4 [ 70.248802][ T4874] loop3: p4 size 8388608 extends beyond EOD, truncated [ 70.303820][ T4882] lo speed is unknown, defaulting to 1000 [ 70.310376][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 70.322361][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 70.348942][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 70.360255][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 71.190709][ T4899] netlink: 76 bytes leftover after parsing attributes in process `syz.3.431'. [ 71.213758][ T4899] loop3: detected capacity change from 0 to 2048 [ 71.220484][ T4899] msdos: Unknown parameter ' [ 71.220484][ T4899] ' [ 71.232063][ T4899] loop3: detected capacity change from 0 to 164 [ 71.239058][ T4899] iso9660: Unknown parameter 'obj_user' [ 71.287360][ T4907] $Hÿ: renamed from bond0 (while UP) [ 71.294526][ T4907] $Hÿ: entered promiscuous mode [ 71.299573][ T4907] bond_slave_0: entered promiscuous mode [ 71.305478][ T4907] bond_slave_1: entered promiscuous mode [ 71.311318][ T4909] loop2: detected capacity change from 0 to 2048 [ 71.374800][ T4909] loop2: p1 < > p4 [ 71.379229][ T4909] loop2: p4 size 8388608 extends beyond EOD, truncated [ 71.415626][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 71.417777][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 71.958686][ T4515] IPVS: starting estimator thread 0... [ 71.967619][ T4929] ipvlan2: entered promiscuous mode [ 71.982665][ T4929] serio: Serial port ptm0 [ 72.074412][ T4930] IPVS: using max 5136 ests per chain, 256800 per kthread [ 72.419109][ T4951] __nla_validate_parse: 4 callbacks suppressed [ 72.419121][ T4951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 72.451715][ T4951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 72.481608][ T4958] loop0: detected capacity change from 0 to 512 [ 72.511943][ T4958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.524943][ T4958] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.551534][ T4967] loop2: detected capacity change from 0 to 512 [ 72.559957][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.581331][ T4967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.604667][ T4967] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.620034][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 72.646610][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 72.656228][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.711779][ T4982] syzkaller0: entered promiscuous mode [ 72.717301][ T4982] syzkaller0: entered allmulticast mode [ 72.791760][ T4988] loop0: detected capacity change from 0 to 2048 [ 72.834908][ T3285] loop0: p1 < > p4 [ 72.845012][ T3285] loop0: p4 size 8388608 extends beyond EOD, truncated [ 72.863943][ T4988] loop0: p1 < > p4 [ 72.872843][ T4988] loop0: p4 size 8388608 extends beyond EOD, truncated [ 72.921043][ T3753] udevd[3753]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 72.932086][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 73.034800][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 73.048290][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 73.076221][ T4998] loop0: detected capacity change from 0 to 512 [ 73.096052][ T4998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.108801][ T4998] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.132901][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.245544][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 73.247853][ T5015] loop4: detected capacity change from 0 to 512 [ 73.278511][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 73.325530][ T5015] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 73.338725][ T5015] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.355207][ T5015] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.478: corrupted inode contents [ 73.367241][ T5015] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.478: mark_inode_dirty error [ 73.379987][ T5015] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.478: corrupted inode contents [ 73.412139][ T5026] cgroup: fork rejected by pids controller in /syz0 [ 73.419307][ T5015] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.478: mark_inode_dirty error [ 73.441278][ T5015] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.478: corrupted inode contents [ 73.454061][ T5015] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 73.480497][ T5015] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.478: corrupted inode contents [ 73.507108][ T5015] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.478: mark_inode_dirty error [ 73.518934][ T5015] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 73.536354][ T5015] EXT4-fs (loop4): 1 truncate cleaned up [ 73.542091][ T2215] __quota_error: 129 callbacks suppressed [ 73.542099][ T2215] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 73.557725][ T2215] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 73.576365][ T5015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.591176][ T29] audit: type=1400 audit(1754944336.803:4674): avc: denied { create } for pid=5014 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.618854][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.656423][ T29] audit: type=1326 audit(1754944336.873:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 73.679958][ T29] audit: type=1326 audit(1754944336.873:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 73.735096][ T29] audit: type=1326 audit(1754944336.873:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 73.758444][ T29] audit: type=1326 audit(1754944336.873:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 73.781799][ T29] audit: type=1326 audit(1754944336.873:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 73.805133][ T29] audit: type=1326 audit(1754944336.923:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 73.828559][ T29] audit: type=1326 audit(1754944336.923:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 73.851943][ T29] audit: type=1326 audit(1754944336.933:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7faabf57ebe9 code=0x7ffc0000 [ 73.897767][ T2215] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.945616][ T2215] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.975983][ T5045] lo speed is unknown, defaulting to 1000 [ 73.996861][ T2215] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.036922][ T2215] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.047429][ T5045] chnl_net:caif_netlink_parms(): no params data found [ 74.077505][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.084587][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.091741][ T5045] bridge_slave_0: entered allmulticast mode [ 74.098116][ T5045] bridge_slave_0: entered promiscuous mode [ 74.104860][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.111996][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.119156][ T5045] bridge_slave_1: entered allmulticast mode [ 74.125758][ T5045] bridge_slave_1: entered promiscuous mode [ 74.141354][ T5045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.151516][ T5045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.176861][ T5045] team0: Port device team_slave_0 added [ 74.183553][ T5045] team0: Port device team_slave_1 added [ 74.201775][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.208758][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.234678][ T5045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.251337][ T2215] bridge_slave_1: left allmulticast mode [ 74.257068][ T2215] bridge_slave_1: left promiscuous mode [ 74.262730][ T2215] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.274350][ T2215] bridge_slave_0: left allmulticast mode [ 74.279992][ T2215] bridge_slave_0: left promiscuous mode [ 74.285710][ T2215] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.365764][ T2215] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.374464][ T2215] bond_slave_0: left promiscuous mode [ 74.381021][ T2215] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.390108][ T2215] bond_slave_1: left promiscuous mode [ 74.396373][ T2215] $Hÿ (unregistering): Released all slaves [ 74.404822][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.411823][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.412317][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 74.437791][ T5045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.479635][ T5045] hsr_slave_0: entered promiscuous mode [ 74.496915][ T5045] hsr_slave_1: entered promiscuous mode [ 74.502791][ T5045] debugfs: 'hsr0' already exists in 'hsr' [ 74.507945][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 74.509060][ T5045] Cannot create hsr debugfs directory [ 74.605710][ T2215] hsr_slave_0: left promiscuous mode [ 74.611284][ T2215] hsr_slave_1: left promiscuous mode [ 74.626528][ T2215] veth1_vlan: left promiscuous mode [ 74.631775][ T2215] veth0_vlan: left promiscuous mode [ 74.717151][ T2215] team0 (unregistering): Port device team_slave_1 removed [ 74.726824][ T2215] team0 (unregistering): Port device team_slave_0 removed [ 75.170970][ T5045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.190400][ T5045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.198916][ T5045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.210952][ T5045] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.242414][ T5169] loop3: detected capacity change from 0 to 2048 [ 75.266289][ T5169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.270229][ T5045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.289878][ T5045] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.295244][ T5169] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.312936][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.313979][ T5169] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 75.320012][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.332356][ T5169] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.332356][ T5169] [ 75.349380][ T5169] EXT4-fs (loop3): Total free blocks count 0 [ 75.355690][ T5169] EXT4-fs (loop3): Free/Dirty block details [ 75.361663][ T5169] EXT4-fs (loop3): free_blocks=2415919104 [ 75.367475][ T5169] EXT4-fs (loop3): dirty_blocks=32 [ 75.372675][ T5169] EXT4-fs (loop3): Block reservation details [ 75.378658][ T5169] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 75.379606][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.391764][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.449250][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.465708][ T5045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.527622][ T5045] veth0_vlan: entered promiscuous mode [ 75.535105][ T5045] veth1_vlan: entered promiscuous mode [ 75.547594][ T5045] veth0_macvtap: entered promiscuous mode [ 75.554664][ T5045] veth1_macvtap: entered promiscuous mode [ 75.564570][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.574992][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.585055][ T1594] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.594426][ T1594] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.604625][ T1594] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.613923][ T1594] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.780824][ T5229] loop3: detected capacity change from 0 to 512 [ 75.795965][ T5229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.808637][ T5229] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.831706][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.850683][ T5234] loop3: detected capacity change from 0 to 512 [ 75.857785][ T5234] EXT4-fs: Ignoring removed bh option [ 75.864801][ T5234] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.873925][ T5234] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 75.882500][ T5234] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 75.892499][ T5234] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 75.900834][ T5234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.915311][ T5234] batadv_slave_0: entered promiscuous mode [ 75.924895][ T5233] batadv_slave_0: left promiscuous mode [ 75.937258][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.980544][ T5241] netlink: 'syz.3.510': attribute type 11 has an invalid length. [ 76.175147][ T5251] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.589249][ T5264] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 76.595776][ T5264] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 76.603600][ T5264] vhci_hcd vhci_hcd.0: Device attached [ 76.610356][ T5265] vhci_hcd: connection closed [ 76.610497][ T2215] vhci_hcd: stop threads [ 76.619514][ T2215] vhci_hcd: release socket [ 76.623987][ T2215] vhci_hcd: disconnect device [ 76.669593][ T5268] loop4: detected capacity change from 0 to 512 [ 76.688235][ T5268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.700769][ T5268] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.722324][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.127004][ T5278] lo speed is unknown, defaulting to 1000 [ 78.527509][ T5292] loop0: detected capacity change from 0 to 512 [ 78.534145][ T5292] EXT4-fs: Ignoring removed bh option [ 78.539627][ T5292] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.550540][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 78.550550][ T29] audit: type=1326 audit(1754944341.763:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.1.537" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0350ecebe9 code=0x0 [ 78.581824][ T5292] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 78.594514][ T5298] __nla_validate_parse: 4 callbacks suppressed [ 78.594524][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'. [ 78.611440][ T5292] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 78.619806][ T5292] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.626664][ T5292] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 78.636320][ T5292] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 78.646142][ T5292] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.535: Failed to acquire dquot type 1 [ 78.657670][ T5292] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.535: Invalid block bitmap block 0 in block_group 0 [ 78.671441][ T5292] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.535: Invalid block bitmap block 0 in block_group 0 [ 78.874550][ T5292] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.535: Invalid block bitmap block 0 in block_group 0 [ 78.888653][ T5292] Quota error (device loop0): write_blk: dquota write failed [ 78.896149][ T5292] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 78.905989][ T5292] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.535: Failed to acquire dquot type 1 [ 78.918690][ T5292] Quota error (device loop0): write_blk: dquota write failed [ 78.926142][ T5292] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 78.935985][ T5292] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.535: Failed to acquire dquot type 1 [ 78.948315][ T5292] EXT4-fs (loop0): 1 orphan inode deleted [ 78.979593][ T5292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.999044][ T5292] syz.0.535 (5292) used greatest stack depth: 9000 bytes left [ 79.014764][ T5045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.031269][ T29] audit: type=1400 audit(1754944342.244:4851): avc: denied { getopt } for pid=5302 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.050733][ T29] audit: type=1400 audit(1754944342.244:4852): avc: denied { name_connect } for pid=5302 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 79.269743][ T29] audit: type=1326 audit(1754944342.484:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b32ebe9 code=0x7ffc0000 [ 79.445610][ T5318] sctp: [Deprecated]: syz.1.532 (pid 5318) Use of int in maxseg socket option. [ 79.445610][ T5318] Use struct sctp_assoc_value instead [ 79.519591][ T5319] lo speed is unknown, defaulting to 1000 [ 79.875720][ T5324] loop0: detected capacity change from 0 to 512 [ 79.904807][ T5324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.917583][ T5324] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.939477][ T5045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.365147][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 80.398304][ T5350] loop2: detected capacity change from 0 to 512 [ 80.418663][ T5350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.431750][ T5350] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.471895][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.490546][ T5358] loop2: detected capacity change from 0 to 512 [ 80.515048][ T5358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.527989][ T5358] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.550695][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.163975][ T5387] loop4: detected capacity change from 0 to 512 [ 81.177268][ T5387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.195106][ T5387] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.222525][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.248991][ T5396] netlink: 'syz.4.561': attribute type 11 has an invalid length. [ 81.295876][ T5399] loop0: detected capacity change from 0 to 1024 [ 81.317236][ T5399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.342653][ T5045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.379686][ T5414] $Hÿ: renamed from bond0 (while UP) [ 81.387058][ T5414] $Hÿ: entered promiscuous mode [ 81.392106][ T5414] bond_slave_0: entered promiscuous mode [ 81.397847][ T5414] bond_slave_1: entered promiscuous mode [ 81.548258][ T5423] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 81.554773][ T5423] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 81.562591][ T5423] vhci_hcd vhci_hcd.0: Device attached [ 81.574271][ T5426] vhci_hcd: connection closed [ 81.574484][ T12] vhci_hcd: stop threads [ 81.583467][ T12] vhci_hcd: release socket [ 81.587892][ T12] vhci_hcd: disconnect device [ 82.112281][ T5434] loop4: detected capacity change from 0 to 512 [ 82.123604][ T5433] loop2: detected capacity change from 0 to 512 [ 82.129152][ T5434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.130285][ T5433] EXT4-fs: Ignoring removed bh option [ 82.142714][ T5434] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.147915][ T5433] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.167848][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 82.179910][ T5433] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 82.191977][ T5433] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 82.200132][ T5433] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.206983][ T5433] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.570: Failed to acquire dquot type 1 [ 82.219764][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.221431][ T5433] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.570: Invalid block bitmap block 0 in block_group 0 [ 82.242669][ T5433] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.570: Invalid block bitmap block 0 in block_group 0 [ 82.266204][ T5433] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.570: Invalid block bitmap block 0 in block_group 0 [ 82.283078][ T5433] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.570: Failed to acquire dquot type 1 [ 82.296218][ T5433] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.570: Failed to acquire dquot type 1 [ 82.307919][ T5433] EXT4-fs (loop2): 1 orphan inode deleted [ 82.314733][ T5433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.351856][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.494634][ T5473] loop4: detected capacity change from 0 to 512 [ 82.505200][ T5473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.522267][ T5473] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.573624][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.120157][ T5515] loop2: detected capacity change from 0 to 128 [ 83.139771][ T5515] syz.2.589: attempt to access beyond end of device [ 83.139771][ T5515] loop2: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 83.153248][ T5515] buffer_io_error: 21 callbacks suppressed [ 83.153260][ T5515] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 83.167672][ T5515] syz.2.589: attempt to access beyond end of device [ 83.167672][ T5515] loop2: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 83.181113][ T5515] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 83.189712][ T5515] syz.2.589: attempt to access beyond end of device [ 83.189712][ T5515] loop2: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 83.203313][ T5515] Buffer I/O error on dev loop2, logical block 139, lost async page write [ 83.211859][ T5515] syz.2.589: attempt to access beyond end of device [ 83.211859][ T5515] loop2: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 83.225176][ T5515] Buffer I/O error on dev loop2, logical block 140, lost async page write [ 83.233778][ T5515] syz.2.589: attempt to access beyond end of device [ 83.233778][ T5515] loop2: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 83.247301][ T5515] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 83.255861][ T5515] syz.2.589: attempt to access beyond end of device [ 83.255861][ T5515] loop2: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 83.269149][ T5515] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 83.277712][ T5515] syz.2.589: attempt to access beyond end of device [ 83.277712][ T5515] loop2: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 83.291065][ T5515] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 83.299569][ T5515] syz.2.589: attempt to access beyond end of device [ 83.299569][ T5515] loop2: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 83.312853][ T5515] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 83.321362][ T5515] syz.2.589: attempt to access beyond end of device [ 83.321362][ T5515] loop2: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 83.334760][ T5515] Buffer I/O error on dev loop2, logical block 147, lost async page write [ 83.343364][ T5515] syz.2.589: attempt to access beyond end of device [ 83.343364][ T5515] loop2: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 83.356672][ T5515] Buffer I/O error on dev loop2, logical block 148, lost async page write [ 83.812255][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 83.812268][ T29] audit: type=1326 audit(1754944347.024:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 83.842317][ T29] audit: type=1326 audit(1754944347.024:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 83.865664][ T29] audit: type=1326 audit(1754944347.034:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01e74ad550 code=0x7ffc0000 [ 83.865685][ T29] audit: type=1326 audit(1754944347.054:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 83.866255][ T29] audit: type=1326 audit(1754944347.054:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 83.866274][ T29] audit: type=1326 audit(1754944347.054:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 83.866290][ T29] audit: type=1326 audit(1754944347.054:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 83.866331][ T29] audit: type=1326 audit(1754944347.054:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 83.866346][ T29] audit: type=1326 audit(1754944347.054:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 83.866360][ T29] audit: type=1326 audit(1754944347.064:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 84.329732][ T5544] netlink: 'syz.2.600': attribute type 11 has an invalid length. [ 84.738070][ T5560] loop2: detected capacity change from 0 to 8192 [ 85.034852][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 85.047139][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 85.390116][ T5574] loop4: detected capacity change from 0 to 1024 [ 85.400019][ T5574] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 85.423958][ T5574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.986725][ T5582] loop3: detected capacity change from 0 to 512 [ 86.016129][ T5582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.028847][ T5582] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.063255][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.096767][ T5586] tipc: Enabled bearer , priority 0 [ 86.104502][ T5585] tipc: Resetting bearer [ 86.114730][ T5585] tipc: Disabling bearer [ 86.270857][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.332969][ T5592] loop4: detected capacity change from 0 to 256 [ 86.346618][ T5592] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.377852][ T5601] lo speed is unknown, defaulting to 1000 [ 86.452374][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 86.468555][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 86.478667][ T5608] loop3: detected capacity change from 0 to 256 [ 86.490118][ T5608] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.116501][ T5641] delete_channel: no stack [ 87.126206][ T10] Process accounting resumed [ 87.127841][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 87.146057][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 87.626441][ T5655] loop4: detected capacity change from 0 to 2048 [ 87.655178][ T5655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.691607][ T5655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.637'. [ 87.710551][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.029835][ T5670] kernel profiling enabled (shift: 17) [ 88.156577][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.202449][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 88.222425][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.234828][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.318001][ T5683] netlink: 'syz.0.647': attribute type 10 has an invalid length. [ 89.041954][ T5705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.050966][ T5705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.546933][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 89.546946][ T29] audit: type=1400 audit(1754944352.765:5365): avc: denied { write } for pid=5707 comm="syz.3.657" path="socket:[13276]" dev="sockfs" ino=13276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.607140][ T5713] bridge1: entered promiscuous mode [ 89.612408][ T5713] bridge1: entered allmulticast mode [ 89.618553][ T5713] team0: Port device bridge1 added [ 89.670453][ T29] audit: type=1400 audit(1754944352.875:5366): avc: denied { execute } for pid=5716 comm="syz.0.661" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 89.830117][ T5732] netlink: 200 bytes leftover after parsing attributes in process `syz.0.666'. [ 89.842240][ T5733] GUP no longer grows the stack in syz.2.660 (5733): 200000005000-200000008000 (200000004000) [ 89.852595][ T5733] CPU: 0 UID: 0 PID: 5733 Comm: syz.2.660 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 89.852616][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.852625][ T5733] Call Trace: [ 89.852630][ T5733] [ 89.852635][ T5733] __dump_stack+0x1d/0x30 [ 89.852648][ T5733] dump_stack_lvl+0xe8/0x140 [ 89.852659][ T5733] dump_stack+0x15/0x1b [ 89.852734][ T5733] fixup_user_fault+0x50e/0x560 [ 89.852750][ T5733] fault_in_user_writeable+0x5d/0xd0 [ 89.852766][ T5733] futex_lock_pi+0x597/0x780 [ 89.852785][ T5733] ? __pfx_futex_wake_mark+0x10/0x10 [ 89.852863][ T5733] do_futex+0x21f/0x380 [ 89.852879][ T5733] __se_sys_futex+0x2ed/0x360 [ 89.852938][ T5733] ? xfd_validate_state+0x45/0xf0 [ 89.852960][ T5733] __x64_sys_futex+0x78/0x90 [ 89.852975][ T5733] x64_sys_call+0x2e39/0x2ff0 [ 89.852990][ T5733] do_syscall_64+0xd2/0x200 [ 89.853009][ T5733] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.853079][ T5733] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.853096][ T5733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.853110][ T5733] RIP: 0033:0x7f277031ebe9 [ 89.853119][ T5733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.853129][ T5733] RSP: 002b:00007f276ed3d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 89.853188][ T5733] RAX: ffffffffffffffda RBX: 00007f2770546180 RCX: 00007f277031ebe9 [ 89.853290][ T5733] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 89.853362][ T5733] RBP: 00007f27703a1e19 R08: 0000000000000000 R09: 0000000000000000 [ 89.853392][ T5733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.853400][ T5733] R13: 00007f2770546218 R14: 00007f2770546180 R15: 00007ffcc47ec138 [ 89.853411][ T5733] [ 90.046843][ T5733] lo speed is unknown, defaulting to 1000 [ 90.085865][ T5723] lo speed is unknown, defaulting to 1000 [ 90.964938][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 92.003794][ T5774] netlink: 'syz.1.682': attribute type 3 has an invalid length. [ 92.011573][ T5774] netlink: 'syz.1.682': attribute type 3 has an invalid length. [ 92.040274][ T5776] lo speed is unknown, defaulting to 1000 [ 92.131481][ T29] audit: type=1326 audit(1754944355.345:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 92.154934][ T29] audit: type=1326 audit(1754944355.345:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 92.180224][ T29] audit: type=1326 audit(1754944355.375:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 92.203567][ T29] audit: type=1326 audit(1754944355.375:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 92.227115][ T29] audit: type=1326 audit(1754944355.375:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 92.250502][ T29] audit: type=1326 audit(1754944355.375:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 92.273878][ T29] audit: type=1326 audit(1754944355.375:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 92.297352][ T29] audit: type=1326 audit(1754944355.375:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 92.346489][ T5787] netlink: 'syz.2.688': attribute type 10 has an invalid length. [ 92.446077][ T5799] lo speed is unknown, defaulting to 1000 [ 92.865435][ T5823] loop4: detected capacity change from 0 to 512 [ 92.872416][ T5823] EXT4-fs: Ignoring removed bh option [ 92.877858][ T5823] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.889613][ T5823] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 92.899882][ T5823] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 92.908198][ T5823] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.915046][ T5823] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.700: Failed to acquire dquot type 1 [ 92.926422][ T5823] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.700: Invalid block bitmap block 0 in block_group 0 [ 92.940218][ T5823] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.700: Invalid block bitmap block 0 in block_group 0 [ 92.953797][ T5823] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.700: Invalid block bitmap block 0 in block_group 0 [ 92.967354][ T5823] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.700: Failed to acquire dquot type 1 [ 92.979202][ T5823] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.700: Failed to acquire dquot type 1 [ 92.990518][ T5823] EXT4-fs (loop4): 1 orphan inode deleted [ 92.997134][ T5823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.021368][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.754716][ T5841] tipc: Started in network mode [ 93.759702][ T5841] tipc: Node identity 3e7004e3161a, cluster identity 4711 [ 93.766870][ T5841] tipc: Enabled bearer , priority 0 [ 93.811406][ T5840] tipc: Resetting bearer [ 93.858442][ T5840] tipc: Disabling bearer [ 94.116061][ T5871] lo speed is unknown, defaulting to 1000 [ 94.189668][ T5871] lo speed is unknown, defaulting to 1000 [ 94.962573][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 94.962585][ T29] audit: type=1400 audit(1754944358.185:5476): avc: denied { bind } for pid=5883 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.969395][ T5889] netlink: 'syz.4.723': attribute type 10 has an invalid length. [ 94.989210][ T29] audit: type=1400 audit(1754944358.185:5477): avc: denied { setopt } for pid=5883 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.000125][ T5889] team0: Port device dummy0 added [ 95.026711][ T5891] netlink: 'syz.4.723': attribute type 10 has an invalid length. [ 95.037301][ T5891] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 95.048078][ T5891] team0: Failed to send options change via netlink (err -105) [ 95.055635][ T5891] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 95.065123][ T5891] team0: Port device dummy0 removed [ 95.071815][ T5891] dummy0: entered promiscuous mode [ 95.077624][ T5891] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 95.237015][ T5894] lo speed is unknown, defaulting to 1000 [ 95.249355][ T5899] loop3: detected capacity change from 0 to 512 [ 95.256683][ T5899] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 95.271768][ T5899] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.278699][ T5899] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.726: Block bitmap for bg 0 marked uninitialized [ 95.292845][ T5899] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 95.302114][ T5899] EXT4-fs (loop3): 1 orphan inode deleted [ 95.308394][ T5899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 95.342376][ T29] audit: type=1400 audit(1754944358.555:5478): avc: denied { load_policy } for pid=5898 comm="syz.3.726" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 95.379912][ T5899] SELinux: failed to load policy [ 95.397338][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.879061][ T5919] lo speed is unknown, defaulting to 1000 [ 96.402289][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 96.414592][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.426673][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.571125][ T5936] loop7: detected capacity change from 0 to 7 [ 96.654145][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.668671][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.677686][ T29] audit: type=1400 audit(1754944359.896:5479): avc: denied { ioctl } for pid=5940 comm="syz.4.741" path="socket:[14901]" dev="sockfs" ino=14901 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.702378][ T29] audit: type=1400 audit(1754944359.896:5480): avc: denied { bind } for pid=5940 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.721601][ T29] audit: type=1400 audit(1754944359.896:5481): avc: denied { write } for pid=5940 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.741111][ T29] audit: type=1400 audit(1754944359.896:5482): avc: denied { read } for pid=5940 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.792773][ T29] audit: type=1326 audit(1754944360.016:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.4.741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faabf57ebe9 code=0x0 [ 96.894574][ T29] audit: type=1400 audit(1754944360.116:5484): avc: denied { getattr } for pid=5940 comm="syz.4.741" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 96.912592][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 97.262034][ T29] audit: type=1400 audit(1754944360.486:5485): avc: denied { bind } for pid=5958 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.265366][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.747'. [ 97.282881][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 97.310874][ T5963] netlink: 'syz.2.749': attribute type 3 has an invalid length. [ 97.718430][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 97.983507][ T6009] netlink: 'syz.0.764': attribute type 10 has an invalid length. [ 97.993007][ T6009] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.993591][ T6009] team0: entered promiscuous mode [ 97.993600][ T6009] team_slave_0: entered promiscuous mode [ 97.993660][ T6009] team_slave_1: entered promiscuous mode [ 97.994002][ T6009] $Hÿ: (slave team0): Enslaving as an active interface with an up link [ 97.995202][ T6009] netlink: 'syz.0.764': attribute type 10 has an invalid length. [ 97.997364][ T6009] syz_tun: entered promiscuous mode [ 97.997622][ T6009] $Hÿ: (slave syz_tun): Enslaving as an active interface with an up link [ 98.124553][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 98.139580][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 98.315616][ T6017] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 98.322577][ T3381] IPVS: starting estimator thread 0... [ 98.367458][ T6024] lo speed is unknown, defaulting to 1000 [ 98.421242][ T6022] IPVS: using max 4704 ests per chain, 235200 per kthread [ 98.517853][ T6029] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 98.719395][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 99.680410][ T6075] Driver unsupported XDP return value 0 on prog (id 526) dev N/A, expect packet loss! [ 99.736023][ T6078] loop4: detected capacity change from 0 to 512 [ 99.759624][ T6078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.777722][ T6078] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.831210][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.026577][ T6105] netlink: 76 bytes leftover after parsing attributes in process `syz.0.794'. [ 100.035547][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 100.035609][ T29] audit: type=1400 audit(1754944363.246:5690): avc: denied { write } for pid=6104 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.053429][ T6105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.794'. [ 100.062283][ T29] audit: type=1400 audit(1754944363.246:5691): avc: denied { nlmsg_write } for pid=6104 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.092317][ T29] audit: type=1400 audit(1754944363.276:5692): avc: denied { create } for pid=6104 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.111995][ T29] audit: type=1400 audit(1754944363.276:5693): avc: denied { write } for pid=6104 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.131892][ T29] audit: type=1400 audit(1754944363.276:5694): avc: denied { ioctl } for pid=6104 comm="syz.0.794" path="socket:[15200]" dev="sockfs" ino=15200 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.179471][ T6105] bond0: entered promiscuous mode [ 100.184556][ T6105] bond0: entered allmulticast mode [ 100.191008][ T6105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.200323][ T29] audit: type=1400 audit(1754944363.416:5695): avc: denied { ioctl } for pid=6107 comm="syz.2.795" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.200948][ T6105] bond0 (unregistering): Released all slaves [ 100.328309][ T29] audit: type=1400 audit(1754944363.546:5696): avc: denied { write } for pid=6111 comm="syz.0.796" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.408864][ T6113] netlink: 'syz.2.795': attribute type 13 has an invalid length. [ 100.501933][ T6113] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 100.510349][ T6113] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.571291][ T6113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.649200][ T23] lo speed is unknown, defaulting to 1000 [ 100.655193][ T23] syz0: Port: 1 Link ACTIVE [ 101.000492][ T29] audit: type=1400 audit(1754944364.216:5697): avc: denied { sqpoll } for pid=6136 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.029648][ T29] audit: type=1400 audit(1754944364.246:5698): avc: denied { create } for pid=6136 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.049184][ T29] audit: type=1400 audit(1754944364.246:5699): avc: denied { write } for pid=6136 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.170718][ T6151] loop4: detected capacity change from 0 to 512 [ 101.177682][ T6151] EXT4-fs: Ignoring removed bh option [ 101.196007][ T6151] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 101.206291][ T6151] EXT4-fs (loop4): 1 truncate cleaned up [ 101.214320][ T6151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.262811][ T6158] capability: warning: `syz.3.808' uses deprecated v2 capabilities in a way that may be insecure [ 101.289856][ T6159] netlink: 'syz.0.807': attribute type 10 has an invalid length. [ 101.300592][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.305272][ T6159] dummy0: entered promiscuous mode [ 101.321123][ T6159] team0: Port device dummy0 added [ 101.391270][ T6168] macvtap0: entered promiscuous mode [ 101.396674][ T6168] macvtap0: entered allmulticast mode [ 101.402225][ T6168] $Hÿ: entered allmulticast mode [ 101.407402][ T6168] bond_slave_0: entered allmulticast mode [ 101.413153][ T6168] bond_slave_1: entered allmulticast mode [ 101.418940][ T6168] team0: entered allmulticast mode [ 101.424079][ T6168] team_slave_0: entered allmulticast mode [ 101.429790][ T6168] team_slave_1: entered allmulticast mode [ 101.435773][ T6168] dummy0: entered allmulticast mode [ 101.441157][ T6168] syz_tun: entered allmulticast mode [ 101.447790][ T6168] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 101.468353][ T6168] $Hÿ: left allmulticast mode [ 101.473258][ T6168] bond_slave_0: left allmulticast mode [ 101.478720][ T6168] bond_slave_1: left allmulticast mode [ 101.484207][ T6168] team0: left allmulticast mode [ 101.489043][ T6168] team_slave_0: left allmulticast mode [ 101.494528][ T6168] team_slave_1: left allmulticast mode [ 101.505801][ T6168] dummy0: left allmulticast mode [ 101.510901][ T6168] syz_tun: left allmulticast mode [ 101.656391][ T6175] loop3: detected capacity change from 0 to 512 [ 101.665187][ T6175] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 101.689261][ T6174] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6174 comm=syz.1.813 [ 101.731097][ T6175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 101.764860][ T6175] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.814: corrupted in-inode xattr: e_value size too large [ 101.791461][ T6175] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.814: couldn't read orphan inode 15 (err -117) [ 101.836727][ T6175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.483616][ T6178] capability: warning: `syz.2.815' uses 32-bit capabilities (legacy support in use) [ 102.554278][ T6203] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 102.606984][ T6206] loop4: detected capacity change from 0 to 1024 [ 102.636237][ T6206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.042752][ T6206] Set syz1 is full, maxelem 65536 reached [ 103.359929][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.466884][ T6353] loop4: detected capacity change from 0 to 2048 [ 103.493136][ T6353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.519097][ T6353] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 103.601196][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.621054][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.651310][ T6376] netlink: 'syz.1.828': attribute type 11 has an invalid length. [ 103.801541][ T6366] lo speed is unknown, defaulting to 1000 [ 104.365128][ T6436] veth0_vlan: left promiscuous mode [ 104.370453][ T6436] veth0_vlan: entered allmulticast mode [ 104.382935][ T6436] veth0_vlan: entered promiscuous mode [ 104.466774][ T6444] netlink: 'syz.2.832': attribute type 13 has an invalid length. [ 104.474583][ T6444] netlink: 'syz.2.832': attribute type 27 has an invalid length. [ 104.553767][ T10] IPVS: starting estimator thread 0... [ 104.559318][ T6448] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 104.581458][ T6453] __nla_validate_parse: 2 callbacks suppressed [ 104.581470][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 104.614539][ T6458] netlink: 'syz.4.838': attribute type 3 has an invalid length. [ 104.670737][ T6455] IPVS: using max 4080 ests per chain, 204000 per kthread [ 104.685696][ T23] hid_parser_main: 33 callbacks suppressed [ 104.685709][ T23] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 104.699036][ T23] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 104.706865][ T23] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 104.714304][ T23] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 104.722028][ T23] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 104.729598][ T23] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 104.737023][ T23] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 104.744707][ T23] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 104.752300][ T23] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 104.760022][ T23] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 104.790476][ T23] hid-generic 0008:0006:0007.0002: hidraw0: HID v0.0b Device [syz1] on syz1 [ 104.860007][ T6469] lo speed is unknown, defaulting to 1000 [ 104.900218][ T6472] loop7: detected capacity change from 0 to 7 [ 105.124267][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 105.124348][ T29] audit: type=1400 audit(1754946946.339:5854): avc: denied { create } for pid=6471 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.124944][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.844'. [ 105.125184][ T6472] @: renamed from vlan0 (while UP) [ 105.125284][ T29] audit: type=1400 audit(1754946946.339:5855): avc: denied { ioctl } for pid=6471 comm="syz.2.844" path="socket:[16512]" dev="sockfs" ino=16512 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.180800][ T6486] mmap: syz.3.848 (6486) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.926728][ T6497] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 105.960728][ T23] IPVS: starting estimator thread 0... [ 106.047286][ T6505] loop3: detected capacity change from 0 to 1024 [ 106.053768][ T6499] IPVS: using max 5088 ests per chain, 254400 per kthread [ 106.060850][ T6505] EXT4-fs: Ignoring removed orlov option [ 106.101983][ T6505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.112016][ T29] audit: type=1400 audit(1754946947.329:5856): avc: denied { read } for pid=6504 comm="syz.3.853" path="/162/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.220696][ T6517] netlink: 260 bytes leftover after parsing attributes in process `syz.4.855'. [ 106.220773][ T6517] netlink: 260 bytes leftover after parsing attributes in process `syz.4.855'. [ 106.248182][ T6516] netlink: 'syz.1.854': attribute type 3 has an invalid length. [ 106.299155][ T29] audit: type=1400 audit(1754946947.509:5857): avc: denied { write } for pid=6509 comm="syz.4.855" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.354540][ T6510] lo speed is unknown, defaulting to 1000 [ 106.535264][ T29] audit: type=1400 audit(1754946947.749:5858): avc: denied { write } for pid=6504 comm="syz.3.853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 106.561018][ T6536] lo speed is unknown, defaulting to 1000 [ 106.591473][ T6530] loop4: detected capacity change from 0 to 8192 [ 106.632082][ T6539] lo speed is unknown, defaulting to 1000 [ 106.691431][ T29] audit: type=1400 audit(1754946947.909:5859): avc: denied { mount } for pid=6529 comm="syz.4.859" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 106.704970][ T6530] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 106.721181][ T6530] FAT-fs (loop4): Filesystem has been set read-only [ 106.731462][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.160030][ T29] audit: type=1400 audit(1754946948.359:5860): avc: denied { mount } for pid=6552 comm="syz.3.868" name="/" dev="ramfs" ino=16621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 107.182231][ T29] audit: type=1400 audit(1754946948.359:5861): avc: denied { compute_member } for pid=6552 comm="syz.3.868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 107.256475][ T6557] loop3: detected capacity change from 0 to 512 [ 107.299293][ T6557] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 107.310787][ T6557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 107.319371][ T6557] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.879: corrupted in-inode xattr: e_value size too large [ 107.376394][ T6557] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.879: couldn't read orphan inode 15 (err -117) [ 107.414950][ T6557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.479167][ T6560] SELinux: failed to load policy [ 107.493815][ T29] audit: type=1400 audit(1754946948.679:5862): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 107.513849][ T29] audit: type=1400 audit(1754946948.679:5863): avc: denied { append } for pid=6555 comm="syz.3.879" path="/167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.604695][ T6569] lo speed is unknown, defaulting to 1000 [ 107.752334][ T6579] lo speed is unknown, defaulting to 1000 [ 107.753640][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 107.774373][ T6569] netlink: 'syz.0.874': attribute type 21 has an invalid length. [ 107.786036][ T6583] loop4: detected capacity change from 0 to 128 [ 107.820338][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.023991][ T6599] SELinux: failed to load policy [ 108.091348][ T6608] bio_check_eod: 21 callbacks suppressed [ 108.091374][ T6608] syz.4.880: attempt to access beyond end of device [ 108.091374][ T6608] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 108.115530][ T6608] syz.4.880: attempt to access beyond end of device [ 108.115530][ T6608] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 108.142926][ T6609] lo speed is unknown, defaulting to 1000 [ 108.214021][ T6608] syz.4.880: attempt to access beyond end of device [ 108.214021][ T6608] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 108.293564][ T6608] syz.4.880: attempt to access beyond end of device [ 108.293564][ T6608] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 108.351355][ T6608] syz.4.880: attempt to access beyond end of device [ 108.351355][ T6608] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 108.364802][ T6608] syz.4.880: attempt to access beyond end of device [ 108.364802][ T6608] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 108.378165][ T6608] syz.4.880: attempt to access beyond end of device [ 108.378165][ T6608] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 108.391606][ T6608] syz.4.880: attempt to access beyond end of device [ 108.391606][ T6608] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 108.405137][ T6608] syz.4.880: attempt to access beyond end of device [ 108.405137][ T6608] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 108.418565][ T6608] syz.4.880: attempt to access beyond end of device [ 108.418565][ T6608] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 108.647919][ T6624] tipc: Started in network mode [ 108.652841][ T6624] tipc: Node identity 066fea7abdc, cluster identity 4711 [ 108.660044][ T6624] tipc: Enabled bearer , priority 0 [ 108.667475][ T6624] syzkaller0: entered promiscuous mode [ 108.673049][ T6624] syzkaller0: entered allmulticast mode [ 108.682540][ T6624] tipc: Resetting bearer [ 108.690397][ T6623] tipc: Resetting bearer [ 108.697404][ T6623] tipc: Disabling bearer [ 108.745110][ T6633] lo speed is unknown, defaulting to 1000 [ 108.830376][ T23] Process accounting resumed [ 108.845007][ T6639] loop4: detected capacity change from 0 to 512 [ 108.860307][ T6639] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.864138][ T6638] loop3: detected capacity change from 0 to 8192 [ 108.874767][ T6639] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.893801][ T6638] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 108.901781][ T6638] FAT-fs (loop3): Filesystem has been set read-only [ 108.920137][ T6639] EXT4-fs (loop4): 1 truncate cleaned up [ 108.926245][ T6639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.015529][ T6647] lo speed is unknown, defaulting to 1000 [ 109.089532][ T6655] loop3: detected capacity change from 0 to 128 [ 109.760053][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.822308][ T6685] 9pnet: p9_errstr2errno: server reported unknown error [ 109.887357][ T6687] lo speed is unknown, defaulting to 1000 [ 110.238006][ T29] kauditd_printk_skb: 471 callbacks suppressed [ 110.238016][ T29] audit: type=1326 audit(1754946951.450:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0350ec5ba7 code=0x7ffc0000 [ 110.267477][ T29] audit: type=1326 audit(1754946951.450:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0350e6add9 code=0x7ffc0000 [ 110.290971][ T29] audit: type=1326 audit(1754946951.450:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 110.624462][ T29] audit: type=1326 audit(1754946951.490:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0350ec5ba7 code=0x7ffc0000 [ 110.647734][ T29] audit: type=1326 audit(1754946951.490:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0350e6add9 code=0x7ffc0000 [ 110.657588][ T6695] loop4: detected capacity change from 0 to 512 [ 110.671070][ T29] audit: type=1326 audit(1754946951.490:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 110.700618][ T29] audit: type=1326 audit(1754946951.490:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 110.724012][ T29] audit: type=1326 audit(1754946951.490:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350ecebe9 code=0x7ffc0000 [ 110.805512][ T6695] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 110.805680][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.930'. [ 110.822610][ T29] audit: type=1326 audit(1754946952.020:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 110.845905][ T29] audit: type=1326 audit(1754946952.020:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 110.870495][ T6695] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.880115][ T6711] loop7: detected capacity change from 0 to 7 [ 110.884838][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.890735][ T6695] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.912: corrupted inode contents [ 110.893492][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.909598][ T6695] EXT4-fs (loop4): Remounting filesystem read-only [ 110.930353][ T6709] bridge_slave_1: left allmulticast mode [ 110.936054][ T6709] bridge_slave_1: left promiscuous mode [ 110.941818][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.957170][ T6695] EXT4-fs (loop4): 1 truncate cleaned up [ 110.980196][ T2215] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 110.980224][ T2215] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 110.980238][ T2215] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 111.000290][ T6709] bridge_slave_0: left allmulticast mode [ 111.000304][ T6709] bridge_slave_0: left promiscuous mode [ 111.000411][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.003575][ T6695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.132574][ T3410] Process accounting resumed [ 111.203594][ T6725] loop3: detected capacity change from 0 to 512 [ 111.220704][ T6725] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.241437][ T6725] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.266394][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.285717][ T6725] EXT4-fs (loop3): 1 truncate cleaned up [ 111.302920][ T6725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.317078][ T6732] loop7: detected capacity change from 0 to 7 [ 111.453810][ T6732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.926'. [ 111.634871][ T6751] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 111.647763][ T6750] loop4: detected capacity change from 0 to 512 [ 111.655841][ T6749] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 111.668575][ T6750] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.676279][ T6750] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.934: bg 0: block 248: padding at end of block bitmap is not set [ 111.676536][ T6747] lo speed is unknown, defaulting to 1000 [ 111.696583][ T6750] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.934: Failed to acquire dquot type 1 [ 111.712061][ T6750] EXT4-fs (loop4): 1 truncate cleaned up [ 111.728875][ T6750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.748936][ T6750] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 111.764617][ T6750] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 0 [ 111.799231][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.894606][ T6767] loop7: detected capacity change from 0 to 7 [ 112.089007][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.116315][ T3381] hid_parser_main: 43 callbacks suppressed [ 112.116329][ T3381] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 112.129699][ T3381] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 112.137093][ T3381] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 112.144475][ T3381] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 112.151913][ T3381] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 112.159360][ T3381] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 112.166731][ T3381] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 112.174110][ T3381] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 112.181494][ T3381] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 112.188864][ T3381] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 112.203539][ T3381] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 112.233931][ T6780] fido_id[6780]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.269577][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 112.292381][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 112.297799][ T6788] lo speed is unknown, defaulting to 1000 [ 112.543180][ T6803] netlink: 'syz.3.946': attribute type 13 has an invalid length. [ 112.812894][ T6803] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 112.822377][ T6803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.838416][ T6811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.960'. [ 112.889067][ T6817] loop4: detected capacity change from 0 to 512 [ 112.898140][ T6817] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.909292][ T6817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.952: bg 0: block 248: padding at end of block bitmap is not set [ 112.943409][ T6817] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.952: Failed to acquire dquot type 1 [ 112.974728][ T6817] EXT4-fs (loop4): 1 truncate cleaned up [ 113.000604][ T6817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.162290][ T6823] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 113.184406][ T6823] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 0 [ 113.390148][ T23] hid-generic 0008:0006:0007.0004: hidraw0: HID v0.0b Device [syz1] on syz1 [ 113.429834][ T6838] fido_id[6838]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.446996][ T6842] lo speed is unknown, defaulting to 1000 [ 113.520721][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.543598][ T6845] syz.2.959 uses obsolete (PF_INET,SOCK_PACKET) [ 113.693634][ T6863] netlink: 'syz.2.968': attribute type 10 has an invalid length. [ 113.710585][ T6863] dummy0: entered promiscuous mode [ 113.716294][ T6863] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 114.408360][ T6877] loop3: detected capacity change from 0 to 512 [ 114.417871][ T6877] ext4: Unknown parameter 'noacl' [ 114.539124][ T6885] tipc: New replicast peer: 255.255.255.255 [ 114.545123][ T6885] tipc: Enabled bearer , priority 10 [ 114.552661][ T6885] netlink: 'syz.4.976': attribute type 4 has an invalid length. [ 114.560383][ T6885] netlink: 152 bytes leftover after parsing attributes in process `syz.4.976'. [ 114.571348][ T6885] : renamed from $Hÿ [ 114.663443][ T6899] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.739787][ T6899] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.076261][ T6910] lo speed is unknown, defaulting to 1000 [ 115.180221][ T6899] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.270162][ T6899] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.314354][ T29] kauditd_printk_skb: 938 callbacks suppressed [ 115.314417][ T29] audit: type=1326 audit(1754946956.531:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 115.345033][ T29] audit: type=1326 audit(1754946956.551:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 115.368357][ T29] audit: type=1326 audit(1754946956.551:7275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 115.391677][ T29] audit: type=1326 audit(1754946956.551:7276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 115.415220][ T29] audit: type=1326 audit(1754946956.551:7277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 115.438619][ T29] audit: type=1326 audit(1754946956.551:7278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 115.462016][ T29] audit: type=1326 audit(1754946956.551:7279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 115.485237][ T29] audit: type=1326 audit(1754946956.561:7280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 115.508569][ T29] audit: type=1326 audit(1754946956.561:7281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 115.531917][ T29] audit: type=1326 audit(1754946956.561:7282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01e74e14a5 code=0x7ffc0000 [ 115.649429][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.658469][ T23] tipc: Node number set to 3148868218 [ 115.679807][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.708653][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.767422][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.854799][ T6940] loop4: detected capacity change from 0 to 512 [ 115.866815][ T6940] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 115.893819][ T6940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 115.920831][ T6940] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.991: corrupted in-inode xattr: e_value size too large [ 115.943297][ T6940] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.991: couldn't read orphan inode 15 (err -117) [ 115.956345][ T6940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.146100][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.534112][ T23] Process accounting resumed [ 116.684296][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 116.693200][ T6962] bridge_slave_1: left allmulticast mode [ 116.698957][ T6962] bridge_slave_1: left promiscuous mode [ 116.704617][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.712775][ T6962] bridge_slave_0: left allmulticast mode [ 116.718459][ T6962] bridge_slave_0: left promiscuous mode [ 116.724203][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.898309][ T6967] loop3: detected capacity change from 0 to 2048 [ 116.920172][ T6967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.349303][ T6975] loop4: detected capacity change from 0 to 8192 [ 117.731292][ T6979] tipc: Enabling of bearer rejected, already enabled [ 118.450307][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.522331][ T7013] lo speed is unknown, defaulting to 1000 [ 118.563937][ T7013] loop3: detected capacity change from 0 to 512 [ 118.574588][ T7013] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1016: error while reading EA inode 32 err=-116 [ 118.587404][ T7013] EXT4-fs (loop3): Remounting filesystem read-only [ 118.594028][ T7013] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 118.605894][ T7013] EXT4-fs (loop3): 1 orphan inode deleted [ 118.612167][ T7013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.625338][ T7013] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.726399][ T7018] loop4: detected capacity change from 0 to 128 [ 118.735783][ T7018] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.751334][ T7018] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.277202][ T23] Process accounting resumed [ 119.282491][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'. [ 119.303507][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'. [ 119.444191][ T7031] loop3: detected capacity change from 0 to 1024 [ 119.468085][ T7031] ext4: Unknown parameter 'uid<00000000000000000000' [ 119.528294][ T7035] loop3: detected capacity change from 0 to 2048 [ 119.536902][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.559531][ T7035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.608064][ T7035] netlink: 'syz.3.1023': attribute type 27 has an invalid length. [ 119.668353][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.675604][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.706860][ T7035] $Hÿ: left promiscuous mode [ 119.711708][ T7035] bond_slave_0: left promiscuous mode [ 119.717102][ T7035] bond_slave_1: left promiscuous mode [ 119.814932][ T7035] vlan0: left promiscuous mode [ 119.819733][ T7035] gretap0: left promiscuous mode [ 119.831200][ T7035] geneve2: left promiscuous mode [ 119.878361][ T7042] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 119.886279][ T7042] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.915604][ T7042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.933111][ T1594] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.949032][ T1594] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.964096][ T1594] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.964502][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.974124][ T1594] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.215400][ T7057] lo speed is unknown, defaulting to 1000 [ 120.324552][ T29] kauditd_printk_skb: 911 callbacks suppressed [ 120.324567][ T29] audit: type=1326 audit(1754946961.542:8194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01e74a5ba7 code=0x7ffc0000 [ 120.354320][ T29] audit: type=1326 audit(1754946961.542:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01e744add9 code=0x7ffc0000 [ 120.377679][ T29] audit: type=1326 audit(1754946961.542:8196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 120.401564][ T29] audit: type=1326 audit(1754946961.552:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01e74a5ba7 code=0x7ffc0000 [ 120.424838][ T29] audit: type=1326 audit(1754946961.552:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01e744add9 code=0x7ffc0000 [ 120.448258][ T29] audit: type=1326 audit(1754946961.552:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 120.471758][ T29] audit: type=1326 audit(1754946961.552:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01e74a5ba7 code=0x7ffc0000 [ 120.495190][ T29] audit: type=1326 audit(1754946961.552:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01e744add9 code=0x7ffc0000 [ 120.518462][ T29] audit: type=1326 audit(1754946961.552:8202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f01e74aebe9 code=0x7ffc0000 [ 120.541877][ T29] audit: type=1326 audit(1754946961.552:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.3.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f818b325ba7 code=0x7ffc0000 [ 120.604602][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 120.618190][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 120.820380][ T7068] loop4: detected capacity change from 0 to 512 [ 120.829861][ T7068] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.849620][ T7068] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 120.867177][ T7068] EXT4-fs (loop4): 1 truncate cleaned up [ 120.874066][ T7068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.899700][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.052411][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 121.095439][ T7079] loop3: detected capacity change from 0 to 1024 [ 121.103089][ T7079] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 121.112826][ T7079] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 121.122480][ T7079] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 121.132835][ T7079] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm syz.3.1036: unexpected bad inode w/o EXT4_IGET_BAD [ 121.146084][ T7079] EXT4-fs (loop3): no journal found [ 121.151274][ T7079] EXT4-fs (loop3): can't get journal size [ 121.198744][ T7079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.772462][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.842497][ T3410] Process accounting resumed [ 121.851127][ T7087] loop3: detected capacity change from 0 to 512 [ 121.880679][ T7087] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.900343][ T7093] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.918586][ T7087] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.946408][ T7087] EXT4-fs (loop3): 1 truncate cleaned up [ 121.958842][ T7087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.973478][ T7093] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.028424][ T7093] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.088471][ T7093] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.197576][ T5842] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.213987][ T5842] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.234861][ T5842] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.247460][ T5842] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.267694][ T7087] ================================================================== [ 122.275778][ T7087] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 122.283150][ T7087] [ 122.285472][ T7087] read-write to 0xffff88811a5b9b48 of 8 bytes by interrupt on cpu 1: [ 122.293507][ T7087] __xa_clear_mark+0xf5/0x1e0 [ 122.298163][ T7087] __folio_end_writeback+0x177/0x470 [ 122.303457][ T7087] folio_end_writeback+0x71/0x3d0 [ 122.308476][ T7087] ext4_finish_bio+0x459/0x8c0 [ 122.313229][ T7087] ext4_end_bio+0x298/0x3b0 [ 122.317729][ T7087] bio_endio+0x374/0x410 [ 122.321948][ T7087] blk_update_request+0x336/0x730 [ 122.326949][ T7087] blk_mq_end_request+0x26/0x50 [ 122.331777][ T7087] lo_complete_rq+0x98/0x140 [ 122.336344][ T7087] blk_done_softirq+0x74/0xb0 [ 122.340996][ T7087] handle_softirqs+0xba/0x290 [ 122.345663][ T7087] run_ksoftirqd+0x1c/0x30 [ 122.350061][ T7087] smpboot_thread_fn+0x32b/0x530 [ 122.354977][ T7087] kthread+0x489/0x510 [ 122.359019][ T7087] ret_from_fork+0xda/0x150 [ 122.363497][ T7087] ret_from_fork_asm+0x1a/0x30 [ 122.368232][ T7087] [ 122.370539][ T7087] read to 0xffff88811a5b9b48 of 8 bytes by task 7087 on cpu 0: [ 122.378069][ T7087] xas_find_marked+0x218/0x620 [ 122.382819][ T7087] find_get_entry+0x5d/0x380 [ 122.387393][ T7087] filemap_get_folios_tag+0x13b/0x210 [ 122.392828][ T7087] file_write_and_wait_range+0x1ea/0x2c0 [ 122.398437][ T7087] generic_buffers_fsync_noflush+0x45/0x120 [ 122.404314][ T7087] ext4_sync_file+0x1ab/0x690 [ 122.408970][ T7087] vfs_fsync_range+0x10d/0x130 [ 122.413719][ T7087] ext4_buffered_write_iter+0x34f/0x3c0 [ 122.419242][ T7087] ext4_file_write_iter+0xdbf/0xf00 [ 122.424416][ T7087] iter_file_splice_write+0x666/0x9e0 [ 122.429762][ T7087] direct_splice_actor+0x153/0x2a0 [ 122.434855][ T7087] splice_direct_to_actor+0x30f/0x680 [ 122.440213][ T7087] do_splice_direct+0xda/0x150 [ 122.444965][ T7087] do_sendfile+0x380/0x650 [ 122.449363][ T7087] __x64_sys_sendfile64+0x105/0x150 [ 122.454537][ T7087] x64_sys_call+0x2bb0/0x2ff0 [ 122.459187][ T7087] do_syscall_64+0xd2/0x200 [ 122.463677][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.469633][ T7087] [ 122.471942][ T7087] value changed: 0x0000000000000030 -> 0x0000000000000000 [ 122.479038][ T7087] [ 122.481335][ T7087] Reported by Kernel Concurrency Sanitizer on: [ 122.487456][ T7087] CPU: 0 UID: 0 PID: 7087 Comm: syz.3.1040 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 122.498102][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.508133][ T7087] ================================================================== [ 122.723642][ T7105] lo speed is unknown, defaulting to 1000 [ 122.953491][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.