last executing test programs: 1m28.294987112s ago: executing program 3 (id=336): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100203, 0x20, 0xfffffffb, 0x0, 0x0, 0xec, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000002c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x20000010) 1m28.248178644s ago: executing program 3 (id=337): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000280)={0x0, 0x334e, 0x10, 0x2004, 0x1000030e}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)) 1m27.384070842s ago: executing program 3 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%pI4 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 1m27.274155957s ago: executing program 3 (id=364): socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000480)='./file2\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[], 0x46, 0x2c1, &(0x7f0000001880)="$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") socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) syz_emit_ethernet(0x4f, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x9, 0x0) 1m26.424081133s ago: executing program 3 (id=383): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) syz_open_procfs(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x80, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m26.153139085s ago: executing program 3 (id=385): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m26.152312485s ago: executing program 32 (id=385): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m25.518397043s ago: executing program 1 (id=398): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3afc, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x8000000000}, 0x18) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) 1m25.388311228s ago: executing program 1 (id=402): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 1m25.330497s ago: executing program 1 (id=404): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") r2 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1m24.88895071s ago: executing program 0 (id=407): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1m24.835217012s ago: executing program 1 (id=408): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0x440, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 1m24.777632334s ago: executing program 0 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0xbc3}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 1m24.691954339s ago: executing program 0 (id=412): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b742f12af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x699, &(0x7f0000000140)="$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") write$binfmt_script(r2, &(0x7f00000012c0)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m24.637930671s ago: executing program 0 (id=413): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x24, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r3, 0x3, 0x3) 1m24.451808829s ago: executing program 1 (id=416): socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x569080, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1m24.304956115s ago: executing program 0 (id=417): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1m24.20127276s ago: executing program 1 (id=418): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000000c0)={0x80, 0x17, 0x6, 0x3, 0x0, 0x6e9, 0x0}) 1m24.201109409s ago: executing program 33 (id=418): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000000c0)={0x80, 0x17, 0x6, 0x3, 0x0, 0x6e9, 0x0}) 1m24.112994903s ago: executing program 0 (id=420): unshare(0x22020600) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x24, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7e, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) 1m24.112434173s ago: executing program 34 (id=420): unshare(0x22020600) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x24, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7e, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) 1m22.407107527s ago: executing program 5 (id=386): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3000214, &(0x7f00000001c0)=ANY=[], 0x0, 0x33c, &(0x7f00000002c0)="$eJzs3M1LI2ccwPFfXk0imhxKSwvFh/bSXoaY9lwaikJpoKKmVAvCqJM2ZJpIJlhSStVTr6X3ngo9iEdvQus/4KW37mUve8tlYQ8ry7JZ5s28amI2blz9fmCZZ57n+c08T57J8pvBSePb338sFSytoNckGFMSEBE5F0lJUHwBbxt0ylFpty8fTz/5//2VtfWvsrncwrJSi9nVTzJKqdm5f376Je51O5mSs9RG43Hm0dnbZ+82Xqz+ULRU0VLlSk3parPysKZvmobaLlolTakl09AtQxXLllF12ytue8Gs7OzUlV7enknsVA3LUnq5rkpGXdUqqlatK/17vVhWmqapmYRgAHtBl/XsiNFbYx4Nbki1mtVDIhLvackfTmRAAABgorrz/6Cd0o+U/8usk//bnVv5/9EHp7Xpb45nT+zYjcZJtF/+/+kD91gd+X9MREbJ//+Ua+T/vRnR/ZI/XB49/8ftMBftqQp07Nn5f8L7/joOvjtKOwXyfwAAAAAAAAAAAAAAAAAAAAAA3gTnzWay2Wwm/a3/r/UKgbePO+my9Z8SkZi9+k3W/y5bWVuXmPPinr3G5m+7+d28u/U6nIqIKYakI85u84Jd9t88UraU/GvuOfHP7G3IackWpOjEz0tSUm58yIuyy4tf5hbmlcuLv3hNKdEen5GkvNV9fjc+0xlvj39vNx+Vjz5si9ckKf9tSUVM2XbO3Yr/dV6pL77OdcXH3ZMAAAAAAHAHaEoFvNvnVOf9r3uXrmlK9W93f2UkW3AeExmSlqQ8739/nu57fx5Ovhee9OwBAAAAALgfrPrPJd00jeoVhbgM7jN6ITxc52hXTeSqzqG2GQ47nqjzIEPkVef115CfakfB/0OKjqaYVznaePz5j2299ttrgjJEVLh78HN2hbrm2Q+8iVzU+I+Nopd8zrLUe5zgFVdCZGzX8zt//P10fF+Qz479K2Bw54NBB4xfciHFuq86pxC56f93AAAAALx+raTfr/m8vTkwkUEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDP3MhP+nUVJj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LZ4GQAA///hFPFh") open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1m22.406988427s ago: executing program 35 (id=386): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3000214, &(0x7f00000001c0)=ANY=[], 0x0, 0x33c, &(0x7f00000002c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1m19.540290091s ago: executing program 6 (id=453): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1m19.389161887s ago: executing program 6 (id=456): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) finit_module(r3, 0x0, 0x3) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m19.283091632s ago: executing program 6 (id=457): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000340)={0x0, 0xcb9c, 0x13200, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) listen(r0, 0xfff) accept4(r0, 0x0, 0x0, 0x0) 1m18.3940046s ago: executing program 6 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x21a5499, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m18.318427144s ago: executing program 6 (id=473): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) ptrace(0x4208, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) creat(&(0x7f0000000240)='./bus\x00', 0x76) 1m18.066240034s ago: executing program 6 (id=478): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 1m18.038966326s ago: executing program 36 (id=478): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 4.17400159s ago: executing program 8 (id=1630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x24, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r3, 0x3, 0x3) 3.699196291s ago: executing program 8 (id=1636): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 3.274151319s ago: executing program 8 (id=1649): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 2.500880642s ago: executing program 2 (id=1670): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010102, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0xd72}, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x19}, 0x0, @in=@empty, 0xfffffffd}}, 0xe4) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0x850003d1) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getresgid(&(0x7f0000000840), &(0x7f0000000880), 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0xfffe}, {@in6=@local, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf26}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x20004000) 2.373442248s ago: executing program 2 (id=1674): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x6, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.885051219s ago: executing program 4 (id=1689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f00000004c0)='\x7f\xb7\xc1\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01aA$\xf6j\x89\xd9_\xa0\x84\xeaT\x94\xaexuTW\xa7\x93\x8d\xbd\xe6~\xa8\x82\xe7LSw\x8b\x0f<\xe6\xbdh\x97\xd4\xb8\x97\xc0\xd2\x8e\x83#`yx\x96\x10M\xef\xab\xcaR*\xf8a\xdb?\xe0\xd5\xa8\xf1\x9f\\\x17I\x1b\xda$\n\x97\x1d\x8e\xad\xdc\x11\xce\x1e\xe4\xa9\xdb\xfc\xfa\xb5\xcb\xec=\xb2\xb7x\xf6\xa7H\r\xaf\xf4|\x9e\x96?%\x9a\xb0\x00V\xca\xf7b\xc1 \x7f\xb5\x87\x16\xe1?9\xb5\xb8sn\xc8\xa8\xbf7{\x80\x12\xfd\a\x00\xef}\x0484\nU\x14\xfc\xb0mV~\x9d\xa6\x01\f\xef\x8f(.[8\xbd\xdf\x1a\xa6\x80\xa2\x8b,\x11/\x02\"\x10\xf7\xd0l\xbd\xfa\xcd$?I\x82K\v\xcc\x19\xdc\xdb\x87\xbd\xe4\xac\xe2\xac\x06\xc5\x88_\x84K\x8dm\xac\x9b\xe7#\xcb\xa9}\x8f\xe0\x9dYb\x88Z\x9c\xb5\xcbj\n\x1b\xee\x1ev\x01\xaf']}) 1.541259673s ago: executing program 9 (id=1692): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(r2) 1.519109125s ago: executing program 9 (id=1693): syz_clone(0x110000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018010000716c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.381628891s ago: executing program 9 (id=1694): fcntl$notify(0xffffffffffffffff, 0x402, 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x60002016}) fcntl$setpipe(r2, 0x407, 0x10005) 1.093205213s ago: executing program 9 (id=1695): syz_emit_ethernet(0x62f, &(0x7f0000000980)=ANY=[], 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006805be7b9cad60e930060e525a21f2caf4b7c608858fdaaf7ba3f7546ce72badfd249971b6f63a142d01196363a547d39ff9ce6d30d2d294c97076ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000700000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.092745523s ago: executing program 2 (id=1696): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r5, 0x3, {0x2, 0x0, 0x6}, 0x1}, 0x18) close(r1) 1.017373317s ago: executing program 9 (id=1697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.017123957s ago: executing program 4 (id=1698): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}], 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fspick(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 1.015817077s ago: executing program 2 (id=1699): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 988.282558ms ago: executing program 4 (id=1701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) syz_clone(0x60220000, 0x0, 0x0, 0x0, 0x0, 0x0) 801.181426ms ago: executing program 7 (id=1703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x542) 701.56797ms ago: executing program 7 (id=1704): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x1, 0x0) bind$unix(r2, &(0x7f00000002c0)=@file={0xa00, './file0\x00'}, 0x6e) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x39c507a}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r4, &(0x7f0000000340)="11232634dd021a4f5fad0a388aced1ee7eaa83b3b663c2477462e6d10601c776e0a8a0fa2d93478954515e104146ecc073ea5abd84648b879ef8756ba80fbe2928d7f7b3eeb7425a70d08935b2f1ab8091831576107b313f7f0a053c50f0f6f3462dde1ea1bc30456dae9f723d77a46bea3f5431c1f94c9ed8f67a221e193a11c991e94f6f7f9f942c32a4489778ff8ee9d43cb6cf979e59010b8f0ca11e", &(0x7f0000000400)=""/69, 0x4}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 701.43445ms ago: executing program 8 (id=1705): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x8008044}, 0x0) 633.370873ms ago: executing program 8 (id=1706): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt(r0, 0x28, 0x6, &(0x7f0000000080)=""/54, &(0x7f00000000c0)=0x36) r1 = memfd_create(&(0x7f0000000a00)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c\x87\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xb0\x14\xc2\xeb\xf9\xce\xad\xd6\xa7\xf7\f\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)p4\x96\xc1\xd8^\xa6\xea\x17\x1c\xacN\xfa\xff\xc9\xf8;\v\x87?\xb5\xe9\xc1\xebh\x94\xcb\x998\x1b\"LuZ\xae\r\xd4\x10\xe2\xda\xbd\xe1\x11\x8e%\xe0\xb4\xbaj\xb5B\xfd\x9c\x0f\x99;\xef\xefc\xe0t^I\'\a\x00\x00\x00\x00\x92\x00\x00Su:+\x10\x16\xc3l\xf1\r)U\xf9\x92\xb7`\x147eN\t\x92\x83<\xd7\xc4\xc3\xfa\x14\xb5\xff{\xe4\xe0d\xb1F6\x8c\xce4\x98\xa2t\f\xf7\xe0\x85\x9c\xb2\xea\xe7\xa5\xdf\xa3)3\xbc\x1e\xab\xc5vt\x00\xac\xe0O\x127,M\x14\x85\xbaM\xdcYJ\x87g6Z24\t\xe1\xa1<\xf1\xe3u\xf02\xe5%U^$3\xdf\xab\xb0\xc3e\xcbo\x1b\xe5R\xef|R \xf5d\xad\xa1+\xc0\xdc\xf2\"\x8c\x82\x9d\xe0\x82\xb4Ap\xb3L_\xa1\x84\xdb\v\x96\x7f\xef\xdb\x992\x8e\\\xfc\xa1\xc2\x8b\xd04\x05h\xd1h\xaa\x88\r(\x9er\x1f\x96v\xa9\x00', 0x2) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0xfebe) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r5, 0x1, 0xff1f, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) 563.909356ms ago: executing program 8 (id=1707): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x6, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 517.984048ms ago: executing program 7 (id=1708): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x0, 0x178, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x6}, 0x10) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) 339.851365ms ago: executing program 7 (id=1709): r0 = socket(0xa, 0x5, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) close(0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000b00), 0x402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x40000000, 0x2000000}) 294.673588ms ago: executing program 7 (id=1710): unshare(0x22020400) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e1d, 0x80000003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/103, 0x67}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000700)=""/106, 0x6a}, {&(0x7f0000000600)=""/93, 0x5d}], 0x5, 0x91, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x100003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 209.236051ms ago: executing program 7 (id=1711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) pipe(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x3, [0x400, 0x3], 0x4}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 138.083945ms ago: executing program 2 (id=1712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 134.619175ms ago: executing program 4 (id=1713): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfffffffffffffe5f) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_spirange={0x2, 0x10, 0xffffffff}]}, 0x50}}, 0x0) 0s ago: executing program 4 (id=1717): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x15fc, 0x7721, 0x1a, 0x0, 0x0) kernel console output (not intermixed with test programs): llmulticast mode [ 75.281566][ T6528] veth1_virt_wifi: entered allmulticast mode [ 75.294825][ T6528] veth0_virt_wifi: entered allmulticast mode [ 75.302045][ T6528] veth1_vlan: entered allmulticast mode [ 75.308735][ T6528] veth0_vlan: entered allmulticast mode [ 75.318214][ T6528] vlan0: entered allmulticast mode [ 75.323559][ T6528] vlan1: entered allmulticast mode [ 75.329336][ T6528] macvlan0: entered allmulticast mode [ 75.336479][ T6528] macvlan1: entered allmulticast mode [ 75.343040][ T6528] ipvlan0: entered allmulticast mode [ 75.348370][ T6528] ipvlan1: entered allmulticast mode [ 75.358414][ T6528] veth1_macvtap: entered allmulticast mode [ 75.383393][ T6528] veth0_macvtap: entered allmulticast mode [ 75.405898][ T6528] macvtap0: entered allmulticast mode [ 75.412677][ T6528] macsec0: entered allmulticast mode [ 75.418995][ T6528] geneve0: entered allmulticast mode [ 75.435710][ T6528] geneve1: entered allmulticast mode [ 75.446960][ T6528] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 75.465328][ T6528] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 75.483020][ T6528] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 75.492037][ T6528] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 75.500124][ T6528] veth2: entered allmulticast mode [ 75.505538][ T6528] veth3: entered allmulticast mode [ 75.523921][ T41] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.537250][ T41] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.559171][ T6600] netlink: 16 bytes leftover after parsing attributes in process `syz.7.677'. [ 75.673680][ T41] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.682700][ T41] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.853200][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.233952][ T6663] loop4: detected capacity change from 0 to 1024 [ 76.319096][ T6663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.335414][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 76.355960][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.549248][ T6695] loop8: detected capacity change from 0 to 2048 [ 76.551113][ T6700] loop4: detected capacity change from 0 to 1024 [ 76.601132][ T6700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.614200][ T6695] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.670403][ T6700] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 19: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 76.726654][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.782593][ T6700] SELinux: Context @ is not valid (left unmapped). [ 76.823365][ T6716] veth2: entered promiscuous mode [ 76.828432][ T6716] veth2: entered allmulticast mode [ 76.834105][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.872147][ T5533] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.920617][ T5533] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.169934][ T5517] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 77.177948][ T5517] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 77.207736][ T6758] loop2: detected capacity change from 0 to 2048 [ 77.239742][ T6758] ext3: Unknown parameter 'fsmagic' [ 77.286387][ T6761] ip6gre2: entered allmulticast mode [ 77.410505][ T6772] netlink: 'syz.8.712': attribute type 1 has an invalid length. [ 77.418647][ T6772] netlink: 224 bytes leftover after parsing attributes in process `syz.8.712'. [ 77.585964][ T6783] loop8: detected capacity change from 0 to 1024 [ 77.602174][ T6783] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.610625][ T6783] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 77.621550][ T6783] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 77.638325][ T6783] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 77.648483][ T6783] EXT4-fs error (device loop8): ext4_get_journal_inode:5808: comm syz.8.717: inode #1: comm syz.8.717: iget: illegal inode # [ 77.662124][ T6783] EXT4-fs (loop8): Remounting filesystem read-only [ 77.668631][ T6783] EXT4-fs (loop8): no journal found [ 78.724869][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 78.735648][ T6823] bond0: (slave bond_slave_0): Releasing backup interface [ 78.754433][ T6823] bond0: (slave bond_slave_1): Releasing backup interface [ 78.771690][ T6823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.775246][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.733'. [ 78.779197][ T6823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.797317][ T6823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.801277][ T6830] netlink: 'syz.9.735': attribute type 1 has an invalid length. [ 78.804760][ T6823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.820170][ T6830] netlink: 224 bytes leftover after parsing attributes in process `syz.9.735'. [ 78.831857][ T6823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.936130][ T6839] loop7: detected capacity change from 0 to 1024 [ 78.967746][ T6839] EXT4-fs: Ignoring removed orlov option [ 78.989634][ T6839] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.013334][ T6849] loop2: detected capacity change from 0 to 1024 [ 79.047276][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 79.047291][ T29] audit: type=1400 audit(1763988219.355:1119): avc: denied { connect } for pid=6854 comm="syz.4.743" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.074126][ T29] audit: type=1400 audit(1763988219.355:1120): avc: denied { write } for pid=6854 comm="syz.4.743" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.115999][ T4750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.117496][ T6849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.148356][ T6857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.156571][ T6849] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.212414][ T6849] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.740: bg 0: block 393: padding at end of block bitmap is not set [ 79.226845][ T29] audit: type=1400 audit(1763988219.525:1121): avc: denied { create } for pid=6848 comm="syz.2.740" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 79.308681][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.409774][ T6880] loop2: detected capacity change from 0 to 128 [ 79.426957][ T6878] bridge_slave_0: left allmulticast mode [ 79.432755][ T6878] bridge_slave_0: left promiscuous mode [ 79.438463][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.459320][ T6878] bridge_slave_1: left allmulticast mode [ 79.465044][ T6878] bridge_slave_1: left promiscuous mode [ 79.470718][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.481416][ T6878] bond0: (slave bond_slave_0): Releasing backup interface [ 79.499590][ T6883] loop9: detected capacity change from 0 to 1024 [ 79.513811][ T6878] bond0: (slave bond_slave_1): Releasing backup interface [ 79.521114][ T6883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.547013][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.554550][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.559210][ T6883] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 79.572587][ T6883] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 79.585306][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.592922][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.600723][ T6883] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 79.610875][ T6883] EXT4-fs error (device loop9): ext4_get_journal_inode:5808: comm syz.9.754: inode #1: comm syz.9.754: iget: illegal inode # [ 79.628798][ T6878] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.635397][ T6883] EXT4-fs (loop9): Remounting filesystem read-only [ 79.651556][ T6883] EXT4-fs (loop9): no journal found [ 79.827744][ T6898] loop8: detected capacity change from 0 to 512 [ 79.835227][ T6898] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.844685][ T29] audit: type=1326 audit(1763988220.135:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 79.868024][ T29] audit: type=1326 audit(1763988220.135:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 79.891547][ T29] audit: type=1326 audit(1763988220.135:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 79.914963][ T29] audit: type=1326 audit(1763988220.135:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 79.938458][ T29] audit: type=1326 audit(1763988220.135:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 79.961869][ T29] audit: type=1326 audit(1763988220.135:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 79.985198][ T29] audit: type=1326 audit(1763988220.135:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 80.028352][ T3419] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 80.036382][ T3419] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.049637][ T6898] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.096043][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.231563][ T6917] syzkaller0: entered promiscuous mode [ 80.237101][ T6917] syzkaller0: entered allmulticast mode [ 80.307749][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 80.333902][ T6920] netlink: 16 bytes leftover after parsing attributes in process `syz.9.769'. [ 80.356417][ T6922] loop4: detected capacity change from 0 to 1024 [ 80.370387][ T6922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.397556][ T6922] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 80.408475][ T6922] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 80.436106][ T6922] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.446313][ T6922] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.770: inode #1: comm syz.4.770: iget: illegal inode # [ 80.468247][ T6922] EXT4-fs (loop4): Remounting filesystem read-only [ 80.474951][ T6922] EXT4-fs (loop4): no journal found [ 80.522174][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.596472][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 80.610785][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 80.768060][ T6945] loop9: detected capacity change from 0 to 1024 [ 80.778897][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 80.786229][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 80.793347][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 80.800146][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 80.806901][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 80.814139][ T6945] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.826605][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 80.833249][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 80.839541][ T6945] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.865120][ T6945] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.778: bg 0: block 393: padding at end of block bitmap is not set [ 80.910098][ T5517] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.927423][ T5517] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.948004][ T5064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.997992][ T6964] loop9: detected capacity change from 0 to 512 [ 81.012000][ T6964] EXT4-fs: Mount option(s) incompatible with ext2 [ 81.169582][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 81.251599][ T6977] bridge: RTM_NEWNEIGH with invalid ether address [ 81.258773][ T6974] loop2: detected capacity change from 0 to 1024 [ 81.268439][ T6974] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.288163][ T6974] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 81.299154][ T6974] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 81.309106][ T6974] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 81.319267][ T6974] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.788: inode #1: comm syz.2.788: iget: illegal inode # [ 81.334118][ T6974] EXT4-fs (loop2): Remounting filesystem read-only [ 81.340715][ T6974] EXT4-fs (loop2): no journal found [ 81.511775][ T6994] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.584557][ T6994] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.665888][ T6994] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.724638][ T6994] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.784903][ T41] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.797234][ T41] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.816875][ T41] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.830993][ T41] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.949790][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 81.957755][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 81.983194][ T7003] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.063028][ T7003] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.124484][ T7003] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.182868][ T7003] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.340574][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.801'. [ 82.496683][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.9.803'. [ 82.601022][ T6066] Bluetooth: hci0: command 0x1003 tx timeout [ 82.607101][ T3657] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.159919][ T7025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.167197][ T7025] IPv6: NLM_F_CREATE should be set when creating new route [ 83.184718][ T7025] lo: entered allmulticast mode [ 83.193856][ T7027] loop7: detected capacity change from 0 to 1024 [ 83.206403][ T7025] tunl0: entered allmulticast mode [ 83.214097][ T7027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.224629][ T7025] gre0: entered allmulticast mode [ 83.234695][ T7027] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 83.245760][ T7027] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 83.255879][ T7027] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 83.266041][ T7027] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: comm syz.7.805: inode #1: comm syz.7.805: iget: illegal inode # [ 83.279446][ T7025] gretap0: entered allmulticast mode [ 83.289997][ T7027] EXT4-fs (loop7): Remounting filesystem read-only [ 83.296562][ T7027] EXT4-fs (loop7): no journal found [ 83.301923][ T7025] erspan0: entered allmulticast mode [ 83.308845][ T7025] ip_vti0: entered allmulticast mode [ 83.317432][ T7025] ip6_vti0: entered allmulticast mode [ 83.341253][ T7025] sit0: entered allmulticast mode [ 83.348931][ T7025] ip6tnl0: entered allmulticast mode [ 83.358492][ T7025] ip6gre0: entered allmulticast mode [ 83.366745][ T7025] syz_tun: entered allmulticast mode [ 83.373932][ T7025] ip6gretap0: entered allmulticast mode [ 83.381459][ T7025] vcan0: entered allmulticast mode [ 83.387559][ T7025] bond0: entered allmulticast mode [ 83.394565][ T7025] dummy0: entered allmulticast mode [ 83.401687][ T7025] nlmon0: entered allmulticast mode [ 83.407945][ T7025] caif0: entered allmulticast mode [ 83.413379][ T7025] batadv0: entered allmulticast mode [ 83.419989][ T7025] vxcan0: entered allmulticast mode [ 83.426048][ T7025] vxcan1: entered allmulticast mode [ 83.432129][ T7025] veth0: entered allmulticast mode [ 83.438289][ T7025] veth1: entered allmulticast mode [ 83.445204][ T7025] wg0: entered allmulticast mode [ 83.451267][ T7025] wg1: entered allmulticast mode [ 83.457198][ T7025] wg2: entered allmulticast mode [ 83.463463][ T7025] veth0_to_bridge: entered allmulticast mode [ 83.470677][ T7025] bridge_slave_0: entered allmulticast mode [ 83.477562][ T7025] veth1_to_bridge: entered allmulticast mode [ 83.485161][ T7025] bridge_slave_1: entered allmulticast mode [ 83.491967][ T7025] veth0_to_bond: entered allmulticast mode [ 83.498622][ T7025] bond_slave_0: entered allmulticast mode [ 83.505040][ T7025] veth1_to_bond: entered allmulticast mode [ 83.511897][ T7025] bond_slave_1: entered allmulticast mode [ 83.517840][ T7025] veth0_to_team: entered allmulticast mode [ 83.524926][ T7025] team_slave_0: entered allmulticast mode [ 83.530771][ T7025] veth0_to_batadv: entered allmulticast mode [ 83.537986][ T7025] batadv_slave_0: entered allmulticast mode [ 83.545235][ T7025] veth1_to_batadv: entered allmulticast mode [ 83.552321][ T7025] batadv_slave_1: entered allmulticast mode [ 83.559140][ T7025] xfrm0: entered allmulticast mode [ 83.565861][ T7025] veth0_to_hsr: entered allmulticast mode [ 83.572867][ T7025] hsr_slave_0: entered allmulticast mode [ 83.579188][ T7025] veth1_to_hsr: entered allmulticast mode [ 83.586250][ T7025] hsr_slave_1: entered allmulticast mode [ 83.592633][ T7025] hsr0: entered allmulticast mode [ 83.598533][ T7025] veth1_virt_wifi: entered allmulticast mode [ 83.605899][ T7025] veth0_virt_wifi: entered allmulticast mode [ 83.612838][ T7025] veth1_vlan: entered allmulticast mode [ 83.619259][ T7025] veth0_vlan: entered allmulticast mode [ 83.626954][ T7025] vlan0: entered allmulticast mode [ 83.632220][ T7025] macvlan0: entered allmulticast mode [ 83.638722][ T7025] macvlan1: entered allmulticast mode [ 83.645487][ T7025] ipvlan0: entered allmulticast mode [ 83.650813][ T7025] ipvlan1: entered allmulticast mode [ 83.656394][ T7025] veth1_macvtap: entered allmulticast mode [ 83.663586][ T7025] veth0_macvtap: entered allmulticast mode [ 83.670322][ T7025] macvtap0: entered allmulticast mode [ 83.676596][ T7025] macsec0: entered allmulticast mode [ 83.683011][ T7025] geneve0: entered allmulticast mode [ 83.689465][ T7025] geneve1: entered allmulticast mode [ 83.695525][ T7025] veth2: left promiscuous mode [ 83.700347][ T7025] veth3: entered allmulticast mode [ 83.705827][ T7025] syztnl0: entered allmulticast mode [ 83.711982][ T7025] macsec1: entered allmulticast mode [ 83.717345][ T7025] veth4: entered allmulticast mode [ 83.722700][ T7025] veth5: entered allmulticast mode [ 83.727992][ T7025] bridge1: entered allmulticast mode [ 83.734113][ T7025] veth6: left promiscuous mode [ 83.739050][ T7025] veth7: entered allmulticast mode [ 83.744647][ T7025] bridge2: entered allmulticast mode [ 83.751004][ T7025] vxlan0: entered allmulticast mode [ 83.756857][ T7025] netdevsim netdevsim2 eth0: entered allmulticast mode [ 83.763980][ T7025] netdevsim netdevsim2 eth1: entered allmulticast mode [ 83.770959][ T7025] netdevsim netdevsim2 eth2: entered allmulticast mode [ 83.777964][ T7025] netdevsim netdevsim2 eth3: entered allmulticast mode [ 83.785106][ T7025] veth8: entered allmulticast mode [ 83.790320][ T7025] veth9: entered allmulticast mode [ 83.795717][ T7025] ip6gre1: left promiscuous mode [ 83.801266][ T7025] syztnl1: entered allmulticast mode [ 83.806801][ T7039] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 83.815412][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.823815][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.854768][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.863281][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.872808][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.881368][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.891414][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.891628][ T7043] netlink: 'syz.4.812': attribute type 7 has an invalid length. [ 83.899908][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.907594][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 84.059748][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 84.059765][ T29] audit: type=1326 audit(1763988224.365:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.7.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e537665e7 code=0x7ffc0000 [ 84.111767][ T29] audit: type=1326 audit(1763988224.365:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.7.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e5370b829 code=0x7ffc0000 [ 84.135201][ T29] audit: type=1326 audit(1763988224.365:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.7.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 84.158645][ T29] audit: type=1326 audit(1763988224.375:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.7.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e537665e7 code=0x7ffc0000 [ 84.181937][ T29] audit: type=1326 audit(1763988224.375:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.7.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e5370b829 code=0x7ffc0000 [ 84.205170][ T29] audit: type=1326 audit(1763988224.375:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.7.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 84.228539][ T29] audit: type=1326 audit(1763988224.375:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.7.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e537665e7 code=0x7ffc0000 [ 84.251898][ T29] audit: type=1326 audit(1763988224.375:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.7.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e5370b829 code=0x7ffc0000 [ 84.275304][ T29] audit: type=1326 audit(1763988224.375:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.7.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 84.298609][ T29] audit: type=1326 audit(1763988224.405:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.7.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e537665e7 code=0x7ffc0000 [ 84.418873][ T7067] loop9: detected capacity change from 0 to 1024 [ 84.467160][ T7067] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.489504][ T7067] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.561311][ T5064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.616885][ T7083] netlink: 'syz.9.826': attribute type 12 has an invalid length. [ 84.676566][ T7092] loop2: detected capacity change from 0 to 512 [ 84.683736][ T7092] EXT4-fs: Ignoring removed i_version option [ 84.689762][ T7092] EXT4-fs: Ignoring removed bh option [ 84.704625][ T7094] netlink: 'syz.7.833': attribute type 1 has an invalid length. [ 84.712762][ T7092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.719028][ T7094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.726586][ T7092] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.752483][ T7094] bond1: (slave ip6gretap1): making interface the new active one [ 84.762114][ T7094] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 84.778372][ T7094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7094 comm=syz.7.833 [ 84.853008][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.006039][ T7120] loop9: detected capacity change from 0 to 512 [ 85.049951][ T7120] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.841: bg 0: block 248: padding at end of block bitmap is not set [ 85.074507][ T7120] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.841: Failed to acquire dquot type 1 [ 85.087720][ T7120] EXT4-fs (loop9): 1 truncate cleaned up [ 85.100709][ T7120] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.113854][ T7120] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.371458][ T7153] netlink: 96 bytes leftover after parsing attributes in process `syz.4.843'. [ 85.752828][ T3453] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.768721][ T3453] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.790916][ T3453] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.807220][ T3453] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.155745][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.7.850'. [ 86.174659][ T7250] tipc: Started in network mode [ 86.179599][ T7250] tipc: Node identity 92b152296439, cluster identity 4711 [ 86.186925][ T7250] tipc: Enabled bearer , priority 0 [ 86.223969][ T7236] tipc: Resetting bearer [ 86.251882][ T7236] tipc: Disabling bearer [ 86.343862][ T7273] loop8: detected capacity change from 0 to 1024 [ 86.354848][ T7273] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.361556][ T7273] EXT4-fs: Ignoring removed nobh option [ 86.403430][ T7273] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.478712][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.617785][ T7298] lo: left allmulticast mode [ 86.633277][ T7298] tunl0: left allmulticast mode [ 86.642619][ T7298] gre0: left allmulticast mode [ 86.654648][ T7298] gretap0: left allmulticast mode [ 86.662587][ T7298] erspan0: left allmulticast mode [ 86.669007][ T7298] ip_vti0: left allmulticast mode [ 86.675110][ T7298] ip6_vti0: left allmulticast mode [ 86.685840][ T7298] sit0: left allmulticast mode [ 86.694433][ T7298] ip6tnl0: left allmulticast mode [ 86.700465][ T7298] ip6gre0: left allmulticast mode [ 86.707413][ T7298] syz_tun: left allmulticast mode [ 86.736912][ T7298] ip6gretap0: left allmulticast mode [ 86.742307][ T7305] loop2: detected capacity change from 0 to 128 [ 86.750035][ T7298] bridge0: left allmulticast mode [ 86.756600][ T7298] bond0: left allmulticast mode [ 86.762677][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.773023][ T7298] dummy0: left allmulticast mode [ 86.778925][ T7298] nlmon0: left allmulticast mode [ 86.787167][ T7298] caif0: left allmulticast mode [ 86.792327][ T7298] net_ratelimit: 26 callbacks suppressed [ 86.792393][ T7298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.825763][ T7305] bio_check_eod: 16488 callbacks suppressed [ 86.825777][ T7305] syz.2.863: attempt to access beyond end of device [ 86.825777][ T7305] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 86.871247][ T7305] syz.2.863: attempt to access beyond end of device [ 86.871247][ T7305] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 86.892499][ T7305] syz.2.863: attempt to access beyond end of device [ 86.892499][ T7305] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 86.916758][ T5064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.948162][ T7305] syz.2.863: attempt to access beyond end of device [ 86.948162][ T7305] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 86.966677][ T7305] syz.2.863: attempt to access beyond end of device [ 86.966677][ T7305] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 86.983750][ T7305] syz.2.863: attempt to access beyond end of device [ 86.983750][ T7305] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 86.997939][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.008152][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.016716][ T7317] bridge: RTM_NEWNEIGH with invalid ether address [ 87.017209][ T7305] syz.2.863: attempt to access beyond end of device [ 87.017209][ T7305] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 87.036640][ T7305] syz.2.863: attempt to access beyond end of device [ 87.036640][ T7305] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 87.050972][ T7305] syz.2.863: attempt to access beyond end of device [ 87.050972][ T7305] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 87.064432][ T7305] syz.2.863: attempt to access beyond end of device [ 87.064432][ T7305] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 87.270120][ T7336] netlink: 'syz.7.876': attribute type 4 has an invalid length. [ 87.287683][ T7341] syz_tun: entered allmulticast mode [ 87.294253][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'. [ 87.313527][ T7346] loop7: detected capacity change from 0 to 512 [ 87.330451][ T7341] syz_tun (unregistering): left allmulticast mode [ 87.340171][ T7346] loop7: detected capacity change from 0 to 512 [ 87.348789][ T7346] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 87.368903][ T7346] EXT4-fs (loop7): 1 truncate cleaned up [ 87.390444][ T7346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.438406][ T7359] netlink: 2 bytes leftover after parsing attributes in process `syz.8.882'. [ 87.480088][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.480241][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.519339][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.528940][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.559546][ T7359] veth2: left promiscuous mode [ 87.564491][ T7359] veth2: left allmulticast mode [ 87.570511][ T1476] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.580018][ T1476] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.596231][ T1476] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.605802][ T1476] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.859734][ T7433] netlink: 'syz.9.894': attribute type 12 has an invalid length. [ 87.993471][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'. [ 88.027511][ T7454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.042781][ T7454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.054721][ T7450] netlink: 'syz.2.901': attribute type 5 has an invalid length. [ 88.062477][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 88.081244][ T7457] tipc: Started in network mode [ 88.086159][ T7457] tipc: Node identity ac14140f, cluster identity 4711 [ 88.094494][ T7457] tipc: New replicast peer: 255.255.255.255 [ 88.100541][ T7457] tipc: Enabled bearer , priority 10 [ 88.153012][ T4750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.203047][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.910'. [ 88.402728][ T7472] tipc: Started in network mode [ 88.407628][ T7472] tipc: Node identity ac14140f, cluster identity 4711 [ 88.424833][ T7472] tipc: New replicast peer: 255.255.255.32 [ 88.430737][ T7472] tipc: Enabled bearer , priority 10 [ 88.466857][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.911'. [ 88.475789][ T7482] tipc: Disabling bearer [ 88.622339][ T7489] netlink: 64 bytes leftover after parsing attributes in process `syz.9.918'. [ 88.815672][ T7504] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 89.230873][ T1047] tipc: Node number set to 2886997007 [ 89.244008][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 89.244081][ T29] audit: type=1400 audit(1763988229.555:1625): avc: denied { read } for pid=7509 comm="syz.7.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.299963][ T29] audit: type=1400 audit(1763988229.605:1626): avc: denied { bind } for pid=7509 comm="syz.7.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.323704][ T29] audit: type=1400 audit(1763988229.635:1627): avc: denied { create } for pid=7512 comm="syz.4.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.343745][ T29] audit: type=1400 audit(1763988229.655:1628): avc: denied { ioctl } for pid=7512 comm="syz.4.927" path="socket:[17356]" dev="sockfs" ino=17356 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.408756][ T7512] delete_channel: no stack [ 89.431865][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'. [ 89.450902][ T29] audit: type=1326 audit(1763988229.755:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 89.474415][ T29] audit: type=1326 audit(1763988229.755:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 89.497764][ T29] audit: type=1326 audit(1763988229.755:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 89.521121][ T29] audit: type=1326 audit(1763988229.755:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 89.544456][ T29] audit: type=1326 audit(1763988229.755:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 89.567781][ T29] audit: type=1326 audit(1763988229.755:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7519 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 89.637128][ T7526] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 90.626538][ T7551] netlink: 'syz.9.940': attribute type 1 has an invalid length. [ 90.640772][ T7551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.701902][ T7551] veth5: entered promiscuous mode [ 90.709827][ T7551] bond1: (slave veth5): Enslaving as an active interface with a down link [ 90.720294][ T7555] bond1: entered allmulticast mode [ 90.757429][ T7557] netlink: 'syz.2.944': attribute type 27 has an invalid length. [ 90.765726][ T7557] lo: left allmulticast mode [ 90.770406][ T7557] tunl0: left allmulticast mode [ 90.775355][ T7557] gre0: left allmulticast mode [ 90.780252][ T7557] gretap0: left allmulticast mode [ 90.785496][ T7557] erspan0: left allmulticast mode [ 90.790686][ T7557] ip_vti0: left allmulticast mode [ 90.795868][ T7557] ip6_vti0: left allmulticast mode [ 90.801051][ T7557] sit0: left allmulticast mode [ 90.806044][ T7557] ip6tnl0: left allmulticast mode [ 90.811274][ T7557] ip6gre0: left allmulticast mode [ 90.816432][ T7557] syz_tun: left allmulticast mode [ 90.821584][ T7557] ip6gretap0: left allmulticast mode [ 90.826969][ T7557] vcan0: left allmulticast mode [ 90.831914][ T7557] bond0: left allmulticast mode [ 90.834512][ T7559] xt_TPROXY: Can be used only with -p tcp or -p udp [ 90.838714][ T7557] dummy0: left allmulticast mode [ 90.848496][ T7557] nlmon0: left allmulticast mode [ 90.853781][ T7557] caif0: left allmulticast mode [ 90.858879][ T7557] batadv0: left allmulticast mode [ 90.863979][ T7557] vxcan0: left allmulticast mode [ 90.869102][ T7557] vxcan1: left allmulticast mode [ 90.874112][ T7557] veth0: left allmulticast mode [ 90.879055][ T7557] veth1: left allmulticast mode [ 90.883979][ T7557] wg0: left allmulticast mode [ 90.888816][ T7557] wg1: left allmulticast mode [ 90.893638][ T7557] wg2: left allmulticast mode [ 90.898343][ T7557] veth0_to_bridge: left allmulticast mode [ 90.904136][ T7557] bridge_slave_0: left allmulticast mode [ 90.910008][ T7557] veth1_to_bridge: left allmulticast mode [ 90.915951][ T7557] bridge_slave_1: left allmulticast mode [ 90.921732][ T7557] veth0_to_bond: left allmulticast mode [ 90.927358][ T7557] bond_slave_0: left allmulticast mode [ 90.932906][ T7557] veth1_to_bond: left allmulticast mode [ 90.938540][ T7557] bond_slave_1: left allmulticast mode [ 90.944079][ T7557] veth0_to_team: left allmulticast mode [ 90.949723][ T7557] team_slave_0: left allmulticast mode [ 90.953316][ T7564] loop9: detected capacity change from 0 to 512 [ 90.955320][ T7557] veth0_to_batadv: left allmulticast mode [ 90.967269][ T7557] batadv_slave_0: left allmulticast mode [ 90.973056][ T7557] veth1_to_batadv: left allmulticast mode [ 90.979003][ T7557] batadv_slave_1: left allmulticast mode [ 90.984836][ T7557] xfrm0: left allmulticast mode [ 90.988378][ T7564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.989845][ T7557] veth0_to_hsr: left allmulticast mode [ 91.003947][ T7557] veth1_to_hsr: left allmulticast mode [ 91.009535][ T7557] hsr0: left allmulticast mode [ 91.014396][ T7557] hsr_slave_0: left allmulticast mode [ 91.018779][ T7564] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.945: iget: bad i_size value: 38620345925642 [ 91.019758][ T7557] hsr_slave_1: left allmulticast mode [ 91.019942][ T7557] veth1_virt_wifi: left allmulticast mode [ 91.033841][ T7564] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.945: couldn't read orphan inode 15 (err -117) [ 91.037907][ T7557] veth0_virt_wifi: left allmulticast mode [ 91.044956][ T7564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.055318][ T7557] veth1_vlan: left allmulticast mode [ 91.078968][ T7557] vlan0: left allmulticast mode [ 91.083983][ T7557] macvlan0: left allmulticast mode [ 91.089164][ T7557] macvlan1: left allmulticast mode [ 91.094411][ T7557] ipvlan0: left allmulticast mode [ 91.099472][ T7557] ipvlan1: left allmulticast mode [ 91.104501][ T7557] veth0_vlan: left allmulticast mode [ 91.109883][ T7557] veth1_macvtap: left allmulticast mode [ 91.115544][ T7557] veth0_macvtap: left allmulticast mode [ 91.121202][ T7557] macvtap0: left allmulticast mode [ 91.126421][ T7557] macsec0: left allmulticast mode [ 91.131644][ T7557] geneve0: left allmulticast mode [ 91.136702][ T7557] geneve1: left allmulticast mode [ 91.141932][ T7557] veth2: left allmulticast mode [ 91.146838][ T7557] veth3: left allmulticast mode [ 91.151901][ T7557] syztnl0: left allmulticast mode [ 91.157058][ T7557] macsec1: left allmulticast mode [ 91.162529][ T7557] veth4: left allmulticast mode [ 91.167411][ T7557] veth5: left allmulticast mode [ 91.172338][ T7557] bridge1: left allmulticast mode [ 91.177465][ T7557] veth6: left allmulticast mode [ 91.182353][ T7557] veth7: left allmulticast mode [ 91.187232][ T7557] bridge2: left allmulticast mode [ 91.192328][ T7557] vxlan0: left allmulticast mode [ 91.197425][ T7557] netdevsim netdevsim2 eth0: left allmulticast mode [ 91.204301][ T7557] netdevsim netdevsim2 eth1: left allmulticast mode [ 91.216506][ T7557] netdevsim netdevsim2 eth2: left allmulticast mode [ 91.223564][ T7557] netdevsim netdevsim2 eth3: left allmulticast mode [ 91.230449][ T7557] veth8: left allmulticast mode [ 91.235471][ T7557] veth9: left allmulticast mode [ 91.240407][ T7557] ip6gre1: left allmulticast mode [ 91.245682][ T7557] syztnl1: left allmulticast mode [ 91.268652][ T7558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.278185][ T7558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.332279][ T7572] netlink: 'syz.2.948': attribute type 83 has an invalid length. [ 91.708786][ T7535] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm kworker/u8:59: bg 0: block 5: invalid block bitmap [ 91.722550][ T7535] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 91.734910][ T7535] EXT4-fs (loop9): This should not happen!! Data will be lost [ 91.734910][ T7535] [ 91.744639][ T7535] EXT4-fs (loop9): Total free blocks count 0 [ 91.750627][ T7535] EXT4-fs (loop9): Free/Dirty block details [ 91.756537][ T7535] EXT4-fs (loop9): free_blocks=0 [ 91.761502][ T7535] EXT4-fs (loop9): dirty_blocks=65 [ 91.766661][ T7535] EXT4-fs (loop9): Block reservation details [ 91.772672][ T7535] EXT4-fs (loop9): i_reserved_data_blocks=65 [ 91.779805][ T5064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.829924][ T7596] netlink: 84 bytes leftover after parsing attributes in process `syz.2.957'. [ 91.839995][ T7596] 9pnet_fd: Insufficient options for proto=fd [ 91.933680][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.961'. [ 92.130372][ T7613] netlink: 'syz.2.964': attribute type 1 has an invalid length. [ 92.144260][ T7613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.163879][ T7613] veth11: entered promiscuous mode [ 92.171159][ T7613] bond1: (slave veth11): Enslaving as an active interface with a down link [ 92.183318][ T7616] vlan2: entered allmulticast mode [ 92.188466][ T7616] bridge_slave_0: entered allmulticast mode [ 92.199862][ T7613] bond1: entered allmulticast mode [ 92.277838][ T7628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.971'. [ 92.290133][ T7535] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 92.297908][ T7535] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 92.310947][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 92.752298][ T7643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 92.776176][ T7649] netlink: 'syz.8.977': attribute type 1 has an invalid length. [ 92.791520][ T7649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.841919][ T7649] veth5: entered promiscuous mode [ 92.849271][ T7649] bond1: (slave veth5): Enslaving as an active interface with a down link [ 92.865439][ T7649] bond1: entered allmulticast mode [ 93.161047][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 93.321550][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 93.387465][ T7682] loop9: detected capacity change from 0 to 2048 [ 93.431372][ T6809] loop9: p1 p3 p4 [ 93.439672][ T6809] loop9: p4 size 589824 extends beyond EOD, truncated [ 93.465949][ T7682] loop9: p1 p3 p4 [ 93.472901][ T7682] loop9: p4 size 589824 extends beyond EOD, truncated [ 93.587878][ T6809] udevd[6809]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 93.611403][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 93.622534][ T3618] udevd[3618]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 93.687381][ T7701] syzkaller0: entered promiscuous mode [ 93.692997][ T7701] syzkaller0: entered allmulticast mode [ 93.704524][ T7704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1001'. [ 93.717976][ T7699] loop8: detected capacity change from 0 to 256 [ 93.736832][ T7699] FAT-fs (loop8): bogus number of FAT sectors [ 93.742983][ T7699] FAT-fs (loop8): Can't find a valid FAT filesystem [ 93.925412][ T7718] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 93.958569][ T7718] vlan2: entered allmulticast mode [ 93.964024][ T7718] dummy0: entered allmulticast mode [ 94.296232][ T5517] IPVS: starting estimator thread 0... [ 94.365655][ T7742] loop7: detected capacity change from 0 to 512 [ 94.397550][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 94.397573][ T29] audit: type=1326 audit(1763988234.705:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz.8.1014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fcf35f749 code=0x0 [ 94.427280][ T7733] IPVS: using max 3456 ests per chain, 172800 per kthread [ 94.450569][ T7742] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1011: bg 0: block 248: padding at end of block bitmap is not set [ 94.492267][ T7742] Quota error (device loop7): write_blk: dquota write failed [ 94.499767][ T7742] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 94.513722][ T7742] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1011: Failed to acquire dquot type 1 [ 94.533797][ T7742] EXT4-fs (loop7): 1 truncate cleaned up [ 94.540183][ T7742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.553144][ T7742] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.707967][ T29] audit: type=1400 audit(1763988235.015:2068): avc: denied { read } for pid=7776 comm="syz.9.1015" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 94.730717][ T29] audit: type=1400 audit(1763988235.015:2069): avc: denied { open } for pid=7776 comm="syz.9.1015" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 94.798283][ T29] audit: type=1326 audit(1763988235.105:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.9.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289aef749 code=0x7ffc0000 [ 94.821935][ T29] audit: type=1326 audit(1763988235.105:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.9.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289aef749 code=0x7ffc0000 [ 94.851423][ T29] audit: type=1326 audit(1763988235.105:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.9.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9289aef749 code=0x7ffc0000 [ 94.874988][ T29] audit: type=1326 audit(1763988235.105:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.9.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289aef749 code=0x7ffc0000 [ 94.898779][ T29] audit: type=1326 audit(1763988235.105:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7785 comm="syz.9.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289aef749 code=0x7ffc0000 [ 95.034560][ T7798] loop9: detected capacity change from 0 to 512 [ 95.048984][ T7798] EXT4-fs: inline encryption not supported [ 95.076716][ T7798] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 95.093238][ T7798] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1019: invalid indirect mapped block 2683928664 (level 1) [ 95.121953][ T7798] EXT4-fs (loop9): 1 truncate cleaned up [ 95.130351][ T7798] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.160456][ T7798] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.1019: Invalid block bitmap block 3 in block_group 0 [ 95.179357][ T7798] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.1019: Invalid block bitmap block 3 in block_group 0 [ 95.202016][ T7798] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.1019: Invalid block bitmap block 3 in block_group 0 [ 95.228968][ T5064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.960971][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 96.236927][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 96.424600][ T7902] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.471975][ T7902] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.532628][ T7902] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.622848][ T7902] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.699247][ T7389] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.738654][ T7389] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.767399][ T7389] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.798622][ T7389] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.063164][ T7949] loop9: detected capacity change from 0 to 2048 [ 97.093987][ T7949] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.113786][ T7949] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.512721][ T7965] netlink: 'syz.2.1050': attribute type 7 has an invalid length. [ 97.520506][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 97.594132][ T4750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.639779][ T7968] netlink: 'syz.7.1051': attribute type 27 has an invalid length. [ 97.674640][ T7968] batadv0: left allmulticast mode [ 97.679864][ T7968] vxcan0: left allmulticast mode [ 97.685108][ T7968] vxcan1: left allmulticast mode [ 97.690102][ T7968] veth0: left allmulticast mode [ 97.695147][ T7968] veth1: left allmulticast mode [ 97.700079][ T7968] wg0: left allmulticast mode [ 97.704870][ T7968] wg1: left allmulticast mode [ 97.709641][ T7968] wg2: left allmulticast mode [ 97.714554][ T7968] veth0_to_bridge: left allmulticast mode [ 97.720410][ T7968] veth1_to_bridge: left allmulticast mode [ 97.726274][ T7968] veth0_to_bond: left allmulticast mode [ 97.731948][ T7968] bond_slave_0: left allmulticast mode [ 97.737483][ T7968] veth1_to_bond: left allmulticast mode [ 97.743119][ T7968] bond_slave_1: left allmulticast mode [ 97.748639][ T7968] veth0_to_team: left allmulticast mode [ 97.754331][ T7968] team_slave_0: left allmulticast mode [ 97.759864][ T7968] veth1_to_team: left allmulticast mode [ 97.765486][ T7968] team_slave_1: left allmulticast mode [ 97.771092][ T7968] veth0_to_batadv: left allmulticast mode [ 97.776866][ T7968] batadv_slave_0: left allmulticast mode [ 97.782575][ T7968] veth1_to_batadv: left allmulticast mode [ 97.788487][ T7968] batadv_slave_1: left allmulticast mode [ 97.794274][ T7968] xfrm0: left allmulticast mode [ 97.799186][ T7968] veth0_to_hsr: left allmulticast mode [ 97.804868][ T7968] veth1_to_hsr: left allmulticast mode [ 97.810493][ T7968] hsr0: left allmulticast mode [ 97.815470][ T7968] hsr_slave_0: left allmulticast mode [ 97.821130][ T7968] hsr_slave_1: left allmulticast mode [ 97.826856][ T7968] veth1_virt_wifi: left allmulticast mode [ 97.832684][ T7968] veth0_virt_wifi: left allmulticast mode [ 97.838520][ T7968] veth1_vlan: left allmulticast mode [ 97.844038][ T7968] vlan0: left allmulticast mode [ 97.848989][ T7968] vlan1: left allmulticast mode [ 97.854168][ T7968] macvlan0: left allmulticast mode [ 97.859371][ T7968] macvlan1: left allmulticast mode [ 97.864565][ T7968] ipvlan0: left allmulticast mode [ 97.869640][ T7968] ipvlan1: left allmulticast mode [ 97.874700][ T7968] veth0_vlan: left allmulticast mode [ 97.880044][ T7968] veth1_macvtap: left allmulticast mode [ 97.885736][ T7968] veth0_macvtap: left allmulticast mode [ 97.891374][ T7968] macvtap0: left allmulticast mode [ 97.896541][ T7968] macsec0: left allmulticast mode [ 97.901658][ T7968] geneve0: left allmulticast mode [ 97.906788][ T7968] geneve1: left allmulticast mode [ 97.921055][ T7968] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 97.928307][ T7968] netdevsim netdevsim7 netdevsim1: left allmulticast mode [ 97.935689][ T7968] netdevsim netdevsim7 netdevsim2: left allmulticast mode [ 97.943227][ T7968] netdevsim netdevsim7 netdevsim3: left allmulticast mode [ 97.950401][ T7968] veth2: left allmulticast mode [ 97.952201][ T7389] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:17: bg 0: block 345: padding at end of block bitmap is not set [ 97.955410][ T7968] veth3: left allmulticast mode [ 97.981709][ T7389] EXT4-fs (loop9): Remounting filesystem read-only [ 97.988309][ T7534] EXT4-fs warning (device loop9): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 98.002776][ T7973] $Hÿ: renamed from bond0 (while UP) [ 98.010127][ T7973] $Hÿ: entered promiscuous mode [ 98.015926][ T7975] veth0: entered promiscuous mode [ 98.021666][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 98.133111][ T5064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.170683][ T7981] wireguard0: entered promiscuous mode [ 98.176243][ T7981] wireguard0: entered allmulticast mode [ 98.200922][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.393082][ T7997] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.402923][ T7997] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.455788][ T7997] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.465621][ T7997] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.502735][ T8005] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 98.523487][ T8005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.542445][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1066'. [ 98.560901][ T7997] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.570745][ T7997] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.571544][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 98.655405][ T7997] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.665321][ T7997] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.734179][ T8022] netlink: 'syz.8.1072': attribute type 1 has an invalid length. [ 98.744102][ T3453] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.752440][ T3453] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 98.766368][ T3453] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.774825][ T3453] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 98.799592][ T3453] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.807963][ T3453] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 98.816532][ T7999] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.824919][ T7999] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 98.828380][ T8028] syz_tun: entered allmulticast mode [ 98.842002][ T8022] bond2: (slave macvlan0): making interface the new active one [ 98.842546][ T8022] bond2: (slave macvlan0): Enslaving as an active interface with an up link [ 98.938058][ T8031] ip6tnl0: entered promiscuous mode [ 98.938077][ T8031] ip6tnl0: entered allmulticast mode [ 99.111383][ T8047] veth4: entered promiscuous mode [ 99.116477][ T8047] veth4: entered allmulticast mode [ 99.882148][ T8063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1089'. [ 99.903803][ T8063] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8063 comm=syz.4.1089 [ 100.094274][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 100.094288][ T29] audit: type=1400 audit(1763988240.405:2225): avc: denied { ioctl } for pid=8085 comm="syz.9.1095" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.455648][ T8097] netlink: 'syz.9.1100': attribute type 10 has an invalid length. [ 100.466703][ T8097] team0: Port device dummy0 added [ 100.474985][ T8097] netlink: 'syz.9.1100': attribute type 10 has an invalid length. [ 100.483255][ T8097] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 100.493948][ T8097] team0: Failed to send options change via netlink (err -105) [ 100.501530][ T8097] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 100.510525][ T8097] team0: Port device dummy0 removed [ 100.518293][ T8097] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 100.616189][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1105'. [ 100.833343][ T8118] uprobe: syz.9.1109:8118 failed to unregister, leaking uprobe [ 100.841075][ T8118] uprobe: syz.9.1109:8118 failed to unregister, leaking uprobe [ 100.976287][ T8125] netlink: 'syz.8.1112': attribute type 10 has an invalid length. [ 100.985899][ T8125] team0: Port device dummy0 added [ 100.993277][ T8125] netlink: 'syz.8.1112': attribute type 10 has an invalid length. [ 101.001722][ T8125] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 101.011296][ T8125] team0: Failed to send options change via netlink (err -105) [ 101.018862][ T8125] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 101.028029][ T8125] team0: Port device dummy0 removed [ 101.034837][ T8125] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.126042][ T8140] syzkaller0: entered promiscuous mode [ 101.131807][ T8140] syzkaller0: entered allmulticast mode [ 101.613645][ T8154] netlink: 'syz.7.1124': attribute type 10 has an invalid length. [ 101.622257][ T8154] netlink: 'syz.7.1124': attribute type 10 has an invalid length. [ 101.641807][ T8154] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.667010][ T8122] Process accounting resumed [ 101.714183][ T8158] bond0: (slave dummy0): Releasing backup interface [ 101.812937][ T8159] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 102.107495][ T8175] syzkaller0: entered promiscuous mode [ 102.113121][ T8175] syzkaller0: entered allmulticast mode [ 102.187257][ T8179] loop8: detected capacity change from 0 to 2048 [ 102.246687][ T8179] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.262686][ T8179] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.266122][ T29] audit: type=1326 audit(1763988242.575:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.7.1137" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e5376f749 code=0x0 [ 102.371028][ T8186] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 102.389516][ T8186] EXT4-fs (loop8): Remounting filesystem read-only [ 102.475824][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.667841][ T8202] veth10: entered promiscuous mode [ 102.673326][ T8202] veth10: entered allmulticast mode [ 102.830179][ T29] audit: type=1326 audit(1763988243.135:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 102.853729][ T29] audit: type=1326 audit(1763988243.135:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 102.890617][ T29] audit: type=1326 audit(1763988243.185:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 102.914156][ T29] audit: type=1326 audit(1763988243.185:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 102.937689][ T29] audit: type=1326 audit(1763988243.185:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 102.961170][ T29] audit: type=1326 audit(1763988243.185:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 102.984748][ T29] audit: type=1326 audit(1763988243.195:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 103.008207][ T29] audit: type=1326 audit(1763988243.195:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8211 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 103.102205][ T8233] bridge: RTM_NEWNEIGH with invalid ether address [ 103.164177][ T8242] loop8: detected capacity change from 0 to 128 [ 103.190863][ T8243] veth6: entered promiscuous mode [ 103.195952][ T8243] veth6: entered allmulticast mode [ 103.320924][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 104.236488][ T8251] loop7: detected capacity change from 0 to 512 [ 104.256873][ T8251] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.431738][ T8251] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.543131][ T4750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.613691][ T8264] validate_nla: 2 callbacks suppressed [ 104.613708][ T8264] netlink: 'syz.4.1178': attribute type 3 has an invalid length. [ 105.217085][ T8271] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.251066][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 105.251080][ T29] audit: type=1326 audit(1763988245.565:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.4.1168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5dc9d0f749 code=0x0 [ 105.283083][ T8271] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.343136][ T8271] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.344320][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1166'. [ 105.362040][ T8266] bridge_slave_1: left allmulticast mode [ 105.367741][ T8266] bridge_slave_1: left promiscuous mode [ 105.373468][ T8266] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.381381][ T8266] bridge_slave_0: left allmulticast mode [ 105.387023][ T8266] bridge_slave_0: left promiscuous mode [ 105.392698][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.473290][ T8271] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.562593][ T8280] loop8: detected capacity change from 0 to 512 [ 105.579380][ T8280] EXT4-fs: Mount option(s) incompatible with ext2 [ 105.587918][ T7405] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.599338][ T7395] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.611857][ T7405] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.623279][ T7404] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.650185][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1171'. [ 105.748566][ T8290] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 105.781659][ T29] audit: type=1326 audit(1763988246.085:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 105.805147][ T29] audit: type=1326 audit(1763988246.085:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 105.828592][ T29] audit: type=1326 audit(1763988246.085:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 105.852049][ T29] audit: type=1326 audit(1763988246.085:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 105.875499][ T29] audit: type=1326 audit(1763988246.085:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 105.897190][ T8292] netlink: 'syz.7.1177': attribute type 4 has an invalid length. [ 105.899497][ T29] audit: type=1326 audit(1763988246.085:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 105.907085][ T8292] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1177'. [ 105.930464][ T29] audit: type=1326 audit(1763988246.085:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 105.930498][ T29] audit: type=1326 audit(1763988246.085:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 105.943554][ T8292] .`: renamed from bond0 [ 105.962872][ T29] audit: type=1326 audit(1763988246.085:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.7.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 106.098631][ T8297] loop9: detected capacity change from 0 to 512 [ 106.126882][ T8297] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.138237][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1183'. [ 106.163774][ T8297] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.232256][ T5064] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.967919][ T8318] loop7: detected capacity change from 0 to 512 [ 106.984787][ T8318] EXT4-fs: Mount option(s) incompatible with ext2 [ 107.064201][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1189'. [ 107.172140][ T8328] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1190'. [ 107.227145][ T8328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8328 comm=syz.8.1190 [ 107.390371][ T8332] veth8: entered promiscuous mode [ 107.395694][ T8332] veth8: entered allmulticast mode [ 107.653886][ T8344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8344 comm=syz.2.1196 [ 107.824585][ T8351] netlink: 464 bytes leftover after parsing attributes in process `syz.9.1208'. [ 108.037144][ T8361] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1211'. [ 108.071550][ T8363] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 108.603159][ T8381] veth12: entered promiscuous mode [ 108.608341][ T8381] veth12: entered allmulticast mode [ 108.852783][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1215'. [ 108.916708][ T8392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8392 comm=syz.7.1215 [ 109.022896][ T8397] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.179601][ T8397] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.263843][ T8397] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.314892][ T8397] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.370090][ T7426] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.390424][ T7426] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.410888][ T7426] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.435893][ T8414] loop8: detected capacity change from 0 to 512 [ 109.458692][ T7426] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.469604][ T8414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.589244][ T8414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.623918][ T8414] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.870586][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.889949][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1227'. [ 109.894658][ T8428] veth8: entered promiscuous mode [ 109.903983][ T8428] veth8: entered allmulticast mode [ 109.953713][ T8431] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8431 comm=syz.7.1227 [ 110.049273][ T8437] netlink: 'syz.7.1233': attribute type 12 has an invalid length. [ 110.227822][ T8458] veth14: entered promiscuous mode [ 110.233058][ T8458] veth14: entered allmulticast mode [ 110.239364][ T8457] loop8: detected capacity change from 0 to 2048 [ 110.264961][ T8457] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.294047][ T8460] netlink: 'syz.7.1241': attribute type 5 has an invalid length. [ 110.380195][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.404526][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 110.404612][ T29] audit: type=1326 audit(1763988250.715:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 110.434136][ T29] audit: type=1326 audit(1763988250.715:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 110.457575][ T29] audit: type=1326 audit(1763988250.715:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 110.481106][ T29] audit: type=1326 audit(1763988250.715:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 110.504510][ T29] audit: type=1326 audit(1763988250.715:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 110.527919][ T29] audit: type=1326 audit(1763988250.715:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 110.551325][ T29] audit: type=1326 audit(1763988250.715:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 110.574776][ T29] audit: type=1326 audit(1763988250.715:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 110.598076][ T29] audit: type=1326 audit(1763988250.715:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 110.621587][ T29] audit: type=1326 audit(1763988250.715:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 110.701550][ T8479] netlink: 'syz.8.1247': attribute type 4 has an invalid length. [ 110.709297][ T8479] __nla_validate_parse: 2 callbacks suppressed [ 110.709306][ T8479] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1247'. [ 110.726417][ T8479] .`: renamed from bond0 [ 110.875562][ T8488] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1250'. [ 110.894346][ T8488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8488 comm=syz.9.1250 [ 111.016906][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1254'. [ 111.030830][ T8497] netlink: 'syz.8.1254': attribute type 5 has an invalid length. [ 111.038658][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1254'. [ 111.223237][ T8511] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1261'. [ 111.462427][ T8522] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 111.472307][ T8522] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 111.513137][ T8522] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 111.523149][ T8522] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 111.573067][ T8522] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 111.582999][ T8522] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 111.644893][ T8522] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 111.654808][ T8522] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 111.728189][ T7426] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 111.736547][ T7426] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 111.748134][ T7426] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 111.756517][ T7426] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 111.768333][ T7426] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 111.776692][ T7426] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 111.788034][ T7426] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 111.796533][ T7426] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 111.848926][ T8526] netlink: 'syz.2.1269': attribute type 4 has an invalid length. [ 111.975298][ T8527] wg2: entered promiscuous mode [ 111.980224][ T8527] wg2: entered allmulticast mode [ 112.011630][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1268'. [ 112.041517][ T8529] netlink: 'syz.4.1268': attribute type 5 has an invalid length. [ 112.049496][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'. [ 112.054520][ T8538] netlink: 'syz.7.1273': attribute type 10 has an invalid length. [ 112.161449][ T8548] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1277'. [ 112.162117][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1279'. [ 112.182962][ T8548] netlink: zone id is out of range [ 112.188371][ T8548] netlink: zone id is out of range [ 112.192476][ T8552] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1279'. [ 112.199678][ T8548] netlink: zone id is out of range [ 112.208922][ T8548] netlink: zone id is out of range [ 112.219494][ T8548] netlink: zone id is out of range [ 112.268899][ T8548] netlink: set zone limit has 8 unknown bytes [ 113.002729][ T8574] netlink: 'syz.9.1287': attribute type 5 has an invalid length. [ 113.054528][ T8581] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 113.123677][ T8583] syz_tun (unregistering): left allmulticast mode [ 113.728277][ T8626] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 113.761790][ T8628] syz_tun: entered allmulticast mode [ 113.768516][ T8628] syz_tun (unregistering): left allmulticast mode [ 114.404524][ T8684] netlink: 'syz.4.1329': attribute type 4 has an invalid length. [ 114.433262][ T8687] netlink: zone id is out of range [ 114.438528][ T8687] netlink: zone id is out of range [ 114.447852][ T8687] netlink: zone id is out of range [ 114.458621][ T8687] netlink: zone id is out of range [ 114.892500][ T8706] loop7: detected capacity change from 0 to 128 [ 114.982963][ T8706] bio_check_eod: 39 callbacks suppressed [ 114.982979][ T8706] syz.7.1337: attempt to access beyond end of device [ 114.982979][ T8706] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 115.003047][ T8706] syz.7.1337: attempt to access beyond end of device [ 115.003047][ T8706] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 115.016600][ T8706] syz.7.1337: attempt to access beyond end of device [ 115.016600][ T8706] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 115.030593][ T8706] syz.7.1337: attempt to access beyond end of device [ 115.030593][ T8706] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 115.046524][ T8706] syz.7.1337: attempt to access beyond end of device [ 115.046524][ T8706] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 115.064634][ T8706] syz.7.1337: attempt to access beyond end of device [ 115.064634][ T8706] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 115.078928][ T8706] syz.7.1337: attempt to access beyond end of device [ 115.078928][ T8706] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 115.092799][ T8706] syz.7.1337: attempt to access beyond end of device [ 115.092799][ T8706] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 115.106441][ T8706] syz.7.1337: attempt to access beyond end of device [ 115.106441][ T8706] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 115.120674][ T8706] syz.7.1337: attempt to access beyond end of device [ 115.120674][ T8706] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 115.417308][ T29] kauditd_printk_skb: 1406 callbacks suppressed [ 115.417324][ T29] audit: type=1326 audit(1763988255.725:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8697 comm="syz.8.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fcf3565e7 code=0x7ffc0000 [ 115.447039][ T29] audit: type=1326 audit(1763988255.725:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8697 comm="syz.8.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fcf2fb829 code=0x7ffc0000 [ 115.470344][ T29] audit: type=1326 audit(1763988255.725:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8697 comm="syz.8.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 115.493882][ T29] audit: type=1326 audit(1763988255.735:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8697 comm="syz.8.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fcf3565e7 code=0x7ffc0000 [ 115.517223][ T29] audit: type=1326 audit(1763988255.735:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8697 comm="syz.8.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fcf2fb829 code=0x7ffc0000 [ 115.540545][ T29] audit: type=1326 audit(1763988255.735:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8697 comm="syz.8.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 115.564064][ T29] audit: type=1326 audit(1763988255.745:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8697 comm="syz.8.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fcf3565e7 code=0x7ffc0000 [ 115.587542][ T29] audit: type=1326 audit(1763988255.745:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8697 comm="syz.8.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fcf2fb829 code=0x7ffc0000 [ 115.610828][ T29] audit: type=1326 audit(1763988255.745:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8697 comm="syz.8.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 115.634347][ T29] audit: type=1326 audit(1763988255.755:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8697 comm="syz.8.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fcf3565e7 code=0x7ffc0000 [ 115.716515][ T8725] loop8: detected capacity change from 0 to 512 [ 115.802703][ T8738] capability: warning: `syz.7.1348' uses 32-bit capabilities (legacy support in use) [ 115.845660][ T8739] __nla_validate_parse: 9 callbacks suppressed [ 115.845672][ T8739] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1347'. [ 115.869123][ T8743] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.610914][ T8759] vlan2: entered allmulticast mode [ 116.707403][ T8764] netlink: 'syz.4.1360': attribute type 83 has an invalid length. [ 116.995091][ T8778] netlink: 'syz.2.1366': attribute type 4 has an invalid length. [ 117.419192][ T8806] vlan1: entered allmulticast mode [ 117.424466][ T8806] bridge_slave_0: entered allmulticast mode [ 117.457921][ T8808] loop7: detected capacity change from 0 to 2048 [ 117.479230][ T8808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.491930][ T8808] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.590530][ T4750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.730154][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1385'. [ 117.746496][ T7378] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.754150][ T7378] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.771491][ T3716] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.839507][ T8838] loop7: detected capacity change from 0 to 2048 [ 117.853746][ T8838] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 118.040905][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 118.063214][ T8841] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.111326][ T8841] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1160 with error 28 [ 118.123836][ T8841] EXT4-fs (loop7): This should not happen!! Data will be lost [ 118.123836][ T8841] [ 118.133578][ T8841] EXT4-fs (loop7): Total free blocks count 0 [ 118.139581][ T8841] EXT4-fs (loop7): Free/Dirty block details [ 118.145554][ T8841] EXT4-fs (loop7): free_blocks=2415919104 [ 118.151367][ T8841] EXT4-fs (loop7): dirty_blocks=1168 [ 118.156659][ T8841] EXT4-fs (loop7): Block reservation details [ 118.162670][ T8841] EXT4-fs (loop7): i_reserved_data_blocks=73 [ 118.231810][ T3716] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.324566][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 118.464085][ T8856] vlan1: entered allmulticast mode [ 118.469222][ T8856] bridge_slave_0: entered allmulticast mode [ 118.515459][ T7410] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 118.532287][ T3716] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.716883][ T8863] infiniband syz!: set down [ 118.721538][ T8863] infiniband syz!: added team_slave_0 [ 118.757869][ T8863] RDS/IB: syz!: added [ 118.762021][ T8863] smc: adding ib device syz! with port count 1 [ 118.768752][ T8863] smc: ib device syz! port 1 has no pnetid [ 118.918502][ T8882] vlan2: entered allmulticast mode [ 118.924339][ T8880] loop8: detected capacity change from 0 to 2048 [ 118.931415][ T8882] dummy0: entered allmulticast mode [ 118.971636][ T6809] loop8: p1 p3 p4 [ 118.983723][ T6809] loop8: p4 size 589824 extends beyond EOD, truncated [ 119.010630][ T8880] loop8: p1 p3 p4 [ 119.033174][ T8880] loop8: p4 size 589824 extends beyond EOD, truncated [ 119.139669][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 119.150531][ T6809] udevd[6809]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 119.151176][ T3618] udevd[3618]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 119.211762][ T8891] loop8: detected capacity change from 0 to 1024 [ 119.251419][ T8891] EXT4-fs: inline encryption not supported [ 119.275257][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1406'. [ 119.304019][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 119.315514][ T6809] udevd[6809]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 119.318114][ T8891] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.327047][ T3618] udevd[3618]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 119.410950][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.461395][ T8901] loop8: detected capacity change from 0 to 2048 [ 119.482866][ T8901] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 119.540032][ T1047] IPVS: starting estimator thread 0... [ 119.630978][ T8909] IPVS: using max 2448 ests per chain, 122400 per kthread [ 119.640970][ T8912] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.666486][ T8912] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1396 with error 28 [ 119.679008][ T8912] EXT4-fs (loop8): This should not happen!! Data will be lost [ 119.679008][ T8912] [ 119.688671][ T8912] EXT4-fs (loop8): Total free blocks count 0 [ 119.694772][ T8912] EXT4-fs (loop8): Free/Dirty block details [ 119.700752][ T8912] EXT4-fs (loop8): free_blocks=2415919104 [ 119.706529][ T8912] EXT4-fs (loop8): dirty_blocks=1408 [ 119.711836][ T8912] EXT4-fs (loop8): Block reservation details [ 119.717863][ T8912] EXT4-fs (loop8): i_reserved_data_blocks=88 [ 119.763576][ T8923] vlan1: entered allmulticast mode [ 119.788990][ T8923] dummy0: entered allmulticast mode [ 119.844324][ T7534] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 119.974672][ T3716] IPVS: starting estimator thread 0... [ 120.061918][ T8945] IPVS: using max 4512 ests per chain, 225600 per kthread [ 120.365093][ T8972] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.379788][ T8973] loop7: detected capacity change from 0 to 1024 [ 120.408970][ T8973] EXT4-fs: inline encryption not supported [ 120.423801][ T8973] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.436466][ T29] kauditd_printk_skb: 1549 callbacks suppressed [ 120.436481][ T29] audit: type=1326 audit(1763988260.745:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5dc9d065e7 code=0x7ffc0000 [ 120.469415][ T29] audit: type=1326 audit(1763988260.745:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5dc9cab829 code=0x7ffc0000 [ 120.492845][ T29] audit: type=1326 audit(1763988260.745:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 120.516264][ T29] audit: type=1326 audit(1763988260.755:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5dc9d065e7 code=0x7ffc0000 [ 120.539612][ T29] audit: type=1326 audit(1763988260.755:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5dc9cab829 code=0x7ffc0000 [ 120.562972][ T29] audit: type=1326 audit(1763988260.755:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 120.586366][ T29] audit: type=1326 audit(1763988260.755:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5dc9d065e7 code=0x7ffc0000 [ 120.609762][ T29] audit: type=1326 audit(1763988260.755:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5dc9cab829 code=0x7ffc0000 [ 120.633427][ T29] audit: type=1326 audit(1763988260.755:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f5dc9d0f749 code=0x7ffc0000 [ 120.656918][ T29] audit: type=1326 audit(1763988260.765:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5dc9d065e7 code=0x7ffc0000 [ 120.681898][ T8972] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.682422][ T4750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.728736][ T8972] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.763371][ T8972] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.818244][ T7395] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.829406][ T7395] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.841223][ T7395] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.852674][ T7395] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.904266][ T8987] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 120.928452][ T8989] vlan1: entered allmulticast mode [ 120.933640][ T8989] dummy0: entered allmulticast mode [ 121.177201][ T9003] loop8: detected capacity change from 0 to 512 [ 121.197755][ T9003] EXT4-fs: inline encryption not supported [ 121.235804][ T9003] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 121.257877][ T9003] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1449: invalid indirect mapped block 2683928664 (level 1) [ 121.276218][ T9003] EXT4-fs (loop8): 1 truncate cleaned up [ 121.289252][ T9003] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.352733][ T9003] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.1449: Invalid block bitmap block 3 in block_group 0 [ 121.370399][ T9003] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.1449: Invalid block bitmap block 3 in block_group 0 [ 121.408786][ T9003] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.1449: Invalid block bitmap block 3 in block_group 0 [ 121.472298][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.489061][ T9027] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 121.550769][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1457'. [ 121.560920][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.922069][ T9084] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 121.932679][ T9084] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 121.977305][ T9084] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 121.987303][ T9084] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 122.052697][ T9084] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 122.062707][ T9084] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 122.102817][ T9084] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 122.112862][ T9084] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 122.226124][ T7405] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.234539][ T7405] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 122.247484][ T8009] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.255897][ T8009] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 122.280262][ T8009] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.288667][ T8009] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 122.307422][ T8009] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.315872][ T8009] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 122.619803][ T9181] loop7: detected capacity change from 0 to 512 [ 122.645426][ T9181] EXT4-fs: inline encryption not supported [ 122.677533][ T9181] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 122.689557][ T9181] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1469: invalid indirect mapped block 2683928664 (level 1) [ 122.708447][ T9181] EXT4-fs (loop7): 1 truncate cleaned up [ 122.719586][ T9181] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.757391][ T9181] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1469: Invalid block bitmap block 3 in block_group 0 [ 122.779827][ T9181] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1469: Invalid block bitmap block 3 in block_group 0 [ 122.801502][ T9181] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1469: Invalid block bitmap block 3 in block_group 0 [ 122.850710][ T4750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.938928][ T9209] loop8: detected capacity change from 0 to 256 [ 123.077738][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'. [ 123.366855][ T9232] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1489'. [ 123.450781][ T9235] $Hÿ: renamed from bond0 (while UP) [ 123.485466][ T9235] $Hÿ: entered promiscuous mode [ 123.570080][ T9241] netlink: 'syz.4.1493': attribute type 27 has an invalid length. [ 123.646355][ T9241] $Hÿ: left promiscuous mode [ 123.836436][ T9241] bond1: left promiscuous mode [ 123.841321][ T9241] wireguard0: left promiscuous mode [ 123.943065][ T9241] veth2: left promiscuous mode [ 123.947934][ T9241] veth2: left allmulticast mode [ 123.972013][ T9241] geneve2: left promiscuous mode [ 123.976984][ T9241] geneve2: left allmulticast mode [ 123.987539][ T9241] bond2: left allmulticast mode [ 123.996975][ T9241] veth7: left promiscuous mode [ 124.007119][ T9241] ip6gre1: left promiscuous mode [ 124.012111][ T9241] ip6gre1: left allmulticast mode [ 124.026819][ T9241] ip6gre2: left allmulticast mode [ 124.047316][ T9241] veth10: left promiscuous mode [ 124.052309][ T9241] veth10: left allmulticast mode [ 124.057417][ T9241] veth12: left promiscuous mode [ 124.062317][ T9241] veth12: left allmulticast mode [ 124.089352][ T7416] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 124.097937][ T7416] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 124.151823][ T7416] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 124.160323][ T7416] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 124.180943][ T7416] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 124.188905][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1497'. [ 124.189508][ T7416] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 124.233518][ T9258] wireguard0: entered promiscuous mode [ 124.239025][ T9258] wireguard0: entered allmulticast mode [ 124.267792][ T7416] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 124.276288][ T7416] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 124.324932][ T9264] netlink: 'syz.7.1509': attribute type 1 has an invalid length. [ 124.382264][ T9269] veth0: entered promiscuous mode [ 124.387976][ T9271] netlink: 'syz.4.1511': attribute type 7 has an invalid length. [ 124.395742][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 124.414165][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1499'. [ 124.427272][ T9264] bond0: (slave macvlan0): making interface the new active one [ 124.473646][ T9269] veth0 (unregistering): left promiscuous mode [ 124.599535][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1505'. [ 124.715590][ T9293] hub 6-0:1.0: USB hub found [ 124.724409][ T9293] hub 6-0:1.0: 8 ports detected [ 124.840965][ T9300] netlink: 'syz.9.1516': attribute type 7 has an invalid length. [ 124.848733][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1516'. [ 124.873362][ T9297] loop7: detected capacity change from 0 to 8192 [ 124.996244][ T9310] netlink: 'syz.9.1519': attribute type 1 has an invalid length. [ 125.080829][ T9310] bond2: (slave macvlan0): making interface the new active one [ 125.105270][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'. [ 125.123066][ T9313] veth0: entered promiscuous mode [ 125.132136][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1520'. [ 125.155175][ T9313] veth0 (unregistering): left promiscuous mode [ 125.210805][ T9323] syz_tun: entered allmulticast mode [ 125.218676][ T9321] netlink: 'syz.4.1534': attribute type 1 has an invalid length. [ 125.269856][ T9321] bond0: (slave macvlan0): making interface the new active one [ 125.335023][ T9328] hub 6-0:1.0: USB hub found [ 125.340055][ T9328] hub 6-0:1.0: 8 ports detected [ 125.371829][ T9332] veth0: entered promiscuous mode [ 125.419343][ T9334] netlink: 'syz.7.1528': attribute type 7 has an invalid length. [ 125.514448][ T9340] netlink: 'syz.2.1541': attribute type 1 has an invalid length. [ 125.539173][ T9341] loop7: detected capacity change from 0 to 512 [ 125.552449][ T9341] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.582897][ T9341] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.621847][ T9340] bond2: (slave macvlan0): making interface the new active one [ 125.682806][ T4750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.842473][ T9350] loop8: detected capacity change from 0 to 8192 [ 125.930767][ T9366] lo: entered allmulticast mode [ 126.086600][ T9374] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.195985][ T9374] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.225212][ T9379] loop8: detected capacity change from 0 to 512 [ 126.237753][ T9379] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.253819][ T9374] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.263463][ T9379] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.287831][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.317538][ T9374] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.397608][ T7419] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.411913][ T3453] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.429932][ T3453] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.453189][ T3453] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.881735][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 126.881787][ T29] audit: type=1326 audit(1763988267.185:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9397 comm="syz.8.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 126.911450][ T29] audit: type=1326 audit(1763988267.185:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9397 comm="syz.8.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 126.934881][ T29] audit: type=1326 audit(1763988267.185:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9397 comm="syz.8.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 126.958309][ T29] audit: type=1326 audit(1763988267.185:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9397 comm="syz.8.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 126.981702][ T29] audit: type=1326 audit(1763988267.185:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9397 comm="syz.8.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcf35f749 code=0x7ffc0000 [ 127.251170][ T29] audit: type=1326 audit(1763988267.565:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.9.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289aef749 code=0x7ffc0000 [ 127.276675][ T29] audit: type=1326 audit(1763988267.585:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.9.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9289aef749 code=0x7ffc0000 [ 127.300117][ T29] audit: type=1326 audit(1763988267.585:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.9.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289aef749 code=0x7ffc0000 [ 127.323747][ T29] audit: type=1326 audit(1763988267.585:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.9.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289aef749 code=0x7ffc0000 [ 127.347233][ T29] audit: type=1326 audit(1763988267.585:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.9.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9289aef749 code=0x7ffc0000 [ 127.740389][ T9421] __nla_validate_parse: 4 callbacks suppressed [ 127.740407][ T9421] netlink: 300 bytes leftover after parsing attributes in process `syz.9.1559'. [ 128.343687][ T9437] loop7: detected capacity change from 0 to 512 [ 128.413904][ T9437] EXT4-fs (loop7): 1 orphan inode deleted [ 128.429295][ T9437] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.444440][ T7416] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:44: Failed to release dquot type 1 [ 128.467528][ T9437] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.499544][ T4750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.513266][ T9451] netlink: 'syz.4.1573': attribute type 4 has an invalid length. [ 128.523857][ T9451] netlink: 'syz.4.1573': attribute type 4 has an invalid length. [ 128.544597][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 128.607978][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1576'. [ 128.623992][ T9463] team1: entered promiscuous mode [ 128.629149][ T9463] team1: entered allmulticast mode [ 129.570936][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 129.674562][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1585'. [ 129.683778][ T9486] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1585'. [ 129.692977][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1585'. [ 129.720310][ T9486] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1585'. [ 129.745694][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1587'. [ 129.754888][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1587'. [ 129.778469][ T9494] netlink: 'syz.9.1588': attribute type 1 has an invalid length. [ 129.802112][ T7398] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.812738][ T7398] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.891970][ T9500] loop7: detected capacity change from 0 to 1024 [ 129.913343][ T9497] bond3: (slave bridge4): making interface the new active one [ 129.925678][ T9500] EXT4-fs: Ignoring removed orlov option [ 129.949081][ T9497] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 129.957899][ T7398] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.973550][ T7398] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.993542][ T9500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.093125][ T9508] netlink: 'syz.8.1592': attribute type 27 has an invalid length. [ 130.140252][ T9508] bond1: left allmulticast mode [ 130.220652][ T9508] veth5: left promiscuous mode [ 130.240701][ T9508] veth8: left promiscuous mode [ 130.245585][ T9508] veth8: left allmulticast mode [ 130.274129][ T9508] team1: left promiscuous mode [ 130.278960][ T9508] team1: left allmulticast mode [ 130.318035][ T9515] 8021q: adding VLAN 0 to HW filter on device .` [ 130.326359][ T9515] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.340483][ T9515] net_ratelimit: 2 callbacks suppressed [ 130.340493][ T9515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.420243][ T9531] veth16: entered promiscuous mode [ 130.425432][ T9531] veth16: entered allmulticast mode [ 130.814514][ T9546] netlink: 'syz.4.1604': attribute type 1 has an invalid length. [ 130.842132][ T9546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.858503][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1604'. [ 130.867725][ T9546] bond3: entered promiscuous mode [ 130.872790][ T9546] bond3: entered allmulticast mode [ 130.883093][ T9546] bond3: (slave dummy0): making interface the new active one [ 130.890593][ T9546] dummy0: entered promiscuous mode [ 130.896056][ T9546] dummy0: entered allmulticast mode [ 130.902676][ T4750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.902695][ T9546] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 130.971588][ T9552] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.064057][ T9552] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.105580][ T9562] netlink: 'syz.4.1609': attribute type 10 has an invalid length. [ 131.125185][ T9562] bond3: (slave dummy0): Releasing active interface [ 131.132057][ T9562] dummy0: left promiscuous mode [ 131.137229][ T9562] dummy0: left allmulticast mode [ 131.149933][ T9562] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 131.193219][ T9552] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.253755][ T9552] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.322179][ T7398] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.365188][ T7398] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.381099][ T7398] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.386733][ T9567] netlink: 'syz.4.1611': attribute type 27 has an invalid length. [ 131.410086][ T7398] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.483400][ T9579] loop7: detected capacity change from 0 to 2048 [ 131.491345][ T9567] veth16: left promiscuous mode [ 131.496213][ T9567] veth16: left allmulticast mode [ 131.530945][ T9567] bond3: left promiscuous mode [ 131.535739][ T9567] bond3: left allmulticast mode [ 131.569554][ T9579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 131.578832][ T9580] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 131.613827][ T9580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.806545][ T9591] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.857606][ T9591] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 764 with error 28 [ 131.870017][ T9591] EXT4-fs (loop7): This should not happen!! Data will be lost [ 131.870017][ T9591] [ 131.879677][ T9591] EXT4-fs (loop7): Total free blocks count 0 [ 131.885677][ T9591] EXT4-fs (loop7): Free/Dirty block details [ 131.891125][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 131.891138][ T29] audit: type=1326 audit(1763988272.195:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.7.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e5370b829 code=0x7ffc0000 [ 131.891583][ T9591] EXT4-fs (loop7): free_blocks=2415919104 [ 131.897737][ T29] audit: type=1326 audit(1763988272.195:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.7.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 131.950192][ T9591] EXT4-fs (loop7): dirty_blocks=768 [ 131.955415][ T9591] EXT4-fs (loop7): Block reservation details [ 131.961521][ T9591] EXT4-fs (loop7): i_reserved_data_blocks=48 [ 131.991916][ T29] audit: type=1326 audit(1763988272.305:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.7.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e537665e7 code=0x7ffc0000 [ 132.070986][ T29] audit: type=1326 audit(1763988272.325:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.7.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e5370b829 code=0x7ffc0000 [ 132.094393][ T29] audit: type=1326 audit(1763988272.325:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.7.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e537665e7 code=0x7ffc0000 [ 132.117934][ T29] audit: type=1326 audit(1763988272.325:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.7.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e5370b829 code=0x7ffc0000 [ 132.141353][ T29] audit: type=1326 audit(1763988272.325:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.7.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 132.165139][ T29] audit: type=1326 audit(1763988272.325:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.7.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5376f749 code=0x7ffc0000 [ 132.188573][ T29] audit: type=1326 audit(1763988272.345:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.7.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e537665e7 code=0x7ffc0000 [ 132.212114][ T29] audit: type=1326 audit(1763988272.345:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.7.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e5370b829 code=0x7ffc0000 [ 132.305149][ T7416] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 132.344957][ T9614] netlink: 'syz.9.1632': attribute type 27 has an invalid length. [ 132.374693][ T9618] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.475271][ T9614] bond1: left allmulticast mode [ 132.480563][ T9614] veth5: left promiscuous mode [ 132.486679][ T9614] veth6: left promiscuous mode [ 132.488917][ T9615] loop8: detected capacity change from 0 to 512 [ 132.491755][ T9614] veth6: left allmulticast mode [ 132.502766][ T9614] veth8: left promiscuous mode [ 132.506799][ T9615] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 132.507565][ T9614] veth8: left allmulticast mode [ 132.525761][ T9615] EXT4-fs (loop8): 1 truncate cleaned up [ 132.532743][ T9615] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.555940][ T9618] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.593886][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.604113][ T9621] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.621873][ T9621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.637475][ T7419] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.651399][ T9618] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.676456][ T7419] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.687882][ T7419] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.696464][ T9631] dummy0: entered allmulticast mode [ 132.704911][ T7419] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.743786][ T9618] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.762444][ T9636] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=9636 comm=syz.9.1635 [ 132.776258][ T9631] dummy0: left allmulticast mode [ 132.784449][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.797275][ T9636] netlink: 232 bytes leftover after parsing attributes in process `syz.9.1635'. [ 132.820697][ T9641] loop8: detected capacity change from 0 to 512 [ 132.831843][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'. [ 132.844137][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1638'. [ 132.867092][ T9641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.890263][ T9641] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.927736][ T7416] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.945512][ T7416] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.984198][ T7416] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.016906][ T7416] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.049197][ T9653] loop7: detected capacity change from 0 to 2048 [ 133.081646][ T9653] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 133.221576][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.235343][ T9659] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1644'. [ 133.254515][ T9664] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.287850][ T9664] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1440 with error 28 [ 133.300516][ T9664] EXT4-fs (loop7): This should not happen!! Data will be lost [ 133.300516][ T9664] [ 133.310329][ T9664] EXT4-fs (loop7): Total free blocks count 0 [ 133.316570][ T9664] EXT4-fs (loop7): Free/Dirty block details [ 133.322762][ T9664] EXT4-fs (loop7): free_blocks=2415919104 [ 133.328781][ T9664] EXT4-fs (loop7): dirty_blocks=1456 [ 133.334123][ T9664] EXT4-fs (loop7): Block reservation details [ 133.340101][ T9664] EXT4-fs (loop7): i_reserved_data_blocks=91 [ 133.460442][ T9682] veth0: entered promiscuous mode [ 133.466003][ T1476] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 133.466166][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1652'. [ 133.495095][ T9682] veth0 (unregistering): left promiscuous mode [ 133.613762][ T9696] loop7: detected capacity change from 0 to 1024 [ 133.621784][ T9696] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.638269][ T9696] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.815861][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1663'. [ 133.960038][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 134.147350][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1675'. [ 134.332919][ T9770] netlink: 'syz.9.1679': attribute type 30 has an invalid length. [ 134.449758][ T4750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.478954][ T9778] syzkaller0: entered promiscuous mode [ 134.484591][ T9778] syzkaller0: entered allmulticast mode [ 134.701322][ T9792] loop7: detected capacity change from 0 to 128 [ 135.367708][ T9792] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 135.398663][ T9792] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.493370][ T4750] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.593854][ T9823] loop7: detected capacity change from 0 to 512 [ 135.739835][ T9827] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 135.799116][ T9831] netlink: 'syz.7.1704': attribute type 27 has an invalid length. [ 135.811658][ T9831] wg2: left promiscuous mode [ 135.816356][ T9831] wg2: left allmulticast mode [ 135.821987][ T9831] veth4: left promiscuous mode [ 135.826770][ T9831] veth4: left allmulticast mode [ 135.835933][ T7387] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.870130][ T9831] 8021q: adding VLAN 0 to HW filter on device .` [ 135.879878][ T9831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.897151][ T7387] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.907805][ T9837] loop8: detected capacity change from 0 to 1024 [ 135.909087][ T7387] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.918250][ T9837] EXT4-fs: Ignoring removed orlov option [ 135.923075][ T7387] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.955915][ T9837] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.577562][ T9837] ================================================================== [ 136.585676][ T9837] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 136.593651][ T9837] [ 136.595958][ T9837] write to 0xffff88811a75e54c of 4 bytes by task 9842 on cpu 0: [ 136.603568][ T9837] xas_set_mark+0x12b/0x140 [ 136.608058][ T9837] tag_pages_for_writeback+0xc2/0x290 [ 136.613417][ T9837] ext4_do_writepages+0x6b2/0x2750 [ 136.618514][ T9837] ext4_writepages+0x176/0x300 [ 136.623275][ T9837] do_writepages+0x1c6/0x310 [ 136.627851][ T9837] file_write_and_wait_range+0x156/0x2c0 [ 136.633478][ T9837] generic_buffers_fsync_noflush+0x45/0x120 [ 136.639361][ T9837] ext4_sync_file+0x1ab/0x690 [ 136.644026][ T9837] vfs_fsync_range+0x10d/0x130 [ 136.648778][ T9837] ext4_buffered_write_iter+0x34f/0x3c0 [ 136.654307][ T9837] ext4_file_write_iter+0x387/0xf60 [ 136.659492][ T9837] iter_file_splice_write+0x666/0xa60 [ 136.664850][ T9837] direct_splice_actor+0x156/0x2a0 [ 136.669950][ T9837] splice_direct_to_actor+0x312/0x680 [ 136.675310][ T9837] do_splice_direct+0xda/0x150 [ 136.680069][ T9837] do_sendfile+0x380/0x650 [ 136.684497][ T9837] __x64_sys_sendfile64+0x105/0x150 [ 136.689700][ T9837] x64_sys_call+0x2bb4/0x3000 [ 136.694380][ T9837] do_syscall_64+0xd2/0x200 [ 136.698868][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.704748][ T9837] [ 136.707054][ T9837] read to 0xffff88811a75e54c of 4 bytes by task 9837 on cpu 1: [ 136.714585][ T9837] file_write_and_wait_range+0x10e/0x2c0 [ 136.720228][ T9837] generic_buffers_fsync_noflush+0x45/0x120 [ 136.726125][ T9837] ext4_sync_file+0x1ab/0x690 [ 136.730789][ T9837] vfs_fsync_range+0x10d/0x130 [ 136.735543][ T9837] ext4_buffered_write_iter+0x34f/0x3c0 [ 136.741072][ T9837] ext4_file_write_iter+0x387/0xf60 [ 136.746253][ T9837] iter_file_splice_write+0x666/0xa60 [ 136.751612][ T9837] direct_splice_actor+0x156/0x2a0 [ 136.756709][ T9837] splice_direct_to_actor+0x312/0x680 [ 136.762066][ T9837] do_splice_direct+0xda/0x150 [ 136.766818][ T9837] do_sendfile+0x380/0x650 [ 136.771227][ T9837] __x64_sys_sendfile64+0x105/0x150 [ 136.776416][ T9837] x64_sys_call+0x2bb4/0x3000 [ 136.781078][ T9837] do_syscall_64+0xd2/0x200 [ 136.785567][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.791444][ T9837] [ 136.793749][ T9837] value changed: 0x02000021 -> 0x04000021 [ 136.799446][ T9837] [ 136.801747][ T9837] Reported by Kernel Concurrency Sanitizer on: [ 136.807889][ T9837] CPU: 1 UID: 0 PID: 9837 Comm: syz.8.1707 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 136.819160][ T9837] Tainted: [W]=WARN [ 136.822955][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.832993][ T9837] ================================================================== [ 137.123549][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.