last executing test programs: 2.82212955s ago: executing program 3 (id=2971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r4, 0x0, 0x1}, 0x18) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@norecovery}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@grpjquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 2.786576781s ago: executing program 2 (id=2973): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x2, &(0x7f0000000a00)=ANY=[], 0x1, 0x1b1, &(0x7f0000000700)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syslog(0x9, 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000340)={0x0, 0xfd69, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0), &(0x7f0000000200)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004880}, 0x810) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080), 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0xfffffff8, 0x900}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) 2.678672823s ago: executing program 2 (id=2974): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x10) 2.427617446s ago: executing program 3 (id=2977): tgkill(0x0, 0x0, 0x21) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)="81b641f1f3843704", 0x8}, {0x0}], 0x2}, 0x4048081) close(r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa2, 0x8000}, 0x0, 0x0, 0x800000, 0x9, 0x1, 0x20005, 0xfffe, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) rt_sigtimedwait(&(0x7f0000000140)={[0x9]}, &(0x7f0000000180), &(0x7f0000000200)={0x0, 0x989680}, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000012c0)='./file1\x00', 0x21081e, &(0x7f0000001340)={[{@block_validity}, {@nobarrier}], [{@flag='mand'}, {@smackfsroot={'smackfsroot', 0x3d, 'GPL\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@subj_user={'subj_user', 0x3d, '}[/$'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nobarrier'}}]}, 0x1, 0x511, &(0x7f0000001d80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$UHID_INPUT(r2, &(0x7f0000000280)={0x8, {"68828c0b9bc23b6a89f8110d35c59d082b92f476102ce32229638a495dcd21c89d83a602a5e31db5ec28b818a3d699abbfafad0370d610ac8a0c4726147706600ff53312a5a0fcf02dd3c0c051bce7e14058a91070617264a63a446e3bcbc60a8204e1cde7294551e2b14ca95768db0f1d7e91a01558164eb611a545bfff41ad4788237a35d9bb2087b6245d27b7fdf4d12d0b19d8cb93ab5ae5850dc1c521058256c8ffa7742038290bb874b0e4199e945f3ab5c74e1b3840f18b0c27377c18beea9f6f909f141e96c7ef2d65f293a13fbbca16644d71cf8cc7652391c5eacaa8a1e247815d7c91adab2cfe77c71882246812312aa01c99b9402a62d82ce80d08636aa5a87b550becadfe4b5ae98085a6b0d9fd3407461eecd242e243140cbe1027d68516e3c379a0921455ca4b36fb9d4b9f9324590fc77730385dee376d147a74bb08ce8fec7ed205311dc42f4cd009f57c85abced5844867f81ddf09cb67bb623ed41304c2d08373972f30418780c6bed885604b2fc6ea1cd1dfe48c5fae5f5925c9c657bb39d8b30db6eb1cab5031ae94d45aa4764d45397793250c758537e24bab0ab75d8066903f808d1bf68d189c1a1f5c6ad28dbeae6ab64c771346a9e7720b92ad4008db9c94d6b876753d57bb21f7c645d6833e680f52c3ecaf20b05869feb4ee670d4f18e233df78ccda64a8cbc6d28e392fad9cc7dc8baed666cf0e96111aac3376d3e66b50f83bbc51b180de2a320ee8c5fe17bea897acea40274c3962f009ede428a99e0fe869a9f711b626e68a5e257e32cd6a000f4c9c509b1116f2502f199823f29d7410e37f4d57755b85e3b0f555422f8631047187b55295001847e7395e7d59752ee37d12f7f9b0d94f00f626eb330ebcf5fd520925036cc07e687e001befa33475b67d381f5d0d5c969fd603464520d9212df27dbb4665c139755795a42005fac94f0ceeb6dee1f3bb0c7c1b03bbaafe7a4b53257892fa6a0148a1bbb43f0b57c21e278730c53a888864a8fbf71a81e154d5f923bdc67a3557d081655d3a63c63609c0e1804dbb7242ca489ac2f2d425a4f8007d4f312ca7723bf3c6633b651177c0a54d6ac50ac45e5f36e474685ef3938775537a3c50f06eca472d7f8cee44239b2a4d29fbf2629eaf62d879ab8dcd2fd5d2345298f3fea84307f0d22a5ecbe2c728cec1b9ad4240926dc9d3d94d5476a0f9f088b0c21b040139bbe103417ae11a85f72d652c93351f8e062530c03cb842ef3b231ecf36ef32c470c67d48648740334ea670a200e4d87745784c270023ac2391b39319162a268c55d64c763d9e5079c286b0c2eb6c084adbdd0b1823d9d31a73aa181cb507bfce4d9f7752da2fbbd3d3eb366b7fcb4c7868a5d010ea3b4e7dd6e68aeb044edf20e2d4aa2837cd70814a556b5a4f90fc47ceab97b2f6ec437f46196398667cf927c900523154b3bfee8e96eb4b4c03dc0d818511a51b5defd3ebf6523816560ba03fc010fd34ab09fdb3aa355e48b6b3a0cb6ce89b4008104a4afe8265f1178d177027918ec1aca8a2ad98fa63bad1367d379e6ff13a57909d8f9ecf50bf5dedc6e49cb9459e4db15c4aa2098fec4e13eafebaf8c1ea118d05c51e799f8e843e0c722ececfcf2422ece64dd945b6c14e5843a393e84873d3dd84eab786955014f210686aea9b11062c70e829ef9ff9da1be19705d2a74110d82e141cb1da325441a8593780470656e6116d5bf16bb6fee6b980ae3448d782c5f8d658f6e9e8494d9357490485a1b9879d34f4e681a425e36627f4844a64bfee3c90bb2c93c4e791ecefb0917b45f9323524fa575472f9152b84ab51aca006e5672091554d95a598c2c09068673a857704b131dac07bff07985941f2510aa52dbb79246bb5193819fe06cfafd24ac8f2cb98b9f4a7bb5f27d962fcb733b9ac25f1dec5a1d6f6c4fde072048169fbfdde0854a993ae1f93d13b4cfbacd926c204d687f2f9feb696406a8aa83de5853cdb2fc110db3e3ee717851ebc9bfea5f7563e7f41d8edfac83f2b6d015fca0f9ca29e3d97f9c727bdddc5eab6bf603c0af7b421aa44f3a03296fde5d980b3c2c707059440b0e6fac05a66d919733989f69209303d91e09e7b6fac37c812bb880bd06b687958dac2608ec6e07f492732c44b3a304d0a11a7307abab29e31239bde8274ec53a6999c0ec36ef708d46b4e606ddd4e41b05e144147b5a3d786806873dad19d8b11209a0d0d3e93d17ba4b6b75b5e8e9c36289f9be1db428278c0c18bef8327d374fcb16007c595b8c59b15c90f0b2e302071a1e328282b94516af2a83bbcdd2912a5b2044582f21820df59cee9d45a8dc0e9babfd2914c492f58e32475af0ce53bb0b25661ac5226e946f6cf87dab12601f2cb55573f17ac7d48a647a4ef38e3fca92377ffdd9b5f3bb75bad2b406d8d5656b4eea17a7e2f540c12985599bdb09793068b3151f5a7c39241c88c267f34cf342506338835a8e9975b76dde0e275f3522ff6be12402011868e658fba23ef0ea8eeb470f631ca1b5a2e5e35336320ed03ecc31212bf84467333730d96919e2ed9edddb71da5784fdbc23472da3840ac665cfafbc863d71f5e032d6cb1299375f96ae7a1658798561c5d3e549052751eda4d830109d0c7ccdd80afc7803e546738e3424cf77627330b9447ff34068585936bb60eadd47d40f171d80f5b4d3276a74a4ac606135b805a64d0d39a06344d3be8c1572cd33f9a3afd10dfefd4789a54e9cb55677b02f9330ee99a1f93a6cebd52f22eb93bcedf37f4cc3982b4dabaf26e215872e11cc836b439b580ea013c76ea8629ed752b087bcf176fdc8cb6ae4e2947f5bcf9338d48ce1cf74e365b720d1b3d8c5145d1a78e8eb1b45d21bb62ed1b6e212c13a0ea21223103cd521cb73666cc7a5bacf02b5764251257dea8138e3683c0f7ec4037093a3b78a2d74185289a4844903619b1d9d1553ea217ca214be2cba732907692a769d398d52b816e3859f8ae81e5d0c089e1a87885dd5c86c50ac83db3a802ea67bc0224b4d4e5ed0347a7b144004a93826b01244e75b6e499d4b26bb1845afea8654ba9ade75f5310b458885ad78eff3712c02e62363c5dedd6c99d9aae4cff5cc5ed9406c248744cb4f091eb1f419d0efd1ef5c850b4176fa07a1a5a4e8d39d2e0308916abc77f6cf6b4a44a8a01fc21059d0e100daaeaf636bd177637a583eb9f45c67bc2c76760a58bf448e2e379831755f7a974384d3d62727ca3fec2194dd633a0ed411d6586651b4bbd8b4f5746ce4e72715ba9736c240747f98a01fd3df0b9bed007763c1a1968d4b69eafd279d1c761f8d6a675ab2fced1793920b10c50af3520170b1d5041a0dde753a2fc210cf98ebcc5392a5deccaefdf4b002aeee716dcdca6cb6073881ddbfd37ee751edaca99b65202bfdbe1fec457bd502555b7dedc5d8e221d4093cf7acf89a3b801d6d2fdd3415d58bef856be0ff22eab5d75675081d85416ab70d7d36d617a2a7f0c8d6ed35a2a81588f01e80712534c3256fc52fb4ed5478325ae28efd78e7eaaabf08bd749226ecab7bdbab7a60b5b60f2d93714455ae6d3b88de9ebb5d2df81fc7e349af45d1b502cfaf36f4adc16886db2758b4f43f5a030912cb772def90d1a0fb555c8fb10d3a7bd8e2dd954860b8084ce5c72971f5df24ef5bc24937ccd545f964a86b6c466610e24cee92bf7a196c915975349b491e8bb1f164ae0af3fbe050d57dc7af839be63cdf1883ec31f5310c6e0d87c70902a66259bcf76588f14f96ebb85b95997f64814c73d6ff8b059536c70f7d72b5924258ffb706e2af7aaf580f327af6dff0c3b020b451c4b22d46fa72854af95b2b6a6d7a3e0b2b78c06eeec2edd5f1a2174ae8b7b6f4ce2e781314142b8482dc8ff4046e851a5d6b8347b4ac8b2326e1c359160ac49d637e4f5549d73369d3323223f179146a5426e21213c6e51a348bc9d55289837b42fa56f9084f6e268a9d041bde513b1e8ea13a7637bc53f67b2951b4bec7a44acb0d93ea325611c486806884b08192ed5768ca88e95db075d8d551b09c42d62a87e1b121adb5812ee1769f1555707b163af0ff78d728ad0a1871704645f1ed8632e85735ff24e7541005d5409205940df84926ec581218a4ce89498715fb09dcdb44849d3ca7631c1d472ffcafeb37610e8ca77ba4b43176d825a27f59ec81b217b7aa6e01698fe45ffafa0ea2356ad423e581b632b6c627e0d827da58523a40aa19ea3e2ca93f93ed2a33e4fabc36ae56abcb11ae7944577230ec6c498033976fb8d9610d9d9eacf7302ecb060ea5002d70eb6f327ded18f5b2c79e04f09bff203b7d572a214c3684eb89470c28a1361333b32dd63df2163c039d129c5f766fe1a4110f95fc99b87ead844433ac309c3565bc9ca7a6f838a121fc44303ae248a366865e0a3da36ed3046e304f579ff422a7b9946b5cfb52d3e4463e4c5a1e3c7ec1dc16c18c1cdc641b8a8301cd2fcd271489528b4bb4a8515a71be236faadc7ea05173c21f4b8a9aadae38d2e8443199a08a8df1d502df62736812398e8df6eb17f938d529e8dccfe6a15470be9a8cb613a7fb337f213f77ebd136ddbab9471629169e24304e8d20f37e9a341559afc9ab598119e504c53d5c8ec5316e8336295c4101d8bdf6c71d1483355c00972636ea6831704008858cf803defbba5069c24ac7d5e1b7c8e664212d350832fbc767e09a6c2a08073dd8ac2661fec32d6f548b56d74201c274e2cc07a1712169d3db64ebd5bc111fc0aa41f69a5ef849a41a84cb0673db00cb6ae345fdbd44a5467f8588aa24ef57d7ea9ce9b0b9d2c2e2ee7990c1e3d97375ffd800248f87789cedb94803c315728805b5c0394ab617eadacafebba89d103b28c9df323fc65d023539393ac18285246ffc5e4a7ba902dc234ac2383382f3f445f198cd82a494c8f7ea80c0517223f14e303cf7565e44cd650d4997202ac331355d2c734c61c8a1903d056eb03ce50d167a7a94854de234e45e3886287d01221c6d493ea078df81c2c0d7e5b61a34ceecbf83dd21edb2aeddd14869aaf034588076f6a604569e745f4400fa8ca7dfb9be8bfb85874283a5d1522ec70559abe4681c91112e3561841b2fad0540865944b5df385121b4c8d99cb4d5f9634ace1700c90cfc98f4086714f5f3fd8450f4067e32715aee5943c571fcdca2cb6115dcc373e3f5e96b08e626a1a776ffd5efbf898cfaac7405f75a40feb8ddf06cddf1258a09f3e58b424d409767966290c5c15d150e0f7d120f0078cb97337874f16838ce3cad921bad2573ecef3d853ee5d7e89c3fe517a0d1139ad3f1424c6e5e880cc8b33eb4762b7bd1fe5fd4e2d4c3249bb70b5fe2e74e3751e1b0d78dfbc78fbab4a35d7cd97f8be57eec3a6b3b5c63a5747f82bd3e7fba99bbf9ad1faee6f4b59e14049bbc7a78c285cc8be8cc3fac3451add460bdada49d65d2253adb3500ad3d163f9ae0e24d413ad348bc1a2ed940e6d1c28fa16b9ad05c2175b3374d765939148451b8daffb3f4e646397bc04b0f04a808b6f96dcab1dccbd5b55d4758279b67899dea10bbb61c58f6aad2aefe78f9e5d2b916ca6d717d78e978c25ad27b912e7bddede9c2bf3cd464ff102d78332c1468fc2f2f5cd20baddb71736c30a4a302bb5412587e95f165bc12c05cebf5128ef67064fe9b9f14aed30708a4e5afe8b0cf6c904dbedcd2d7c467cef6544ddd020de4cc50f646d0ba0862030febee6af93b263ff983708b1c725a13103", 0x1000}}, 0x1006) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010102, @broadcast}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8b3329bd7000000000000500"], 0x2c}}, 0x0) fallocate(r3, 0x0, 0x3, 0x2080402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0xc, r3}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r10, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/38, 0x26}], 0x1, &(0x7f00000013c0)=""/143, 0x8f}, 0x2}], 0x2, 0x10122, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) 2.067388521s ago: executing program 3 (id=2988): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 32) epoll_create1(0x0) (async, rerun: 32) r0 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) unshare(0x44040000) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x10) (async, rerun: 64) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) (async, rerun: 64) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f00000000c0)) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) 1.846240714s ago: executing program 1 (id=2991): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe80000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.783862235s ago: executing program 1 (id=2994): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f00000003c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nodelalloc}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) chdir(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.732355566s ago: executing program 3 (id=2996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007022000f8ffffffb7030f354da35111bef30000000000dd840000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x528, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x81) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.727305056s ago: executing program 1 (id=2997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000180)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@noload}, {@stripe={'stripe', 0x3d, 0x79}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@user_xattr}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d0, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf6UmVQ+1YFtsJS3a3aSxbfBQK4g9FdR6rzHZhJBNNmQ3bROKpHhXEFHBkycvgn+AIP0TRCjoXaoooq0ePKgrOztb27jbRLrd6Tf5fODtvO/M7j7P27Az88687ARwaJ2PiFsRMRIRlyNiPF+f5uV2Xtqve/H80Xy7JNFq3f1LEkm+rvtZSb48ERE7EXE0Ir52O+Kbyf/GbWxtr8zVatWNvF1prq5XGlvbV5ZX55aqS9W1mZnp67M3Zq/NTg2knxMRcfNLf/jBd3/65Zu//OyD393706VvtdMay7e/2o9B6nS9lP1fdI1GxMa7CFaAkXxZ6rP9OyNDTAYAgD21z/E/GhGfys7/x2MkOzsFAAAADpLWF8bin0lECwAAADiw0mwObJKW87kAY5Gm5XJnDu/H43haqzean1msb64tdObKTkQpXVyuVafyucITUUra7el8jm23fXVXeyYiTkXE98ePZe3yfL22UPTFDwAAADgkTuwa//99PBv/Hyk6LwAAAGDAJopOAAAAAHjnjP8BAADg4DP+BwAAgAPtK3futEur+/zrhftbmyv1+1cWqo2V8urmfHm+vrFeXqrXl7Lf7Fvd6/Nq9fr652Jt82GlWW00K42t7Xur9c215r3l1x6BDQAAAAzRqXNPfptExM7nj2Wl7YOikwKGItlje/aQkGd54/dDSAgYmpGiEwAKM1p0AkBhSkUnABRur+sAfSfv/GrwuQAAAO/G5Cf63/93bQAOtrToBACAoXP/Hw6v0uszAK8VlwlQlI/ssf3t7/+3Wv9XQgAAwMCNZSVJy/m9wLFI03I54mT2WIBSsrhcq07l44PfjJeOtNvT2TuTPecMAwAAAAAAAAAAAAAAAAAAAAAAAAAdrVYSLQAAAOBAi0j/mGS/5h8xOX5xbPf1gQ+Sf4xny4h48OO7P3w412xuTLfX//Xl+uaP8vVXi7iCAQAAAOzWHad3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMEgvnj+a75Zhxv3zFyNiomf8c0ezxdEoRcTxvyUx+sr7kogYGUD8nccRcbpX/KSdVkxEJ4te8Y8VGD+NiBMDiA+H2ZP2/udWr+9fGuezZe/v32he3lb//V8a3f3fSJ/9z8l9xjjz9OeVvvEfR5wZ7b3/6cZP+sS/sM/43/j69na/ba2fREz2PP4kr8WqNFfXK42t7SvLq3NL1aXq2szM9PXZG7PXZqcqi8u1av5vzxjf++Qv/v2m/h/vE39ij/5f3Gf///X04fOPdaqlXvEvXeh9/D3dJ36aH/s+ndfb2ye79Z1O/VVnf/brs2/q/0Kf/r/8+/c40LZjXtpn/y9/9dvP9vlSAGAIGlvbK3O1WnXjw1hJ471IQ2UglSPvRxoqnUrReyYAAGDQ/nvSX3QmAAAAAAAAAAAAAAAAAAAAcHgN4+fEdsfcKaarAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABv9J8AAAD//9Nu2TA=") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000280)=0xd4a, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@fadd={0x58, 0x114, 0x6, {{0x9, 0x80}, &(0x7f0000000400)=0x6, 0x0, 0x1, 0x10001, 0x2, 0x9, 0x8, 0xb}}], 0x58}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f00000001c0), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='jbd2_shrink_checkpoint_list\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 1.485757609s ago: executing program 3 (id=3000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='ext4_es_find_extent_range_exit\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x1000) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r2, 0x20, 0x0, 0x8000) socketpair$unix(0x1, 0x5, 0x32, &(0x7f0000000180)) 1.4045843s ago: executing program 3 (id=3003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffc01, 0x5}) 1.40296983s ago: executing program 32 (id=3003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffc01, 0x5}) 1.216106743s ago: executing program 0 (id=3010): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000001780)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114db, 0x1000, 0x2, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 1.179618654s ago: executing program 0 (id=3012): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r0, r1, 0x2f, 0x2028, 0x4, @void, @void, @value=0xffffffffffffffff}, 0x20) 1.102569974s ago: executing program 0 (id=3014): tgkill(0x0, 0x0, 0x21) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)="81b641f1f3843704", 0x8}, {0x0}], 0x2}, 0x4048081) close(r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa2, 0x8000}, 0x0, 0x0, 0x800000, 0x9, 0x1, 0x20005, 0xfffe, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x8c0e, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) write$sndseq(r3, 0x0, 0x0) 1.009347986s ago: executing program 0 (id=3017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000180)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@noload}, {@stripe={'stripe', 0x3d, 0x79}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@user_xattr}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d0, &(0x7f00000002c0)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000280)=0xd4a, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@fadd={0x58, 0x114, 0x6, {{0x9, 0x80}, &(0x7f0000000400)=0x6, 0x0, 0x1, 0x10001, 0x2, 0x9, 0x8, 0xb}}], 0x58}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f00000001c0), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r2, @ANYRES16=r1, @ANYRES32=r3, @ANYRESHEX, @ANYBLOB="b84b6ff2a773e910a7d3101ae1da76254b53a1de0d46f2c66762d1aeeba01c284f3a42c1cb658c0247dca98a787cc92c3d80d51bd3b4d06ccf5ba60a4b51176a66efd083d74f100f5193f0f3ac5a496b28602c05782caf0fd5ee65e2c7d9b0cabfc70ab48b830213dabd804563fc411f37b20a308d8c0c55f2d7031372683bd75d962f0cd1d0fe427f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='jbd2_shrink_checkpoint_list\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r11, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 976.131376ms ago: executing program 4 (id=3018): syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) recvmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/29, 0x1d}, {&(0x7f00000002c0)=""/110, 0x6e}], 0x7, &(0x7f00000003c0)=""/181, 0xb5}, 0x8000}, {{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/20, 0x14}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000580)=""/200, 0xc8}, {&(0x7f0000000680)=""/44, 0x2c}, {&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000780)}], 0x6, &(0x7f0000000840)=""/228, 0xe4}, 0x6}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/227, 0xe3}], 0x1}, 0x5}, {{&(0x7f0000000a80)=@caif=@util, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000b00)=""/180, 0xb4}], 0x1, &(0x7f0000002200)=""/33, 0x21}, 0x10}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000002240)=""/82, 0x52}, {&(0x7f00000022c0)=""/146, 0x92}, {&(0x7f0000002380)=""/188, 0xbc}, {&(0x7f0000002440)=""/203, 0xcb}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/14, 0xe}, {&(0x7f0000003580)=""/91, 0x5b}], 0x7, &(0x7f0000003680)=""/161, 0xa1}, 0x3}], 0x5, 0x40000000, &(0x7f0000003880)) 974.090406ms ago: executing program 2 (id=3019): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013071400000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000410000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 866.236598ms ago: executing program 2 (id=3020): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$FIONREAD(r0, 0x40085500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x30, 0xffffffff}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8862, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2}, 0x12000, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000440)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xbb, &(0x7f00000001c0)=""/187, 0x40f00, 0x20, '\x00', r4, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0xb, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r7, r8, 0xffffffffffffffff, r9], &(0x7f0000000500)=[{0x1, 0x1, 0x8, 0x5}, {0x3, 0x1, 0x4, 0x3}, {0x5, 0x4, 0x8, 0x3}], 0x10, 0x5, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0xe}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) syz_usb_connect$uac1(0x0, 0xc6, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x9, 0x70, 0x92, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x94}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x2, 0x7, 0x7, 0xc1, 0x6}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x4, 0xf, "f27850b7"}, @mixer_unit={0x9, 0x24, 0x4, 0x4, 0xa1, "eaf0490f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xa0, 0x1, 0x2, 0xa, "2182e5f65b6d"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x2, 0x37, 0x5, "a7864d827c528a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x5, 0x5, "", "27e1ac"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xe, 0x2, 0x1, 0xd1, '!I', "815a0b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x1, 0x9, {0x7, 0x25, 0x1, 0x2, 0x8, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x5, 0xdf, {0x7, 0x25, 0x1, 0x42, 0x1, 0x9}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xf9, 0xd, 0x3, 0xff, 0xc}, 0x76, &(0x7f0000000180)={0x5, 0xf, 0x76, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x2a, "7f9804032954313d021954f5ab8d107c"}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x7ffff80, 0x1e000, 0xffff, [0x30, 0xc03f, 0x3f, 0x3f00, 0xc1d7eef210561177, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x0, 0x8, 0x6, 0xd6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x0, 0x81}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x5, 0x0, 0x8000, [0x9fff, 0xff3fff, 0xf, 0x30, 0x0, 0xf]}]}, 0x3, [{0xaf, &(0x7f0000000340)=ANY=[@ANYBLOB="af03fe4e938d5f790c9c3e6de8106770dd252b196d150d946f6b567087e605a46b3cb6c64864f6c3f343f6a412bb4f167978efbdc6e8b66b67b4fbf9658e4abb3b5f8b51c30b07b61e5dc466bd6665a6ac8e3b04ebcd911367571086d4f411dec4881655d1e2c08ccdf6d455784245e689eaa03a632da5f9b9d0bc794cf57185f0adc3d41ddb6476119892425dde550c45ba702169ea82a8607f9b4aeda00b67fcb3055f1c79dd1b0dff3175c8f92e"]}, {0xc3, &(0x7f0000000400)=@string={0xc3, 0x3, "c6991186029bc7fb1b19109611284d010cb10062fb2f9859f72700a3262023255914dd9bc6bb62666a7b4d9f4680bf31a5d4aacea7ee0117d90f40a30a51175f2d85b281dbdfa8a60a74d98cc681bfa16c2ced3eeac447994cfdd120d2e99ced7cd242f273567db62ac6a11a7d0631f16fd028c177867b7cfab9c8c86e4abcbfd321bee3019e0101184ba149bfbfc16e56cbebdfc099f1fe12b983f5494bdbe13de91cb972ac99e18181558c5a7578182121a00af18727b07019d7fcc2b5102578"}}, {0x4b, &(0x7f0000000600)=@string={0x4b, 0x3, "3c46af0fda7ab6938aecee3117ff125bcff4c28be65e74cdf96fbd68ad27255b6d0a50c0f1160b31e80d7e13094aa118cc95c0ff9532a776089a88e7aa62c216a8dc4020b028d6e7a0"}}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 783.525719ms ago: executing program 1 (id=3021): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000001780)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114db, 0x1000, 0x2, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 765.027729ms ago: executing program 4 (id=3022): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) 751.817899ms ago: executing program 1 (id=3023): socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 717.44382ms ago: executing program 4 (id=3024): socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r4 = syz_open_pts(r3, 0x141601) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r2, 0xffffffffffffffff, 0x0) 716.7274ms ago: executing program 1 (id=3025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e89"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='Q', 0x1, 0x200980) 635.716281ms ago: executing program 4 (id=3026): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x2, &(0x7f0000000a00)=ANY=[], 0x1, 0x1b1, &(0x7f0000000700)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syslog(0x9, 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000340)={0x0, 0xfd69, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0), &(0x7f0000000200)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004880}, 0x810) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080), 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0xfffffff8, 0x900}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) 287.854146ms ago: executing program 4 (id=3027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="a3e3db2c11aa110767a384794fb618010006000004000000000000000c0085000000020000009504cffa72c94bda31e8fb543e50e108bedb5aa3"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x1113, &(0x7f0000000480)={0x0, 0x10, 0x800, 0x1, 0x5}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8000000000000004, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x9, 0x2000, @fd_index=0x7, 0xd, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x10, 0x1, {0x2}}) syz_clone(0x80000000, &(0x7f0000000100)="b24ebc95ca18784bd53aa293e1d97335bdbc0b4c681ce92a1037be2adc4ff9464c8a7ea01b1d", 0x26, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000003c0)="639b6c4c4a8afa826b1f157883c058e733ce6b49618829b6b4450d746a655a473f5f91887d416a6b6e563648ae88e35f92d08a86110de06f4a46b485fce44bf43d0c8b304f4ff2fbc5417f7e0534ddd196cc77514ee8450bd1a04c672cae3ee49a6d4f742e3184d5e577472f5e912cdf550e8e6ac2b19d0303d3a77e4b4e761f32933f50c7c6a216d1583dfa2a4b136eb68831") io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) 209.869887ms ago: executing program 2 (id=3028): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syslog(0x9, 0x0, 0x0) 145.505978ms ago: executing program 0 (id=3029): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013071400000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000410000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 134.722538ms ago: executing program 2 (id=3030): r0 = socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xb6441a1639179b7c) 95.788838ms ago: executing program 0 (id=3031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x40840) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x2}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) r6 = syz_io_uring_setup(0x6b0f, &(0x7f00000003c0)={0x0, 0xfefffffe, 0x10100, 0x5, 0x2e7}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./cgroup/pids.max/../file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_enter(r6, 0x2dbe, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x1) 0s ago: executing program 4 (id=3032): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000001000), 0xe09) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fchown(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 183.065266][ T29] audit: type=1326 audit(1746914720.905:14831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 183.088925][ T29] audit: type=1326 audit(1746914720.905:14832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 183.112714][ T29] audit: type=1326 audit(1746914720.905:14833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f458509d2d0 code=0x7ffc0000 [ 183.136626][ T29] audit: type=1326 audit(1746914720.905:14834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f45850a0197 code=0x7ffc0000 [ 183.160216][ T29] audit: type=1326 audit(1746914720.905:14835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 183.183726][ T29] audit: type=1326 audit(1746914720.905:14836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f45850a0197 code=0x7ffc0000 [ 183.207413][ T29] audit: type=1326 audit(1746914720.905:14837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f458509d5ca code=0x7ffc0000 [ 183.277968][ T9950] vlan2: entered allmulticast mode [ 183.319736][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2494'. [ 183.401284][ T9959] loop1: detected capacity change from 0 to 512 [ 183.424056][ T9961] loop0: detected capacity change from 0 to 256 [ 183.444813][ T9959] EXT4-fs: Mount option(s) incompatible with ext2 [ 183.447746][ T9962] loop4: detected capacity change from 0 to 512 [ 183.471462][ T9962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.489146][ T9962] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2497: invalid indirect mapped block 4294967295 (level 1) [ 183.509333][ T9962] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2497: invalid indirect mapped block 4294967295 (level 1) [ 183.535168][ T9959] atomic_op ffff888143722528 conn xmit_atomic 0000000000000000 [ 183.544615][ T9966] loop0: detected capacity change from 0 to 256 [ 183.607195][ T9966] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 183.616322][ T9966] FAT-fs (loop0): bogus number of directory entries (1) [ 183.623431][ T9966] FAT-fs (loop0): Can't find a valid FAT filesystem [ 183.655043][ T9962] EXT4-fs (loop4): 2 truncates cleaned up [ 183.891110][ T9972] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2501'. [ 184.199998][ T9979] loop1: detected capacity change from 0 to 128 [ 184.241329][ T9979] netlink: 'syz.1.2503': attribute type 8 has an invalid length. [ 184.325699][ T9983] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2506'. [ 184.382284][ T9987] vlan3: entered allmulticast mode [ 184.385266][ T9985] loop4: detected capacity change from 0 to 1024 [ 184.422067][ T9985] EXT4-fs: Ignoring removed nobh option [ 184.422416][ T9989] loop1: detected capacity change from 0 to 1024 [ 184.427767][ T9985] EXT4-fs: Ignoring removed bh option [ 184.445451][ T9989] EXT4-fs: Ignoring removed nobh option [ 184.451147][ T9989] EXT4-fs: Ignoring removed bh option [ 184.476262][ T9993] loop3: detected capacity change from 0 to 128 [ 184.504002][ T9993] netlink: 'syz.3.2510': attribute type 8 has an invalid length. [ 184.554948][ T9989] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2508: Allocating blocks 385-513 which overlap fs metadata [ 184.570816][ T9985] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2505: Allocating blocks 385-513 which overlap fs metadata [ 184.612252][T10003] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2512'. [ 184.632427][ T9989] EXT4-fs (loop1): pa ffff8881068e08c0: logic 16, phys. 129, len 24 [ 184.640642][ T9989] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 184.652645][ T9985] EXT4-fs (loop4): pa ffff8881068e0930: logic 16, phys. 129, len 24 [ 184.660752][ T9985] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 184.680432][T10008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10008 comm=syz.3.2513 [ 184.747951][T10010] loop0: detected capacity change from 0 to 2048 [ 184.802503][T10014] loop4: detected capacity change from 0 to 256 [ 184.854313][T10018] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 184.869235][T10018] SELinux: failed to load policy [ 184.940492][T10010] loop0: p2 p3 p7 [ 184.963013][ T3005] loop0: p2 p3 p7 [ 184.996966][ T3596] udevd[3596]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 185.016209][T10020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2518'. [ 185.051024][T10022] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2517'. [ 185.060601][T10022] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2517'. [ 185.098400][T10026] vlan2: entered allmulticast mode [ 185.161381][T10031] loop4: detected capacity change from 0 to 1024 [ 185.168380][T10031] EXT4-fs: Ignoring removed nobh option [ 185.174085][T10031] EXT4-fs: Ignoring removed bh option [ 185.224482][T10031] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2523: Allocating blocks 385-513 which overlap fs metadata [ 185.228762][T10037] loop2: detected capacity change from 0 to 1024 [ 185.248730][T10034] SELinux: failed to load policy [ 185.260309][T10031] EXT4-fs (loop4): pa ffff8881069a3a80: logic 16, phys. 129, len 24 [ 185.268406][T10031] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 185.268528][T10041] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2526'. [ 185.319123][T10037] EXT4-fs: Ignoring removed nobh option [ 185.321175][T10045] loop3: detected capacity change from 0 to 2048 [ 185.324772][T10037] EXT4-fs: Ignoring removed bh option [ 185.348287][T10046] loop1: detected capacity change from 0 to 1024 [ 185.361896][T10046] EXT4-fs: Ignoring removed orlov option [ 185.367777][T10046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.370496][ T3005] loop3: p2 p3 p7 [ 185.401528][ T3005] loop3: p2 p3 p7 [ 185.404207][T10052] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 185.416997][T10037] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.2525: Allocating blocks 385-513 which overlap fs metadata [ 185.427885][T10045] loop3: p2 p3 p7 [ 185.434015][T10037] EXT4-fs (loop2): pa ffff8881069a3a80: logic 16, phys. 129, len 24 [ 185.442692][T10037] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 185.491512][T10058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2531'. [ 185.500731][T10058] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2531'. [ 185.516004][T10058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2531'. [ 185.533037][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 185.549902][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 185.550752][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 185.627688][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 185.640359][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 185.647726][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 185.704763][T10078] loop4: detected capacity change from 0 to 128 [ 185.721302][T10075] loop9: detected capacity change from 0 to 7 [ 185.723699][T10076] loop2: detected capacity change from 0 to 1024 [ 185.727799][T10075] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.737242][T10076] EXT4-fs: Ignoring removed orlov option [ 185.743981][T10075] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.747870][T10076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.755476][T10075] loop9: unable to read partition table [ 185.757093][T10075] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 185.757093][T10075] U) failed (rc=-5) [ 185.767468][T10079] vlan3: entered allmulticast mode [ 185.815711][T10078] netlink: 'syz.4.2538': attribute type 8 has an invalid length. [ 185.825563][T10075] loop3: detected capacity change from 0 to 2048 [ 185.834640][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 185.851287][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 185.864595][ T3596] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.874769][ T3596] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.884233][ T3596] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.892748][ T3596] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.904132][ T3596] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.913398][ T3596] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.915101][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 185.921998][ T3596] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.939524][ T3596] Buffer I/O error on dev loop9, logical block 0, async page read [ 186.082322][T10087] SELinux: failed to load policy [ 186.105965][T10093] loop1: detected capacity change from 0 to 1024 [ 186.132811][T10093] EXT4-fs: Ignoring removed nobh option [ 186.135539][T10096] loop3: detected capacity change from 0 to 128 [ 186.138528][T10093] EXT4-fs: Ignoring removed bh option [ 186.183358][T10096] netlink: 'syz.3.2544': attribute type 8 has an invalid length. [ 186.196288][T10093] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2543: Allocating blocks 385-513 which overlap fs metadata [ 186.244464][T10093] EXT4-fs (loop1): pa ffff8881069a3af0: logic 16, phys. 129, len 24 [ 186.252798][T10093] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 186.321505][T10116] loop2: detected capacity change from 0 to 128 [ 186.337160][T10112] vlan2: entered allmulticast mode [ 186.424167][T10116] netlink: 'syz.2.2553': attribute type 8 has an invalid length. [ 186.464174][T10124] loop4: detected capacity change from 0 to 1024 [ 186.472011][T10124] EXT4-fs: Ignoring removed nobh option [ 186.477671][T10124] EXT4-fs: Ignoring removed bh option [ 186.546978][T10126] loop0: detected capacity change from 0 to 1024 [ 186.609405][T10126] EXT4-fs: Ignoring removed nobh option [ 186.615200][T10126] EXT4-fs: Ignoring removed bh option [ 186.616789][T10124] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2555: Allocating blocks 385-513 which overlap fs metadata [ 186.646028][T10128] SELinux: failed to load policy [ 186.696375][T10123] EXT4-fs (loop4): pa ffff8881068e09a0: logic 16, phys. 129, len 24 [ 186.704580][T10123] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 186.737272][T10126] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2556: Allocating blocks 385-513 which overlap fs metadata [ 186.753390][T10139] loop2: detected capacity change from 0 to 128 [ 186.763662][T10131] loop3: detected capacity change from 0 to 8192 [ 186.791674][T10139] netlink: 'syz.2.2560': attribute type 8 has an invalid length. [ 186.815835][T10125] EXT4-fs (loop0): pa ffff8881068e09a0: logic 16, phys. 129, len 24 [ 186.824098][T10125] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 187.108154][T10145] loop4: detected capacity change from 0 to 2048 [ 187.134168][T10150] loop2: detected capacity change from 0 to 128 [ 187.236377][T10150] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.255674][ T3305] loop4: p1 < > p4 [ 187.260087][T10153] loop0: detected capacity change from 0 to 1024 [ 187.269846][T10153] EXT4-fs: Ignoring removed nobh option [ 187.275455][T10153] EXT4-fs: Ignoring removed bh option [ 187.290111][ T3305] loop4: p4 size 8388608 extends beyond EOD, truncated [ 187.322285][T10155] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 187.332613][T10145] loop4: p1 < > p4 [ 187.339172][T10145] loop4: p4 size 8388608 extends beyond EOD, truncated [ 187.361448][ T3005] loop4: p1 < > p4 [ 187.366962][ T3005] loop4: p4 size 8388608 extends beyond EOD, truncated [ 187.377521][T10153] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2564: Allocating blocks 385-513 which overlap fs metadata [ 187.399106][T10153] EXT4-fs (loop0): pa ffff8881068e09a0: logic 16, phys. 129, len 24 [ 187.407211][T10153] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 187.565911][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 187.570658][T10163] loop1: detected capacity change from 0 to 2048 [ 187.606991][T10165] vlan2: entered allmulticast mode [ 187.643199][T10169] loop4: detected capacity change from 0 to 128 [ 187.645285][ T3502] loop1: p2 p3 p7 [ 187.693400][T10163] loop1: p2 p3 p7 [ 187.833884][T10174] loop4: detected capacity change from 0 to 512 [ 187.865619][T10174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.925184][T10174] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2571: invalid indirect mapped block 4294967295 (level 1) [ 187.950712][T10174] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2571: invalid indirect mapped block 4294967295 (level 1) [ 188.026474][T10174] EXT4-fs (loop4): 2 truncates cleaned up [ 188.060517][T10174] EXT4-fs mount: 36 callbacks suppressed [ 188.060606][T10174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.093066][T10188] loop0: detected capacity change from 0 to 1024 [ 188.099690][ T29] kauditd_printk_skb: 477 callbacks suppressed [ 188.099715][ T29] audit: type=1400 audit(1746914726.015:15315): avc: denied { mounton } for pid=10189 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 188.138216][T10188] EXT4-fs: Ignoring removed nobh option [ 188.143985][T10188] EXT4-fs: Ignoring removed bh option [ 188.179744][T10193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.188543][T10193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.199391][T10188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.231660][T10188] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2577: Allocating blocks 385-513 which overlap fs metadata [ 188.256816][T10188] EXT4-fs (loop0): pa ffff8881069a3a80: logic 16, phys. 129, len 24 [ 188.264924][T10188] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 188.317647][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.363261][T10203] loop0: detected capacity change from 0 to 1024 [ 188.379961][T10203] EXT4-fs: Ignoring removed nobh option [ 188.385678][T10203] EXT4-fs: Ignoring removed bh option [ 188.414700][T10203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.458583][T10203] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2579: Allocating blocks 385-513 which overlap fs metadata [ 188.486324][T10203] EXT4-fs (loop0): pa ffff8881069a3b60: logic 16, phys. 129, len 24 [ 188.494512][T10203] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 188.538962][T10189] chnl_net:caif_netlink_parms(): no params data found [ 188.552670][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.603113][T10212] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 188.631534][T10189] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.638759][T10189] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.656275][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.675657][T10189] bridge_slave_0: entered allmulticast mode [ 188.696364][T10189] bridge_slave_0: entered promiscuous mode [ 188.706536][T10214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10214 comm=syz.4.2581 [ 188.720408][ T29] audit: type=1401 audit(1746914726.625:15316): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 188.738442][T10189] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.745590][T10189] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.778772][T10189] bridge_slave_1: entered allmulticast mode [ 188.858932][ T29] audit: type=1326 audit(1746914726.775:15317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 188.882584][ T29] audit: type=1326 audit(1746914726.775:15318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 188.906277][ T29] audit: type=1326 audit(1746914726.775:15319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 188.930017][ T29] audit: type=1326 audit(1746914726.775:15320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 188.939575][T10189] bridge_slave_1: entered promiscuous mode [ 188.953580][ T29] audit: type=1326 audit(1746914726.775:15321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10213 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 189.042298][T10189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.063944][T10189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.138452][T10189] team0: Port device team_slave_0 added [ 189.152719][T10189] team0: Port device team_slave_1 added [ 189.189432][T10189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.196457][T10189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.222440][T10189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.234106][T10229] SELinux: Context system_u:object_r:admin_passwd_exec_t:s0 is not valid (left unmapped). [ 189.242222][T10231] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 189.250986][ T29] audit: type=1400 audit(1746914727.165:15322): avc: denied { relabelto } for pid=10227 comm="syz.3.2584" name="" dev="pipefs" ino=26349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:admin_passwd_exec_t:s0" [ 189.251092][T10189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.285584][T10189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.311567][T10189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.331638][T10189] hsr_slave_0: entered promiscuous mode [ 189.338027][T10189] hsr_slave_1: entered promiscuous mode [ 189.348598][T10189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.356294][T10189] Cannot create hsr debugfs directory [ 189.362034][T10234] __nla_validate_parse: 33 callbacks suppressed [ 189.362045][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2588'. [ 189.410521][T10238] loop2: detected capacity change from 0 to 2048 [ 189.434925][T10189] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.455098][ T29] audit: type=1326 audit(1746914727.375:15323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.0.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ea4e969 code=0x7ffc0000 [ 189.458334][T10240] netlink: 'syz.0.2590': attribute type 8 has an invalid length. [ 189.478719][ T29] audit: type=1326 audit(1746914727.375:15324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.0.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ea4e969 code=0x7ffc0000 [ 189.518754][T10242] loop0: detected capacity change from 0 to 128 [ 189.530940][T10238] loop2: p2 p3 p7 [ 189.535811][T10189] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.548789][T10242] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.563925][T10242] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.573813][ T3005] loop2: p2 p3 p7 [ 189.602791][T10246] loop2: detected capacity change from 0 to 1024 [ 189.611631][T10246] EXT4-fs: Ignoring removed nobh option [ 189.612717][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.617214][T10246] EXT4-fs: Ignoring removed bh option [ 189.632702][T10189] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.657871][T10246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.701652][T10246] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.2592: Allocating blocks 385-513 which overlap fs metadata [ 189.717420][T10246] EXT4-fs (loop2): pa ffff8881068e0a10: logic 16, phys. 129, len 24 [ 189.725554][T10246] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 189.751165][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.775577][T10253] loop2: detected capacity change from 0 to 1024 [ 189.782552][T10253] EXT4-fs: Ignoring removed nobh option [ 189.788163][T10253] EXT4-fs: Ignoring removed bh option [ 189.798309][T10189] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.821113][T10253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.839602][T10253] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.2594: Allocating blocks 385-513 which overlap fs metadata [ 189.911220][T10189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.926848][T10253] EXT4-fs (loop2): pa ffff8881069a3a80: logic 16, phys. 129, len 24 [ 189.934927][T10253] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 189.959643][T10189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.977340][T10189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.009171][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.010142][T10189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.028205][T10256] loop0: detected capacity change from 0 to 8192 [ 190.059985][T10258] loop9: detected capacity change from 0 to 7 [ 190.098756][T10258] loop9: unable to read partition table [ 190.127901][T10258] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 190.127901][T10258] U) failed (rc=-5) [ 190.151021][T10263] loop3: detected capacity change from 0 to 256 [ 190.164374][T10189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.284165][T10189] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.318503][ T1695] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.325702][ T1695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.365787][ T1695] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.372970][ T1695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.426869][T10265] loop2: detected capacity change from 0 to 2048 [ 190.493769][T10265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.615234][T10189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.654170][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.736383][T10286] loop2: detected capacity change from 0 to 128 [ 190.768974][T10286] netlink: 'syz.2.2602': attribute type 8 has an invalid length. [ 190.796386][T10189] veth0_vlan: entered promiscuous mode [ 190.831906][T10189] veth1_vlan: entered promiscuous mode [ 190.838738][T10288] SELinux: failed to load policy [ 190.860634][T10292] vlan2: entered allmulticast mode [ 190.890497][T10189] veth0_macvtap: entered promiscuous mode [ 190.902069][T10189] veth1_macvtap: entered promiscuous mode [ 190.916595][T10189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.927299][T10189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.937177][T10189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.947706][T10189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.973336][T10189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.990973][T10189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.001473][T10189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.011338][T10189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.013784][T10294] SELinux: failed to load policy [ 191.021781][T10189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.031391][T10296] loop2: detected capacity change from 0 to 2048 [ 191.044201][T10189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.059973][T10189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.068748][T10189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.077633][T10189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.086357][T10189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.117089][ T3490] loop2: p2 p3 p7 [ 191.156127][T10296] loop2: p2 p3 p7 [ 191.186456][T10300] loop1: detected capacity change from 0 to 256 [ 191.198530][T10302] loop4: detected capacity change from 0 to 128 [ 191.248762][T10302] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.282262][T10302] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.331469][T10310] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2610'. [ 191.363955][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 191.366949][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 191.385050][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 191.406502][T10310] loop1: detected capacity change from 0 to 2048 [ 191.424117][ T3325] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.429993][T10310] EXT4-fs: dax option not supported [ 191.458137][T10312] loop2: detected capacity change from 0 to 2048 [ 191.476320][T10316] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 191.513242][T10319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10319 comm=syz.1.2613 [ 191.529051][T10317] loop3: detected capacity change from 0 to 512 [ 191.536123][T10317] EXT4-fs: Mount option(s) incompatible with ext2 [ 191.569703][T10317] atomic_op ffff88811c2a9d28 conn xmit_atomic 0000000000000000 [ 191.570718][ T3490] loop2: p2 p3 p7 [ 191.607525][T10323] loop1: detected capacity change from 0 to 512 [ 191.618740][T10312] loop2: p2 p3 p7 [ 191.619299][T10323] EXT4-fs: Mount option(s) incompatible with ext2 [ 191.635530][T10323] atomic_op ffff888116761d28 conn xmit_atomic 0000000000000000 [ 191.713784][T10325] loop1: detected capacity change from 0 to 1024 [ 191.715876][T10327] loop2: detected capacity change from 0 to 128 [ 191.726634][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 191.740901][T10325] EXT4-fs: Ignoring removed nobh option [ 191.746605][T10325] EXT4-fs: Ignoring removed bh option [ 191.753175][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 191.769249][T10327] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.788087][T10327] ext4 filesystem being mounted at /557/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.812428][T10325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.832657][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 191.846127][ T3490] udevd[3490]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 191.857186][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 191.884915][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.896074][T10325] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2615: Allocating blocks 385-513 which overlap fs metadata [ 191.917843][ T3494] udevd[3494]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 191.929292][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 191.956647][T10334] loop2: detected capacity change from 0 to 256 [ 191.963443][T10325] EXT4-fs (loop1): pa ffff8881069a3a80: logic 16, phys. 129, len 24 [ 191.971535][T10325] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 192.008170][T10189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.106323][T10338] SELinux: failed to load policy [ 192.241463][T10350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10350 comm=syz.1.2625 [ 192.311440][T10352] loop1: detected capacity change from 0 to 256 [ 192.346321][T10357] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 192.364198][T10358] loop3: detected capacity change from 0 to 1024 [ 192.416194][T10358] EXT4-fs: Ignoring removed nobh option [ 192.421966][T10358] EXT4-fs: Ignoring removed bh option [ 192.442072][T10358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.466832][T10358] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2629: Allocating blocks 385-513 which overlap fs metadata [ 192.492190][T10358] EXT4-fs (loop3): pa ffff8881069a3bd0: logic 16, phys. 129, len 24 [ 192.500325][T10358] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 192.519585][T10369] loop1: detected capacity change from 0 to 128 [ 192.537815][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.582452][T10369] netlink: 'syz.1.2632': attribute type 8 has an invalid length. [ 192.712477][T10378] loop1: detected capacity change from 0 to 512 [ 192.719937][T10378] EXT4-fs: Mount option(s) incompatible with ext2 [ 192.731693][T10378] atomic_op ffff88812a734128 conn xmit_atomic 0000000000000000 [ 192.758290][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 193.047262][T10383] 9pnet: Could not find request transport: fTd [ 193.062138][T10383] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2638'. [ 193.099241][T10383] loop2: detected capacity change from 0 to 1024 [ 193.118328][T10383] EXT4-fs: Ignoring removed bh option [ 193.123874][T10383] EXT4-fs: inline encryption not supported [ 193.145490][T10383] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 193.186455][T10383] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 193.206029][T10383] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.2638: lblock 2 mapped to illegal pblock 2 (length 1) [ 193.231832][T10387] loop4: detected capacity change from 0 to 1024 [ 193.241952][T10387] EXT4-fs: Ignoring removed nobh option [ 193.247550][T10387] EXT4-fs: Ignoring removed bh option [ 193.255452][T10383] __quota_error: 194 callbacks suppressed [ 193.255470][T10383] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 193.280881][T10383] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.2638: lblock 0 mapped to illegal pblock 48 (length 1) [ 193.298879][T10383] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 193.302640][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.307700][T10383] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2638: Failed to acquire dquot type 0 [ 193.327600][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.330389][T10387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.347869][T10383] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 193.362411][ T29] audit: type=1326 audit(1746914731.285:15519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa420b6e969 code=0x7ffc0000 [ 193.362888][T10383] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.2638: mark_inode_dirty error [ 193.386053][ T29] audit: type=1326 audit(1746914731.285:15520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.3.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa420b6e969 code=0x7ffc0000 [ 193.422043][T10383] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 193.422641][T10387] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2639: Allocating blocks 385-513 which overlap fs metadata [ 193.448882][T10383] EXT4-fs (loop2): 1 orphan inode deleted [ 193.459008][T10383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.459323][T10387] EXT4-fs (loop4): pa ffff8881068e0a80: logic 16, phys. 129, len 24 [ 193.479622][T10387] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 193.491947][ T12] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 193.510232][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 193.518830][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 0 [ 193.540776][T10383] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.552475][T10383] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz.2.2638: Invalid inode table block 1 in block_group 0 [ 193.570206][T10383] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 193.588100][T10383] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz.2.2638: mark_inode_dirty error [ 193.588358][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.601047][T10401] loop1: detected capacity change from 0 to 128 [ 193.627453][T10403] loop4: detected capacity change from 0 to 256 [ 193.634019][ T29] audit: type=1326 audit(1746914731.545:15521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10400 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 193.657655][ T29] audit: type=1326 audit(1746914731.545:15522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10400 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 193.681304][ T29] audit: type=1326 audit(1746914731.545:15523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10400 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 193.705069][ T29] audit: type=1326 audit(1746914731.545:15524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10400 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 193.708528][T10383] loop2: detected capacity change from 0 to 512 [ 193.728877][ T29] audit: type=1326 audit(1746914731.545:15525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10400 comm="syz.1.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 193.757107][T10403] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 193.767732][T10403] FAT-fs (loop4): bogus number of directory entries (1) [ 193.774732][T10403] FAT-fs (loop4): Can't find a valid FAT filesystem [ 193.785755][T10383] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 193.805450][T10407] loop1: detected capacity change from 0 to 128 [ 193.873975][T10407] netlink: 'syz.1.2647': attribute type 8 has an invalid length. [ 193.955461][T10422] loop4: detected capacity change from 0 to 128 [ 194.023489][T10422] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.048220][T10429] loop1: detected capacity change from 0 to 1024 [ 194.055258][T10422] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.083615][T10429] EXT4-fs: Ignoring removed nobh option [ 194.089412][T10429] EXT4-fs: Ignoring removed bh option [ 194.098283][ T3325] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.146722][T10437] loop3: detected capacity change from 0 to 1024 [ 194.153666][T10437] EXT4-fs: Ignoring removed orlov option [ 194.159551][T10437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.171014][T10429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.195274][T10437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.218022][T10443] loop4: detected capacity change from 0 to 2048 [ 194.254834][ T3305] loop4: p2 p3 p7 [ 194.271833][T10443] loop4: p2 p3 p7 [ 194.277542][T10189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.418150][T10454] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2659'. [ 194.428431][T10448] loop2: detected capacity change from 0 to 8192 [ 194.434097][T10456] loop1: detected capacity change from 0 to 2048 [ 194.463155][T10454] loop0: detected capacity change from 0 to 2048 [ 194.470437][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.492555][ T3305] loop1: p2 p3 p7 [ 194.496938][T10454] EXT4-fs: dax option not supported [ 194.530706][T10457] FAULT_INJECTION: forcing a failure. [ 194.530706][T10457] name failslab, interval 1, probability 0, space 0, times 0 [ 194.535519][T10459] syz!: rxe_newlink: already configured on team_slave_0 [ 194.543361][T10457] CPU: 1 UID: 0 PID: 10457 Comm: syz.4.2658 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) [ 194.543419][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 194.543435][T10457] Call Trace: [ 194.543443][T10457] [ 194.543453][T10457] __dump_stack+0x1d/0x30 [ 194.543480][T10457] dump_stack_lvl+0xe8/0x140 [ 194.543506][T10457] dump_stack+0x15/0x1b [ 194.543527][T10457] should_fail_ex+0x265/0x280 [ 194.543607][T10457] should_failslab+0x8c/0xb0 [ 194.543643][T10457] __kmalloc_noprof+0xa5/0x3e0 [ 194.543721][T10457] ? usb_alloc_urb+0x42/0xc0 [ 194.543758][T10457] usb_alloc_urb+0x42/0xc0 [ 194.543792][T10457] do_proc_control+0x1a8/0x8b0 [ 194.543851][T10457] ? should_fail_ex+0xdb/0x280 [ 194.543892][T10457] proc_control+0x71/0xa0 [ 194.543924][T10457] usbdev_ioctl+0x948/0x1710 [ 194.544024][T10457] ? __pfx_usbdev_ioctl+0x10/0x10 [ 194.544055][T10457] __se_sys_ioctl+0xcb/0x140 [ 194.544082][T10457] __x64_sys_ioctl+0x43/0x50 [ 194.544107][T10457] x64_sys_call+0x19a8/0x2fb0 [ 194.544182][T10457] do_syscall_64+0xd0/0x1a0 [ 194.544210][T10457] ? clear_bhb_loop+0x25/0x80 [ 194.544279][T10457] ? clear_bhb_loop+0x25/0x80 [ 194.544332][T10457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.544358][T10457] RIP: 0033:0x7f458509e969 [ 194.544383][T10457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.544406][T10457] RSP: 002b:00007f45836e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.544429][T10457] RAX: ffffffffffffffda RBX: 00007f45852c6080 RCX: 00007f458509e969 [ 194.544500][T10457] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000006 [ 194.544515][T10457] RBP: 00007f45836e6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.544551][T10457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.544566][T10457] R13: 0000000000000000 R14: 00007f45852c6080 R15: 00007fff8d9e9a58 [ 194.544589][T10457] [ 194.563415][T10456] loop1: p2 p3 p7 [ 194.846536][T10465] loop0: detected capacity change from 0 to 256 [ 194.938857][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.974089][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.193516][T10475] loop0: detected capacity change from 0 to 1024 [ 195.304135][T10475] EXT4-fs: Ignoring removed nobh option [ 195.309842][T10475] EXT4-fs: Ignoring removed bh option [ 195.361680][T10475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.410700][T10475] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2667: Allocating blocks 385-513 which overlap fs metadata [ 195.434256][T10482] loop4: detected capacity change from 0 to 1024 [ 195.442439][T10482] EXT4-fs: Ignoring removed orlov option [ 195.448274][T10482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.456340][T10484] loop3: detected capacity change from 0 to 2048 [ 195.466584][T10475] EXT4-fs (loop0): pa ffff8881069a3c40: logic 16, phys. 129, len 24 [ 195.474661][T10475] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 195.504230][ T3305] loop3: p2 p3 p7 [ 195.509911][T10482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.525813][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.572317][T10484] loop3: p2 p3 p7 [ 195.614724][T10489] loop0: detected capacity change from 0 to 128 [ 195.624279][T10492] loop1: detected capacity change from 0 to 128 [ 195.658626][T10489] vfat: Unknown parameter '18446744073709551615' [ 195.683340][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.694281][T10492] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.724743][T10489] FAULT_INJECTION: forcing a failure. [ 195.724743][T10489] name failslab, interval 1, probability 0, space 0, times 0 [ 195.737505][T10489] CPU: 1 UID: 0 PID: 10489 Comm: syz.0.2670 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) [ 195.737532][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 195.737546][T10489] Call Trace: [ 195.737552][T10489] [ 195.737582][T10489] __dump_stack+0x1d/0x30 [ 195.737619][T10489] dump_stack_lvl+0xe8/0x140 [ 195.737717][T10489] dump_stack+0x15/0x1b [ 195.737732][T10489] should_fail_ex+0x265/0x280 [ 195.737766][T10489] should_failslab+0x8c/0xb0 [ 195.737820][T10489] kmem_cache_alloc_node_noprof+0x57/0x320 [ 195.737934][T10489] ? __alloc_skb+0x101/0x320 [ 195.737970][T10489] __alloc_skb+0x101/0x320 [ 195.738083][T10489] netlink_alloc_large_skb+0xba/0xf0 [ 195.738187][T10489] netlink_sendmsg+0x3cf/0x6b0 [ 195.738333][T10489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.738407][T10489] __sock_sendmsg+0x142/0x180 [ 195.738438][T10489] ____sys_sendmsg+0x31e/0x4e0 [ 195.738521][T10489] ___sys_sendmsg+0x17b/0x1d0 [ 195.738552][T10489] __x64_sys_sendmsg+0xd4/0x160 [ 195.738612][T10489] x64_sys_call+0x2999/0x2fb0 [ 195.738639][T10489] do_syscall_64+0xd0/0x1a0 [ 195.738699][T10489] ? clear_bhb_loop+0x25/0x80 [ 195.738725][T10489] ? clear_bhb_loop+0x25/0x80 [ 195.738752][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.738778][T10489] RIP: 0033:0x7f641ea4e969 [ 195.738800][T10489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.738860][T10489] RSP: 002b:00007f641d0b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.738946][T10489] RAX: ffffffffffffffda RBX: 00007f641ec75fa0 RCX: 00007f641ea4e969 [ 195.738962][T10489] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 195.738977][T10489] RBP: 00007f641d0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.738992][T10489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.739007][T10489] R13: 0000000000000000 R14: 00007f641ec75fa0 R15: 00007fffc3564ea8 [ 195.739050][T10489] [ 195.951273][T10492] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.959162][T10494] loop0: detected capacity change from 0 to 512 [ 195.986353][T10496] loop9: detected capacity change from 0 to 7 [ 195.992637][T10496] buffer_io_error: 14 callbacks suppressed [ 195.992648][T10496] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.012838][T10496] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.020787][T10496] loop9: unable to read partition table [ 196.026964][T10189] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.041019][T10498] loop4: detected capacity change from 0 to 128 [ 196.055316][T10494] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 196.086989][T10496] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 196.086989][T10496] U) failed (rc=-5) [ 196.099201][T10498] netlink: 'syz.4.2673': attribute type 8 has an invalid length. [ 196.102141][ T3494] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.129324][T10494] EXT4-fs (loop0): 1 truncate cleaned up [ 196.139400][T10494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.159592][ T3494] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.167544][ T3494] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.190225][ T3494] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.198360][ T3494] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.207326][ T3494] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.215645][ T3494] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.223853][ T3494] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.257164][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.268972][T10500] loop3: detected capacity change from 0 to 2048 [ 196.288989][T10511] loop1: detected capacity change from 0 to 512 [ 196.297944][T10511] EXT4-fs: Mount option(s) incompatible with ext2 [ 196.307765][T10511] atomic_op ffff88812a737d28 conn xmit_atomic 0000000000000000 [ 196.347967][T10500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.374980][T10515] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 196.444714][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.585777][T10521] x_tables: unsorted underflow at hook 3 [ 196.605595][T10521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.631003][T10521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.806279][T10531] loop4: detected capacity change from 0 to 256 [ 196.869994][T10533] loop4: detected capacity change from 0 to 1024 [ 196.877816][T10533] EXT4-fs: Ignoring removed nobh option [ 196.883436][T10533] EXT4-fs: Ignoring removed bh option [ 196.900354][T10533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.916918][T10533] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2683: Allocating blocks 385-513 which overlap fs metadata [ 196.933143][T10533] EXT4-fs (loop4): pa ffff8881068e0a10: logic 16, phys. 129, len 24 [ 196.941223][T10533] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 196.964043][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.044048][T10540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.054121][T10540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.091366][T10544] loop2: detected capacity change from 0 to 128 [ 197.101650][T10544] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.120354][T10544] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.144925][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.174070][T10547] loop2: detected capacity change from 0 to 128 [ 197.269278][T10554] loop4: detected capacity change from 0 to 8192 [ 197.281000][T10553] vhci_hcd: invalid port number 236 [ 197.286262][T10553] vhci_hcd: invalid port number 236 [ 197.557374][T10564] loop2: detected capacity change from 0 to 1024 [ 197.568524][T10564] EXT4-fs: Ignoring removed orlov option [ 197.574388][T10564] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.604729][T10564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.622281][T10568] loop0: detected capacity change from 0 to 128 [ 197.651175][T10568] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.663799][T10568] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.697951][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.707608][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.717188][T10571] loop1: detected capacity change from 0 to 1024 [ 197.730868][T10571] EXT4-fs: Ignoring removed nobh option [ 197.736529][T10571] EXT4-fs: Ignoring removed bh option [ 197.833118][T10581] loop2: detected capacity change from 0 to 512 [ 197.840432][T10581] EXT4-fs: Mount option(s) incompatible with ext2 [ 197.850236][T10581] atomic_op ffff88812a732128 conn xmit_atomic 0000000000000000 [ 197.863002][T10571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.884358][T10583] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 197.901545][T10571] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2694: Allocating blocks 385-513 which overlap fs metadata [ 197.927299][T10571] EXT4-fs (loop1): pa ffff8881069a3c40: logic 16, phys. 129, len 24 [ 197.935444][T10571] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 197.955593][T10189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.981754][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.991396][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.060601][T10589] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2700'. [ 198.069882][T10589] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2700'. [ 198.115868][T10593] loop9: detected capacity change from 0 to 7 [ 198.122503][T10593] loop9: unable to read partition table [ 198.128224][T10593] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 198.128224][T10593] U) failed (rc=-5) [ 198.151568][T10593] loop4: detected capacity change from 0 to 2048 [ 198.190361][T10593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.231098][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.253044][T10597] loop4: detected capacity change from 0 to 256 [ 198.259646][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 198.259671][ T29] audit: type=1326 audit(1746914736.185:15855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f458509d5ca code=0x7ffc0000 [ 198.290163][ T29] audit: type=1326 audit(1746914736.185:15856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f458509d5ca code=0x7ffc0000 [ 198.313595][ T29] audit: type=1326 audit(1746914736.185:15857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f458509d1d7 code=0x7ffc0000 [ 198.337272][ T29] audit: type=1326 audit(1746914736.185:15858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f45850a010a code=0x7ffc0000 [ 198.360944][ T29] audit: type=1326 audit(1746914736.185:15859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f458509d2d0 code=0x7ffc0000 [ 198.384561][ T29] audit: type=1326 audit(1746914736.185:15860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f458509d6b7 code=0x7ffc0000 [ 198.408299][ T29] audit: type=1326 audit(1746914736.185:15861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f458509d2d0 code=0x7ffc0000 [ 198.431953][ T29] audit: type=1326 audit(1746914736.185:15862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 198.455706][ T29] audit: type=1326 audit(1746914736.185:15863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 198.479402][ T29] audit: type=1326 audit(1746914736.185:15864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 198.516744][T10599] loop9: detected capacity change from 0 to 7 [ 198.523208][T10599] loop9: unable to read partition table [ 198.530035][T10599] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 198.530035][T10599] U) failed (rc=-5) [ 198.558458][T10599] loop4: detected capacity change from 0 to 2048 [ 198.574873][T10601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.584299][T10601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.593690][T10599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.652123][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.766246][T10612] loop0: detected capacity change from 0 to 1024 [ 198.775203][T10616] loop4: detected capacity change from 0 to 128 [ 198.775864][T10612] EXT4-fs: Ignoring removed nobh option [ 198.787119][T10612] EXT4-fs: Ignoring removed bh option [ 198.825864][T10618] loop4: detected capacity change from 0 to 256 [ 198.847035][T10612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.877925][T10612] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2709: Allocating blocks 385-513 which overlap fs metadata [ 198.916424][T10612] EXT4-fs (loop0): pa ffff8881068e0a10: logic 16, phys. 129, len 24 [ 198.924520][T10612] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 198.958636][T10625] loop4: detected capacity change from 0 to 1024 [ 198.974951][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.975035][T10625] EXT4-fs: Ignoring removed nobh option [ 198.989647][T10625] EXT4-fs: Ignoring removed bh option [ 199.013224][T10625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.029928][T10629] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2714'. [ 199.042700][T10625] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2713: Allocating blocks 385-513 which overlap fs metadata [ 199.062292][T10625] EXT4-fs (loop4): pa ffff8881069a3c40: logic 16, phys. 129, len 24 [ 199.070378][T10625] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 199.088346][T10629] loop0: detected capacity change from 0 to 2048 [ 199.113487][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.125026][T10629] EXT4-fs: dax option not supported [ 199.198075][T10638] loop1: detected capacity change from 0 to 1024 [ 199.205078][T10638] EXT4-fs: Ignoring removed nobh option [ 199.210777][T10638] EXT4-fs: Ignoring removed bh option [ 199.230876][T10639] loop4: detected capacity change from 0 to 512 [ 199.238177][T10639] EXT4-fs: Mount option(s) incompatible with ext2 [ 199.251998][T10638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.268257][T10639] atomic_op ffff88812a732528 conn xmit_atomic 0000000000000000 [ 199.286853][T10638] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2718: Allocating blocks 385-513 which overlap fs metadata [ 199.311303][T10633] loop2: detected capacity change from 0 to 8192 [ 199.321442][T10637] EXT4-fs (loop1): pa ffff8881069a3d20: logic 16, phys. 129, len 24 [ 199.329798][T10637] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 199.352235][T10189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.406330][T10649] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2721'. [ 199.429912][T10649] loop0: detected capacity change from 0 to 2048 [ 199.436819][T10649] EXT4-fs: dax option not supported [ 199.461513][T10650] loop1: detected capacity change from 0 to 512 [ 199.476378][T10650] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.499269][T10652] loop0: detected capacity change from 0 to 128 [ 199.506941][T10650] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2720: invalid indirect mapped block 4294967295 (level 1) [ 199.521411][T10650] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2720: invalid indirect mapped block 4294967295 (level 1) [ 199.545910][T10650] EXT4-fs (loop1): 2 truncates cleaned up [ 199.552106][T10650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.591437][T10652] netlink: 'syz.0.2722': attribute type 8 has an invalid length. [ 199.607839][T10655] loop3: detected capacity change from 0 to 256 [ 199.656668][T10657] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2724'. [ 199.709441][T10663] syz!: rxe_newlink: already configured on team_slave_0 [ 199.771840][T10667] loop9: detected capacity change from 0 to 7 [ 199.778235][T10667] loop9: unable to read partition table [ 199.786751][T10667] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 199.786751][T10667] U) failed (rc=-5) [ 199.829377][T10667] loop0: detected capacity change from 0 to 2048 [ 199.870508][T10667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.070065][T10676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2730'. [ 200.079245][T10480] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 200.093126][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2730'. [ 200.110424][T10678] loop0: detected capacity change from 0 to 1024 [ 200.119220][T10678] EXT4-fs: Ignoring removed nobh option [ 200.124863][T10678] EXT4-fs: Ignoring removed bh option [ 200.148979][T10681] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2732'. [ 200.167535][T10681] loop4: detected capacity change from 0 to 2048 [ 200.176004][T10681] EXT4-fs: dax option not supported [ 200.190814][T10678] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2731: Allocating blocks 385-513 which overlap fs metadata [ 200.225764][T10677] EXT4-fs (loop0): pa ffff8881069a3d90: logic 16, phys. 129, len 24 [ 200.233891][T10677] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 200.267754][T10689] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2734'. [ 200.291996][T10689] loop4: detected capacity change from 0 to 2048 [ 200.305963][T10686] loop2: detected capacity change from 0 to 512 [ 200.307766][T10689] EXT4-fs: dax option not supported [ 200.313223][T10691] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2735'. [ 200.345677][T10691] loop1: detected capacity change from 0 to 2048 [ 200.374129][T10696] loop0: detected capacity change from 0 to 1024 [ 200.380435][T10691] EXT4-fs: dax option not supported [ 200.385542][T10697] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2736'. [ 200.400496][T10686] EXT4-fs (loop2): 1 orphan inode deleted [ 200.407428][T10696] EXT4-fs: Ignoring removed nobh option [ 200.413053][T10696] EXT4-fs: Ignoring removed bh option [ 200.419008][ T125] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 200.419108][T10686] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.454693][T10696] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2745: Allocating blocks 385-513 which overlap fs metadata [ 200.496896][T10693] EXT4-fs (loop0): pa ffff8881069a3e00: logic 16, phys. 129, len 24 [ 200.504970][T10693] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 200.533381][T10705] 9pnet_fd: Insufficient options for proto=fd [ 200.582708][T10711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2742'. [ 200.597861][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2742'. [ 200.606898][T10712] loop4: detected capacity change from 0 to 512 [ 200.615099][T10712] EXT4-fs: Mount option(s) incompatible with ext2 [ 200.626453][T10712] atomic_op ffff88812a731928 conn xmit_atomic 0000000000000000 [ 200.798577][ T3305] printk: udevd: 117 output lines suppressed due to ratelimiting [ 200.828672][T10734] syz!: rxe_newlink: already configured on team_slave_0 [ 200.943157][T10743] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 201.139736][T10747] loop1: detected capacity change from 0 to 1024 [ 201.146646][T10747] EXT4-fs: Ignoring removed nobh option [ 201.152315][T10747] EXT4-fs: Ignoring removed bh option [ 201.158149][T10749] loop0: detected capacity change from 0 to 512 [ 201.165579][T10749] EXT4-fs: Mount option(s) incompatible with ext2 [ 201.172618][T10747] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2755: Allocating blocks 385-513 which overlap fs metadata [ 201.187139][T10746] EXT4-fs (loop1): pa ffff8881068e0a10: logic 16, phys. 129, len 24 [ 201.188832][T10749] atomic_op ffff888116761d28 conn xmit_atomic 0000000000000000 [ 201.195235][T10746] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 201.231078][T10753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.240835][T10753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.248032][T10755] loop1: detected capacity change from 0 to 1024 [ 201.255589][T10755] EXT4-fs: Ignoring removed nobh option [ 201.261322][T10755] EXT4-fs: Ignoring removed bh option [ 201.272121][T10755] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2758: Allocating blocks 385-513 which overlap fs metadata [ 201.287444][T10755] EXT4-fs (loop1): pa ffff8881069a3e70: logic 16, phys. 129, len 24 [ 201.295467][T10755] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 201.332096][T10759] loop1: detected capacity change from 0 to 1024 [ 201.338888][T10759] EXT4-fs: Ignoring removed orlov option [ 201.344708][T10759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.413017][T10765] loop4: detected capacity change from 0 to 1024 [ 201.421045][T10765] EXT4-fs: Ignoring removed nobh option [ 201.426659][T10765] EXT4-fs: Ignoring removed bh option [ 201.440075][T10767] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2762'. [ 201.452953][T10765] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2761: Allocating blocks 385-513 which overlap fs metadata [ 201.467812][T10767] loop1: detected capacity change from 0 to 2048 [ 201.471045][T10765] EXT4-fs (loop4): pa ffff8881068e0b60: logic 16, phys. 129, len 24 [ 201.475195][T10767] EXT4-fs: dax option not supported [ 201.482188][T10765] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 201.530587][T10775] loop1: detected capacity change from 0 to 128 [ 201.539294][T10775] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.571715][T10778] loop4: detected capacity change from 0 to 512 [ 201.575587][T10780] loop1: detected capacity change from 0 to 256 [ 201.584746][T10778] EXT4-fs: Mount option(s) incompatible with ext2 [ 201.592714][T10780] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 201.595781][T10778] atomic_op ffff88811c2aa128 conn xmit_atomic 0000000000000000 [ 201.601867][T10780] FAT-fs (loop1): bogus number of directory entries (1) [ 201.601883][T10780] FAT-fs (loop1): Can't find a valid FAT filesystem [ 201.645226][T10782] loop4: detected capacity change from 0 to 256 [ 201.694886][T10786] loop4: detected capacity change from 0 to 1024 [ 201.705352][T10786] EXT4-fs: Ignoring removed nobh option [ 201.710969][T10786] EXT4-fs: Ignoring removed bh option [ 201.747266][T10790] loop3: detected capacity change from 0 to 2048 [ 201.779676][T10790] loop3: p1 < > p4 [ 201.784804][T10790] loop3: p4 size 8388608 extends beyond EOD, truncated [ 201.809120][T10797] loop1: detected capacity change from 0 to 2048 [ 201.815645][T10795] loop4: detected capacity change from 0 to 1024 [ 201.817616][T10797] EXT4-fs: dax option not supported [ 201.823904][T10795] EXT4-fs: Ignoring removed orlov option [ 201.832945][T10795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.925592][T10804] loop1: detected capacity change from 0 to 128 [ 201.977396][T10804] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.046913][T10818] loop1: detected capacity change from 0 to 256 [ 202.099693][T10820] loop4: detected capacity change from 0 to 512 [ 202.111330][T10812] loop2: detected capacity change from 0 to 8192 [ 202.129927][T10820] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.138929][T10820] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 202.151496][T10823] x_tables: unsorted underflow at hook 3 [ 202.157980][T10823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.168254][T10823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.180060][T10820] EXT4-fs (loop4): 1 truncate cleaned up [ 202.194978][T10827] loop1: detected capacity change from 0 to 128 [ 202.258522][T10827] netlink: 'syz.1.2785': attribute type 8 has an invalid length. [ 202.561204][T10845] loop4: detected capacity change from 0 to 164 [ 202.568498][T10845] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 202.683902][T10854] loop4: detected capacity change from 0 to 512 [ 202.723758][T10854] EXT4-fs (loop4): 1 orphan inode deleted [ 202.739504][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 202.777208][T10854] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.901048][T10860] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 202.979902][T10863] loop4: detected capacity change from 0 to 128 [ 203.045602][T10865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.073014][T10865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.246778][T10884] netlink: '+}[@': attribute type 2 has an invalid length. [ 203.254200][T10884] netlink: '+}[@': attribute type 1 has an invalid length. [ 203.285830][ T29] kauditd_printk_skb: 701 callbacks suppressed [ 203.285840][ T29] audit: type=1326 audit(1746914741.205:16564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 203.320859][T10884] random: crng reseeded on system resumption [ 203.327044][T10884] FAULT_INJECTION: forcing a failure. [ 203.327044][T10884] name failslab, interval 1, probability 0, space 0, times 0 [ 203.339660][T10884] CPU: 1 UID: 0 PID: 10884 Comm: +}[@ Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) [ 203.339688][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 203.339769][T10884] Call Trace: [ 203.339776][T10884] [ 203.339796][T10884] __dump_stack+0x1d/0x30 [ 203.339815][T10884] dump_stack_lvl+0xe8/0x140 [ 203.339833][T10884] dump_stack+0x15/0x1b [ 203.339847][T10884] should_fail_ex+0x265/0x280 [ 203.339882][T10884] ? dev_create_fw_entry+0x43/0xf0 [ 203.339953][T10884] should_failslab+0x8c/0xb0 [ 203.339987][T10884] __kmalloc_cache_noprof+0x4c/0x320 [ 203.340026][T10884] ? __pfx_fw_name_devm_release+0x10/0x10 [ 203.340132][T10884] dev_create_fw_entry+0x43/0xf0 [ 203.340164][T10884] ? __pfx_devm_name_match+0x10/0x10 [ 203.340239][T10884] devres_for_each_res+0xfc/0x160 [ 203.340268][T10884] ? __pfx_devm_name_match+0x10/0x10 [ 203.340300][T10884] ? __pfx_dev_create_fw_entry+0x10/0x10 [ 203.340399][T10884] dev_cache_fw_image+0x62/0x270 [ 203.340487][T10884] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 203.340515][T10884] dpm_for_each_dev+0x5d/0xa0 [ 203.340541][T10884] ? __pfx_fw_pm_notify+0x10/0x10 [ 203.340612][T10884] fw_pm_notify+0x164/0x1a0 [ 203.340700][T10884] ? __pfx_autoremove_wake_function+0x10/0x10 [ 203.340771][T10884] notifier_call_chain_robust+0x74/0x350 [ 203.340805][T10884] blocking_notifier_call_chain_robust+0x50/0x80 [ 203.340850][T10884] pm_notifier_call_chain_robust+0x2c/0x60 [ 203.340941][T10884] snapshot_open+0x120/0x270 [ 203.340971][T10884] ? __pfx_snapshot_open+0x10/0x10 [ 203.341002][T10884] misc_open+0x1d3/0x200 [ 203.341032][T10884] chrdev_open+0x2e8/0x3a0 [ 203.341098][T10884] do_dentry_open+0x646/0xa20 [ 203.341135][T10884] ? __pfx_chrdev_open+0x10/0x10 [ 203.341167][T10884] vfs_open+0x37/0x1e0 [ 203.341186][T10884] path_openat+0x1c5e/0x2170 [ 203.341233][T10884] ? kmem_cache_free+0xdd/0x2f0 [ 203.341255][T10884] ? audit_log_end+0x1d7/0x1f0 [ 203.341289][T10884] do_filp_open+0x109/0x230 [ 203.341315][T10884] do_sys_openat2+0xa6/0x110 [ 203.341338][T10884] __x64_sys_openat+0xf2/0x120 [ 203.341404][T10884] x64_sys_call+0x1af/0x2fb0 [ 203.341422][T10884] do_syscall_64+0xd0/0x1a0 [ 203.341441][T10884] ? clear_bhb_loop+0x25/0x80 [ 203.341465][T10884] ? clear_bhb_loop+0x25/0x80 [ 203.341485][T10884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.341507][T10884] RIP: 0033:0x7fe6b0fce969 [ 203.341520][T10884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.341536][T10884] RSP: 002b:00007fe6af637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.341554][T10884] RAX: ffffffffffffffda RBX: 00007fe6b11f5fa0 RCX: 00007fe6b0fce969 [ 203.341642][T10884] RDX: 0000000000000401 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 203.341656][T10884] RBP: 00007fe6af637090 R08: 0000000000000000 R09: 0000000000000000 [ 203.341669][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.341683][T10884] R13: 0000000000000000 R14: 00007fe6b11f5fa0 R15: 00007ffe186013d8 [ 203.341704][T10884] [ 203.356919][ T29] audit: type=1326 audit(1746914741.245:16565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 203.611190][T10895] loop4: detected capacity change from 0 to 8192 [ 203.617361][ T29] audit: type=1326 audit(1746914741.245:16566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 203.696855][ T29] audit: type=1326 audit(1746914741.245:16567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 203.719803][ T29] audit: type=1326 audit(1746914741.245:16568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 203.743071][ T29] audit: type=1326 audit(1746914741.245:16569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 203.766074][ T29] audit: type=1326 audit(1746914741.245:16570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 203.789555][ T29] audit: type=1326 audit(1746914741.245:16571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 203.812975][ T29] audit: type=1326 audit(1746914741.245:16572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b0fce969 code=0x7ffc0000 [ 203.836464][ T29] audit: type=1326 audit(1746914741.245:16573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6b0fcd2d0 code=0x7ffc0000 [ 203.870067][T10900] FAULT_INJECTION: forcing a failure. [ 203.870067][T10900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.883196][T10900] CPU: 0 UID: 0 PID: 10900 Comm: syz.0.2813 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) [ 203.883274][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 203.883290][T10900] Call Trace: [ 203.883297][T10900] [ 203.883306][T10900] __dump_stack+0x1d/0x30 [ 203.883400][T10900] dump_stack_lvl+0xe8/0x140 [ 203.883418][T10900] dump_stack+0x15/0x1b [ 203.883431][T10900] should_fail_ex+0x265/0x280 [ 203.883541][T10900] should_fail+0xb/0x20 [ 203.883565][T10900] should_fail_usercopy+0x1a/0x20 [ 203.883585][T10900] _copy_from_user+0x1c/0xb0 [ 203.883608][T10900] io_submit_one+0x52/0x11b0 [ 203.883774][T10900] __se_sys_io_submit+0xfb/0x280 [ 203.883800][T10900] __x64_sys_io_submit+0x43/0x50 [ 203.883826][T10900] x64_sys_call+0xfc4/0x2fb0 [ 203.883898][T10900] do_syscall_64+0xd0/0x1a0 [ 203.884001][T10900] ? clear_bhb_loop+0x25/0x80 [ 203.884021][T10900] ? clear_bhb_loop+0x25/0x80 [ 203.884039][T10900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.884060][T10900] RIP: 0033:0x7f641ea4e969 [ 203.884104][T10900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.884123][T10900] RSP: 002b:00007f641d0b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 203.884142][T10900] RAX: ffffffffffffffda RBX: 00007f641ec75fa0 RCX: 00007f641ea4e969 [ 203.884155][T10900] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 00007f641f7b3000 [ 203.884167][T10900] RBP: 00007f641d0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 203.884180][T10900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.884267][T10900] R13: 0000000000000000 R14: 00007f641ec75fa0 R15: 00007fffc3564ea8 [ 203.884287][T10900] [ 204.137564][T10909] loop3: detected capacity change from 0 to 512 [ 204.179476][T10909] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.199359][T10914] loop4: detected capacity change from 0 to 128 [ 204.206785][T10909] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2814: invalid block [ 204.221655][T10914] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.242350][T10909] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2814: invalid indirect mapped block 4294967295 (level 1) [ 204.276616][T10909] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2814: invalid indirect mapped block 4294967295 (level 1) [ 204.317375][T10909] EXT4-fs (loop3): 2 truncates cleaned up [ 204.354811][T10927] loop4: detected capacity change from 0 to 512 [ 204.361875][T10927] EXT4-fs: Mount option(s) incompatible with ext2 [ 204.372586][T10927] atomic_op ffff88812a732528 conn xmit_atomic 0000000000000000 [ 204.502468][T10932] loop9: detected capacity change from 0 to 7 [ 204.508946][T10932] buffer_io_error: 38 callbacks suppressed [ 204.508957][T10932] Buffer I/O error on dev loop9, logical block 0, async page read [ 204.522898][T10932] Buffer I/O error on dev loop9, logical block 0, async page read [ 204.530761][T10932] loop9: unable to read partition table [ 204.536538][T10932] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 204.536538][T10932] U) failed (rc=-5) [ 204.591243][T10934] netlink: 'syz.1.2823': attribute type 1 has an invalid length. [ 204.605099][T10934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.626900][T10934] bond1: (slave veth3): Enslaving as an active interface with a down link [ 204.650145][T10934] block device autoloading is deprecated and will be removed. [ 204.657718][T10934] syz.1.2823: attempt to access beyond end of device [ 204.657718][T10934] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 204.697646][T10937] loop1: detected capacity change from 0 to 256 [ 204.732509][T10939] loop1: detected capacity change from 0 to 1024 [ 204.740805][T10939] EXT4-fs: Ignoring removed nobh option [ 204.746431][T10939] EXT4-fs: Ignoring removed bh option [ 204.764308][T10939] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2825: Allocating blocks 385-513 which overlap fs metadata [ 204.782145][T10939] EXT4-fs (loop1): pa ffff8881068e0bd0: logic 16, phys. 129, len 24 [ 204.790280][T10939] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 204.831770][T10947] loop1: detected capacity change from 0 to 128 [ 204.840849][T10947] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.875315][T10949] smc: net device bond0 applied user defined pnetid SYZ0 [ 204.891237][T10951] loop9: detected capacity change from 0 to 7 [ 204.897611][T10951] Buffer I/O error on dev loop9, logical block 0, async page read [ 204.916049][T10951] Buffer I/O error on dev loop9, logical block 0, async page read [ 204.924100][T10951] loop9: unable to read partition table [ 204.931033][T10951] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 204.931033][T10951] U) failed (rc=-5) [ 204.973171][T10956] loop2: detected capacity change from 0 to 512 [ 204.982706][T10956] EXT4-fs: Mount option(s) incompatible with ext2 [ 204.996667][T10956] atomic_op ffff8881435d4928 conn xmit_atomic 0000000000000000 [ 205.070991][T10960] FAULT_INJECTION: forcing a failure. [ 205.070991][T10960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.084233][T10960] CPU: 1 UID: 0 PID: 10960 Comm: syz.3.2830 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) [ 205.084298][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 205.084312][T10960] Call Trace: [ 205.084319][T10960] [ 205.084326][T10960] __dump_stack+0x1d/0x30 [ 205.084350][T10960] dump_stack_lvl+0xe8/0x140 [ 205.084372][T10960] dump_stack+0x15/0x1b [ 205.084458][T10960] should_fail_ex+0x265/0x280 [ 205.084512][T10960] should_fail+0xb/0x20 [ 205.084688][T10960] should_fail_usercopy+0x1a/0x20 [ 205.084720][T10960] _copy_from_user+0x1c/0xb0 [ 205.084772][T10960] ___sys_sendmsg+0xc1/0x1d0 [ 205.084810][T10960] __x64_sys_sendmsg+0xd4/0x160 [ 205.084895][T10960] x64_sys_call+0x2999/0x2fb0 [ 205.084918][T10960] do_syscall_64+0xd0/0x1a0 [ 205.084943][T10960] ? clear_bhb_loop+0x25/0x80 [ 205.084965][T10960] ? clear_bhb_loop+0x25/0x80 [ 205.085084][T10960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.085115][T10960] RIP: 0033:0x7fa420b6e969 [ 205.085131][T10960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.085150][T10960] RSP: 002b:00007fa41f1b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.085170][T10960] RAX: ffffffffffffffda RBX: 00007fa420d96080 RCX: 00007fa420b6e969 [ 205.085184][T10960] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 205.085197][T10960] RBP: 00007fa41f1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.085263][T10960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.085276][T10960] R13: 0000000000000000 R14: 00007fa420d96080 R15: 00007ffc55a99d48 [ 205.085297][T10960] [ 205.285602][T10967] loop4: detected capacity change from 0 to 512 [ 205.296324][T10971] loop1: detected capacity change from 0 to 128 [ 205.309462][T10970] loop2: detected capacity change from 0 to 1024 [ 205.316209][T10970] EXT4-fs: Ignoring removed orlov option [ 205.322070][T10970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.333606][T10967] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 205.349617][T10973] loop9: detected capacity change from 0 to 7 [ 205.351862][T10971] netlink: 'syz.1.2837': attribute type 8 has an invalid length. [ 205.356115][T10973] Buffer I/O error on dev loop9, logical block 0, async page read [ 205.392281][T10973] Buffer I/O error on dev loop9, logical block 0, async page read [ 205.400210][T10973] loop9: unable to read partition table [ 205.416217][T10973] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 205.416217][T10973] U) failed (rc=-5) [ 205.476933][T10983] __nla_validate_parse: 8 callbacks suppressed [ 205.476950][T10983] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2842'. [ 205.538111][T10986] loop3: detected capacity change from 0 to 512 [ 205.559337][T10983] loop0: detected capacity change from 0 to 2048 [ 205.567073][T10986] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.573562][T10983] EXT4-fs: dax option not supported [ 205.580715][T10986] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2840: invalid block [ 205.608434][T10986] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2840: invalid indirect mapped block 4294967295 (level 1) [ 205.627166][T10986] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2840: invalid indirect mapped block 4294967295 (level 1) [ 205.642672][T10986] EXT4-fs (loop3): 2 truncates cleaned up [ 205.691829][T10998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.703228][T10998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.722217][T11006] pim6reg1: entered promiscuous mode [ 205.727597][T11006] pim6reg1: entered allmulticast mode [ 205.911827][T11015] loop0: detected capacity change from 0 to 1024 [ 205.918827][T11015] EXT4-fs: Ignoring removed orlov option [ 205.924568][T11015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.996426][T11010] loop2: detected capacity change from 0 to 8192 [ 206.142917][T11025] loop1: detected capacity change from 0 to 1024 [ 206.152229][T11025] EXT4-fs: Ignoring removed orlov option [ 206.157966][T11025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.212772][T11028] loop0: detected capacity change from 0 to 8192 [ 206.242237][T11030] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 206.402015][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2861'. [ 206.420942][T11039] vlan3: entered allmulticast mode [ 206.555543][T11046] capability: warning: `syz.3.2865' uses deprecated v2 capabilities in a way that may be insecure [ 206.601775][T11048] loop4: detected capacity change from 0 to 128 [ 206.613770][T11048] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.700363][T11046] sctp: [Deprecated]: syz.3.2865 (pid 11046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.700363][T11046] Use struct sctp_sack_info instead [ 206.801238][T11046] loop3: detected capacity change from 0 to 512 [ 206.825946][T11052] loop4: detected capacity change from 0 to 1024 [ 206.834302][T11052] EXT4-fs: Ignoring removed orlov option [ 206.840135][T11052] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.869915][T11056] loop2: detected capacity change from 0 to 128 [ 206.882489][T11046] ext4 filesystem being mounted at /508/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.894581][T11056] ext4 filesystem being mounted at /594/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.914377][T11046] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.2865: corrupted inode contents [ 206.931395][T11046] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.2865: mark_inode_dirty error [ 206.946589][T11046] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.2865: corrupted inode contents [ 206.962400][T11046] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2865: mark_inode_dirty error [ 206.977109][T11061] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2869'. [ 206.996848][T11061] loop2: detected capacity change from 0 to 2048 [ 207.003623][T11061] EXT4-fs: dax option not supported [ 207.041469][T11063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.056311][T11065] loop0: detected capacity change from 0 to 256 [ 207.063827][T11063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.125079][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2875'. [ 207.145129][T11077] loop4: detected capacity change from 0 to 512 [ 207.152078][T11077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.166404][T11077] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.2872: invalid block [ 207.181572][T11083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2879'. [ 207.182192][T11084] FAULT_INJECTION: forcing a failure. [ 207.182192][T11084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.203745][T11084] CPU: 0 UID: 0 PID: 11084 Comm: syz.3.2878 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) [ 207.203771][T11084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 207.203783][T11084] Call Trace: [ 207.203788][T11084] [ 207.203794][T11084] __dump_stack+0x1d/0x30 [ 207.203814][T11084] dump_stack_lvl+0xe8/0x140 [ 207.203831][T11084] dump_stack+0x15/0x1b [ 207.203902][T11084] should_fail_ex+0x265/0x280 [ 207.203932][T11084] should_fail+0xb/0x20 [ 207.203958][T11084] should_fail_usercopy+0x1a/0x20 [ 207.204045][T11084] strncpy_from_user+0x25/0x230 [ 207.204067][T11084] ? kmem_cache_alloc_noprof+0x186/0x310 [ 207.204098][T11084] ? getname_flags+0x80/0x3b0 [ 207.204194][T11084] getname_flags+0xae/0x3b0 [ 207.204221][T11084] __x64_sys_link+0x40/0x70 [ 207.204375][T11084] x64_sys_call+0x2af9/0x2fb0 [ 207.204394][T11084] do_syscall_64+0xd0/0x1a0 [ 207.204414][T11084] ? clear_bhb_loop+0x25/0x80 [ 207.204434][T11084] ? clear_bhb_loop+0x25/0x80 [ 207.204499][T11084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.204518][T11084] RIP: 0033:0x7fa420b6e969 [ 207.204531][T11084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.204547][T11084] RSP: 002b:00007fa41f1d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 207.204640][T11084] RAX: ffffffffffffffda RBX: 00007fa420d95fa0 RCX: 00007fa420b6e969 [ 207.204651][T11084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.204742][T11084] RBP: 00007fa41f1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 207.204808][T11084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.204819][T11084] R13: 0000000000000000 R14: 00007fa420d95fa0 R15: 00007ffc55a99d48 [ 207.204836][T11084] [ 207.205297][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2879'. [ 207.205728][T11077] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2872: invalid indirect mapped block 4294967295 (level 1) [ 207.263909][T11086] loop1: detected capacity change from 0 to 128 [ 207.277642][T11077] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2872: invalid indirect mapped block 4294967295 (level 1) [ 207.296598][T11086] netlink: 'syz.1.2880': attribute type 8 has an invalid length. [ 207.349583][T11090] loop3: detected capacity change from 0 to 1024 [ 207.387293][T11077] EXT4-fs (loop4): 2 truncates cleaned up [ 207.410725][T11090] EXT4-fs: Ignoring removed orlov option [ 207.455759][T11090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.581627][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2889'. [ 207.590430][T11112] loop4: detected capacity change from 0 to 512 [ 207.593784][T11110] vlan2: entered allmulticast mode [ 207.604203][T11112] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 207.636974][T11116] loop3: detected capacity change from 0 to 128 [ 207.655908][T11114] loop2: detected capacity change from 0 to 128 [ 207.663045][T11119] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2893'. [ 207.684400][T11119] loop4: detected capacity change from 0 to 2048 [ 207.691142][T11119] EXT4-fs: dax option not supported [ 207.695224][T11116] netlink: 'syz.3.2891': attribute type 8 has an invalid length. [ 207.733536][T11114] netlink: 'syz.2.2892': attribute type 8 has an invalid length. [ 207.753775][T11123] loop4: detected capacity change from 0 to 1024 [ 207.768271][T11123] EXT4-fs: Ignoring removed nobh option [ 207.774031][T11123] EXT4-fs: Ignoring removed bh option [ 207.851024][T11131] FAULT_INJECTION: forcing a failure. [ 207.851024][T11131] name failslab, interval 1, probability 0, space 0, times 0 [ 207.863811][T11131] CPU: 0 UID: 0 PID: 11131 Comm: syz.3.2898 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) [ 207.863847][T11131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 207.863879][T11131] Call Trace: [ 207.863886][T11131] [ 207.863891][T11131] __dump_stack+0x1d/0x30 [ 207.863910][T11131] dump_stack_lvl+0xe8/0x140 [ 207.863927][T11131] dump_stack+0x15/0x1b [ 207.863998][T11131] should_fail_ex+0x265/0x280 [ 207.864026][T11131] should_failslab+0x8c/0xb0 [ 207.864051][T11131] kmem_cache_alloc_noprof+0x50/0x310 [ 207.864164][T11131] ? fcntl_getlk+0x3d/0x6e0 [ 207.864189][T11131] fcntl_getlk+0x3d/0x6e0 [ 207.864212][T11131] ? should_fail_ex+0xdb/0x280 [ 207.864286][T11131] do_fcntl+0x6d5/0xdf0 [ 207.864300][T11131] ? selinux_file_fcntl+0x1cb/0x1e0 [ 207.864335][T11131] __se_sys_fcntl+0xb1/0x120 [ 207.864418][T11131] __x64_sys_fcntl+0x43/0x50 [ 207.864460][T11131] x64_sys_call+0x1f1d/0x2fb0 [ 207.864483][T11131] do_syscall_64+0xd0/0x1a0 [ 207.864541][T11131] ? clear_bhb_loop+0x25/0x80 [ 207.864606][T11131] ? clear_bhb_loop+0x25/0x80 [ 207.864626][T11131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.864643][T11131] RIP: 0033:0x7fa420b6e969 [ 207.864654][T11131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.864736][T11131] RSP: 002b:00007fa41f1d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 207.864751][T11131] RAX: ffffffffffffffda RBX: 00007fa420d95fa0 RCX: 00007fa420b6e969 [ 207.864761][T11131] RDX: 0000200000000040 RSI: 0000000000000005 RDI: 0000000000000006 [ 207.864770][T11131] RBP: 00007fa41f1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 207.864781][T11131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.864792][T11131] R13: 0000000000000000 R14: 00007fa420d95fa0 R15: 00007ffc55a99d48 [ 207.864806][T11131] [ 208.120027][T11142] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 208.136755][T11123] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2895: Allocating blocks 385-513 which overlap fs metadata [ 208.179640][T11123] EXT4-fs (loop4): pa ffff8881068e0bd0: logic 16, phys. 129, len 24 [ 208.187679][T11123] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 208.212269][T11146] netlink: 'syz.3.2903': attribute type 21 has an invalid length. [ 208.290291][T11160] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2906'. [ 208.308544][T11160] loop0: detected capacity change from 0 to 2048 [ 208.309568][T11160] EXT4-fs: dax option not supported [ 208.415443][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 208.415457][ T29] audit: type=1326 audit(1746914746.335:17089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ea4e969 code=0x7ffc0000 [ 208.445424][ T29] audit: type=1326 audit(1746914746.335:17090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ea4e969 code=0x7ffc0000 [ 208.469080][ T29] audit: type=1326 audit(1746914746.335:17091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f641ea4e969 code=0x7ffc0000 [ 208.492682][ T29] audit: type=1326 audit(1746914746.335:17092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ea4e969 code=0x7ffc0000 [ 208.516360][ T29] audit: type=1326 audit(1746914746.335:17093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ea4e969 code=0x7ffc0000 [ 208.555730][T11173] loop0: detected capacity change from 0 to 256 [ 208.624340][ T29] audit: type=1326 audit(1746914746.465:17094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f641ea4e969 code=0x7ffc0000 [ 208.647999][ T29] audit: type=1326 audit(1746914746.465:17095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ea4e969 code=0x7ffc0000 [ 208.671657][ T29] audit: type=1326 audit(1746914746.465:17096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ea4e969 code=0x7ffc0000 [ 208.695327][ T29] audit: type=1326 audit(1746914746.525:17097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f641ea4e969 code=0x7ffc0000 [ 208.718898][ T29] audit: type=1326 audit(1746914746.525:17098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.0.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f641ea4e969 code=0x7ffc0000 [ 208.826104][T11178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.835020][T11178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.902960][T11143] chnl_net:caif_netlink_parms(): no params data found [ 208.921973][T11183] netlink: 'syz.1.2914': attribute type 21 has an invalid length. [ 208.981078][T11143] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.988207][T11143] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.016388][T11143] bridge_slave_0: entered allmulticast mode [ 209.024312][T11192] loop4: detected capacity change from 0 to 1024 [ 209.027582][T11143] bridge_slave_0: entered promiscuous mode [ 209.031378][T11192] EXT4-fs: Ignoring removed nobh option [ 209.042149][T11192] EXT4-fs: Ignoring removed bh option [ 209.059972][T11143] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.067076][T11143] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.077712][T11143] bridge_slave_1: entered allmulticast mode [ 209.084257][T11143] bridge_slave_1: entered promiscuous mode [ 209.104277][T11192] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2917: Allocating blocks 385-513 which overlap fs metadata [ 209.118627][T11198] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2919'. [ 209.120446][T11192] EXT4-fs (loop4): pa ffff8881068e0c40: logic 16, phys. 129, len 24 [ 209.131052][T11143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.135581][T11192] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 209.156874][T11143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.166342][T11198] loop1: detected capacity change from 0 to 2048 [ 209.178054][T11198] EXT4-fs: dax option not supported [ 209.195610][T11143] team0: Port device team_slave_0 added [ 209.219284][T11143] team0: Port device team_slave_1 added [ 209.221937][T11202] loop3: detected capacity change from 0 to 256 [ 209.251933][T11205] loop1: detected capacity change from 0 to 512 [ 209.259512][T11143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.266484][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.292459][T11143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.295362][T11205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.305957][T11143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.318540][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.344556][T11143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.359545][T11211] netlink: 'syz.4.2925': attribute type 21 has an invalid length. [ 209.367813][T11208] loop3: detected capacity change from 0 to 1024 [ 209.370796][T11205] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.374732][T11208] EXT4-fs: Ignoring removed orlov option [ 209.390358][T11208] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.402263][T11205] bond_slave_1: entered promiscuous mode [ 209.417152][T11215] loop4: detected capacity change from 0 to 128 [ 209.424533][T11203] bond_slave_1: left promiscuous mode [ 209.444233][T11143] hsr_slave_0: entered promiscuous mode [ 209.444899][T11215] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.450341][T11143] hsr_slave_1: entered promiscuous mode [ 209.466276][T11143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.473866][T11143] Cannot create hsr debugfs directory [ 209.525504][T11226] loop4: detected capacity change from 0 to 128 [ 209.543209][T11227] loop0: detected capacity change from 0 to 512 [ 209.552100][T11227] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.581583][T11227] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.2928: invalid block [ 209.597227][T11143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.608767][T11230] loop1: detected capacity change from 0 to 1024 [ 209.609183][T11227] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2928: invalid indirect mapped block 4294967295 (level 1) [ 209.615800][T11230] EXT4-fs: Ignoring removed nobh option [ 209.634868][T11230] EXT4-fs: Ignoring removed bh option [ 209.636826][T11227] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2928: invalid indirect mapped block 4294967295 (level 1) [ 209.657333][T11227] EXT4-fs (loop0): 2 truncates cleaned up [ 209.659651][T11226] netlink: 'syz.4.2930': attribute type 8 has an invalid length. [ 209.693536][T11230] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2931: Allocating blocks 385-513 which overlap fs metadata [ 209.708306][T11143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.710804][T11230] EXT4-fs (loop1): pa ffff8881068e0bd0: logic 16, phys. 129, len 24 [ 209.726776][T11230] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 209.784368][T11143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.842942][T11143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.952197][T11225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.956473][T11143] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.961510][T11245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.976360][T11225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.986121][T11245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.986282][T11143] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.005700][T11143] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.014827][T11143] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.050790][T11143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.063240][T11143] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.072869][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.080170][ T8328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.091675][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.098858][ T8328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.117652][T11252] loop4: detected capacity change from 0 to 1024 [ 210.124538][T11252] EXT4-fs: Ignoring removed orlov option [ 210.130329][T11252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.174839][T11143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.178469][T11260] loop4: detected capacity change from 0 to 128 [ 210.192214][T11260] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.250951][T11143] veth0_vlan: entered promiscuous mode [ 210.259568][T11143] veth1_vlan: entered promiscuous mode [ 210.279712][T11143] veth0_macvtap: entered promiscuous mode [ 210.287279][T11143] veth1_macvtap: entered promiscuous mode [ 210.302942][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.313505][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.323725][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.334294][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.344263][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.354757][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.366620][T11143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.377408][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.388052][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.397967][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.408447][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.418337][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.428862][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.440534][T11143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.450314][T11143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.459066][T11143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.467773][T11143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.476640][T11143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.541728][T11284] xt_hashlimit: max too large, truncated to 1048576 [ 210.551512][T11284] Cannot find set identified by id 0 to match [ 210.614920][T11293] netlink: zone id is out of range [ 210.620259][T11293] netlink: zone id is out of range [ 210.625401][T11293] netlink: zone id is out of range [ 210.630649][T11293] netlink: zone id is out of range [ 210.635766][T11293] netlink: zone id is out of range [ 210.641018][T11293] netlink: zone id is out of range [ 210.646131][T11293] netlink: zone id is out of range [ 210.651433][T11293] netlink: zone id is out of range [ 210.656842][T11293] netlink: zone id is out of range [ 210.661999][T11293] netlink: zone id is out of range [ 210.677847][T11295] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2949'. [ 210.703487][T11295] loop3: detected capacity change from 0 to 2048 [ 210.710701][T11295] EXT4-fs: dax option not supported [ 210.750763][T11300] loop4: detected capacity change from 0 to 128 [ 210.757136][T11298] loop1: detected capacity change from 0 to 1024 [ 210.768373][T11300] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.786360][T11298] EXT4-fs: Ignoring removed nobh option [ 210.792125][T11298] EXT4-fs: Ignoring removed bh option [ 210.867319][T11298] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2951: Allocating blocks 385-513 which overlap fs metadata [ 210.902159][T11298] EXT4-fs (loop1): pa ffff8881069a3e70: logic 16, phys. 129, len 24 [ 210.910321][T11298] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 210.984271][T11320] loop1: detected capacity change from 0 to 1024 [ 211.003300][T11323] netlink: 'syz.3.2957': attribute type 21 has an invalid length. [ 211.007723][T11324] loop9: detected capacity change from 0 to 7 [ 211.012803][T11320] EXT4-fs: Ignoring removed nobh option [ 211.017391][T11324] Buffer I/O error on dev loop9, logical block 0, async page read [ 211.022822][T11320] EXT4-fs: Ignoring removed bh option [ 211.030964][T11324] Buffer I/O error on dev loop9, logical block 0, async page read [ 211.043945][T11324] loop9: unable to read partition table [ 211.057786][T11324] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 211.057786][T11324] U) failed (rc=-5) [ 211.064968][T11326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2960'. [ 211.087611][T11320] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2958: Allocating blocks 385-513 which overlap fs metadata [ 211.106985][T11320] EXT4-fs (loop1): pa ffff8881068e0c40: logic 16, phys. 129, len 24 [ 211.115156][T11320] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 211.129061][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2960'. [ 211.153744][T11324] loop2: detected capacity change from 0 to 2048 [ 211.270824][T11339] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2964'. [ 211.315195][T11346] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2965'. [ 211.317701][T11339] loop3: detected capacity change from 0 to 2048 [ 211.347422][T11350] loop2: detected capacity change from 0 to 128 [ 211.354167][T11339] EXT4-fs: dax option not supported [ 211.363708][T11351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.373333][T11351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.388217][T11350] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.512140][T11364] loop2: detected capacity change from 0 to 128 [ 211.518700][T11359] loop3: detected capacity change from 0 to 512 [ 211.527067][T11362] loop0: detected capacity change from 0 to 1024 [ 211.533947][T11362] EXT4-fs: Ignoring removed nobh option [ 211.539583][T11362] EXT4-fs: Ignoring removed bh option [ 211.546440][T11359] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.555838][T11359] EXT4-fs (loop3): orphan cleanup on readonly fs [ 211.580988][T11364] netlink: 'syz.2.2973': attribute type 8 has an invalid length. [ 211.618404][T11359] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2971: bg 0: block 248: padding at end of block bitmap is not set [ 211.633249][T11359] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2971: Failed to acquire dquot type 1 [ 211.648079][T11370] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2974'. [ 211.664285][T11362] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2972: Allocating blocks 385-513 which overlap fs metadata [ 211.669601][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'. [ 211.687198][T11359] EXT4-fs (loop3): 1 truncate cleaned up [ 211.694761][T11362] EXT4-fs (loop0): pa ffff8881068e0bd0: logic 16, phys. 129, len 24 [ 211.702850][T11362] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 211.813903][T11359] syz.3.2971 (11359) used greatest stack depth: 9360 bytes left [ 211.847968][T11379] loop3: detected capacity change from 0 to 512 [ 211.860916][T11379] ext4: Unknown parameter 'smackfsroot' [ 211.882521][T11379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2977'. [ 211.921060][T11383] loop0: detected capacity change from 0 to 128 [ 211.992369][T11386] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2980'. [ 212.015768][T11386] loop0: detected capacity change from 0 to 2048 [ 212.024539][T11386] EXT4-fs: dax option not supported [ 212.046421][T11388] loop4: detected capacity change from 0 to 128 [ 212.059038][T11388] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.085818][T11393] loop0: detected capacity change from 0 to 512 [ 212.119316][T11393] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 212.194342][T11401] FAULT_INJECTION: forcing a failure. [ 212.194342][T11401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.207586][T11401] CPU: 1 UID: 0 PID: 11401 Comm: syz.0.2987 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) [ 212.207618][T11401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 212.207632][T11401] Call Trace: [ 212.207639][T11401] [ 212.207646][T11401] __dump_stack+0x1d/0x30 [ 212.207781][T11401] dump_stack_lvl+0xe8/0x140 [ 212.207801][T11401] dump_stack+0x15/0x1b [ 212.207815][T11401] should_fail_ex+0x265/0x280 [ 212.207905][T11401] should_fail+0xb/0x20 [ 212.207938][T11401] should_fail_usercopy+0x1a/0x20 [ 212.207998][T11401] _copy_from_user+0x1c/0xb0 [ 212.208073][T11401] ___sys_sendmsg+0xc1/0x1d0 [ 212.208102][T11401] __x64_sys_sendmsg+0xd4/0x160 [ 212.208122][T11401] x64_sys_call+0x2999/0x2fb0 [ 212.208212][T11401] do_syscall_64+0xd0/0x1a0 [ 212.208231][T11401] ? clear_bhb_loop+0x25/0x80 [ 212.208253][T11401] ? clear_bhb_loop+0x25/0x80 [ 212.208277][T11401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.208300][T11401] RIP: 0033:0x7f641ea4e969 [ 212.208334][T11401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.208376][T11401] RSP: 002b:00007f641d0b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.208393][T11401] RAX: ffffffffffffffda RBX: 00007f641ec75fa0 RCX: 00007f641ea4e969 [ 212.208405][T11401] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 212.208547][T11401] RBP: 00007f641d0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.208559][T11401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.208570][T11401] R13: 0000000000000000 R14: 00007f641ec75fa0 R15: 00007fffc3564ea8 [ 212.208588][T11401] [ 212.413674][T11409] loop1: detected capacity change from 0 to 128 [ 212.466191][T11412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.476485][T11412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.503578][T11419] loop1: detected capacity change from 0 to 128 [ 212.532258][T11419] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.558950][T11424] loop3: detected capacity change from 0 to 512 [ 212.568210][T11424] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 212.576630][T11426] loop4: detected capacity change from 0 to 512 [ 212.583806][T11426] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 212.595718][T11424] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2996: iget: bad i_size value: -67835469387268086 [ 212.611237][T11424] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2996: couldn't read orphan inode 15 (err -117) [ 212.623853][T11424] ext2 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.637870][T11430] loop1: detected capacity change from 0 to 512 [ 212.645622][T11430] EXT4-fs: Mount option(s) incompatible with ext2 [ 212.647354][T11424] EXT4-fs error (device loop3): ext4_add_entry:2419: inode #2: comm syz.3.2996: Directory hole found for htree leaf block 0 [ 212.669652][T11430] atomic_op ffff888128eae928 conn xmit_atomic 0000000000000000 [ 212.814837][T11436] netlink: 'syz.4.3001': attribute type 21 has an invalid length. [ 212.841168][T11438] vlan2: entered allmulticast mode [ 212.869581][T11440] loop4: detected capacity change from 0 to 1024 [ 212.876349][T11440] EXT4-fs: Ignoring removed nobh option [ 212.882021][T11440] EXT4-fs: Ignoring removed bh option [ 212.903622][T11440] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3004: Allocating blocks 385-513 which overlap fs metadata [ 212.920580][T11440] EXT4-fs (loop4): pa ffff8881068e0c40: logic 16, phys. 129, len 24 [ 212.928648][T11440] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 213.008676][T11458] loop4: detected capacity change from 0 to 128 [ 213.017103][T11458] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.091632][T11444] chnl_net:caif_netlink_parms(): no params data found [ 213.143150][T11481] loop4: detected capacity change from 0 to 128 [ 213.150350][T11444] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.157566][T11444] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.167244][T11444] bridge_slave_0: entered allmulticast mode [ 213.173911][T11444] bridge_slave_0: entered promiscuous mode [ 213.182942][T11444] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.190044][T11444] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.197245][T11444] bridge_slave_1: entered allmulticast mode [ 213.204109][T11444] bridge_slave_1: entered promiscuous mode [ 213.218071][T11481] netlink: 'syz.4.3015': attribute type 8 has an invalid length. [ 213.229216][T11444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.242640][T11444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.273611][T11444] team0: Port device team_slave_0 added [ 213.280677][T11444] team0: Port device team_slave_1 added [ 213.309137][T11444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.316131][T11444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.342107][T11444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.353689][T11444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.360718][T11444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.360937][T11491] loop0: detected capacity change from 0 to 512 [ 213.386680][T11444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.415984][T11488] loop4: detected capacity change from 0 to 2048 [ 213.420980][T11444] hsr_slave_0: entered promiscuous mode [ 213.423573][T11491] EXT4-fs: Mount option(s) incompatible with ext2 [ 213.435138][T11444] hsr_slave_1: entered promiscuous mode [ 213.441908][T11444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.451121][T11444] Cannot create hsr debugfs directory [ 213.457249][T11491] atomic_op ffff88811a322d28 conn xmit_atomic 0000000000000000 [ 213.460659][T11493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.475827][ T29] kauditd_printk_skb: 592 callbacks suppressed [ 213.475842][ T29] audit: type=1401 audit(1746914751.395:17689): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 213.501512][T11493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.596231][T11444] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.605196][T11444] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.616786][T11444] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.630452][T11444] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.660270][T11507] loop4: detected capacity change from 0 to 128 [ 213.671831][T11444] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.678936][T11444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.686308][T11444] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.693520][T11444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.700939][ T29] audit: type=1326 audit(1746914751.605:17690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 213.724646][ T29] audit: type=1326 audit(1746914751.605:17691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 213.748256][ T29] audit: type=1326 audit(1746914751.605:17692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 213.771668][T11444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.771848][ T29] audit: type=1326 audit(1746914751.605:17693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 213.784833][T11444] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.801927][ T29] audit: type=1326 audit(1746914751.605:17694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 213.801993][ T29] audit: type=1326 audit(1746914751.605:17695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 213.855879][ T29] audit: type=1326 audit(1746914751.605:17696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 213.879553][ T29] audit: type=1326 audit(1746914751.605:17697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 213.903322][ T29] audit: type=1326 audit(1746914751.605:17698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.4.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f458509e969 code=0x7ffc0000 [ 213.908003][T11508] loop1: detected capacity change from 0 to 8192 [ 214.027377][T11444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.217874][T11534] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 214.286719][T11504] ================================================================== [ 214.294839][T11504] BUG: KCSAN: data-race in mark_buffer_dirty_inode / mark_buffer_dirty_inode [ 214.303629][T11504] [ 214.305966][T11504] write to 0xffff88811ad918e0 of 8 bytes by task 11508 on cpu 1: [ 214.313694][T11504] mark_buffer_dirty_inode+0x18c/0x1c0 [ 214.319186][T11504] fat_mirror_bhs+0x234/0x320 [ 214.323895][T11504] fat_alloc_clusters+0x98b/0xa80 [ 214.328958][T11504] fat_get_block+0x258/0x5e0 [ 214.333591][T11504] __block_write_begin_int+0x419/0xf70 [ 214.339084][T11504] cont_write_begin+0x5a3/0x8e0 [ 214.343678][T11444] veth0_vlan: entered promiscuous mode [ 214.343942][T11504] fat_write_begin+0x4f/0xe0 [ 214.354006][T11504] cont_write_begin+0x198/0x8e0 [ 214.358885][T11504] fat_write_begin+0x4f/0xe0 [ 214.363483][T11504] generic_perform_write+0x181/0x490 [ 214.367139][T11444] veth1_vlan: entered promiscuous mode [ 214.368787][T11504] __generic_file_write_iter+0x9e/0x120 [ 214.379826][T11504] generic_file_write_iter+0x8d/0x2f0 [ 214.385232][T11504] vfs_write+0x49d/0x8d0 [ 214.389505][T11504] __x64_sys_pwrite64+0xfd/0x150 [ 214.394471][T11504] x64_sys_call+0xe45/0x2fb0 [ 214.399095][T11504] do_syscall_64+0xd0/0x1a0 [ 214.403620][T11504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.409536][T11504] [ 214.411872][T11504] read to 0xffff88811ad918e0 of 8 bytes by task 11504 on cpu 0: [ 214.417667][T11444] veth0_macvtap: entered promiscuous mode [ 214.419498][T11504] mark_buffer_dirty_inode+0x95/0x1c0 [ 214.419531][T11504] fat_mirror_bhs+0x234/0x320 [ 214.435300][T11504] fat_alloc_clusters+0x98b/0xa80 [ 214.438325][T11444] veth1_macvtap: entered promiscuous mode [ 214.440336][T11504] fat_get_block+0x258/0x5e0 [ 214.450687][T11504] __block_write_begin_int+0x419/0xf70 [ 214.456179][T11504] cont_write_begin+0x5a3/0x8e0 [ 214.457158][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.461051][T11504] fat_write_begin+0x4f/0xe0 [ 214.461075][T11504] generic_perform_write+0x181/0x490 [ 214.471536][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.476074][T11504] __generic_file_write_iter+0x9e/0x120 [ 214.481433][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.491123][T11504] generic_file_write_iter+0x8d/0x2f0 [ 214.491158][T11504] vfs_write+0x49d/0x8d0 [ 214.496688][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.496716][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.507078][T11504] ksys_write+0xda/0x1a0 [ 214.507106][T11504] __x64_sys_write+0x40/0x50 [ 214.512484][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.516689][T11504] x64_sys_call+0x2cdd/0x2fb0 [ 214.526524][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.536861][T11504] do_syscall_64+0xd0/0x1a0 [ 214.536888][T11504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.536909][T11504] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 214.536914][T11504] value changed: 0x0000000000000000 -> 0xffff888106a92c08 [ 214.536926][T11504] [ 214.536930][T11504] Reported by Kernel Concurrency Sanitizer on: [ 214.536942][T11504] CPU: 0 UID: 0 PID: 11504 Comm: syz.1.3025 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) [ 214.536973][T11504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 214.536987][T11504] ================================================================== [ 214.630590][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.709796][T11444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.953807][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.101678][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.182308][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.241307][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.310720][ T12] bond0 (unregistering): Released all slaves [ 216.351113][ T12] IPVS: stopping master sync thread 6258 ... [ 216.374875][ T12] hsr_slave_0: left promiscuous mode [ 216.380944][ T12] hsr_slave_1: left promiscuous mode [ 216.389946][ T12] veth1_macvtap: left promiscuous mode [ 216.395416][ T12] veth0_macvtap: left promiscuous mode [ 216.401169][ T12] veth1_vlan: left promiscuous mode [ 216.406431][ T12] veth0_vlan: left promiscuous mode [ 217.793931][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.842088][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.881358][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.931391][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.013273][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.041069][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.101681][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.161842][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.215523][ T12] bridge_slave_1: left allmulticast mode [ 218.221207][ T12] bridge_slave_1: left promiscuous mode [ 218.226815][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.234655][ T12] bridge_slave_0: left allmulticast mode [ 218.240339][ T12] bridge_slave_0: left promiscuous mode [ 218.246085][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.254474][ T12] bridge_slave_1: left allmulticast mode [ 218.260242][ T12] bridge_slave_1: left promiscuous mode [ 218.265940][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.273640][ T12] bridge_slave_0: left allmulticast mode [ 218.279379][ T12] bridge_slave_0: left promiscuous mode [ 218.285028][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.293572][ T12] bridge_slave_1: left allmulticast mode [ 218.299265][ T12] bridge_slave_1: left promiscuous mode [ 218.305010][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.313140][ T12] bridge_slave_0: left allmulticast mode [ 218.318774][ T12] bridge_slave_0: left promiscuous mode [ 218.324426][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.911358][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.921056][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.930514][ T12] bond0 (unregistering): Released all slaves [ 218.939710][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.949730][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.959374][ T12] bond0 (unregistering): Released all slaves [ 218.968198][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.978228][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.987634][ T12] bond0 (unregistering): Released all slaves [ 218.996130][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 219.004819][ T12] bond1 (unregistering): Released all slaves [ 219.108313][ T12] hsr_slave_0: left promiscuous mode [ 219.114015][ T12] hsr_slave_1: left promiscuous mode [ 219.119755][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.127166][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.134664][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.143818][ T12] hsr_slave_0: left promiscuous mode [ 219.149618][ T12] hsr_slave_1: left promiscuous mode [ 219.155303][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.162792][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.170620][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.178019][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.187874][ T12] hsr_slave_0: left promiscuous mode [ 219.193843][ T12] hsr_slave_1: left promiscuous mode [ 219.199587][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.207042][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.214510][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.221933][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.237200][ T12] veth1_macvtap: left promiscuous mode [ 219.242720][ T12] veth0_macvtap: left promiscuous mode [ 219.248248][ T12] veth1_vlan: left promiscuous mode [ 219.256520][ T12] veth0_vlan: left promiscuous mode [ 219.261989][ T12] veth1_macvtap: left promiscuous mode [ 219.267445][ T12] veth0_macvtap: left promiscuous mode [ 219.273151][ T12] veth1_vlan: left promiscuous mode [ 219.278443][ T12] veth0_vlan: left promiscuous mode [ 219.284211][ T12] veth1_macvtap: left promiscuous mode [ 219.289785][ T12] veth0_macvtap: left promiscuous mode [ 219.295361][ T12] veth1_vlan: left promiscuous mode [ 219.300597][ T12] veth0_vlan: left promiscuous mode [ 219.421805][ T12] team0 (unregistering): Port device team_slave_1 removed [ 219.432271][ T12] team0 (unregistering): Port device team_slave_0 removed [ 219.483554][ T12] team0 (unregistering): Port device team_slave_1 removed [ 219.493180][ T12] team0 (unregistering): Port device team_slave_0 removed [ 219.547059][ T12] team0 (unregistering): Port device team_slave_1 removed [ 219.556716][ T12] team0 (unregistering): Port device team_slave_0 removed [ 220.211922][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.271320][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.351272][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.421780][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.471438][ T12] bridge_slave_1: left allmulticast mode [ 220.477085][ T12] bridge_slave_1: left promiscuous mode [ 220.482758][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.490694][ T12] bridge_slave_0: left promiscuous mode [ 220.496315][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.430994][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.440622][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.449996][ T12] bond0 (unregistering): Released all slaves [ 221.516105][ T12] hsr_slave_0: left promiscuous mode [ 221.521840][ T12] hsr_slave_1: left promiscuous mode [ 221.527323][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.534869][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.542427][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.549880][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.559927][ T12] veth1_macvtap: left promiscuous mode [ 221.565475][ T12] veth0_macvtap: left promiscuous mode [ 221.571118][ T12] veth1_vlan: left promiscuous mode [ 221.576380][ T12] veth0_vlan: left promiscuous mode [ 221.636811][ T12] team0 (unregistering): Port device team_slave_1 removed [ 221.646099][ T12] team0 (unregistering): Port device team_slave_0 removed