last executing test programs: 1m18.443199108s ago: executing program 1 (id=18): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7345}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 1m16.271985112s ago: executing program 1 (id=71): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) 1m16.037159231s ago: executing program 1 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1m15.838293167s ago: executing program 1 (id=80): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) creat(0x0, 0x44) mount(0x0, 0x0, 0x0, 0x301400, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 1m15.643412603s ago: executing program 1 (id=87): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}}) finit_module(0xffffffffffffffff, 0x0, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x48800) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) 1m14.739456786s ago: executing program 1 (id=123): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 1m14.721486507s ago: executing program 32 (id=123): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 20.045665157s ago: executing program 0 (id=1179): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000080)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 19.143216609s ago: executing program 0 (id=1189): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xb}}}, 0x24}}, 0x800) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @loopback}, 0x44, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x80, 0x9}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r8, 0x25, 0x2, @void}, 0x10) inotify_init() 18.987752332s ago: executing program 0 (id=1191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4045) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x5, 0x0) syz_io_uring_setup(0x49f, 0x0, &(0x7f0000000340), 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffff}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 18.965765253s ago: executing program 0 (id=1194): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$eJzs3N1rXGUaAPDnnEymaZvdSZdl2e7NZlmWFpadJl1SbBFspSKCF4LeCg3ppIRMP0giNWkuJvoPiHoteCOoRfHCXvdG0VtvtL1VvBCKxEZBRCNnPpKxmUlbO8mJ6e8Hb877nudk3uc5h+ScF2YmgIfWcPYjjTgYEWeSiFJzfxoRxXpvIKLWOG5leXHih+XFiSRWV5/9NokkIm4vL060Xitpbvc3BwMR8dnjSfzl5Y3zzs4vTI9Xq5WZ5vjI3PlLR2bnF/43dX78XOVc5cLosUfGjo4dGzk+1rNaf/zy5LXv//Xk17Wf3vn56nevvZXEyRhsxtrr6JXhGF47J+0KETHe68ly0tesp73OpNA2WO1wBtLtyAwAgE7Stme4v0Up+mL94a0UH32ea3IAAABAT6z2RawCAAAAu1xi/Q8AAAC7XOt9ALeXFydaLd93JGyvW6ciYqhR/0qzNSKFqNW3A9EfEftuJ9H+sdak8WsPbDgivrp5/P2sxRZ9DnkztaWI+Hun65/U6x+qf4p7Y/1pRIz0YP7hO8Y7vf6B5u9l9Z/swfx51w/Aw+n6qcaNbOP9L117/okO9/9Ch3vX75H3/a/1/Ley4flvvf6+Ls9/z9zjHFfefuNyt1hW/6PXnniv1bL5s+0DFXUfbi1F/KPQqf5krf6kS/1n7nGO0i+XK91iede/+mbEoehcf0uy+fcTHZmcqlZGGj87zrH06di73ebPu/7s+u/rUn/r+5+6Xf9Lm71w33r3+dOnP9gQv7ne3bz+9Jti8ly9V2zueXF8bm5mNKKYPL1x/9HN620d03qNrP7D/27U/1SXv/9O9Wfl1ZrnIVsLLDW32filO+Z87OqVD7vl01r/5Xn9z3a5/u31f1LYeP1fucc5/vPxq4e7xdrXv1nL5m+thQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgJY2IwUjS8lo/TcvliP0R8dfYl1Yvzs79d/LiCxfOZrGIoehPJ6eqlZGIKDXGSTYerffXx0fvGP8/Ig5ExOulvfVxeeJi9WzexQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBmf0QMRpKWIyKNiJVSmpbLeWcFAAAA9NxQ3gkAAAAAW876HwAAAHY/638AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC22IF/Xr+RRETtxN56yxSbsf5cMwO2Wpp3AkBu+vJOAMhNIe8EgNzc5xrf4wLsQsld4gNdI3vu41gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ugOHbx+I4mI2om99ZYpNmP9uWYGbLU07wSA3PRtFixsXx7A9vMnDg8va3wguUt8YP2Y2m8je7YsJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2nsF6S9JyRBSb+8rliD9FxFD0J5NT1cpIRPw5Ir4o9e/JxqM55wwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvzc4vTI9Xq5WZrJNGs7O2R2e9kzTOWG2n5KPzgJ1i7Ig0dmgn7/9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYXZ+YXq8Wq3MzOadCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJC32fmF6fFqtTKzhZ28awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+/BgAA///pcwrc") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00'}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 18.856967152s ago: executing program 0 (id=1198): mmap(&(0x7f0000167000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6000) open(0x0, 0x14000, 0x1d0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000002c0)={r1, 0x0, &(0x7f0000000280)=""/58}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) socket$netlink(0x10, 0x3, 0x14) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 17.960724425s ago: executing program 0 (id=1209): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r2, 0x2, 0x80000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='id\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x1c4, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x19c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0x104, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x5, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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") 17.829224905s ago: executing program 33 (id=1209): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r2, 0x2, 0x80000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='id\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x1c4, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x19c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0x104, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x5, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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") 4.485170629s ago: executing program 4 (id=1387): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$sock_ifreq(r0, 0x8949, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 3.987481219s ago: executing program 5 (id=1389): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0xc}}, 0x20) 3.344777611s ago: executing program 4 (id=1395): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x1) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) msgget(0x2, 0x200) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 3.344071781s ago: executing program 3 (id=1396): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x2c040000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.584248772s ago: executing program 5 (id=1398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x8) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.36212428s ago: executing program 3 (id=1400): lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 2.271861027s ago: executing program 3 (id=1401): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x4008804) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x2a) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x0, 0x0) 2.271573087s ago: executing program 2 (id=1402): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) readv(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r3, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)) memfd_secret(0x80000) 2.144860757s ago: executing program 2 (id=1403): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.996490929s ago: executing program 4 (id=1405): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x0, 0x45}}, 0x18}}, 0x4008000) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) setresuid(0xee01, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x28, r2, 0x9c3fa077fa966179, 0x70bd2d, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x13}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40085}, 0x0) 1.666237866s ago: executing program 5 (id=1408): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fadvise64(0xffffffffffffffff, 0x8, 0x8, 0x4) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 1.637511298s ago: executing program 6 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x8050) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) 1.637268858s ago: executing program 4 (id=1410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) sync() r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.561331854s ago: executing program 5 (id=1411): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x2c040000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.438858324s ago: executing program 3 (id=1412): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) signalfd4(r0, &(0x7f00000003c0)={[0x6]}, 0xfffffffffffffe68, 0x800) prctl$PR_SET_SECUREBITS(0x1c, 0xc) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="050100"/17, @ANYBLOB="e15b32c592d00714c13c4a2751e5fd094a83387018fe3df3ed1ff9a2d1d153af751380f0853ce9021a67e4362ac755569838efadf2d2b3bc3775b222e5b466f053bd24ca2f3ac1c22139e342dd7e270710ecc635430c1d96ee236f4b361f3c6a8c44605fb565694b33f6e0af95b5df22d5f1eae73574a476d4df63899cc6632c74adf9e3f1788f2c0da544769fb29d4766b791c65ac72e63f774b7b5a50c1b908584811fddc26524b8c8f311b480a7906bbacbf0393c2d9a757ed255f70ef4d07583"], 0x50) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="67ba12", @ANYRES16=r3, @ANYBLOB="00082cbd7000fddbdf25170000"], 0x14}}, 0x11) 1.393818488s ago: executing program 6 (id=1413): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sysinfo(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40080) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f00000002c0)={0x27}, 0x6) 1.330448553s ago: executing program 6 (id=1414): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1060, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r5}, 0x10) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.329705223s ago: executing program 4 (id=1424): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$sock_ifreq(r0, 0x8949, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) msgget(0x2, 0x200) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.217908802s ago: executing program 2 (id=1415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f00000001c0)='./file0\x00', 0x300, 0x40) 1.160540326s ago: executing program 6 (id=1416): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r4}, 0x18) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) 1.153655897s ago: executing program 2 (id=1417): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x0, 0x45}}, 0x18}}, 0x4008000) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) setresuid(0xee01, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x28, r2, 0x9c3fa077fa966179, 0x70bd2d, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x13}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40085}, 0x0) 890.852848ms ago: executing program 6 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x8) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 533.633557ms ago: executing program 5 (id=1419): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 533.442837ms ago: executing program 2 (id=1420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) 533.301887ms ago: executing program 3 (id=1421): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$sock_ifreq(r0, 0x8949, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x3ffff) 390.688989ms ago: executing program 2 (id=1422): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x9000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) pivot_root(0x0, 0x0) 373.517339ms ago: executing program 5 (id=1423): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x4008804) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x2a) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x0, 0x0) 275.934267ms ago: executing program 4 (id=1425): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0xc}}, 0x20) 271.241968ms ago: executing program 3 (id=1435): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$sock_ifreq(r0, 0x8949, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) msgget(0x2, 0x200) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 6 (id=1426): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @random="6402a6c6a113", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): mm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 38.982895][ T29] audit: type=1400 audit(1756464781.713:608): avc: denied { validate_trans } for pid=4195 comm="syz.5.281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 39.019000][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.043664][ T4200] loop3: detected capacity change from 0 to 512 [ 39.050499][ T4200] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.061592][ T4200] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.283: corrupted in-inode xattr: overlapping e_value [ 39.075607][ T4200] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.283: couldn't read orphan inode 15 (err -117) [ 39.094665][ T4200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.112115][ T4205] capability: warning: `syz.2.284' uses deprecated v2 capabilities in a way that may be insecure [ 39.123515][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.123757][ T4205] capability: warning: `syz.2.284' uses 32-bit capabilities (legacy support in use) [ 39.167810][ T29] audit: type=1400 audit(1756464781.893:609): avc: denied { read write } for pid=4207 comm="syz.5.286" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.172010][ T4208] loop5: detected capacity change from 0 to 1024 [ 39.191670][ T29] audit: type=1400 audit(1756464781.893:610): avc: denied { open } for pid=4207 comm="syz.5.286" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.227743][ T4208] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.245381][ T4208] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 39.256733][ T4208] EXT4-fs (loop5): orphan cleanup on readonly fs [ 39.270856][ T4208] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.286: Invalid inode table block 0 in block_group 0 [ 39.284901][ T4208] EXT4-fs (loop5): Remounting filesystem read-only [ 39.291553][ T4208] EXT4-fs (loop5): 1 truncate cleaned up [ 39.297635][ T4208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.301136][ T4220] tipc: New replicast peer: 255.255.255.83 [ 39.315870][ T4220] tipc: Enabled bearer , priority 10 [ 39.323435][ T4221] Zero length message leads to an empty skb [ 39.350923][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.364819][ T4226] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 39.662798][ T4261] Driver unsupported XDP return value 0 on prog (id 211) dev N/A, expect packet loss! [ 40.020496][ T4293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.136787][ T4296] bridge_slave_0: left allmulticast mode [ 40.142503][ T4296] bridge_slave_0: left promiscuous mode [ 40.148229][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.184985][ T4296] bridge_slave_1: left allmulticast mode [ 40.190692][ T4296] bridge_slave_1: left promiscuous mode [ 40.196433][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.223012][ T4296] bond0: (slave bond_slave_0): Releasing backup interface [ 40.233174][ T4296] bond0: (slave bond_slave_1): Releasing backup interface [ 40.246930][ T4296] team0: Port device team_slave_0 removed [ 40.273069][ T4296] team0: Port device team_slave_1 removed [ 40.294099][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.301690][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.344666][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.352647][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.460124][ T4310] tipc: Enabling of bearer rejected, failed to enable media [ 40.469440][ T3382] tipc: Node number set to 3218577730 [ 40.475142][ T4302] pim6reg1: entered promiscuous mode [ 40.480515][ T4302] pim6reg1: entered allmulticast mode [ 40.916154][ T4352] wg2: entered promiscuous mode [ 40.921146][ T4352] wg2: entered allmulticast mode [ 40.946525][ T4356] loop3: detected capacity change from 0 to 164 [ 40.982753][ T4356] hub 6-0:1.0: USB hub found [ 40.989630][ T4356] hub 6-0:1.0: 8 ports detected [ 41.026137][ T4364] netlink: 'syz.5.340': attribute type 10 has an invalid length. [ 41.053668][ T4364] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.102968][ T4378] netlink: 'syz.5.347': attribute type 1 has an invalid length. [ 41.143512][ T4383] loop5: detected capacity change from 0 to 128 [ 41.650209][ T4397] loop0: detected capacity change from 0 to 512 [ 41.662428][ T4397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.675091][ T4397] ext4 filesystem being mounted at /84/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.688994][ T4397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.697526][ T4397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.994829][ T4404] __nla_validate_parse: 7 callbacks suppressed [ 41.994843][ T4404] netlink: 132 bytes leftover after parsing attributes in process `syz.5.357'. [ 42.134525][ T4423] loop3: detected capacity change from 0 to 512 [ 42.144873][ T4423] EXT4-fs: Ignoring removed nobh option [ 42.168502][ T4423] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.361: corrupted inode contents [ 42.186217][ T4423] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.361: mark_inode_dirty error [ 42.197987][ T4423] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.361: corrupted inode contents [ 42.215361][ T4423] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.361: mark_inode_dirty error [ 42.232911][ T4423] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.361: Failed to acquire dquot type 0 [ 42.246216][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.247219][ T4429] syzkaller0: refused to change device tx_queue_len [ 42.271457][ T4423] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.361: corrupted inode contents [ 42.285067][ T4423] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.361: mark_inode_dirty error [ 42.297112][ T4423] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.361: corrupted inode contents [ 42.309147][ T4423] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.361: mark_inode_dirty error [ 42.322134][ T4423] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.361: corrupted inode contents [ 42.359226][ T4442] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 42.367536][ T4442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 42.376422][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 42.388730][ T4423] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 42.406648][ T4423] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.361: corrupted inode contents [ 42.429112][ T4452] veth0: entered promiscuous mode [ 42.434555][ T4448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.370'. [ 42.435395][ T4452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 42.443491][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.370'. [ 42.464076][ T4423] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.361: mark_inode_dirty error [ 42.475727][ T4423] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 42.485111][ T4423] EXT4-fs (loop3): 1 truncate cleaned up [ 42.494258][ T4423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.515295][ T4423] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.528820][ T4423] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.563792][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 42.619704][ T4467] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 42.627560][ T4456] hsr_slave_1 (unregistering): left promiscuous mode [ 42.667593][ T4470] netlink: 'syz.3.380': attribute type 10 has an invalid length. [ 42.718422][ T4470] team0: Port device dummy0 added [ 42.788488][ T4486] loop0: detected capacity change from 0 to 512 [ 42.810248][ T4486] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 42.818407][ T4486] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.837050][ T4486] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.379: Failed to acquire dquot type 1 [ 42.855665][ T4486] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.379: bg 0: block 40: padding at end of block bitmap is not set [ 42.963980][ T4498] netlink: 'syz.5.388': attribute type 1 has an invalid length. [ 42.971881][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'. [ 42.980757][ T4498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.388'. [ 42.984820][ T4486] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 43.016626][ T4486] EXT4-fs (loop0): 1 truncate cleaned up [ 43.023527][ T4500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.390'. [ 43.035107][ T4486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.053842][ T4500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.066692][ T4500] vlan2: entered allmulticast mode [ 43.071871][ T4500] bond1: entered allmulticast mode [ 43.145529][ T3383] IPVS: starting estimator thread 0... [ 43.169332][ T4510] syzkaller0: entered promiscuous mode [ 43.174893][ T4510] syzkaller0: entered allmulticast mode [ 43.240438][ T4513] IPVS: using max 4416 ests per chain, 220800 per kthread [ 43.278150][ T4517] loop5: detected capacity change from 0 to 1024 [ 43.287396][ T4517] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.396: Failed to acquire dquot type 0 [ 43.299154][ T4517] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 43.313986][ T4517] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.396: corrupted inode contents [ 43.325948][ T4517] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.396: mark_inode_dirty error [ 43.337605][ T4517] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.396: corrupted inode contents [ 43.349596][ T4517] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.396: mark_inode_dirty error [ 43.361543][ T4517] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.396: corrupted inode contents [ 43.373637][ T4517] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 43.382546][ T4517] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.396: corrupted inode contents [ 43.394597][ T4517] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.396: mark_inode_dirty error [ 43.405850][ T4517] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 43.415111][ T4517] EXT4-fs (loop5): 1 truncate cleaned up [ 43.421051][ T4517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.442907][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.541789][ T4530] loop5: detected capacity change from 0 to 2048 [ 43.548811][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.569132][ T4532] loop0: detected capacity change from 0 to 2048 [ 43.576149][ T4530] loop5: p1 < > p4 [ 43.581784][ T4530] loop5: p4 size 8388608 extends beyond EOD, truncated [ 43.592352][ T4533] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 43.592400][ T4530] IPVS: stopping master sync thread 4533 ... [ 43.610804][ T4532] loop0: p1 < > p4 [ 43.617056][ T4532] loop0: p4 size 722688 extends beyond EOD, truncated [ 43.628263][ T4532] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 43.756381][ T4546] netlink: 'syz.5.408': attribute type 1 has an invalid length. [ 43.802705][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 43.802719][ T29] audit: type=1400 audit(1756464786.533:880): avc: denied { getopt } for pid=4550 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.832263][ T4553] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.893721][ T4553] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.908382][ T4560] netlink: 'syz.4.414': attribute type 10 has an invalid length. [ 43.916888][ T4560] veth0_vlan: entered allmulticast mode [ 43.961256][ T4560] veth0_vlan: left promiscuous mode [ 43.967430][ T4560] veth0_vlan: entered promiscuous mode [ 43.978343][ T29] audit: type=1400 audit(1756464786.713:881): avc: denied { create } for pid=4561 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.984144][ T4560] team0: Device veth0_vlan failed to register rx_handler [ 43.999626][ T4562] netlink: 'syz.0.415': attribute type 1 has an invalid length. [ 44.024071][ T29] audit: type=1400 audit(1756464786.733:882): avc: denied { bind } for pid=4561 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.043427][ T29] audit: type=1400 audit(1756464786.733:883): avc: denied { listen } for pid=4561 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.080075][ T4553] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.086870][ T4568] loop0: detected capacity change from 0 to 512 [ 44.122560][ T4568] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.133664][ T4553] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.172686][ T4568] EXT4-fs (loop0): 1 truncate cleaned up [ 44.183138][ T4580] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 44.190795][ T4568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.217602][ T29] audit: type=1400 audit(1756464786.943:884): avc: denied { read write open } for pid=4567 comm="syz.0.418" path="/93/file2/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.256765][ T29] audit: type=1400 audit(1756464786.983:885): avc: denied { kexec_image_load } for pid=4581 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 44.283782][ T57] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.300652][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.314543][ T57] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.336561][ T57] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.357134][ T29] audit: type=1326 audit(1756464787.083:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 44.361412][ T57] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.380423][ T29] audit: type=1326 audit(1756464787.083:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 44.411835][ T29] audit: type=1326 audit(1756464787.083:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 44.435086][ T29] audit: type=1326 audit(1756464787.083:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 44.582696][ T4607] netlink: 'syz.5.434': attribute type 1 has an invalid length. [ 44.956212][ T4629] mmap: syz.4.443 (4629) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.234804][ T4641] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 45.583002][ T4673] netlink: 'syz.4.459': attribute type 1 has an invalid length. [ 46.435490][ T4748] sctp: [Deprecated]: syz.2.495 (pid 4748) Use of int in max_burst socket option. [ 46.435490][ T4748] Use struct sctp_assoc_value instead [ 46.510212][ T4752] : renamed from bond0 (while UP) [ 46.633757][ T4759] tipc: Enabling of bearer rejected, failed to enable media [ 46.786754][ T4772] vxcan1: entered allmulticast mode [ 46.832871][ T4781] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 46.849433][ T4780] loop3: detected capacity change from 0 to 512 [ 46.856348][ T4780] ext4: Unknown parameter 'euid<00000000000000000000' [ 47.133718][ T4809] __nla_validate_parse: 26 callbacks suppressed [ 47.133729][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 47.148815][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 47.897528][ T4833] loop0: detected capacity change from 0 to 1024 [ 47.912785][ T4833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.984818][ T4838] loop5: detected capacity change from 0 to 512 [ 48.006979][ T4838] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 48.031339][ T4838] EXT4-fs (loop5): 1 truncate cleaned up [ 48.038133][ T4838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.163427][ T4833] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm gtp: Allocating blocks 449-513 which overlap fs metadata [ 48.799257][ T4826] EXT4-fs (loop0): pa ffff888106ed91c0: logic 48, phys. 177, len 21 [ 48.807272][ T4826] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 48.859168][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 48.859181][ T29] audit: type=1400 audit(1756464791.583:1134): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.935264][ T4854] 9pnet: p9_errstr2errno: server reported unknown error [ 48.943612][ T29] audit: type=1400 audit(1756464791.623:1135): avc: denied { execute } for pid=4850 comm="syz.4.535" name="file0" dev="tmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.965699][ T29] audit: type=1400 audit(1756464791.623:1136): avc: denied { execute_no_trans } for pid=4850 comm="syz.4.535" path="/123/file0" dev="tmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.989438][ T29] audit: type=1326 audit(1756464791.623:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 49.012844][ T29] audit: type=1326 audit(1756464791.623:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 49.036135][ T29] audit: type=1326 audit(1756464791.623:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 49.059348][ T29] audit: type=1326 audit(1756464791.623:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 49.082676][ T29] audit: type=1326 audit(1756464791.623:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 49.300613][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.366864][ T4857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.813552][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.863713][ T29] audit: type=1400 audit(1756464792.593:1142): avc: denied { create } for pid=4872 comm="syz.4.544" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.899441][ T4871] validate_nla: 7 callbacks suppressed [ 49.899454][ T4871] netlink: 'syz.5.543': attribute type 10 has an invalid length. [ 49.925000][ T29] audit: type=1400 audit(1756464792.623:1143): avc: denied { mounton } for pid=4872 comm="syz.4.544" path="/128/file0" dev="tmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.972718][ T4871] bond0: (slave dummy0): Releasing backup interface [ 49.995877][ T4871] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.004929][ T4871] team0: Failed to send options change via netlink (err -105) [ 50.012416][ T4871] team0: Port device dummy0 added [ 50.087707][ T4878] loop0: detected capacity change from 0 to 512 [ 50.095803][ T4878] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 50.105533][ T4878] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 50.114798][ T4878] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.547: corrupted in-inode xattr: e_value size too large [ 50.140880][ T4878] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.547: couldn't read orphan inode 15 (err -117) [ 50.153125][ T4878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.438738][ T4889] netlink: 'syz.3.553': attribute type 4 has an invalid length. [ 50.446458][ T4889] netlink: 17 bytes leftover after parsing attributes in process `syz.3.553'. [ 50.592671][ T4908] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.666070][ T4908] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.718147][ T4908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.747543][ T4914] netlink: 'syz.3.561': attribute type 10 has an invalid length. [ 50.823887][ T4908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.928426][ T4921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'. [ 50.947529][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.966157][ T4924] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.565'. [ 50.984846][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.994708][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.996634][ T4926] netlink: 'syz.2.564': attribute type 13 has an invalid length. [ 51.010755][ T4926] netlink: 'syz.2.564': attribute type 14 has an invalid length. [ 51.011404][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.136387][ T4939] pim6reg1: entered promiscuous mode [ 51.141779][ T4939] pim6reg1: entered allmulticast mode [ 51.187583][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.299866][ T4965] IPv6: Can't replace route, no match found [ 51.410599][ T4983] loop5: detected capacity change from 0 to 1024 [ 51.411043][ T4983] EXT4-fs: Ignoring removed orlov option [ 51.418457][ T4983] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 51.437120][ T4983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.490253][ T4991] tipc: Enabled bearer , priority 0 [ 51.503736][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.538846][ T4991] tipc: Disabling bearer [ 51.721886][ T5003] veth1_macvtap: left promiscuous mode [ 51.727391][ T5003] macsec0: entered allmulticast mode [ 51.758302][ T4985] Set syz1 is full, maxelem 65536 reached [ 51.767100][ T5005] pim6reg1: entered promiscuous mode [ 51.772485][ T5005] pim6reg1: entered allmulticast mode [ 51.800688][ T5007] wg2: entered promiscuous mode [ 51.805567][ T5007] wg2: entered allmulticast mode [ 51.864352][ T5019] loop3: detected capacity change from 0 to 512 [ 51.891790][ T5019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.940385][ T5032] syz_tun: entered allmulticast mode [ 51.945956][ T5032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 51.980572][ T5032] syz_tun (unregistering): left allmulticast mode [ 51.993019][ T3383] IPVS: starting estimator thread 0... [ 52.020099][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.080535][ T5039] IPVS: using max 2736 ests per chain, 136800 per kthread [ 52.190864][ T3383] hid_parser_main: 20 callbacks suppressed [ 52.190881][ T3383] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 52.204339][ T3383] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 52.211839][ T3383] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 52.227740][ T3383] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 52.343836][ T5066] vhci_hcd: invalid port number 96 [ 52.349042][ T5066] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 52.555397][ T5076] veth0: entered promiscuous mode [ 52.564687][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.631'. [ 52.666444][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 52.682714][ T5084] netlink: 'syz.5.635': attribute type 13 has an invalid length. [ 52.724363][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.731600][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.765436][ T5084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.775321][ T5084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.803424][ T4841] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.813281][ T4841] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.813316][ T4841] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.813400][ T4841] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.845418][ T5089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.109402][ T5112] syzkaller0: entered promiscuous mode [ 53.114933][ T5112] syzkaller0: entered allmulticast mode [ 54.122123][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 54.122139][ T29] audit: type=1400 audit(1756464796.853:1482): avc: denied { mount } for pid=5136 comm="syz.0.659" name="/" dev="ramfs" ino=10110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.159066][ T29] audit: type=1400 audit(1756464796.883:1483): avc: denied { read write } for pid=5138 comm="syz.3.658" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.180207][ T29] audit: type=1400 audit(1756464796.883:1484): avc: denied { open } for pid=5138 comm="syz.3.658" path="/129/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.248445][ T29] audit: type=1400 audit(1756464796.973:1485): avc: denied { setopt } for pid=5144 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.054880][ T29] audit: type=1326 audit(1756464797.783:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 55.078731][ T29] audit: type=1326 audit(1756464797.783:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 55.102369][ T29] audit: type=1326 audit(1756464797.783:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 55.125833][ T29] audit: type=1326 audit(1756464797.793:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 55.149137][ T29] audit: type=1326 audit(1756464797.793:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 55.172551][ T29] audit: type=1326 audit(1756464797.793:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.2.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 55.205110][ T5173] veth0_to_team: entered promiscuous mode [ 55.949704][ T5291] tipc: Enabling of bearer rejected, failed to enable media [ 56.062851][ T5318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.128225][ T5318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.153351][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 56.185196][ T5318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.224325][ T5318] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.278377][ T41] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.297654][ T41] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.305973][ T41] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.322745][ T41] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.387093][ T5359] loop0: detected capacity change from 0 to 512 [ 56.394151][ T5359] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.406072][ T5359] EXT4-fs (loop0): 1 truncate cleaned up [ 56.412235][ T5359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.439990][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.607632][ T5374] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 56.625165][ T5374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.638611][ T5374] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 56.683207][ T5378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.690438][ T5378] IPv6: NLM_F_CREATE should be set when creating new route [ 56.703129][ T5380] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 57.127526][ T5419] loop5: detected capacity change from 0 to 2048 [ 57.182744][ T5419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.320098][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.368909][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.728'. [ 57.377823][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.728'. [ 57.450037][ T5438] loop0: detected capacity change from 0 to 164 [ 57.458979][ T5438] bio_check_eod: 2 callbacks suppressed [ 57.458992][ T5438] syz.0.731: attempt to access beyond end of device [ 57.458992][ T5438] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 57.478690][ T5438] syz.0.731: attempt to access beyond end of device [ 57.478690][ T5438] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 57.532641][ T5441] loop0: detected capacity change from 0 to 512 [ 57.542310][ T5441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.555156][ T5441] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.583157][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.405017][ T5466] loop5: detected capacity change from 0 to 512 [ 58.413470][ T5466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.423352][ T5466] EXT4-fs (loop5): orphan cleanup on readonly fs [ 58.431098][ T5466] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.740: bg 0: block 248: padding at end of block bitmap is not set [ 58.481004][ T5466] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.740: Failed to acquire dquot type 1 [ 58.493586][ T5466] EXT4-fs (loop5): 1 truncate cleaned up [ 58.512437][ T5466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.765980][ T5469] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.833180][ T5469] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.891951][ T5469] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.951943][ T5469] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.246149][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 59.246162][ T29] audit: type=1400 audit(1756464801.973:1618): avc: denied { read } for pid=5477 comm="syz.0.745" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.302970][ T29] audit: type=1400 audit(1756464802.003:1619): avc: denied { ioctl } for pid=5477 comm="syz.0.745" path="socket:[11497]" dev="sockfs" ino=11497 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.327833][ T29] audit: type=1400 audit(1756464802.003:1620): avc: denied { write } for pid=5477 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.409569][ T29] audit: type=1400 audit(1756464802.133:1621): avc: denied { mount } for pid=5481 comm="syz.0.747" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 59.431681][ T29] audit: type=1400 audit(1756464802.133:1622): avc: denied { mounton } for pid=5481 comm="syz.0.747" path="/154/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 59.443913][ T5484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'. [ 59.454064][ T29] audit: type=1400 audit(1756464802.133:1623): avc: denied { mount } for pid=5481 comm="syz.0.747" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.484316][ T29] audit: type=1400 audit(1756464802.133:1624): avc: denied { unmount } for pid=5481 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.576486][ T29] audit: type=1400 audit(1756464802.253:1625): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 59.597873][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 59.670857][ T5496] netlink: 'syz.4.763': attribute type 12 has an invalid length. [ 59.741635][ T5500] loop0: detected capacity change from 0 to 512 [ 59.771042][ T5500] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.755: Invalid inode bitmap blk 4 in block_group 0 [ 59.794380][ T5500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.830442][ T5507] 8021q: VLANs not supported on ipvlan0 [ 59.848008][ T29] audit: type=1326 audit(1756464802.573:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 59.880478][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.891955][ T29] audit: type=1326 audit(1756464802.573:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 60.276721][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.295160][ T41] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.310267][ T41] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.329710][ T41] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.339676][ T41] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.393182][ T5523] tipc: Enabling of bearer rejected, failed to enable media [ 60.699264][ T5536] bridge_slave_0: left allmulticast mode [ 60.705253][ T5536] bridge_slave_0: left promiscuous mode [ 60.711217][ T5536] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.725217][ T5536] bridge_slave_1: left allmulticast mode [ 60.731097][ T5536] bridge_slave_1: left promiscuous mode [ 60.736802][ T5536] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.749073][ T5536] bond0: (slave bond_slave_0): Releasing backup interface [ 60.786448][ T5536] bond0: (slave bond_slave_1): Releasing backup interface [ 60.810656][ T5536] team0: Port device team_slave_0 removed [ 60.816710][ T5541] loop0: detected capacity change from 0 to 512 [ 60.829710][ T5536] team0: Port device team_slave_1 removed [ 60.830866][ T5541] EXT4-fs (loop0): orphan cleanup on readonly fs [ 60.841471][ T5536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.843336][ T5541] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 60.849178][ T5536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.871534][ T5541] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 60.872194][ T5536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.883513][ T5541] EXT4-fs (loop0): 1 truncate cleaned up [ 60.889655][ T5536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.906805][ T5541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.950533][ T5541] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 60.963629][ T5541] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 0 [ 61.014000][ T5550] wg2: entered promiscuous mode [ 61.018895][ T5550] wg2: entered allmulticast mode [ 61.024254][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.087328][ T5556] loop3: detected capacity change from 0 to 8192 [ 61.121749][ T5556] loop3: p1 p2 p3 p4 [ 61.126732][ T5556] loop3: p2 start 151000334 is beyond EOD, truncated [ 61.133507][ T5556] loop3: p3 start 331777 is beyond EOD, truncated [ 61.140024][ T5556] loop3: p4 size 263168 extends beyond EOD, truncated [ 61.236858][ T5570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.281364][ T5570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.346660][ T5577] veth0_to_team: entered allmulticast mode [ 61.631868][ T5596] loop3: detected capacity change from 0 to 128 [ 61.658768][ T5598] syzkaller0: refused to change device tx_queue_len [ 61.906037][ T5606] loop0: detected capacity change from 0 to 128 [ 62.312478][ T5619] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 62.320652][ T5619] tipc: Enabled bearer , priority 10 [ 62.346767][ T5617] @: renamed from vlan0 [ 62.639585][ T5642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 62.678313][ T5642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 62.723550][ T5642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 62.747907][ T5646] loop3: detected capacity change from 0 to 256 [ 62.760262][ T5649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.816'. [ 62.781744][ T5649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.797632][ T5649] vlan2: entered allmulticast mode [ 62.803049][ T5649] bond1: entered allmulticast mode [ 62.879131][ T5656] netlink: 'syz.3.819': attribute type 39 has an invalid length. [ 63.018681][ T5660] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 63.025072][ T5660] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 63.040957][ T5661] loop5: detected capacity change from 0 to 2048 [ 63.062843][ T5661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.118398][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.141062][ T5668] loop0: detected capacity change from 0 to 512 [ 63.160731][ T5668] EXT4-fs: Ignoring removed nobh option [ 63.189936][ T1069] IPVS: starting estimator thread 0... [ 63.198430][ T5668] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.823: corrupted inode contents [ 63.198539][ T5668] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.823: mark_inode_dirty error [ 63.198844][ T5668] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.823: corrupted inode contents [ 63.242329][ T5668] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.823: mark_inode_dirty error [ 63.255376][ T5668] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.823: Failed to acquire dquot type 0 [ 63.280798][ T5673] IPVS: using max 2688 ests per chain, 134400 per kthread [ 63.283830][ T5668] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.823: corrupted inode contents [ 63.301308][ T5668] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.823: mark_inode_dirty error [ 63.340572][ T5668] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.823: corrupted inode contents [ 63.346287][ T5682] loop5: detected capacity change from 0 to 512 [ 63.369157][ T5668] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.823: mark_inode_dirty error [ 63.400081][ T5682] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 63.400416][ T5668] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.823: corrupted inode contents [ 63.420458][ T5668] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 63.429372][ T5682] EXT4-fs (loop5): orphan cleanup on readonly fs [ 63.435940][ T5668] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.823: corrupted inode contents [ 63.448266][ T5668] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.823: mark_inode_dirty error [ 63.451285][ T5682] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.825: Failed to acquire dquot type 1 [ 63.475269][ T5668] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 63.485538][ T5695] tipc: Bearer : already 2 bearers with priority 10 [ 63.493046][ T5695] tipc: Bearer : trying with adjusted priority [ 63.511080][ T5668] EXT4-fs (loop0): 1 truncate cleaned up [ 63.517681][ T5695] tipc: New replicast peer: 255.255.255.255 [ 63.519908][ T5668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.523998][ T5695] tipc: Enabled bearer , priority 9 [ 63.545299][ T5668] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.545703][ T5682] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.825: bg 0: block 40: padding at end of block bitmap is not set [ 63.572210][ T5682] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 63.613165][ T5682] EXT4-fs (loop5): 1 truncate cleaned up [ 63.619816][ T5682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.761775][ T5705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.781047][ T5668] 8021q: VLANs not supported on wg0 [ 63.786430][ T5705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.329671][ T5708] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 64.339456][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 64.339467][ T29] audit: type=1400 audit(1756464807.073:1967): avc: denied { relabelto } for pid=5707 comm="syz.4.837" name="184" dev="tmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 64.371775][ T29] audit: type=1400 audit(1756464807.073:1968): avc: denied { associate } for pid=5707 comm="syz.4.837" name="184" dev="tmpfs" ino=971 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 64.448772][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.599765][ T5717] tipc: Enabling of bearer rejected, failed to enable media [ 64.726941][ T29] audit: type=1400 audit(1756464807.173:1969): avc: denied { remove_name } for pid=3308 comm="syz-executor" name="binderfs" dev="tmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 64.754103][ T29] audit: type=1400 audit(1756464807.173:1970): avc: denied { rmdir } for pid=3308 comm="syz-executor" name="184" dev="tmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 64.797073][ T5728] netlink: 'syz.0.844': attribute type 1 has an invalid length. [ 64.836988][ T5728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.857831][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.916182][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 64.927041][ T5733] bond2: (slave batadv1): making interface the new active one [ 64.945635][ T5733] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 64.990303][ T5742] program syz.5.847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.000790][ T29] audit: type=1400 audit(1756464807.713:1971): avc: denied { read } for pid=5734 comm="syz.5.847" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.024363][ T29] audit: type=1400 audit(1756464807.713:1972): avc: denied { open } for pid=5734 comm="syz.5.847" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.081056][ T5745] tipc: Enabled bearer , priority 0 [ 65.091578][ T29] audit: type=1326 audit(1756464807.823:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5748 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 65.095985][ T5745] syzkaller0: entered promiscuous mode [ 65.120862][ T5745] syzkaller0: entered allmulticast mode [ 65.126780][ T29] audit: type=1326 audit(1756464807.853:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5748 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 65.148201][ T5750] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 65.150185][ T29] audit: type=1326 audit(1756464807.853:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5748 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 65.181174][ T29] audit: type=1326 audit(1756464807.853:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5748 comm="syz.2.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 65.214658][ T5745] tipc: Resetting bearer [ 65.225889][ T5744] tipc: Resetting bearer [ 65.232989][ T5744] tipc: Disabling bearer [ 65.449169][ T5758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.854'. [ 65.971326][ T5773] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 66.231325][ T5785] syzkaller0: entered promiscuous mode [ 66.236812][ T5785] syzkaller0: entered allmulticast mode [ 66.289695][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 66.298930][ T5789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 66.308701][ T5789] netlink: 'syz.2.868': attribute type 18 has an invalid length. [ 66.348284][ T31] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.348680][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 66.356628][ T31] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.356721][ T31] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.357689][ T31] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.365888][ T5789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 66.400039][ T5789] netlink: 'syz.2.868': attribute type 18 has an invalid length. [ 66.488336][ T5794] loop5: detected capacity change from 0 to 128 [ 66.496553][ T5794] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.510283][ T5794] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.652062][ T5799] netlink: 14 bytes leftover after parsing attributes in process `syz.0.871'. [ 66.668956][ T5799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.679466][ T5799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.689822][ T5799] bond0 (unregistering): Released all slaves [ 66.839006][ T5808] loop0: detected capacity change from 0 to 1024 [ 66.847338][ T5808] EXT4-fs: Ignoring removed orlov option [ 66.937889][ T5808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.357887][ T3773] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.473015][ T5830] loop5: detected capacity change from 0 to 1024 [ 67.486717][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.499412][ T5830] EXT4-fs: Ignoring removed nobh option [ 67.505086][ T5830] EXT4-fs: Ignoring removed bh option [ 67.524631][ T5830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.554096][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.686864][ T5839] 0ªî{X¹¦: left allmulticast mode [ 67.716138][ T5839] veth0_vlan: left allmulticast mode [ 68.462956][ T5881] loop0: detected capacity change from 0 to 164 [ 69.105777][ T5901] netlink: 7 bytes leftover after parsing attributes in process `syz.5.907'. [ 69.151815][ T5901] netlink: 16 bytes leftover after parsing attributes in process `syz.5.907'. [ 69.350995][ T5910] loop5: detected capacity change from 0 to 512 [ 69.375095][ T5910] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.910: casefold flag without casefold feature [ 69.398595][ T5910] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.910: couldn't read orphan inode 15 (err -117) [ 69.448481][ T5910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.507049][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 69.507078][ T29] audit: type=1326 audit(1756464812.233:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 69.536709][ T29] audit: type=1326 audit(1756464812.233:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 69.560033][ T29] audit: type=1326 audit(1756464812.233:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 69.583407][ T29] audit: type=1326 audit(1756464812.233:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 69.606709][ T29] audit: type=1326 audit(1756464812.233:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 69.630002][ T29] audit: type=1326 audit(1756464812.233:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 69.653288][ T29] audit: type=1326 audit(1756464812.233:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 69.676574][ T29] audit: type=1326 audit(1756464812.233:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 69.699922][ T29] audit: type=1326 audit(1756464812.233:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 69.723254][ T29] audit: type=1326 audit(1756464812.233:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.0.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 69.791135][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.841328][ T5927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.915'. [ 69.873735][ T5938] loop3: detected capacity change from 0 to 1024 [ 69.882746][ T5938] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.920: Failed to acquire dquot type 0 [ 69.894433][ T5938] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 69.908896][ T5938] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.920: corrupted inode contents [ 69.921210][ T5938] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.920: mark_inode_dirty error [ 69.932786][ T5938] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.920: corrupted inode contents [ 69.945181][ T5938] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.920: mark_inode_dirty error [ 69.957036][ T5938] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.920: corrupted inode contents [ 69.969559][ T5938] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 69.980662][ T5938] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.920: corrupted inode contents [ 69.995452][ T5938] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.920: mark_inode_dirty error [ 70.007887][ T5938] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 70.018185][ T5938] EXT4-fs (loop3): 1 truncate cleaned up [ 70.024981][ T5938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.038859][ T5938] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.366482][ T5950] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 70.373109][ T5950] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 70.380617][ T5950] vhci_hcd vhci_hcd.0: Device attached [ 70.388506][ T5951] vhci_hcd: connection closed [ 70.388757][ T12] vhci_hcd: stop threads [ 70.397748][ T12] vhci_hcd: release socket [ 70.402251][ T12] vhci_hcd: disconnect device [ 70.463604][ T5954] tipc: New replicast peer: 255.255.255.255 [ 70.469641][ T5954] tipc: Enabled bearer , priority 10 [ 70.724326][ T5970] __nla_validate_parse: 1 callbacks suppressed [ 70.724483][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.932'. [ 70.742754][ T5970] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.773892][ T5965] delete_channel: no stack [ 70.826950][ T5983] loop5: detected capacity change from 0 to 512 [ 70.833789][ T5983] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.844854][ T5983] EXT4-fs (loop5): 1 truncate cleaned up [ 70.850915][ T5983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.876916][ T5986] loop0: detected capacity change from 0 to 512 [ 70.907712][ T4841] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.033283][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 71.042220][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.049609][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.057131][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.064578][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.372411][ T6002] netlink: 6401 bytes leftover after parsing attributes in process `syz.2.944'. [ 71.424869][ T6004] 9pnet_fd: Insufficient options for proto=fd [ 71.580414][ T1069] tipc: Node number set to 3511578895 [ 71.611500][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.626006][ T6008] @: renamed from vlan0 [ 72.246469][ T6036] loop3: detected capacity change from 0 to 512 [ 72.261268][ T6036] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 72.658472][ T6047] loop0: detected capacity change from 0 to 1764 [ 72.701444][ T6047] tipc: Enabled bearer , priority 0 [ 72.757870][ T6047] tipc: Disabling bearer [ 73.033590][ T6042] Set syz1 is full, maxelem 65536 reached [ 73.074894][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.971'. [ 73.085179][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.971'. [ 73.094167][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.971'. [ 73.104041][ T6064] GUP no longer grows the stack in syz.5.971 (6064): 200000004000-200000008000 (200000002000) [ 73.114367][ T6064] CPU: 1 UID: 0 PID: 6064 Comm: syz.5.971 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.114392][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.114403][ T6064] Call Trace: [ 73.114410][ T6064] [ 73.114417][ T6064] __dump_stack+0x1d/0x30 [ 73.114513][ T6064] dump_stack_lvl+0xe8/0x140 [ 73.114583][ T6064] dump_stack+0x15/0x1b [ 73.114597][ T6064] __get_user_pages+0x198d/0x1fa0 [ 73.114622][ T6064] ? __rcu_read_unlock+0x4f/0x70 [ 73.114699][ T6064] get_user_pages_remote+0x1d5/0x6d0 [ 73.114803][ T6064] __access_remote_vm+0x15c/0x590 [ 73.114830][ T6064] access_remote_vm+0x32/0x40 [ 73.114857][ T6064] proc_pid_cmdline_read+0x32b/0x6c0 [ 73.114879][ T6064] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 73.114899][ T6064] vfs_readv+0x3fb/0x690 [ 73.114941][ T6064] __x64_sys_preadv+0xfd/0x1c0 [ 73.114962][ T6064] x64_sys_call+0x282a/0x2ff0 [ 73.114980][ T6064] do_syscall_64+0xd2/0x200 [ 73.115077][ T6064] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.115097][ T6064] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 73.115123][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.115145][ T6064] RIP: 0033:0x7f5fc00bebe9 [ 73.115223][ T6064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.115239][ T6064] RSP: 002b:00007f5fbeb27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 73.115275][ T6064] RAX: ffffffffffffffda RBX: 00007f5fc02e5fa0 RCX: 00007f5fc00bebe9 [ 73.115286][ T6064] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000009 [ 73.115296][ T6064] RBP: 00007f5fc0141e19 R08: 0000000000000201 R09: 0000000000000000 [ 73.115306][ T6064] R10: 00000000000006cd R11: 0000000000000246 R12: 0000000000000000 [ 73.115389][ T6064] R13: 00007f5fc02e6038 R14: 00007f5fc02e5fa0 R15: 00007fff1b29ea28 [ 73.115408][ T6064] [ 73.356204][ T6077] netlink: 'syz.5.976': attribute type 10 has an invalid length. [ 73.384742][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.394951][ T6077] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 73.742979][ T6096] tipc: Enabling of bearer rejected, failed to enable media [ 73.782549][ T6101] tipc: Enabling of bearer rejected, failed to enable media [ 73.870602][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.895238][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.921688][ T6093] loop3: detected capacity change from 0 to 128 [ 74.172617][ T6093] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 74.199680][ T6093] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.564679][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 74.564812][ T29] audit: type=1400 audit(1756464817.293:2776): avc: denied { append } for pid=6128 comm="syz.5.994" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.607224][ T29] audit: type=1400 audit(1756464817.333:2777): avc: denied { ioctl } for pid=6128 comm="syz.5.994" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.679692][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 74.758226][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.801397][ T6138] wireguard0: entered promiscuous mode [ 74.806956][ T6138] wireguard0: entered allmulticast mode [ 74.825585][ T6139] tipc: Started in network mode [ 74.830538][ T6139] tipc: Node identity 6eb789b22113, cluster identity 4711 [ 74.837760][ T6139] tipc: Enabled bearer , priority 0 [ 74.845989][ T6139] syzkaller0: entered promiscuous mode [ 74.851575][ T6139] syzkaller0: entered allmulticast mode [ 74.862423][ T6139] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 74.872706][ T6139] tipc: Resetting bearer [ 74.879076][ T6136] tipc: Resetting bearer [ 74.887247][ T6136] tipc: Disabling bearer [ 74.953889][ T29] audit: type=1400 audit(1756464817.683:2778): avc: denied { listen } for pid=6144 comm="syz.5.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.989727][ T29] audit: type=1326 audit(1756464817.713:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb598ebe9 code=0x7ffc0000 [ 75.013237][ T29] audit: type=1326 audit(1756464817.713:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.3.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1bb598ebe9 code=0x7ffc0000 [ 75.036765][ T29] audit: type=1326 audit(1756464817.713:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.3.1002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bb598ebe9 code=0x0 [ 75.954476][ T29] audit: type=1326 audit(1756464818.683:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6165 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb598ebe9 code=0x7ffc0000 [ 76.050672][ T29] audit: type=1326 audit(1756464818.713:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6165 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb598ebe9 code=0x7ffc0000 [ 76.074075][ T29] audit: type=1326 audit(1756464818.713:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6165 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bb598ebe9 code=0x7ffc0000 [ 76.097542][ T29] audit: type=1326 audit(1756464818.713:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6165 comm="syz.3.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb598ebe9 code=0x7ffc0000 [ 76.201408][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 76.222344][ T6173] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1010'. [ 76.917684][ T6183] tipc: Enabled bearer , priority 0 [ 76.935545][ T6183] syzkaller0: entered promiscuous mode [ 76.941089][ T6183] syzkaller0: entered allmulticast mode [ 76.954658][ T6183] tipc: Resetting bearer [ 76.963779][ T6182] tipc: Resetting bearer [ 76.971748][ T6182] tipc: Disabling bearer [ 77.097485][ T6195] netlink: 763 bytes leftover after parsing attributes in process `syz.5.1020'. [ 77.156480][ T6203] tipc: Enabled bearer , priority 0 [ 77.164603][ T6203] syzkaller0: entered promiscuous mode [ 77.170088][ T6203] syzkaller0: entered allmulticast mode [ 77.187194][ T6203] tipc: Resetting bearer [ 77.263742][ T6202] tipc: Resetting bearer [ 77.272757][ T6202] tipc: Disabling bearer [ 77.421326][ T6214] loop0: detected capacity change from 0 to 1024 [ 77.439471][ T6214] EXT4-fs: Ignoring removed orlov option [ 77.455272][ T6214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.732138][ T6223] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 77.785709][ T6227] loop3: detected capacity change from 0 to 512 [ 77.844586][ T6227] journal_path: Non-blockdev passed as './bus' [ 77.850791][ T6227] EXT4-fs: error: could not find journal device path [ 77.864616][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.871949][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.882344][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.899503][ T6230] vxcan1: left allmulticast mode [ 77.921848][ T6230] wg2: left promiscuous mode [ 77.926480][ T6230] wg2: left allmulticast mode [ 78.010812][ T6237] netlink: 'syz.0.1033': attribute type 4 has an invalid length. [ 78.099435][ T57] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.107950][ T57] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.121645][ T6245] netlink: 'syz.3.1035': attribute type 13 has an invalid length. [ 78.407418][ T57] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.415894][ T57] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.424578][ T6251] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 78.438652][ T6263] tipc: Started in network mode [ 78.443629][ T6263] tipc: Node identity d6aa85ce4208, cluster identity 4711 [ 78.450774][ T6263] tipc: Enabled bearer , priority 0 [ 78.461918][ T57] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.470395][ T57] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.480113][ T6261] syzkaller0: entered promiscuous mode [ 78.485675][ T6261] syzkaller0: entered allmulticast mode [ 78.493678][ T6261] tipc: Resetting bearer [ 78.506971][ T6260] tipc: Resetting bearer [ 78.522387][ T6260] tipc: Disabling bearer [ 78.529693][ T57] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.538172][ T57] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.549099][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.559414][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.569273][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.618364][ T6268] syzkaller0: entered promiscuous mode [ 78.624096][ T6268] syzkaller0: entered allmulticast mode [ 78.907233][ T6287] loop5: detected capacity change from 0 to 256 [ 78.930996][ T6287] ALSA: seq fatal error: cannot create timer (-19) [ 79.850332][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 79.856593][ T29] audit: type=1400 audit(1756464822.573:2923): avc: denied { read } for pid=6308 comm="syz.4.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.887421][ T6311] tipc: Enabled bearer , priority 0 [ 79.915149][ T6310] tipc: Resetting bearer [ 79.934248][ T6310] tipc: Disabling bearer [ 79.950379][ T29] audit: type=1326 audit(1756464822.673:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 79.973795][ T29] audit: type=1326 audit(1756464822.673:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 79.997176][ T29] audit: type=1326 audit(1756464822.673:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 80.020580][ T29] audit: type=1326 audit(1756464822.673:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 80.044150][ T29] audit: type=1326 audit(1756464822.673:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 80.067525][ T29] audit: type=1326 audit(1756464822.673:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 80.090938][ T29] audit: type=1326 audit(1756464822.673:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 80.114344][ T29] audit: type=1326 audit(1756464822.673:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 80.137720][ T29] audit: type=1326 audit(1756464822.673:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39832ebe9 code=0x7ffc0000 [ 80.578765][ T6337] loop0: detected capacity change from 0 to 1024 [ 80.886984][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 80.918144][ T6349] bridge_slave_1: left allmulticast mode [ 80.923849][ T6349] bridge_slave_1: left promiscuous mode [ 80.929641][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.961130][ T6349] bridge_slave_0: left allmulticast mode [ 80.966795][ T6349] bridge_slave_0: left promiscuous mode [ 80.972448][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.139527][ T6337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.233381][ T6337] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1068: bg 0: block 88: padding at end of block bitmap is not set [ 81.269274][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.323660][ T6361] syzkaller0: entered promiscuous mode [ 81.329139][ T6361] syzkaller0: entered allmulticast mode [ 81.607594][ T6383] tipc: Enabled bearer , priority 0 [ 81.633298][ T6387] loop3: detected capacity change from 0 to 512 [ 81.640086][ T6387] ext4: Unknown parameter 'noacl' [ 81.642230][ T6383] syzkaller0: entered promiscuous mode [ 81.650704][ T6383] syzkaller0: entered allmulticast mode [ 81.673778][ T6383] tipc: Resetting bearer [ 81.680190][ T6382] tipc: Resetting bearer [ 81.690826][ T6382] tipc: Disabling bearer [ 81.730299][ T6390] veth0: entered promiscuous mode [ 81.736401][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 81.745920][ T6390] veth0 (unregistering): left promiscuous mode [ 81.774524][ T6392] tipc: Enabled bearer , priority 0 [ 81.781694][ T6392] syzkaller0: entered promiscuous mode [ 81.787251][ T6392] syzkaller0: entered allmulticast mode [ 81.801958][ T6392] tipc: Resetting bearer [ 81.808359][ T6391] tipc: Resetting bearer [ 81.821586][ T6391] tipc: Disabling bearer [ 81.946236][ T6400] program syz.0.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.453896][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'. [ 82.599876][ T6416] tipc: Enabling of bearer rejected, failed to enable media [ 82.796265][ T6432] loop3: detected capacity change from 0 to 8192 [ 82.850158][ T6436] loop3: detected capacity change from 0 to 2048 [ 82.871023][ T6436] loop3: p1 < > p4 [ 82.875553][ T6436] loop3: p4 size 8388608 extends beyond EOD, truncated [ 83.135765][ T6441] loop0: detected capacity change from 0 to 512 [ 83.163947][ T6441] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1101: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 83.202900][ T6441] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.1101: Bad quota inode: 3, type: 0 [ 83.215272][ T6441] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 83.233051][ T6441] EXT4-fs (loop0): mount failed [ 83.266806][ T6445] loop0: detected capacity change from 0 to 512 [ 83.274558][ T6445] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.281130][ T6445] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1102: bad orphan inode 13 [ 83.292520][ T6445] ext4_test_bit(bit=12, block=18) = 1 [ 83.297890][ T6445] is_bad_inode(inode)=0 [ 83.302068][ T6445] NEXT_ORPHAN(inode)=2130706432 [ 83.306928][ T6445] max_ino=32 [ 83.310149][ T6445] i_nlink=1 [ 83.313596][ T6445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.327644][ T6445] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1102: deleted inode referenced: 12 [ 83.398908][ T6447] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 83.421757][ T6447] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1102: bg 0: block 248: padding at end of block bitmap is not set [ 83.436589][ T6447] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1102: Failed to acquire dquot type 1 [ 83.449528][ T6447] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.576055][ T6457] tipc: Enabled bearer , priority 0 [ 83.583678][ T6457] syzkaller0: entered promiscuous mode [ 83.589229][ T6457] syzkaller0: entered allmulticast mode [ 83.599023][ T6457] tipc: Resetting bearer [ 83.605632][ T6456] tipc: Resetting bearer [ 83.613778][ T6456] tipc: Disabling bearer [ 83.700718][ T6464] loop5: detected capacity change from 0 to 512 [ 83.708035][ T6464] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.723537][ T6464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.746269][ T6464] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.934371][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.021533][ T6495] vhci_hcd: invalid port number 96 [ 84.026684][ T6495] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 84.043778][ T6497] vxcan1: entered promiscuous mode [ 84.048915][ T6497] vxcan1: entered allmulticast mode [ 84.111181][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.251692][ T6510] loop5: detected capacity change from 0 to 1024 [ 84.262116][ T6510] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 84.271971][ T6510] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 84.272395][ T6512] loop3: detected capacity change from 0 to 2048 [ 84.285484][ T6510] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 84.288210][ T6512] EXT4-fs: Ignoring removed orlov option [ 84.298489][ T6510] EXT4-fs error (device loop5): ext4_get_journal_inode:5800: inode #5: comm syz.5.1126: unexpected bad inode w/o EXT4_IGET_BAD [ 84.317254][ T6510] EXT4-fs (loop5): no journal found [ 84.322630][ T6510] EXT4-fs (loop5): can't get journal size [ 84.329161][ T6510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.329963][ T6512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.411906][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.607661][ T6532] IPVS: stopping master sync thread 6536 ... [ 84.958090][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.075208][ T6560] loop0: detected capacity change from 0 to 128 [ 85.096436][ T6560] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.274858][ T6560] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.314963][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 85.314980][ T29] audit: type=1326 audit(1756464828.043:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 85.529154][ T29] audit: type=1326 audit(1756464828.083:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 85.552696][ T29] audit: type=1326 audit(1756464828.083:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 85.576295][ T29] audit: type=1326 audit(1756464828.083:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 85.599708][ T29] audit: type=1326 audit(1756464828.083:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 85.623124][ T29] audit: type=1326 audit(1756464828.083:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 85.646758][ T29] audit: type=1326 audit(1756464828.083:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 85.670182][ T29] audit: type=1326 audit(1756464828.083:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 85.693601][ T29] audit: type=1326 audit(1756464828.103:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 85.717055][ T29] audit: type=1326 audit(1756464828.103:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f5e552cebe9 code=0x7ffc0000 [ 85.773456][ T6569] pimreg: entered allmulticast mode [ 85.874057][ T6573] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 85.942936][ T6580] loop3: detected capacity change from 0 to 512 [ 86.337129][ T6580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.381061][ T6580] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.458936][ T6580] vlan2: entered promiscuous mode [ 86.464049][ T6580] bond0: entered promiscuous mode [ 86.469091][ T6580] batadv0: entered promiscuous mode [ 86.551432][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.703729][ T6597] loop3: detected capacity change from 0 to 1024 [ 86.720108][ T6599] veth0: entered promiscuous mode [ 86.726635][ T6597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.740493][ T6597] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.765817][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 86.837958][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.059524][ T6613] : renamed from bond0 (while UP) [ 87.099150][ T6619] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 87.128295][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 87.537069][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 87.644463][ T6655] tipc: Enabled bearer , priority 0 [ 87.651550][ T6655] syzkaller0: entered promiscuous mode [ 87.657015][ T6655] syzkaller0: entered allmulticast mode [ 87.665503][ T6655] tipc: Resetting bearer [ 87.672120][ T6654] tipc: Resetting bearer [ 87.679651][ T6654] tipc: Disabling bearer [ 87.790250][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'. [ 88.596510][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 88.606604][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.618979][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.766692][ T6694] netlink: 9236 bytes leftover after parsing attributes in process `syz.5.1193'. [ 88.779071][ T6698] loop0: detected capacity change from 0 to 4096 [ 88.787783][ T6698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.853093][ T6706] loop5: detected capacity change from 0 to 164 [ 88.872772][ T3300] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /217/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 88.901786][ T6708] wg2: entered promiscuous mode [ 88.906722][ T6708] wg2: entered allmulticast mode [ 88.923806][ T6706] hub 6-0:1.0: USB hub found [ 88.928711][ T6706] hub 6-0:1.0: 8 ports detected [ 88.946729][ T6710] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 88.961619][ T3300] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 88.983941][ T3300] EXT4-fs warning (device loop0): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 89.042798][ T3300] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /217/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 89.071870][ T3300] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 89.103452][ T3300] EXT4-fs warning (device loop0): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 89.116243][ T3300] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /217/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 89.138598][ T3300] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 89.160939][ T3300] EXT4-fs warning (device loop0): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 89.173423][ T3300] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /217/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 89.196182][ T3300] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 89.233513][ T3300] EXT4-fs warning (device loop0): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 89.280520][ T3300] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /217/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 89.331549][ T3300] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 89.352245][ T3300] EXT4-fs warning (device loop0): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 89.367078][ T3300] EXT4-fs warning (device loop0): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 89.380880][ T3300] EXT4-fs warning (device loop0): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 89.394202][ T3300] EXT4-fs warning (device loop0): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 89.420765][ T3300] EXT4-fs warning (device loop0): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 89.445989][ T3300] EXT4-fs warning (device loop0): ext4_empty_dir:3099: inode #12: comm syz-executor: directory missing '..' [ 89.580560][ T6692] 9pnet_fd: p9_fd_create_tcp (6692): problem connecting socket to 127.0.0.1 [ 89.628350][ T6734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1205'. [ 89.679806][ T6734] netem: change failed [ 89.687094][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.697549][ T6736] netlink: 'syz.3.1208': attribute type 10 has an invalid length. [ 89.713720][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.792688][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.811588][ T6738] loop3: detected capacity change from 0 to 128 [ 89.884071][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.913212][ T6739] syz.3.1210: attempt to access beyond end of device [ 89.913212][ T6739] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 89.977470][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.158636][ T41] dummy0: left allmulticast mode [ 90.168743][ T41] bridge0: port 3(dummy0) entered disabled state [ 90.182173][ T41] bridge_slave_1: left allmulticast mode [ 90.187842][ T41] bridge_slave_1: left promiscuous mode [ 90.193604][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.215379][ T41] bridge_slave_0: left allmulticast mode [ 90.221094][ T41] bridge_slave_0: left promiscuous mode [ 90.226729][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.313509][ T41] bond1 (unregistering): Released all slaves [ 90.322262][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 90.322291][ T29] audit: type=1400 audit(1756464833.053:3283): avc: denied { create } for pid=6756 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.349276][ T41] bond2 (unregistering): (slave batadv1): Releasing active interface [ 90.350290][ T6757] sctp: [Deprecated]: syz.5.1214 (pid 6757) Use of int in max_burst socket option. [ 90.350290][ T6757] Use struct sctp_assoc_value instead [ 90.375277][ T41] bond2 (unregistering): Released all slaves [ 90.392670][ T29] audit: type=1400 audit(1756464833.083:3284): avc: denied { setopt } for pid=6756 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.412334][ T29] audit: type=1400 audit(1756464833.083:3285): avc: denied { getopt } for pid=6756 comm="syz.5.1214" lport=49709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.433509][ T6757] netlink: 'syz.5.1214': attribute type 4 has an invalid length. [ 90.459779][ T6761] bond0: entered promiscuous mode [ 90.462124][ T29] audit: type=1400 audit(1756464833.163:3286): avc: denied { setopt } for pid=6756 comm="syz.5.1214" lport=49709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.464871][ T6761] bond0: entered allmulticast mode [ 90.491443][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.504795][ T6761] bond0 (unregistering): Released all slaves [ 90.524338][ T41] tipc: Disabling bearer [ 90.529352][ T41] tipc: Left network mode [ 90.546717][ T41] hsr_slave_0: left promiscuous mode [ 90.553020][ T41] hsr_slave_1: left promiscuous mode [ 90.558740][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.566216][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.580537][ T41] veth1_macvtap: left promiscuous mode [ 90.592299][ T41] veth0_macvtap: left promiscuous mode [ 90.608006][ T41] veth1_vlan: left promiscuous mode [ 90.613337][ T29] audit: type=1400 audit(1756464833.333:3287): avc: denied { mount } for pid=6767 comm="syz.5.1218" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.635346][ T29] audit: type=1400 audit(1756464833.333:3288): avc: denied { write } for pid=6767 comm="syz.5.1218" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.668527][ T41] veth0_vlan: left promiscuous mode [ 90.674572][ T29] audit: type=1400 audit(1756464833.383:3289): avc: denied { unmount } for pid=3773 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.727990][ T29] audit: type=1400 audit(1756464833.443:3290): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 90.748075][ T29] audit: type=1400 audit(1756464833.443:3291): avc: denied { map } for pid=6771 comm="syz.4.1220" path="socket:[16002]" dev="sockfs" ino=16002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 90.771182][ T29] audit: type=1400 audit(1756464833.443:3292): avc: denied { ioctl } for pid=6769 comm="syz.2.1229" path="socket:[16690]" dev="sockfs" ino=16690 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.814338][ T6779] Invalid ELF header magic: != ELF [ 90.840293][ T41] team0 (unregistering): Port device team_slave_1 removed [ 90.849668][ T41] team0 (unregistering): Port device team_slave_0 removed [ 90.855658][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 90.884404][ T6775] veth0: entered promiscuous mode [ 90.889577][ T6777] bridge0: entered allmulticast mode [ 90.895448][ T6783] veth0 (unregistering): left promiscuous mode [ 91.053940][ T6794] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1227'. [ 91.094536][ T6741] chnl_net:caif_netlink_parms(): no params data found [ 91.176726][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.183975][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.246218][ T6741] bridge_slave_0: entered allmulticast mode [ 91.256080][ T6741] bridge_slave_0: entered promiscuous mode [ 91.278049][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.285165][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.309038][ T6741] bridge_slave_1: entered allmulticast mode [ 91.322601][ T6741] bridge_slave_1: entered promiscuous mode [ 91.365799][ T6741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.385871][ T6741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.409803][ T6741] team0: Port device team_slave_0 added [ 91.417292][ T6741] team0: Port device team_slave_1 added [ 91.446651][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.453673][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.479596][ T6741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.480643][ T6804] smc: net device bond0 applied user defined pnetid SYZ0 [ 91.491015][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.504293][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.530189][ T6741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.540833][ T6805] smc: net device bond0 erased user defined pnetid SYZ0 [ 91.571696][ T6741] hsr_slave_0: entered promiscuous mode [ 91.577761][ T6741] hsr_slave_1: entered promiscuous mode [ 91.580190][ T6807] loop3: detected capacity change from 0 to 512 [ 91.590975][ T6807] EXT4-fs (loop3): orphan cleanup on readonly fs [ 91.597933][ T6807] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 91.612625][ T6741] debugfs: 'hsr0' already exists in 'hsr' [ 91.618349][ T6741] Cannot create hsr debugfs directory [ 91.628498][ T6807] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 91.640079][ T6807] EXT4-fs (loop3): 1 truncate cleaned up [ 91.647286][ T6807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.663477][ T6807] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 91.691537][ T6807] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 0 [ 91.733364][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.789829][ T6813] loop5: detected capacity change from 0 to 128 [ 91.798373][ T6813] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.810944][ T6813] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.835001][ T6741] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 91.889767][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'. [ 91.902249][ T6741] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 91.918370][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'. [ 91.927921][ T6741] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 91.945875][ T6741] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 91.979433][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'. [ 92.058946][ T6741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.096841][ T6741] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.118204][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.125312][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.159774][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.166872][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.213835][ T6741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.326005][ T6741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.487207][ T6741] veth0_vlan: entered promiscuous mode [ 92.499516][ T6741] veth1_vlan: entered promiscuous mode [ 92.529656][ T6741] veth0_macvtap: entered promiscuous mode [ 92.539470][ T6741] veth1_macvtap: entered promiscuous mode [ 92.554362][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.567719][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.581572][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.592783][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.617352][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.632701][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.667926][ T6857] tipc: Started in network mode [ 92.672901][ T6857] tipc: Node identity fef5d0c91544, cluster identity 4711 [ 92.680101][ T6857] tipc: Enabled bearer , priority 0 [ 92.688692][ T6857] syzkaller0: entered promiscuous mode [ 92.694521][ T6857] syzkaller0: entered allmulticast mode [ 92.766060][ T6859] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1233'. [ 92.779667][ T6857] tipc: Resetting bearer [ 92.807861][ T6856] tipc: Resetting bearer [ 92.928936][ T6856] tipc: Disabling bearer [ 92.966729][ T3773] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.019017][ T6873] loop5: detected capacity change from 0 to 512 [ 93.029670][ T6873] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.042442][ T6875] loop6: detected capacity change from 0 to 512 [ 93.048820][ T6873] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1243: corrupted in-inode xattr: overlapping e_value [ 93.070806][ T6875] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.090290][ T6873] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1243: couldn't read orphan inode 15 (err -117) [ 93.103472][ T6875] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.1244: corrupted in-inode xattr: overlapping e_value [ 93.131039][ T6873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.144078][ T6875] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1244: couldn't read orphan inode 15 (err -117) [ 93.165652][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.189718][ T6875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.224085][ T6881] $Hÿ: renamed from bond0 [ 93.230814][ T6881] $Hÿ: entered promiscuous mode [ 93.235849][ T6881] bond_slave_0: entered promiscuous mode [ 93.241678][ T6881] bond_slave_1: entered promiscuous mode [ 93.247435][ T6881] batadv0: entered promiscuous mode [ 93.384275][ T6883] netlink: 'syz.5.1246': attribute type 1 has an invalid length. [ 93.392208][ T6883] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1246'. [ 93.536797][ T6889] loop5: detected capacity change from 0 to 512 [ 93.554690][ T6889] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 93.588292][ T6889] EXT4-fs (loop5): 1 truncate cleaned up [ 93.605573][ T6889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.701488][ T6741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.758233][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.815208][ T6896] sctp: [Deprecated]: syz.4.1250 (pid 6896) Use of int in max_burst socket option. [ 93.815208][ T6896] Use struct sctp_assoc_value instead [ 93.866238][ T6901] netlink: 'syz.4.1250': attribute type 4 has an invalid length. [ 93.886976][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1252'. [ 93.921142][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.928938][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.952868][ T6900] $Hÿ: (slave batadv0): Releasing backup interface [ 93.960045][ T6900] batadv0 (unregistering): left promiscuous mode [ 94.631060][ T6903] Set syz1 is full, maxelem 65536 reached [ 94.751374][ T6932] netlink: 'syz.6.1263': attribute type 39 has an invalid length. [ 94.813687][ T6933] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 94.820111][ T6933] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 95.088147][ T6936] loop3: detected capacity change from 0 to 2048 [ 95.116099][ T6936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.153159][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.305267][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 95.333135][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 95.333185][ T29] audit: type=1326 audit(1756464838.063:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.3.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bb5985ba7 code=0x7ffc0000 [ 95.362749][ T29] audit: type=1326 audit(1756464838.063:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.3.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bb592ade9 code=0x7ffc0000 [ 95.386072][ T29] audit: type=1326 audit(1756464838.063:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.3.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f1bb598ebe9 code=0x7ffc0000 [ 95.410321][ T29] audit: type=1326 audit(1756464838.133:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.3.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bb5985ba7 code=0x7ffc0000 [ 95.433882][ T29] audit: type=1326 audit(1756464838.133:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.3.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bb592ade9 code=0x7ffc0000 [ 95.457188][ T29] audit: type=1326 audit(1756464838.143:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.3.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f1bb598ebe9 code=0x7ffc0000 [ 95.480576][ T29] audit: type=1326 audit(1756464838.143:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.3.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bb5985ba7 code=0x7ffc0000 [ 95.503891][ T29] audit: type=1326 audit(1756464838.143:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.3.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bb592ade9 code=0x7ffc0000 [ 95.527225][ T29] audit: type=1326 audit(1756464838.143:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.3.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f1bb598ebe9 code=0x7ffc0000 [ 95.550598][ T29] audit: type=1326 audit(1756464838.153:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.3.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bb5985ba7 code=0x7ffc0000 [ 95.586074][ T6961] lo speed is unknown, defaulting to 1000 [ 95.593744][ T6961] lo speed is unknown, defaulting to 1000 [ 95.600006][ T6961] lo speed is unknown, defaulting to 1000 [ 95.607763][ T6961] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 95.621254][ T6961] lo speed is unknown, defaulting to 1000 [ 95.636467][ T6961] lo speed is unknown, defaulting to 1000 [ 95.642861][ T6961] lo speed is unknown, defaulting to 1000 [ 95.648935][ T6961] lo speed is unknown, defaulting to 1000 [ 95.655754][ T6961] lo speed is unknown, defaulting to 1000 [ 96.262373][ T6983] tipc: New replicast peer: 255.255.255.255 [ 96.268462][ T6983] tipc: Enabled bearer , priority 10 [ 96.310610][ T6978] Falling back ldisc for ttyS3. [ 96.394302][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 96.415561][ T6989] bond0: (slave batadv0): Releasing backup interface [ 96.431857][ T6989] batadv0 (unregistering): left promiscuous mode [ 96.626411][ T6994] lo speed is unknown, defaulting to 1000 [ 96.806896][ T7005] loop5: detected capacity change from 0 to 128 [ 96.815824][ T7005] vfat: Unknown parameter 'ÿÿ' [ 96.950594][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1299'. [ 96.970775][ T7028] tipc: Enabling of bearer rejected, failed to enable media [ 97.260421][ T3368] tipc: Node number set to 3954299081 [ 97.485213][ T7043] loop3: detected capacity change from 0 to 1024 [ 97.491901][ T7043] EXT4-fs: Ignoring removed orlov option [ 97.499825][ T7043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.762840][ T7055] 9pnet_fd: p9_fd_create_tcp (7055): problem connecting socket to 127.0.0.1 [ 97.765191][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.794317][ T7059] loop3: detected capacity change from 0 to 128 [ 97.819071][ T7059] vfat: Unknown parameter 'ÿÿ' [ 97.824670][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 97.890565][ T7076] netlink: 'syz.5.1317': attribute type 10 has an invalid length. [ 97.915511][ T7079] loop3: detected capacity change from 0 to 128 [ 98.004401][ T7081] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1319'. [ 98.325567][ T7096] loop5: detected capacity change from 0 to 1024 [ 98.332449][ T7096] EXT4-fs: Ignoring removed orlov option [ 98.340192][ T7096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.542102][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.560686][ T7102] loop5: detected capacity change from 0 to 1024 [ 98.567332][ T7102] EXT4-fs: Ignoring removed orlov option [ 98.574913][ T7102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.793011][ T3773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.811107][ T7113] loop5: detected capacity change from 0 to 164 [ 98.819051][ T7111] syzkaller0: entered promiscuous mode [ 98.824576][ T7111] syzkaller0: entered allmulticast mode [ 99.042823][ T7126] veth0: entered promiscuous mode [ 99.049951][ T7124] ref_ctr_offset mismatch. inode: 0x59f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 99.086372][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1333'. [ 99.273187][ T7140] tipc: Enabled bearer , priority 0 [ 99.291429][ T7140] tipc: Disabling bearer [ 99.404247][ T7155] loop6: detected capacity change from 0 to 1024 [ 99.410878][ T7155] EXT4-fs: Ignoring removed orlov option [ 99.418378][ T7155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.586066][ T6741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.627179][ T6239] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 99.634659][ T6239] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 99.642084][ T6239] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 99.650565][ T6239] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 100.075028][ T7171] lo speed is unknown, defaulting to 1000 [ 100.205694][ T7174] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 100.346478][ T29] kauditd_printk_skb: 1213 callbacks suppressed [ 100.346492][ T29] audit: type=1326 audit(1756464843.073:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.6.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86efa85ba7 code=0x7ffc0000 [ 100.377857][ T29] audit: type=1326 audit(1756464843.113:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.6.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86efa2ade9 code=0x7ffc0000 [ 100.401453][ T29] audit: type=1326 audit(1756464843.113:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.6.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86efa85ba7 code=0x7ffc0000 [ 100.424875][ T29] audit: type=1326 audit(1756464843.113:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.6.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86efa2ade9 code=0x7ffc0000 [ 100.448271][ T29] audit: type=1326 audit(1756464843.113:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.6.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f86efa8ebe9 code=0x7ffc0000 [ 100.479850][ T29] audit: type=1326 audit(1756464843.183:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.6.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86efa85ba7 code=0x7ffc0000 [ 100.503235][ T29] audit: type=1326 audit(1756464843.183:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.6.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86efa2ade9 code=0x7ffc0000 [ 100.526610][ T29] audit: type=1326 audit(1756464843.183:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.6.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f86efa8ebe9 code=0x7ffc0000 [ 100.551463][ T29] audit: type=1326 audit(1756464843.213:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.6.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86efa85ba7 code=0x7ffc0000 [ 100.574954][ T29] audit: type=1326 audit(1756464843.213:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.6.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86efa2ade9 code=0x7ffc0000 [ 100.587593][ T7178] loop3: detected capacity change from 0 to 512 [ 100.607802][ T7178] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.623839][ T7178] EXT4-fs (loop3): 1 truncate cleaned up [ 100.639311][ T7178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.684920][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.712709][ T7190] loop6: detected capacity change from 0 to 1024 [ 100.719615][ T7190] EXT4-fs: Ignoring removed orlov option [ 100.728775][ T7190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.860114][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 100.871149][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1360'. [ 100.880323][ T7199] netlink: 'syz.5.1360': attribute type 18 has an invalid length. [ 100.948074][ T4841] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.948582][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 100.961311][ T4841] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.965803][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1360'. [ 100.983304][ T7199] netlink: 'syz.5.1360': attribute type 18 has an invalid length. [ 100.991693][ T4841] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.024425][ T4841] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.126909][ T6741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.148781][ T7208] lo speed is unknown, defaulting to 1000 [ 101.600533][ T7221] tipc: Enabled bearer , priority 0 [ 101.607961][ T7221] syzkaller0: entered promiscuous mode [ 101.613575][ T7221] syzkaller0: entered allmulticast mode [ 101.631128][ T7221] tipc: Resetting bearer [ 101.637752][ T7220] tipc: Resetting bearer [ 101.645099][ T7220] tipc: Disabling bearer [ 101.694916][ T7223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1369'. [ 101.925239][ T7233] loop3: detected capacity change from 0 to 1024 [ 101.932842][ T7233] EXT4-fs: Ignoring removed orlov option [ 101.941225][ T7233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.967658][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.077002][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'. [ 102.425795][ T7251] lo speed is unknown, defaulting to 1000 [ 102.829673][ T7257] loop6: detected capacity change from 0 to 1024 [ 102.836468][ T7257] EXT4-fs: Ignoring removed orlov option [ 102.901288][ T7257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.926926][ T6741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.700402][ T7279] loop3: detected capacity change from 0 to 1024 [ 103.707037][ T7279] EXT4-fs: Ignoring removed orlov option [ 103.717742][ T7279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.748581][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.163664][ T7310] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 105.261152][ T7315] lo speed is unknown, defaulting to 1000 [ 105.489334][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 105.489429][ T29] audit: type=1326 audit(1756464848.213:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 105.597304][ T29] audit: type=1326 audit(1756464848.253:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 105.620967][ T29] audit: type=1326 audit(1756464848.253:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 105.644411][ T29] audit: type=1326 audit(1756464848.253:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 105.667925][ T29] audit: type=1326 audit(1756464848.253:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 105.691401][ T29] audit: type=1326 audit(1756464848.253:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 105.714907][ T29] audit: type=1326 audit(1756464848.253:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 105.738400][ T29] audit: type=1326 audit(1756464848.253:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 105.761899][ T29] audit: type=1326 audit(1756464848.253:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 105.782625][ T7328] loop6: detected capacity change from 0 to 1024 [ 105.785734][ T29] audit: type=1326 audit(1756464848.253:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fb42ebe9 code=0x7ffc0000 [ 105.792525][ T7328] EXT4-fs: Ignoring removed orlov option [ 105.854567][ T7328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.022166][ T7333] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1403'. [ 106.055896][ T6741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.095059][ T7341] loop6: detected capacity change from 0 to 512 [ 106.101827][ T7341] EXT4-fs: Ignoring removed nobh option [ 106.112028][ T7341] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.1409: corrupted inode contents [ 106.124563][ T7341] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.1409: mark_inode_dirty error [ 106.136594][ T7341] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.1409: corrupted inode contents [ 106.149136][ T7341] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.1409: mark_inode_dirty error [ 106.161353][ T7341] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1409: Failed to acquire dquot type 0 [ 106.173352][ T7341] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1409: corrupted inode contents [ 106.185706][ T7341] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.1409: mark_inode_dirty error [ 106.197267][ T7341] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1409: corrupted inode contents [ 106.209718][ T7341] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1409: mark_inode_dirty error [ 106.221315][ T7341] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1409: corrupted inode contents [ 106.233426][ T7341] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 106.242067][ T7341] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1409: corrupted inode contents [ 106.254139][ T7341] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.1409: mark_inode_dirty error [ 106.265338][ T7341] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 106.274625][ T7341] EXT4-fs (loop6): 1 truncate cleaned up [ 106.280652][ T7341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.293708][ T7341] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.312177][ T7349] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 106.328060][ T6741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.588846][ T7360] lo speed is unknown, defaulting to 1000 [ 106.957961][ T7368] lo speed is unknown, defaulting to 1000 [ 107.260524][ T7372] loop3: detected capacity change from 0 to 1024 [ 107.318566][ T7372] EXT4-fs: Ignoring removed orlov option [ 107.352734][ T7372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.385776][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.492539][ T7393] loop3: detected capacity change from 0 to 1024 [ 107.516522][ T7393] EXT4-fs: Ignoring removed orlov option [ 107.524289][ T7393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.762300][ T7403] ================================================================== [ 107.770396][ T7403] BUG: KCSAN: data-race in filemap_read / filemap_read [ 107.777241][ T7403] [ 107.779560][ T7403] read to 0xffff8881049bd228 of 8 bytes by task 7393 on cpu 0: [ 107.787097][ T7403] filemap_read+0x6f/0xa00 [ 107.791510][ T7403] generic_file_read_iter+0x79/0x330 [ 107.796785][ T7403] ext4_file_read_iter+0x1cc/0x290 [ 107.801894][ T7403] copy_splice_read+0x442/0x660 [ 107.806736][ T7403] splice_direct_to_actor+0x290/0x680 [ 107.812107][ T7403] do_splice_direct+0xda/0x150 [ 107.816873][ T7403] do_sendfile+0x380/0x650 [ 107.821296][ T7403] __x64_sys_sendfile64+0x105/0x150 [ 107.826498][ T7403] x64_sys_call+0x2bb0/0x2ff0 [ 107.831169][ T7403] do_syscall_64+0xd2/0x200 [ 107.835677][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.841580][ T7403] [ 107.843902][ T7403] write to 0xffff8881049bd228 of 8 bytes by task 7403 on cpu 1: [ 107.851534][ T7403] filemap_read+0x974/0xa00 [ 107.856037][ T7403] generic_file_read_iter+0x79/0x330 [ 107.861314][ T7403] ext4_file_read_iter+0x1cc/0x290 [ 107.866427][ T7403] copy_splice_read+0x442/0x660 [ 107.871290][ T7403] splice_direct_to_actor+0x290/0x680 [ 107.876652][ T7403] do_splice_direct+0xda/0x150 [ 107.881403][ T7403] do_sendfile+0x380/0x650 [ 107.885812][ T7403] __x64_sys_sendfile64+0x105/0x150 [ 107.891005][ T7403] x64_sys_call+0x2bb0/0x2ff0 [ 107.895665][ T7403] do_syscall_64+0xd2/0x200 [ 107.900155][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.906031][ T7403] [ 107.908336][ T7403] value changed: 0x000000000000024f -> 0x0000000000000250 [ 107.915423][ T7403] [ 107.917728][ T7403] Reported by Kernel Concurrency Sanitizer on: [ 107.923860][ T7403] CPU: 1 UID: 0 PID: 7403 Comm: syz.3.1435 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.933560][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.943597][ T7403] ================================================================== [ 108.017912][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.