last executing test programs: 5.203884398s ago: executing program 4 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b42b99ca7819831367cc62de3a5093845d5b633729b563754347f40570900000000", @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000910b0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x1de}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r2}, 0x18) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r8) pipe2(&(0x7f0000000c40), 0x4800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) r11 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 4.329316964s ago: executing program 4 (id=1174): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000540)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x56}}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x71) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x20040084) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x48) socket$tipc(0x1e, 0x5, 0x0) gettid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}}, 0xc8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) 3.978098659s ago: executing program 4 (id=1183): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x800, 0xffffffff, 0x401, r0, 0xd01c, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x79c, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0xa}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r9 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r9, &(0x7f0000001880)={'#! ', './file0'}, 0xb) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.943220002s ago: executing program 4 (id=1184): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x8000, 0x8, 0xa0}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x11, 0xc, &(0x7f0000002d80)=ANY=[@ANYRESDEC=r3, @ANYRES64=r4, @ANYRES8=r1, @ANYRES16, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "f2e715e8dd3432ba", "7e52cf96d1b9ea160908b5f08764add6", "7b97d595", "9c8ce218f947d06d"}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = gettid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r11, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000402000000", @ANYRES16=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) r12 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r12, &(0x7f0000000140)='./file0\x00') pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r14, 0x0, r13, 0x0, 0x6, 0x0) ioctl$int_in(r13, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r13, 0x4, 0x7c00) 2.259686448s ago: executing program 2 (id=1223): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000700)={'vxcan1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x1a, r5, 0x1, 0x8, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x40, 0x1, 0xb, 0x0, {{0x32, 0x4, 0x2, 0x12, 0xc8, 0x65, 0x0, 0x5, 0x2e482488771dd2e, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x45, 0x0, [{0x1, 0x2}, {0x5, 0xa, "07b4a61cd0916f0a"}, {0x7, 0xd, "d817c11e7b9fcbfb7c94eb"}, {0x0, 0x4, "8cce"}, {0x2, 0xb, "e7175f4a11c10696bc"}, {0x1, 0x10, "05000000000000002bfecaf5c8c3"}, {0x6, 0x7, "09eb4d9c57"}]}, @rr={0x7, 0x13, 0x11, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x18, 0x11, 0x0, 0x7, [0x2, 0xffff, 0x1c0, 0x0, 0x5]}, @cipso={0x86, 0x3f, 0x3, [{0x7, 0xb, "24e427cf126c0bb2a3"}, {0x0, 0x4, "d19a"}, {0x1, 0xe, "79076cb90ed8302b3d4b63c1"}, {0x0, 0x10, "41f07585567da49958ff65fd2026"}, {0x7, 0x2}, {0x1, 0xa, "db8f6ba82de8e60a"}]}]}}}}}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r8, {0x4, 0x4}, {}, {0xfffe, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0xffffffffffffffb7, 0x5, {0xa, 0x4, 0x2, 0xffff, 0x0, 0x800, 0x3, 0x1, [{0x3, 0x0, 0x2, 0x7}, {0x7, 0x7f, 0xfffffffb, 0xe4d}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2002c8d5}, 0x20040054) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x2002, {0x0, 0x0, 0x0, r9, {0xa, 0x6}, {0x0, 0x7}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @broadcast}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}]}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001200)={&(0x7f00000009c0)={0x81c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3958}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x873}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x46, 0x99, 0xb5}, {0x3, 0xd4, 0x7, 0x6}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x48, 0x5, 0x4}, {0x401, 0x6a, 0xe, 0xfffff800}, {0x7, 0x0, 0x8}, {0x8000, 0x81, 0xf4, 0xc}, {0xa17, 0x3, 0x5, 0x400}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5e}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x80, 0x10, 0x0, 0x3}, {0x17b, 0x6, 0x8a, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x45}}}]}}, {{0x8, 0x1, r5}, {0x17c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xabf8, 0x8b, 0x9, 0x80000001}, {0xd62, 0x10, 0x7f, 0x9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8, 0x7, 0x1}}}]}}, {{0x8, 0x1, r8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x81c}, 0x1, 0x0, 0x0, 0x80c4}, 0xa0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x24, 0x0, 0x800, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3ff}]}, 0x24}}, 0x0) 1.476694425s ago: executing program 2 (id=1230): bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.171845625s ago: executing program 1 (id=1232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xfff, 0x8, 0x8, 0x5, 0x56, 0x3, "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"}}, 0x1117) unshare(0x22020600) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.142490928s ago: executing program 2 (id=1234): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r1, 0x0, r1, 0x0, 0x262) 1.12495873s ago: executing program 2 (id=1235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x23, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r6, r8, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[], 0x0) 1.103609481s ago: executing program 1 (id=1236): syz_clone3(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 1.079061444s ago: executing program 1 (id=1237): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) 1.073978425s ago: executing program 2 (id=1238): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000700)={'vxcan1\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x1a, r4, 0x1, 0x8, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x40, 0x1, 0xb, 0x0, {{0x36, 0x4, 0x2, 0x12, 0xd8, 0x65, 0x0, 0x5, 0x2e482488771dd2e, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x55, 0x0, [{0x1, 0x12, "a000277761e553c09085c0216fe096d2"}, {0x5, 0xa, "07b4a61cd0916f0a"}, {0x7, 0xd, "d817c11e7b9fcbfb7c94eb"}, {0x0, 0x4, "8cce"}, {0x2, 0xb, "e7175f4a11c10696bc"}, {0x1, 0x10, "05000000000000002bfecaf5c8c3"}, {0x6, 0x7, "09eb4d9c57"}]}, @rr={0x7, 0x13, 0x11, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x18, 0x11, 0x0, 0x7, [0x2, 0xffff, 0x1c0, 0x0, 0x5]}, @cipso={0x86, 0x3f, 0x3, [{0x7, 0xb, "24e427cf126c0bb2a3"}, {0x0, 0x4, "d19a"}, {0x1, 0xe, "79076cb90ed8302b3d4b63c1"}, {0x0, 0x10, "41f07585567da49958ff65fd2026"}, {0x7, 0x2}, {0x1, 0xa, "db8f6ba82de8e60a"}]}]}}}}}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {}, {0xfffe, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0xffffffffffffffb7, 0x5, {0xa, 0x4, 0x2, 0xffff, 0x0, 0x800, 0x3, 0x1, [{0x3, 0x0, 0x2, 0x7}, {0x7, 0x7f, 0xfffffffb, 0xe4d}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2002c8d5}, 0x20040054) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x2002, {0x0, 0x0, 0x0, r7, {0xa, 0x6}, {0x0, 0x7}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @broadcast}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}]}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0xa0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x24, 0x0, 0x800, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3ff}]}, 0x24}}, 0x0) 1.051507936s ago: executing program 1 (id=1240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 916.96546ms ago: executing program 4 (id=1244): unshare(0x24020400) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x189f6d4) fdatasync(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x44) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000440)=""/247, 0x26) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x541b, 0x0) 848.364716ms ago: executing program 1 (id=1245): bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 699.031681ms ago: executing program 1 (id=1250): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x8801) getpeername$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@getchain={0x64, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {0x4, 0xa}, {0xfff1, 0x5}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x988ec69}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x41}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x8001}]}, 0x64}}, 0x24000000) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) 692.547422ms ago: executing program 0 (id=1251): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) 664.900345ms ago: executing program 0 (id=1252): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) 640.688377ms ago: executing program 0 (id=1253): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x13f, 0x8}}, 0x20) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, 0x0) 546.962946ms ago: executing program 0 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) socket$kcm(0x23, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) pipe(&(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r6, r8, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[], 0x0) 541.833137ms ago: executing program 0 (id=1255): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 423.198488ms ago: executing program 3 (id=1256): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaa040800450000700000000000019078ac1e0001ac1414aa030090780000000045000000d0277cfad3090000000000890000ac141400ac1414aa01860435283bbecac045440c00037f0000010000000044b4c33dc0218944d14a2c0001ac141410ffffdfffde000000fffffffdffffffff000000000200000000000000", @ANYRESOCT], 0x0) 298.52674ms ago: executing program 2 (id=1257): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0xff000000, 0xff000000, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x2, 0xc}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x4e22], 0x0, 0x8, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfbff}}}, {{@ip={@initdev={0xac, 0x1e, 0xfc, 0x0}, @dev, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'tunl0\x00', {}, {}, 0x67, 0x0, 0x23}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x3, 0xe}}, @common=@ah={{0x30}, {[0x1, 0x5]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x2, 0x3, 0x7, 0xc, 0x4], 0x0, 0x7}, {0x3, [0x3, 0x0, 0x2, 0x0, 0x0, 0x1], 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040008000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) r7 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6d, 0x40, 0x7, 0x6}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f0, 0x188, 0x268, 0x0, 0x188, 0x428, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0xb}, [], [0x0, 0xffffff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x160, 0x188, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x6}, {0x4000}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_flags_required, @ioring_restriction_sqe_flags_allowed={0x2, 0x17}, @ioring_restriction_sqe_flags_allowed={0x2, 0xd}, @ioring_restriction_sqe_flags_required={0x3, 0x4}], 0x4) r9 = socket(0x1a, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x20, 0x0, 0xff, r10}, [@IFA_CACHEINFO={0x14, 0x6, {0x10, 0x8, 0x1, 0x8}}, @IFA_FLAGS={0x8, 0x8, 0x729}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 242.678016ms ago: executing program 0 (id=1258): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaa040800450000700000000000019078ac1e0001ac1414aa030090780000000045000000d0277cfad3090000000000890000ac141400ac1414aa01860435283bbecac045440c00037f0000010000000044b4c33dc0218944d14a2c0001ac141410ffffdfffde000000fffffffdffffffff000000000200000000000000", @ANYRESOCT], 0x0) 192.055331ms ago: executing program 3 (id=1259): syz_clone3(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 151.862125ms ago: executing program 3 (id=1260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 94.89078ms ago: executing program 3 (id=1261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x23, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r5, r7, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[], 0x0) 46.207685ms ago: executing program 3 (id=1262): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) 45.853495ms ago: executing program 4 (id=1263): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1264): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x800, 0xffffffff, 0x401, r0, 0xd01c, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x3, 0xff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xa}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r7 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r7, &(0x7f0000001880)={'#! ', './file0'}, 0xb) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): [ 51.082179][ T4283] loop1: detected capacity change from 0 to 128 [ 51.121944][ T4285] loop4: detected capacity change from 0 to 512 [ 51.138857][ T4283] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 51.146812][ T4283] FAT-fs (loop1): Filesystem has been set read-only [ 51.169824][ T4289] loop3: detected capacity change from 0 to 256 [ 51.173959][ T4283] bio_check_eod: 18970 callbacks suppressed [ 51.173982][ T4283] syz.1.281: attempt to access beyond end of device [ 51.173982][ T4283] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 51.212234][ T4285] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.283: bad orphan inode 11862016 [ 51.233420][ T4285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 51.238615][ T4283] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 51.253883][ T4283] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 51.272563][ T4289] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 51.280011][ T4289] FAT-fs (loop3): Filesystem has been set read-only [ 51.284034][ T4283] syz.1.281: attempt to access beyond end of device [ 51.284034][ T4283] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.299710][ T4285] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.310129][ T4283] syz.1.281: attempt to access beyond end of device [ 51.310129][ T4283] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.313079][ T4293] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 51.334576][ T4285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 51.341876][ T4289] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 51.349678][ T4283] syz.1.281: attempt to access beyond end of device [ 51.349678][ T4283] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.377486][ T4283] syz.1.281: attempt to access beyond end of device [ 51.377486][ T4283] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.391218][ T4283] syz.1.281: attempt to access beyond end of device [ 51.391218][ T4283] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.405162][ T4283] syz.1.281: attempt to access beyond end of device [ 51.405162][ T4283] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.419194][ T4283] syz.1.281: attempt to access beyond end of device [ 51.419194][ T4283] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.433853][ T4283] syz.1.281: attempt to access beyond end of device [ 51.433853][ T4283] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.466111][ T4297] loop4: detected capacity change from 0 to 512 [ 51.472857][ T4297] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.479858][ T4283] syz.1.281: attempt to access beyond end of device [ 51.479858][ T4283] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.493525][ T4297] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.505330][ T4297] EXT4-fs (loop4): 1 truncate cleaned up [ 51.516555][ T4297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.699824][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.117167][ T4317] loop1: detected capacity change from 0 to 512 [ 52.144631][ T4317] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.156517][ T4319] loop3: detected capacity change from 0 to 1024 [ 52.177960][ T4319] EXT4-fs: Ignoring removed orlov option [ 52.180697][ T4317] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 52.200730][ T4319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.213657][ T4317] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.228797][ T29] kauditd_printk_skb: 531 callbacks suppressed [ 52.228888][ T29] audit: type=1326 audit(1760987542.077:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 52.243914][ T4317] EXT4-fs (loop1): 1 truncate cleaned up [ 52.258492][ T29] audit: type=1326 audit(1760987542.077:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 52.287923][ T29] audit: type=1326 audit(1760987542.077:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 52.311387][ T29] audit: type=1326 audit(1760987542.077:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 52.334822][ T29] audit: type=1326 audit(1760987542.077:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 52.358263][ T29] audit: type=1326 audit(1760987542.077:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 52.360014][ T4317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.381599][ T29] audit: type=1326 audit(1760987542.077:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 52.417536][ T29] audit: type=1326 audit(1760987542.077:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 52.440945][ T29] audit: type=1326 audit(1760987542.077:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 52.464420][ T29] audit: type=1326 audit(1760987542.077:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4315 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 52.488048][ T4319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.295'. [ 52.510016][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.530108][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.574407][ T4337] netlink: 'syz.3.300': attribute type 3 has an invalid length. [ 52.687035][ T4347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.307'. [ 52.748659][ T4351] loop1: detected capacity change from 0 to 2048 [ 52.787358][ T4351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.863516][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.122312][ T4371] loop4: detected capacity change from 0 to 512 [ 53.166884][ T4371] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.315: bg 0: block 248: padding at end of block bitmap is not set [ 53.182126][ T4373] netlink: 'syz.1.316': attribute type 3 has an invalid length. [ 53.246477][ T4371] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.315: Failed to acquire dquot type 1 [ 53.259527][ T4377] FAULT_INJECTION: forcing a failure. [ 53.259527][ T4377] name failslab, interval 1, probability 0, space 0, times 0 [ 53.272197][ T4377] CPU: 1 UID: 0 PID: 4377 Comm: syz.1.317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.272223][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 53.272235][ T4377] Call Trace: [ 53.272242][ T4377] [ 53.272249][ T4377] __dump_stack+0x1d/0x30 [ 53.272280][ T4377] dump_stack_lvl+0xe8/0x140 [ 53.272313][ T4377] dump_stack+0x15/0x1b [ 53.272346][ T4377] should_fail_ex+0x265/0x280 [ 53.272382][ T4377] should_failslab+0x8c/0xb0 [ 53.272405][ T4377] kmem_cache_alloc_noprof+0x50/0x480 [ 53.272428][ T4377] ? mas_alloc_nodes+0x1a2/0x210 [ 53.272465][ T4377] mas_alloc_nodes+0x1a2/0x210 [ 53.272500][ T4377] mas_preallocate+0x2ca/0x510 [ 53.272541][ T4377] __split_vma+0x240/0x650 [ 53.272559][ T4377] ? __account_obj_stock+0x211/0x350 [ 53.272583][ T4377] vms_gather_munmap_vmas+0x17a/0x7b0 [ 53.272626][ T4377] ? mas_find+0x608/0x700 [ 53.272654][ T4377] mmap_region+0x52b/0x1620 [ 53.272697][ T4377] ? selinux_file_open+0x2df/0x330 [ 53.272727][ T4377] ? __rcu_read_unlock+0x4f/0x70 [ 53.272768][ T4377] ? mntput_no_expire+0x6f/0x440 [ 53.272811][ T4377] do_mmap+0x9b3/0xbe0 [ 53.272845][ T4377] __se_sys_remap_file_pages+0x537/0x5e0 [ 53.272889][ T4377] ? fput+0x8f/0xc0 [ 53.272917][ T4377] __x64_sys_remap_file_pages+0x67/0x80 [ 53.272947][ T4377] x64_sys_call+0x23b3/0x3000 [ 53.272976][ T4377] do_syscall_64+0xd2/0x200 [ 53.273013][ T4377] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.273039][ T4377] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 53.273073][ T4377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.273099][ T4377] RIP: 0033:0x7f10a804efc9 [ 53.273118][ T4377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.273138][ T4377] RSP: 002b:00007f10a6ab7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 53.273160][ T4377] RAX: ffffffffffffffda RBX: 00007f10a82a5fa0 RCX: 00007f10a804efc9 [ 53.273175][ T4377] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 53.273189][ T4377] RBP: 00007f10a6ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.273203][ T4377] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 53.273216][ T4377] R13: 00007f10a82a6038 R14: 00007f10a82a5fa0 R15: 00007ffd14d9c5e8 [ 53.273233][ T4377] [ 53.556744][ T4371] EXT4-fs (loop4): 1 truncate cleaned up [ 53.577309][ T4371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.621855][ T4371] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.647212][ T4371] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.315: deleted inode referenced: 12 [ 53.670031][ T4371] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.315: deleted inode referenced: 12 [ 53.713735][ T4371] FAULT_INJECTION: forcing a failure. [ 53.713735][ T4371] name failslab, interval 1, probability 0, space 0, times 0 [ 53.726531][ T4371] CPU: 0 UID: 0 PID: 4371 Comm: syz.4.315 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.726565][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 53.726581][ T4371] Call Trace: [ 53.726589][ T4371] [ 53.726599][ T4371] __dump_stack+0x1d/0x30 [ 53.726669][ T4371] dump_stack_lvl+0xe8/0x140 [ 53.726697][ T4371] dump_stack+0x15/0x1b [ 53.726726][ T4371] should_fail_ex+0x265/0x280 [ 53.726774][ T4371] should_failslab+0x8c/0xb0 [ 53.726795][ T4371] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 53.726818][ T4371] ? __alloc_skb+0x101/0x320 [ 53.726844][ T4371] __alloc_skb+0x101/0x320 [ 53.726897][ T4371] ? audit_log_start+0x342/0x720 [ 53.726932][ T4371] audit_log_start+0x3a0/0x720 [ 53.726966][ T4371] ? kstrtouint+0x76/0xc0 [ 53.726993][ T4371] audit_seccomp+0x48/0x100 [ 53.727023][ T4371] ? __seccomp_filter+0x82d/0x1250 [ 53.727049][ T4371] __seccomp_filter+0x83e/0x1250 [ 53.727096][ T4371] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 53.727127][ T4371] ? vfs_write+0x7e8/0x960 [ 53.727145][ T4371] ? __rcu_read_unlock+0x4f/0x70 [ 53.727177][ T4371] ? __fget_files+0x184/0x1c0 [ 53.727201][ T4371] __secure_computing+0x82/0x150 [ 53.727261][ T4371] syscall_trace_enter+0xcf/0x1e0 [ 53.727289][ T4371] do_syscall_64+0xac/0x200 [ 53.727326][ T4371] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 53.727438][ T4371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.727493][ T4371] RIP: 0033:0x7f6eb823efc9 [ 53.727512][ T4371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.727576][ T4371] RSP: 002b:00007f6eb6c9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 53.727594][ T4371] RAX: ffffffffffffffda RBX: 00007f6eb8495fa0 RCX: 00007f6eb823efc9 [ 53.727684][ T4371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.727700][ T4371] RBP: 00007f6eb6c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.727715][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.727754][ T4371] R13: 00007f6eb8496038 R14: 00007f6eb8495fa0 R15: 00007ffd8621c708 [ 53.727777][ T4371] [ 54.045391][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.064120][ T59] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1 [ 54.073800][ T4388] loop1: detected capacity change from 0 to 2048 [ 54.166562][ T4388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.177397][ T4392] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.285097][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.374522][ T4410] loop0: detected capacity change from 0 to 512 [ 54.405864][ T4410] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.327: bad orphan inode 11862016 [ 54.464248][ T4410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.488463][ T4416] loop3: detected capacity change from 0 to 512 [ 54.537448][ T4416] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.328: bad orphan inode 11862016 [ 54.550997][ T4410] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.572092][ T4416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.594171][ T4416] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.606658][ T4410] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.639866][ T4416] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.690464][ T4421] loop4: detected capacity change from 0 to 512 [ 54.711692][ T4421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.719869][ T4421] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.735339][ T4421] EXT4-fs (loop4): 1 truncate cleaned up [ 54.741405][ T4421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.812501][ T4431] loop0: detected capacity change from 0 to 256 [ 54.906970][ T4431] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 54.915002][ T4431] FAT-fs (loop0): Filesystem has been set read-only [ 54.924526][ T4423] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 54.933429][ T4423] 9pnet_fd: Insufficient options for proto=fd [ 54.950841][ T4431] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 55.014738][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.092087][ T4441] loop4: detected capacity change from 0 to 2048 [ 55.137083][ T4441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.137779][ T4450] loop0: detected capacity change from 0 to 512 [ 55.155978][ T4450] EXT4-fs: Ignoring removed oldalloc option [ 55.165849][ T4453] netlink: 'syz.3.341': attribute type 3 has an invalid length. [ 55.197110][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.199978][ T4450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.259937][ T4450] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.274956][ T4460] loop3: detected capacity change from 0 to 128 [ 55.307221][ T4450] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.339: bg 0: block 217: padding at end of block bitmap is not set [ 55.337406][ T4460] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 55.345427][ T4460] FAT-fs (loop3): Filesystem has been set read-only [ 55.357029][ T4460] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 55.365058][ T4460] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 55.398036][ T4463] loop1: detected capacity change from 0 to 512 [ 55.488945][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.545664][ T4470] loop0: detected capacity change from 0 to 256 [ 55.619482][ T4470] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 55.627549][ T4470] FAT-fs (loop0): Filesystem has been set read-only [ 55.651393][ T4470] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 55.714298][ T4463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.736887][ T4463] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.804867][ T4463] EXT4-fs (loop1): 1 truncate cleaned up [ 55.821330][ T4463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.111177][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.177167][ T4484] random: crng reseeded on system resumption [ 56.193483][ T4460] bio_check_eod: 34571 callbacks suppressed [ 56.193524][ T4460] syz.3.344: attempt to access beyond end of device [ 56.193524][ T4460] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.231572][ T4491] netlink: 'syz.1.355': attribute type 3 has an invalid length. [ 56.260648][ T4487] process 'syz.0.350' launched '/dev/fd/11' with NULL argv: empty string added [ 56.336339][ T4500] loop3: detected capacity change from 0 to 256 [ 56.369161][ T4505] loop0: detected capacity change from 0 to 256 [ 56.392647][ T4500] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 56.400040][ T4500] FAT-fs (loop3): Filesystem has been set read-only [ 56.409408][ T4500] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 56.443652][ T4500] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 56.453533][ T4505] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 56.461429][ T4505] FAT-fs (loop0): Filesystem has been set read-only [ 56.468474][ T4500] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 56.477207][ T4505] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 56.519479][ T4513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.570341][ T4513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.644763][ T4513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.687549][ T4513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.754089][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.767153][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.779099][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.793148][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.814237][ T4526] netlink: 'syz.2.369': attribute type 3 has an invalid length. [ 56.863308][ T4530] netlink: 64 bytes leftover after parsing attributes in process `syz.4.371'. [ 56.949364][ T4541] 9pnet_fd: Insufficient options for proto=fd [ 57.150083][ T4545] loop1: detected capacity change from 0 to 512 [ 57.165305][ T4545] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.378: bad orphan inode 11862016 [ 57.178151][ T4545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 57.191059][ T4545] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.203037][ T4545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 57.266963][ T4553] loop1: detected capacity change from 0 to 2048 [ 57.288309][ T4553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 57.304391][ T4553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.380'. [ 57.314836][ T4559] loop3: detected capacity change from 0 to 1024 [ 57.321737][ T4559] EXT4-fs: Ignoring removed orlov option [ 57.327552][ T4559] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.345214][ T4559] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a854c018, mo2=0002] [ 57.353503][ T4559] System zones: 0-1, 3-12 [ 57.358700][ T4559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.372210][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 57.372223][ T29] audit: type=1400 audit(1760987547.217:2229): avc: denied { append } for pid=4552 comm="syz.1.380" path="/71/file2/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.408207][ T4564] tmpfs: Unknown parameter 'nr_blo' [ 57.499323][ T29] audit: type=1400 audit(1760987549.342:2230): avc: denied { map } for pid=4552 comm="syz.1.380" path="/71/file2/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.516967][ T4562] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.538286][ T4562] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 57.550805][ T4562] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.550805][ T4562] [ 57.560528][ T4562] EXT4-fs (loop1): Total free blocks count 0 [ 57.566741][ T4562] EXT4-fs (loop1): Free/Dirty block details [ 57.572653][ T4562] EXT4-fs (loop1): free_blocks=2415919104 [ 57.578493][ T4562] EXT4-fs (loop1): dirty_blocks=3056 [ 57.583860][ T4562] EXT4-fs (loop1): Block reservation details [ 57.589943][ T4562] EXT4-fs (loop1): i_reserved_data_blocks=191 [ 57.643477][ T29] audit: type=1400 audit(1760987549.482:2231): avc: denied { ioctl } for pid=4552 comm="syz.1.380" path="/71/file2/cgroup.controllers" dev="loop1" ino=18 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.671705][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.031056][ T4553] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 33 with error 28 [ 58.162744][ T29] audit: type=1326 audit(1760987549.972:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 58.186228][ T29] audit: type=1326 audit(1760987549.972:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 58.209606][ T29] audit: type=1326 audit(1760987549.972:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 58.233069][ T29] audit: type=1326 audit(1760987549.982:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 58.256518][ T29] audit: type=1326 audit(1760987549.982:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 58.279760][ T29] audit: type=1326 audit(1760987549.982:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 58.303211][ T29] audit: type=1326 audit(1760987549.982:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 58.413527][ T4587] loop0: detected capacity change from 0 to 256 [ 58.486119][ T4587] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 58.494092][ T4587] FAT-fs (loop0): Filesystem has been set read-only [ 58.519553][ T4587] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 58.567485][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 58.584279][ T4597] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 58.633541][ T4597] 9pnet_fd: Insufficient options for proto=fd [ 58.640629][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 58.820121][ T4614] veth0: entered promiscuous mode [ 58.835034][ T4614] netlink: 'syz.4.404': attribute type 30 has an invalid length. [ 58.866198][ T4617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 58.902081][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 58.986307][ T4614] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.044603][ T4613] veth0: left promiscuous mode [ 59.585429][ T4636] loop0: detected capacity change from 0 to 256 [ 59.604269][ T4634] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 59.614852][ T4634] 9pnet_fd: Insufficient options for proto=fd [ 59.650290][ T4638] netlink: 'syz.3.413': attribute type 3 has an invalid length. [ 59.656904][ T4636] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 59.665308][ T4636] FAT-fs (loop0): Filesystem has been set read-only [ 59.677005][ T4636] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 59.687278][ T4636] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 59.697413][ T4636] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 59.844460][ T4650] 9pnet_fd: Insufficient options for proto=fd [ 60.109882][ T4652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.419'. [ 60.130573][ T4658] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 60.695745][ T4668] netlink: 'syz.4.426': attribute type 3 has an invalid length. [ 61.261781][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 61.377186][ T4682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 61.649967][ T4696] loop0: detected capacity change from 0 to 512 [ 61.662611][ T4698] netlink: 'syz.3.437': attribute type 3 has an invalid length. [ 61.727370][ T4696] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.436: bad orphan inode 11862016 [ 61.759764][ T4696] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.386279][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 62.386306][ T29] audit: type=1326 audit(1760987554.232:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 62.415876][ T29] audit: type=1326 audit(1760987554.232:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 62.439239][ T29] audit: type=1326 audit(1760987554.232:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 62.463946][ T29] audit: type=1326 audit(1760987554.232:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 62.487375][ T29] audit: type=1326 audit(1760987554.232:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 62.510847][ T29] audit: type=1326 audit(1760987554.232:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 62.534248][ T29] audit: type=1326 audit(1760987554.232:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 62.557761][ T29] audit: type=1326 audit(1760987554.232:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 62.581170][ T29] audit: type=1326 audit(1760987554.232:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 62.604692][ T29] audit: type=1326 audit(1760987554.322:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 62.796976][ T4733] loop4: detected capacity change from 0 to 512 [ 62.819125][ T4735] loop0: detected capacity change from 0 to 256 [ 62.848062][ T4733] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.452: bad orphan inode 11862016 [ 62.859418][ T4735] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 62.866818][ T4735] FAT-fs (loop0): Filesystem has been set read-only [ 62.873513][ T4735] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 62.882440][ T59] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 62.915654][ T4733] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.925259][ T59] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 63.247682][ T4754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.278612][ T4750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 63.294780][ T4750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 63.314239][ T4754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.379575][ T4754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.417941][ T4754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.475530][ T125] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.499802][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'. [ 63.517806][ T125] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.536118][ T125] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.553212][ T125] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.573546][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'. [ 63.628963][ T4761] loop3: detected capacity change from 0 to 256 [ 64.257868][ T4784] loop1: detected capacity change from 0 to 256 [ 64.370145][ T4778] netlink: 60 bytes leftover after parsing attributes in process `syz.4.467'. [ 64.701673][ T4793] netlink: 'syz.2.474': attribute type 3 has an invalid length. [ 64.905127][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 64.968246][ T4800] loop4: detected capacity change from 0 to 2048 [ 64.992823][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 65.433731][ T4820] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.470420][ T4786] syz.1.471 (4786) used greatest stack depth: 7240 bytes left [ 65.497054][ T4820] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.528525][ T4825] loop1: detected capacity change from 0 to 2048 [ 65.629178][ T4820] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.670865][ T4820] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.734951][ T125] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.772082][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.791338][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.800639][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.864569][ T4842] loop0: detected capacity change from 0 to 2048 [ 65.939043][ T4834] netlink: 60 bytes leftover after parsing attributes in process `syz.1.487'. [ 66.197977][ T4857] loop4: detected capacity change from 0 to 512 [ 66.219415][ T4857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.236411][ T4857] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.247462][ T4857] EXT4-fs (loop4): 1 truncate cleaned up [ 66.861818][ T4884] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 66.871319][ T4884] 9pnet_fd: Insufficient options for proto=fd [ 67.409046][ T4902] loop4: detected capacity change from 0 to 512 [ 67.428996][ T4902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.450338][ T29] kauditd_printk_skb: 979 callbacks suppressed [ 67.450355][ T29] audit: type=1326 audit(1760987559.292:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 67.480714][ T4902] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.507825][ T29] audit: type=1326 audit(1760987559.332:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 67.531259][ T29] audit: type=1326 audit(1760987559.332:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 67.534641][ T4902] EXT4-fs (loop4): 1 truncate cleaned up [ 67.554745][ T29] audit: type=1326 audit(1760987559.332:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 67.583687][ T29] audit: type=1326 audit(1760987559.332:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 67.607191][ T29] audit: type=1326 audit(1760987559.332:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 67.630393][ T29] audit: type=1326 audit(1760987559.332:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 67.653770][ T29] audit: type=1326 audit(1760987559.332:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 67.677047][ T29] audit: type=1326 audit(1760987559.332:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 67.700404][ T29] audit: type=1326 audit(1760987559.332:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 67.744397][ T4915] veth0: entered promiscuous mode [ 67.754302][ T4915] netlink: 'syz.1.515': attribute type 30 has an invalid length. [ 67.804416][ T4853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 67.867970][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 67.947034][ T4915] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.976460][ T4914] veth0: left promiscuous mode [ 68.221627][ T4933] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.419853][ T4950] loop1: detected capacity change from 0 to 2048 [ 68.660661][ T4966] loop0: detected capacity change from 0 to 512 [ 68.689340][ T4966] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.535: bad orphan inode 11862016 [ 68.709234][ T4966] EXT4-fs mount: 16 callbacks suppressed [ 68.709251][ T4966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 68.739985][ T4966] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.783650][ T4966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 69.217225][ T4998] loop0: detected capacity change from 0 to 512 [ 69.265851][ T4998] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.548: bad orphan inode 11862016 [ 69.414417][ T4998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 69.462627][ T4998] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.512061][ T4998] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 69.616833][ T5016] loop0: detected capacity change from 0 to 512 [ 69.631359][ T5019] loop4: detected capacity change from 0 to 256 [ 69.641650][ T5016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.677779][ T5016] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.705478][ T5016] EXT4-fs (loop0): 1 truncate cleaned up [ 69.729384][ T5016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.746775][ T37] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 69.754679][ T37] FAT-fs (loop4): Filesystem has been set read-only [ 69.774085][ T5019] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 69.781674][ T5019] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 69.806157][ T37] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 69.855167][ T37] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 69.909051][ T5027] netlink: 'syz.1.558': attribute type 3 has an invalid length. [ 70.013358][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 70.066289][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 70.098216][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.129956][ T5033] veth0: entered promiscuous mode [ 70.137677][ T5033] netlink: 'syz.0.560': attribute type 30 has an invalid length. [ 70.217783][ T5032] veth0: left promiscuous mode [ 70.273454][ T5037] loop0: detected capacity change from 0 to 2048 [ 70.285723][ T5037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.320030][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.556858][ T5052] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.580671][ T5054] netlink: 'syz.3.569': attribute type 3 has an invalid length. [ 70.599125][ T5052] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.678874][ T5052] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.753085][ T5066] loop0: detected capacity change from 0 to 2048 [ 70.761811][ T5052] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.772178][ T5058] loop3: detected capacity change from 0 to 1024 [ 70.799439][ T5066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.825662][ T5071] loop1: detected capacity change from 0 to 512 [ 70.844027][ T5071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.850018][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.861677][ T5071] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.887069][ T5071] EXT4-fs (loop1): 1 truncate cleaned up [ 70.893163][ T5071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.918038][ T1387] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.929778][ T1387] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.951530][ T1387] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.000454][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.148044][ T5083] loop0: detected capacity change from 0 to 512 [ 71.179974][ T5083] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.578: bad orphan inode 11862016 [ 71.208436][ T5083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 71.221179][ T5083] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.234422][ T5083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 71.297415][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.339859][ T5093] netlink: 'syz.1.581': attribute type 3 has an invalid length. [ 71.454665][ T5099] loop4: detected capacity change from 0 to 2048 [ 71.472644][ T5099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.536836][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.592771][ T5107] veth0: entered promiscuous mode [ 71.599397][ T5107] netlink: 'syz.4.586': attribute type 30 has an invalid length. [ 71.715722][ T5114] veth0: entered promiscuous mode [ 71.725135][ T5114] netlink: 'syz.1.590': attribute type 30 has an invalid length. [ 71.807217][ T5107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.830257][ T5119] loop3: detected capacity change from 0 to 512 [ 71.846888][ T5119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.861273][ T5119] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.875611][ T5106] veth0: left promiscuous mode [ 71.890436][ T5113] veth0: left promiscuous mode [ 71.906859][ T5119] EXT4-fs (loop3): 1 truncate cleaned up [ 71.913217][ T5119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.018566][ T5127] 9pnet_fd: Insufficient options for proto=fd [ 72.111293][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.218865][ T5133] loop3: detected capacity change from 0 to 2048 [ 72.246487][ T5133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.290381][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.553087][ T29] kauditd_printk_skb: 1182 callbacks suppressed [ 72.553104][ T29] audit: type=1326 audit(1760987564.392:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 72.594032][ T29] audit: type=1326 audit(1760987564.392:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 72.617687][ T29] audit: type=1326 audit(1760987564.392:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 72.641127][ T29] audit: type=1326 audit(1760987564.392:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 72.664499][ T29] audit: type=1326 audit(1760987564.392:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 72.687968][ T29] audit: type=1326 audit(1760987564.392:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 72.711494][ T29] audit: type=1326 audit(1760987564.392:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 72.734908][ T29] audit: type=1326 audit(1760987564.392:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 72.758316][ T29] audit: type=1326 audit(1760987564.392:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 72.781718][ T29] audit: type=1326 audit(1760987564.392:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 73.473208][ T5189] loop0: detected capacity change from 0 to 256 [ 73.538621][ T5193] 9pnet_fd: Insufficient options for proto=fd [ 73.575102][ T5189] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 73.582476][ T5189] FAT-fs (loop0): Filesystem has been set read-only [ 73.593913][ T5189] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 73.613852][ T5189] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 73.622408][ T5189] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 73.702761][ T5199] loop1: detected capacity change from 0 to 1024 [ 73.716689][ T5199] EXT4-fs: Ignoring removed oldalloc option [ 73.722721][ T5199] EXT4-fs: Ignoring removed bh option [ 73.742840][ T5199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.805116][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.903396][ T5212] loop3: detected capacity change from 0 to 512 [ 73.917770][ T5212] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.629: bad orphan inode 11862016 [ 73.943738][ T5212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.956323][ T5212] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.969659][ T5212] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 74.444881][ T5237] loop0: detected capacity change from 0 to 512 [ 74.464482][ T5237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.478477][ T5237] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.500393][ T5237] EXT4-fs (loop0): 1 truncate cleaned up [ 74.507911][ T5237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.697796][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.725412][ T5252] loop4: detected capacity change from 0 to 128 [ 74.750029][ T5254] loop0: detected capacity change from 0 to 512 [ 74.767728][ T5254] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.643: bad orphan inode 11862016 [ 74.783569][ T5254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 74.797344][ T5254] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.826310][ T5254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 74.827528][ T5252] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 74.843243][ T5252] FAT-fs (loop4): Filesystem has been set read-only [ 74.851552][ T5258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.854070][ T5252] syz.4.644: attempt to access beyond end of device [ 74.854070][ T5252] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 74.877289][ T5252] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 74.885215][ T5252] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 74.934235][ T5252] syz.4.644: attempt to access beyond end of device [ 74.934235][ T5252] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 74.935397][ T5258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.954273][ T5252] syz.4.644: attempt to access beyond end of device [ 74.954273][ T5252] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 74.981615][ T5266] loop0: detected capacity change from 0 to 512 [ 75.000570][ T5266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.015080][ T5252] syz.4.644: attempt to access beyond end of device [ 75.015080][ T5252] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.018402][ T5266] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.028533][ T5252] syz.4.644: attempt to access beyond end of device [ 75.028533][ T5252] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.058221][ T5252] syz.4.644: attempt to access beyond end of device [ 75.058221][ T5252] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.071775][ T5252] syz.4.644: attempt to access beyond end of device [ 75.071775][ T5252] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.074793][ T5258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.085554][ T5252] syz.4.644: attempt to access beyond end of device [ 75.085554][ T5252] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.110214][ T5266] EXT4-fs (loop0): 1 truncate cleaned up [ 75.116363][ T5266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.134181][ T5252] syz.4.644: attempt to access beyond end of device [ 75.134181][ T5252] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.147776][ T5252] syz.4.644: attempt to access beyond end of device [ 75.147776][ T5252] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 75.189609][ T5258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.248764][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.279883][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 75.296430][ T5276] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.333772][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.344750][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.352976][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.382095][ T5276] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.477267][ T5276] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.537315][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.575852][ T5276] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.674588][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.683017][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.691692][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.704055][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.759801][ T5297] loop3: detected capacity change from 0 to 512 [ 75.805332][ T5297] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.658: bad orphan inode 11862016 [ 75.816795][ T5297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.829807][ T5297] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.841251][ T5297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 75.958691][ T5301] loop4: detected capacity change from 0 to 1024 [ 76.446304][ T5326] veth0: entered promiscuous mode [ 76.466738][ T5326] netlink: 'syz.4.668': attribute type 30 has an invalid length. [ 76.502267][ T5331] loop3: detected capacity change from 0 to 1024 [ 76.520569][ T5331] EXT4-fs: Ignoring removed oldalloc option [ 76.526662][ T5331] EXT4-fs: Ignoring removed bh option [ 76.557886][ T5331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.660273][ T5326] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.678342][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.842026][ T5325] veth0: left promiscuous mode [ 77.062457][ T5358] veth0: entered promiscuous mode [ 77.082383][ T5358] netlink: 'syz.3.681': attribute type 30 has an invalid length. [ 77.261599][ T5358] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.350593][ T5357] veth0: left promiscuous mode [ 77.406139][ T5370] loop0: detected capacity change from 0 to 1024 [ 77.423403][ T5370] EXT4-fs: Ignoring removed oldalloc option [ 77.429516][ T5370] EXT4-fs: Ignoring removed bh option [ 77.494949][ T5370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.508057][ T5377] 9pnet_fd: Insufficient options for proto=fd [ 77.557177][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.623563][ T5383] loop4: detected capacity change from 0 to 512 [ 77.644464][ T5383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.662150][ T5383] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.672613][ T29] kauditd_printk_skb: 1243 callbacks suppressed [ 77.672644][ T29] audit: type=1326 audit(1760987569.512:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 77.711817][ T5383] EXT4-fs (loop4): 1 truncate cleaned up [ 77.722491][ T5383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.888714][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 77.903970][ T29] audit: type=1326 audit(1760987569.512:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 77.927346][ T29] audit: type=1326 audit(1760987569.552:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 77.950722][ T29] audit: type=1326 audit(1760987569.552:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 77.974097][ T29] audit: type=1326 audit(1760987569.552:6234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 77.997566][ T29] audit: type=1326 audit(1760987569.552:6235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 78.021273][ T29] audit: type=1326 audit(1760987569.552:6236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 78.044735][ T29] audit: type=1326 audit(1760987569.552:6237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 78.068001][ T29] audit: type=1326 audit(1760987569.552:6238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 78.091385][ T29] audit: type=1326 audit(1760987569.552:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 78.104534][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 78.144930][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.273045][ T5406] loop0: detected capacity change from 0 to 512 [ 78.307351][ T5406] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.697: bad orphan inode 11862016 [ 78.348727][ T5414] loop3: detected capacity change from 0 to 256 [ 78.364800][ T5406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 78.418927][ T5406] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.434577][ T5414] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 78.441929][ T5414] FAT-fs (loop3): Filesystem has been set read-only [ 78.456167][ T5406] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 78.465930][ T5414] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 78.486606][ T5408] netlink: 60 bytes leftover after parsing attributes in process `syz.4.699'. [ 78.496044][ T5414] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 78.513933][ T5414] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 78.561521][ T5420] loop0: detected capacity change from 0 to 512 [ 78.570113][ T5420] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.580565][ T5420] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.595695][ T5420] EXT4-fs (loop0): 1 truncate cleaned up [ 78.602015][ T5420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.653687][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.675007][ T5429] loop0: detected capacity change from 0 to 512 [ 78.681818][ T5429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.693754][ T5429] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.705502][ T5429] EXT4-fs (loop0): 1 truncate cleaned up [ 78.711850][ T5429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.862528][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.036418][ T5437] loop0: detected capacity change from 0 to 128 [ 79.070646][ T5437] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 79.078546][ T5437] FAT-fs (loop0): Filesystem has been set read-only [ 79.085508][ T5437] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 79.093338][ T5437] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 79.159117][ T5441] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.208192][ T5441] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.295249][ T5441] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.364042][ T5441] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.449237][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.477085][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.502182][ T1387] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.521390][ T1387] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.884901][ T5437] bio_check_eod: 20248 callbacks suppressed [ 79.884988][ T5437] syz.0.708: attempt to access beyond end of device [ 79.884988][ T5437] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.961199][ T5437] syz.0.708: attempt to access beyond end of device [ 79.961199][ T5437] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 80.397139][ T5492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.464728][ T5492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.535544][ T5492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.586270][ T5495] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 80.596107][ T5495] 9pnet_fd: Insufficient options for proto=fd [ 80.626253][ T5492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.710133][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.727396][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.743983][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.763916][ T1387] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.874152][ T5506] veth0: entered promiscuous mode [ 80.884308][ T5506] netlink: 'syz.3.737': attribute type 30 has an invalid length. [ 81.005151][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 81.006539][ T5508] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.063223][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 81.082608][ T5505] veth0: left promiscuous mode [ 81.315540][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 81.345121][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 81.496946][ T5524] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 81.526756][ T5524] 9pnet_fd: Insufficient options for proto=fd [ 81.916799][ T5538] loop4: detected capacity change from 0 to 512 [ 81.950221][ T5538] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.749: bad orphan inode 11862016 [ 81.973487][ T5538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.992784][ T5538] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.005557][ T5538] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 82.277784][ T5544] netlink: 60 bytes leftover after parsing attributes in process `syz.4.750'. [ 82.754165][ T29] kauditd_printk_skb: 1179 callbacks suppressed [ 82.754180][ T29] audit: type=1326 audit(1760987574.602:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 82.798487][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 82.831518][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 82.844041][ T29] audit: type=1326 audit(1760987574.632:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 82.867487][ T29] audit: type=1326 audit(1760987574.632:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 82.890879][ T29] audit: type=1326 audit(1760987574.632:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 82.914458][ T29] audit: type=1326 audit(1760987574.632:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 82.937848][ T29] audit: type=1326 audit(1760987574.632:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 82.961263][ T29] audit: type=1326 audit(1760987574.632:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 82.984741][ T29] audit: type=1326 audit(1760987574.632:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 83.008806][ T29] audit: type=1326 audit(1760987574.632:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 83.032189][ T29] audit: type=1326 audit(1760987574.632:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 83.475601][ T5595] veth0: entered promiscuous mode [ 83.481738][ T5595] netlink: 'syz.1.773': attribute type 30 has an invalid length. [ 83.619158][ T5595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.642972][ T5594] veth0: left promiscuous mode [ 84.195915][ T5630] loop4: detected capacity change from 0 to 1024 [ 84.308846][ T5647] loop4: detected capacity change from 0 to 512 [ 84.330696][ T5647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.345400][ T5647] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.386783][ T5647] EXT4-fs (loop4): 1 truncate cleaned up [ 84.392853][ T5647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.447703][ T5640] loop1: detected capacity change from 0 to 1024 [ 84.763238][ T5669] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.875846][ T5669] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.955885][ T5669] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.015608][ T5669] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.027812][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.074250][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.110086][ T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.118498][ T5692] netlink: 'syz.3.810': attribute type 3 has an invalid length. [ 85.126681][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.152377][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.381045][ T5711] veth0: entered promiscuous mode [ 85.387659][ T5711] netlink: 'syz.0.818': attribute type 30 has an invalid length. [ 85.546233][ T5720] netlink: 'syz.3.823': attribute type 3 has an invalid length. [ 85.586528][ T5722] loop1: detected capacity change from 0 to 512 [ 85.591537][ T5711] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.652669][ T5722] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.822: bad orphan inode 11862016 [ 85.667885][ T5722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 85.680603][ T5722] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.699422][ T5722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 85.883724][ T5746] netlink: 60 bytes leftover after parsing attributes in process `syz.4.832'. [ 86.028415][ T5751] netlink: 'syz.4.834': attribute type 3 has an invalid length. [ 86.162427][ T5765] loop4: detected capacity change from 0 to 512 [ 86.181730][ T5765] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.841: bad orphan inode 11862016 [ 86.194730][ T5765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.212196][ T5710] veth0: left promiscuous mode [ 86.244427][ T5765] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.290314][ T5765] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.369472][ T5783] veth0: entered promiscuous mode [ 86.377974][ T5783] netlink: 'syz.0.846': attribute type 30 has an invalid length. [ 86.522744][ T5783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.552586][ T5782] veth0: left promiscuous mode [ 86.605537][ T5793] netlink: 'syz.3.850': attribute type 3 has an invalid length. [ 86.653369][ T5797] loop3: detected capacity change from 0 to 2048 [ 86.675445][ T5797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.700463][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.731511][ T5807] loop0: detected capacity change from 0 to 1024 [ 86.743671][ T5807] EXT4-fs: Ignoring removed oldalloc option [ 86.744746][ T5809] loop3: detected capacity change from 0 to 512 [ 86.749751][ T5807] EXT4-fs: Ignoring removed bh option [ 86.766642][ T5809] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.856: bad orphan inode 11862016 [ 86.779574][ T5807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.781312][ T5809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.805246][ T5809] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.818642][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.837363][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.865563][ T5801] netlink: 60 bytes leftover after parsing attributes in process `syz.2.854'. [ 86.885076][ T5817] loop3: detected capacity change from 0 to 2048 [ 86.907384][ T5817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.920827][ T5819] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.932205][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.985518][ T5823] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.002784][ T5819] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.017283][ T5828] netlink: 'syz.1.863': attribute type 3 has an invalid length. [ 87.036253][ T5823] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.076223][ T5833] veth0: entered promiscuous mode [ 87.082277][ T5833] netlink: 'syz.1.865': attribute type 30 has an invalid length. [ 87.104987][ T5819] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.117832][ T5823] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.180293][ T5834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.200655][ T5832] veth0: left promiscuous mode [ 87.213253][ T5819] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.225782][ T5823] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.272856][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.285056][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.301291][ T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.319760][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.366652][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.377791][ T5840] loop1: detected capacity change from 0 to 2048 [ 87.384566][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.396677][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.424021][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.507465][ T5840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.546745][ T5842] loop4: detected capacity change from 0 to 1024 [ 87.576321][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.600965][ T5858] netlink: 'syz.2.874': attribute type 3 has an invalid length. [ 87.785130][ T29] kauditd_printk_skb: 1630 callbacks suppressed [ 87.785160][ T29] audit: type=1326 audit(1760987579.632:9059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 87.824791][ T29] audit: type=1326 audit(1760987579.672:9060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 87.848276][ T29] audit: type=1326 audit(1760987579.672:9061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b3fe2f003 code=0x7ffc0000 [ 87.879120][ T29] audit: type=1326 audit(1760987579.672:9063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 87.902647][ T29] audit: type=1326 audit(1760987579.672:9064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 87.926201][ T29] audit: type=1326 audit(1760987579.672:9062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6b3fe2f087 code=0x7ffc0000 [ 87.949741][ T29] audit: type=1326 audit(1760987579.672:9065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6b3fde644d code=0x7ffc0000 [ 87.973072][ T29] audit: type=1326 audit(1760987579.672:9066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6b3fe63709 code=0x7ffc0000 [ 87.996540][ T29] audit: type=1326 audit(1760987579.672:9067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6b3fde64b7 code=0x7ffc0000 [ 88.019841][ T29] audit: type=1326 audit(1760987579.672:9068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5867 comm="syz.2.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 88.067100][ T5871] netlink: 60 bytes leftover after parsing attributes in process `syz.4.881'. [ 88.081653][ T5877] loop1: detected capacity change from 0 to 1024 [ 88.094577][ T5877] EXT4-fs: Ignoring removed oldalloc option [ 88.100624][ T5877] EXT4-fs: Ignoring removed bh option [ 88.137616][ T5877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.184319][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.237420][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 88.259693][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 88.273203][ T5887] loop1: detected capacity change from 0 to 512 [ 88.332123][ T5887] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.886: bad orphan inode 11862016 [ 88.375372][ T5887] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.499036][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 88.533023][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 88.862609][ T5920] validate_nla: 1 callbacks suppressed [ 88.862623][ T5920] netlink: 'syz.1.900': attribute type 3 has an invalid length. [ 88.879821][ T5922] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 88.909145][ T5922] 9pnet_fd: Insufficient options for proto=fd [ 88.955008][ T5925] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.016756][ T5925] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.039714][ T5929] loop4: detected capacity change from 0 to 2048 [ 89.107286][ T5925] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.157049][ T5925] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.223000][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'. [ 89.233299][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'. [ 89.260528][ T1387] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.290801][ T1387] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.301419][ T1387] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.312787][ T1387] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.340028][ T5934] loop0: detected capacity change from 0 to 1024 [ 89.459249][ T5953] netlink: 'syz.1.914': attribute type 3 has an invalid length. [ 89.588310][ T5962] loop0: detected capacity change from 0 to 256 [ 89.641582][ T5962] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 89.648973][ T5962] FAT-fs (loop0): Filesystem has been set read-only [ 89.674151][ T5962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 89.787693][ T1387] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 89.809729][ T1387] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 90.034755][ T5984] netlink: 'syz.1.927': attribute type 3 has an invalid length. [ 90.237243][ T6000] loop0: detected capacity change from 0 to 256 [ 90.343376][ T3434] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 90.351356][ T3434] FAT-fs (loop0): Filesystem has been set read-only [ 90.381511][ T3434] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 90.389650][ T6000] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 90.397456][ T3434] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 90.410816][ T3434] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 90.460969][ T6000] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 90.562159][ T6013] netlink: 'syz.2.939': attribute type 3 has an invalid length. [ 90.638591][ T6022] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 90.659507][ T6019] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.708680][ T6022] 9pnet_fd: Insufficient options for proto=fd [ 90.736533][ T6019] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.805605][ T6019] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.875850][ T6019] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.015794][ T6039] loop4: detected capacity change from 0 to 128 [ 91.051960][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.064629][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.089942][ T6039] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 91.097863][ T6039] FAT-fs (loop4): Filesystem has been set read-only [ 91.114143][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.132527][ T6039] syz.4.950: attempt to access beyond end of device [ 91.132527][ T6039] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 91.153478][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.166828][ T6039] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 91.174756][ T6039] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 91.230118][ T6039] syz.4.950: attempt to access beyond end of device [ 91.230118][ T6039] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.256582][ T6049] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 91.266457][ T6039] syz.4.950: attempt to access beyond end of device [ 91.266457][ T6039] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.285482][ T6049] 9pnet_fd: Insufficient options for proto=fd [ 91.290055][ T6039] syz.4.950: attempt to access beyond end of device [ 91.290055][ T6039] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.324638][ T6039] syz.4.950: attempt to access beyond end of device [ 91.324638][ T6039] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.346469][ T6039] syz.4.950: attempt to access beyond end of device [ 91.346469][ T6039] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.379513][ T6055] loop1: detected capacity change from 0 to 512 [ 91.394376][ T6039] syz.4.950: attempt to access beyond end of device [ 91.394376][ T6039] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.408063][ T6055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.418915][ T6039] syz.4.950: attempt to access beyond end of device [ 91.418915][ T6039] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.444346][ T6039] syz.4.950: attempt to access beyond end of device [ 91.444346][ T6039] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.457782][ T6055] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.478644][ T6055] EXT4-fs (loop1): 1 truncate cleaned up [ 91.495841][ T6039] syz.4.950: attempt to access beyond end of device [ 91.495841][ T6039] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.802015][ T6078] veth0: entered promiscuous mode [ 91.834929][ T6081] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 91.864533][ T6081] 9pnet_fd: Insufficient options for proto=fd [ 91.953157][ T6091] loop0: detected capacity change from 0 to 512 [ 91.964468][ T6091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.997504][ T6078] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.021808][ T6091] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.035086][ T6091] EXT4-fs (loop0): 1 truncate cleaned up [ 92.069338][ T6076] veth0: left promiscuous mode [ 92.162014][ T6110] loop3: detected capacity change from 0 to 1024 [ 92.170950][ T6110] EXT4-fs: Ignoring removed oldalloc option [ 92.177025][ T6110] EXT4-fs: Ignoring removed bh option [ 92.209003][ T6114] netlink: 'syz.1.982': attribute type 3 has an invalid length. [ 92.278303][ T6117] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 92.291083][ T6117] 9pnet_fd: Insufficient options for proto=fd [ 92.490661][ T6142] loop3: detected capacity change from 0 to 1024 [ 92.527452][ T6144] loop4: detected capacity change from 0 to 512 [ 92.543877][ T6142] EXT4-fs: Ignoring removed oldalloc option [ 92.550086][ T6142] EXT4-fs: Ignoring removed bh option [ 92.556352][ T6146] netlink: 'syz.2.998': attribute type 3 has an invalid length. [ 92.557636][ T6144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.572336][ T6148] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.583510][ T6144] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.604982][ T6144] EXT4-fs (loop4): 1 truncate cleaned up [ 92.646427][ T6148] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.707156][ T6148] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.746978][ T6163] loop3: detected capacity change from 0 to 512 [ 92.755535][ T6148] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.805631][ T6163] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1004: bad orphan inode 11862016 [ 92.870831][ T6163] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.912787][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.928399][ T29] kauditd_printk_skb: 1455 callbacks suppressed [ 92.928416][ T29] audit: type=1326 audit(1760987584.772:10524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 92.941436][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.958514][ T29] audit: type=1326 audit(1760987584.782:10525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 92.990058][ T29] audit: type=1326 audit(1760987584.782:10526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 93.013597][ T29] audit: type=1326 audit(1760987584.812:10527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.1.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 93.037766][ T29] audit: type=1326 audit(1760987584.842:10528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 93.061304][ T29] audit: type=1326 audit(1760987584.842:10529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 93.066077][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.084922][ T29] audit: type=1326 audit(1760987584.842:10530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 93.116706][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.116717][ T29] audit: type=1326 audit(1760987584.842:10531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 93.148385][ T29] audit: type=1326 audit(1760987584.842:10532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 93.171988][ T29] audit: type=1326 audit(1760987584.842:10533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01858efc9 code=0x7ffc0000 [ 93.212733][ T6182] loop0: detected capacity change from 0 to 1024 [ 93.222732][ T6182] EXT4-fs: Ignoring removed oldalloc option [ 93.228805][ T6182] EXT4-fs: Ignoring removed bh option [ 93.365781][ T6201] FAULT_INJECTION: forcing a failure. [ 93.365781][ T6201] name failslab, interval 1, probability 0, space 0, times 0 [ 93.378555][ T6201] CPU: 0 UID: 0 PID: 6201 Comm: syz.0.1019 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.378599][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.378615][ T6201] Call Trace: [ 93.378622][ T6201] [ 93.378631][ T6201] __dump_stack+0x1d/0x30 [ 93.378663][ T6201] dump_stack_lvl+0xe8/0x140 [ 93.378747][ T6201] dump_stack+0x15/0x1b [ 93.378778][ T6201] should_fail_ex+0x265/0x280 [ 93.378855][ T6201] should_failslab+0x8c/0xb0 [ 93.378881][ T6201] kmem_cache_alloc_noprof+0x50/0x480 [ 93.378971][ T6201] ? skb_clone+0x151/0x1f0 [ 93.379003][ T6201] skb_clone+0x151/0x1f0 [ 93.379030][ T6201] __netlink_deliver_tap+0x2c9/0x500 [ 93.379071][ T6201] netlink_unicast+0x66b/0x690 [ 93.379183][ T6201] netlink_sendmsg+0x58b/0x6b0 [ 93.379222][ T6201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.379309][ T6201] __sock_sendmsg+0x145/0x180 [ 93.379374][ T6201] ____sys_sendmsg+0x31e/0x4e0 [ 93.379406][ T6201] ___sys_sendmsg+0x17b/0x1d0 [ 93.379457][ T6201] __x64_sys_sendmsg+0xd4/0x160 [ 93.379564][ T6201] x64_sys_call+0x191e/0x3000 [ 93.379606][ T6201] do_syscall_64+0xd2/0x200 [ 93.379634][ T6201] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.379658][ T6201] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 93.379819][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.379842][ T6201] RIP: 0033:0x7fb01858efc9 [ 93.379860][ T6201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.379914][ T6201] RSP: 002b:00007fb016fef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.379981][ T6201] RAX: ffffffffffffffda RBX: 00007fb0187e5fa0 RCX: 00007fb01858efc9 [ 93.380052][ T6201] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 93.380140][ T6201] RBP: 00007fb016fef090 R08: 0000000000000000 R09: 0000000000000000 [ 93.380191][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.380206][ T6201] R13: 00007fb0187e6038 R14: 00007fb0187e5fa0 R15: 00007ffc7a775748 [ 93.380228][ T6201] [ 93.590180][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1019'. [ 93.677650][ T6195] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1017'. [ 93.729482][ T6214] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.743155][ T6220] FAULT_INJECTION: forcing a failure. [ 93.743155][ T6220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.756360][ T6220] CPU: 0 UID: 0 PID: 6220 Comm: syz.0.1029 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.756395][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.756434][ T6220] Call Trace: [ 93.756440][ T6220] [ 93.756448][ T6220] __dump_stack+0x1d/0x30 [ 93.756481][ T6220] dump_stack_lvl+0xe8/0x140 [ 93.756516][ T6220] dump_stack+0x15/0x1b [ 93.756580][ T6220] should_fail_ex+0x265/0x280 [ 93.756619][ T6220] should_fail+0xb/0x20 [ 93.756670][ T6220] should_fail_usercopy+0x1a/0x20 [ 93.756702][ T6220] _copy_to_user+0x20/0xa0 [ 93.756746][ T6220] simple_read_from_buffer+0xb5/0x130 [ 93.756789][ T6220] proc_fail_nth_read+0x10e/0x150 [ 93.756820][ T6220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.756850][ T6220] vfs_read+0x1a8/0x770 [ 93.756939][ T6220] ? __rcu_read_unlock+0x4f/0x70 [ 93.756982][ T6220] ? __fget_files+0x184/0x1c0 [ 93.757011][ T6220] ksys_read+0xda/0x1a0 [ 93.757097][ T6220] __x64_sys_read+0x40/0x50 [ 93.757120][ T6220] x64_sys_call+0x27c0/0x3000 [ 93.757171][ T6220] do_syscall_64+0xd2/0x200 [ 93.757252][ T6220] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.757278][ T6220] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 93.757313][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.757335][ T6220] RIP: 0033:0x7fb01858d9dc [ 93.757364][ T6220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.757387][ T6220] RSP: 002b:00007fb016fef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.757412][ T6220] RAX: ffffffffffffffda RBX: 00007fb0187e5fa0 RCX: 00007fb01858d9dc [ 93.757428][ T6220] RDX: 000000000000000f RSI: 00007fb016fef0a0 RDI: 0000000000000003 [ 93.757443][ T6220] RBP: 00007fb016fef090 R08: 0000000000000000 R09: 0000000000000000 [ 93.757459][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.757474][ T6220] R13: 00007fb0187e6038 R14: 00007fb0187e5fa0 R15: 00007ffc7a775748 [ 93.757519][ T6220] [ 93.769200][ T6223] loop4: detected capacity change from 0 to 2048 [ 93.988382][ T6214] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.005682][ T6234] loop0: detected capacity change from 0 to 512 [ 94.030335][ T6234] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1034: bad orphan inode 11862016 [ 94.053226][ T6240] veth0: entered promiscuous mode [ 94.066163][ T6242] FAULT_INJECTION: forcing a failure. [ 94.066163][ T6242] name failslab, interval 1, probability 0, space 0, times 0 [ 94.078004][ T6214] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.078854][ T6242] CPU: 0 UID: 0 PID: 6242 Comm: syz.1.1037 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.078891][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.078958][ T6242] Call Trace: [ 94.078967][ T6242] [ 94.078979][ T6242] __dump_stack+0x1d/0x30 [ 94.079020][ T6242] dump_stack_lvl+0xe8/0x140 [ 94.079061][ T6242] dump_stack+0x15/0x1b [ 94.079109][ T6242] should_fail_ex+0x265/0x280 [ 94.079212][ T6242] should_failslab+0x8c/0xb0 [ 94.079242][ T6242] kmem_cache_alloc_noprof+0x50/0x480 [ 94.079298][ T6242] ? getname_flags+0x80/0x3b0 [ 94.079331][ T6242] getname_flags+0x80/0x3b0 [ 94.079362][ T6242] __x64_sys_mkdir+0x33/0x50 [ 94.079446][ T6242] x64_sys_call+0x2db9/0x3000 [ 94.079493][ T6242] do_syscall_64+0xd2/0x200 [ 94.079543][ T6242] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.079572][ T6242] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.079663][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.079692][ T6242] RIP: 0033:0x7f10a804efc9 [ 94.079712][ T6242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.079737][ T6242] RSP: 002b:00007f10a6ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 94.079763][ T6242] RAX: ffffffffffffffda RBX: 00007f10a82a5fa0 RCX: 00007f10a804efc9 [ 94.079815][ T6242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.079831][ T6242] RBP: 00007f10a6ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.079847][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.079864][ T6242] R13: 00007f10a82a6038 R14: 00007f10a82a5fa0 R15: 00007ffd14d9c5e8 [ 94.079891][ T6242] [ 94.080962][ T6234] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.289856][ T6249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6249 comm=syz.3.1039 [ 94.303081][ T6249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6249 comm=syz.3.1039 [ 94.343595][ T6245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.361107][ T6214] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.388946][ T6238] veth0: left promiscuous mode [ 94.395080][ T6253] netlink: 'syz.0.1040': attribute type 3 has an invalid length. [ 94.430093][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 94.447690][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.462017][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 94.525545][ T1387] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.559535][ T6261] loop4: detected capacity change from 0 to 2048 [ 94.562274][ T6264] loop3: detected capacity change from 0 to 512 [ 94.573009][ T1387] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.614869][ T6262] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.629441][ T1387] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.676157][ T6262] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.736741][ T6262] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.815910][ T6262] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.903557][ T6282] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 94.916081][ T6273] 9pnet_fd: Insufficient options for proto=fd [ 95.003473][ T6286] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 95.211006][ T6297] netlink: 'syz.2.1059': attribute type 4 has an invalid length. [ 95.324052][ T6300] netlink: 'syz.2.1059': attribute type 4 has an invalid length. [ 95.512216][ T6307] loop1: detected capacity change from 0 to 512 [ 95.534258][ T6307] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1063: bad orphan inode 11862016 [ 95.580762][ T6307] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.676249][ T1387] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.701536][ T1387] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.724156][ T1387] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.724864][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 95.732494][ T1387] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.866476][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 95.887009][ T6334] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 95.897087][ T6334] 9pnet_fd: Insufficient options for proto=fd [ 95.936881][ T6337] loop3: detected capacity change from 0 to 512 [ 95.965116][ T6337] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1077: bad orphan inode 11862016 [ 95.988318][ T6337] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.077119][ T6346] loop0: detected capacity change from 0 to 512 [ 96.083746][ T6346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.115624][ T6346] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.128748][ T6346] EXT4-fs (loop0): 1 truncate cleaned up [ 96.277142][ T6363] 9pnet_fd: Insufficient options for proto=fd [ 96.336774][ T6367] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 96.357246][ T6367] bond1 (unregistering): Released all slaves [ 96.777822][ T6395] netlink: 'syz.4.1098': attribute type 3 has an invalid length. [ 97.029125][ T6425] loop4: detected capacity change from 0 to 512 [ 97.039467][ T6425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.058550][ T6425] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.068786][ T6427] loop0: detected capacity change from 0 to 1024 [ 97.076403][ T6425] EXT4-fs (loop4): 1 truncate cleaned up [ 97.089756][ T6427] EXT4-fs: Ignoring removed oldalloc option [ 97.095937][ T6427] EXT4-fs: Ignoring removed bh option [ 97.208825][ T6438] loop0: detected capacity change from 0 to 128 [ 97.314555][ T6438] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 97.322412][ T6438] FAT-fs (loop0): Filesystem has been set read-only [ 97.343931][ T6438] bio_check_eod: 5080 callbacks suppressed [ 97.343948][ T6438] syz.0.1114: attempt to access beyond end of device [ 97.343948][ T6438] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 97.374002][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1116'. [ 97.383136][ T6438] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 97.391025][ T6438] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 97.411420][ T6438] syz.0.1114: attempt to access beyond end of device [ 97.411420][ T6438] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.430550][ T6438] syz.0.1114: attempt to access beyond end of device [ 97.430550][ T6438] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.444869][ T6438] syz.0.1114: attempt to access beyond end of device [ 97.444869][ T6438] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.459467][ T6438] syz.0.1114: attempt to access beyond end of device [ 97.459467][ T6438] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.475466][ T6449] syzkaller0: entered allmulticast mode [ 97.481244][ T6450] veth0: entered promiscuous mode [ 97.482776][ T6438] syz.0.1114: attempt to access beyond end of device [ 97.482776][ T6438] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.500189][ T6446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1118'. [ 97.500596][ T6449] syzkaller0: entered promiscuous mode [ 97.515364][ T6438] syz.0.1114: attempt to access beyond end of device [ 97.515364][ T6438] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.537587][ T6449] syzkaller0 (unregistering): left allmulticast mode [ 97.544398][ T6449] syzkaller0 (unregistering): left promiscuous mode [ 97.562552][ T6438] syz.0.1114: attempt to access beyond end of device [ 97.562552][ T6438] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.576114][ T6438] syz.0.1114: attempt to access beyond end of device [ 97.576114][ T6438] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.595771][ T6438] syz.0.1114: attempt to access beyond end of device [ 97.595771][ T6438] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.676212][ T6450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.714925][ T6462] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 97.740848][ T6455] 9pnet_fd: Insufficient options for proto=fd [ 97.784355][ T6448] veth0: left promiscuous mode [ 97.881412][ T6472] loop4: detected capacity change from 0 to 512 [ 97.892271][ T6472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.913033][ T6472] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.930077][ T6472] EXT4-fs (loop4): 1 truncate cleaned up [ 97.936736][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 97.936749][ T29] audit: type=1326 audit(1760987589.782:11167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.1.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10a8081885 code=0x7ffc0000 [ 97.969444][ T29] audit: type=1326 audit(1760987589.802:11168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 97.993099][ T29] audit: type=1326 audit(1760987589.802:11169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 98.016690][ T29] audit: type=1326 audit(1760987589.802:11170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 98.040261][ T29] audit: type=1326 audit(1760987589.802:11171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 98.063764][ T29] audit: type=1326 audit(1760987589.802:11172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 98.087418][ T29] audit: type=1326 audit(1760987589.802:11173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 98.110973][ T29] audit: type=1326 audit(1760987589.802:11174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 98.134574][ T29] audit: type=1326 audit(1760987589.802:11175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 98.158090][ T29] audit: type=1326 audit(1760987589.802:11176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.3.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7feeca71efc9 code=0x7ffc0000 [ 98.232184][ T6485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1133'. [ 98.358337][ T6499] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 98.364906][ T6499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.372531][ T6499] vhci_hcd vhci_hcd.0: Device attached [ 98.383170][ T6504] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 98.391234][ T6495] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 98.397786][ T6495] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.405340][ T6495] vhci_hcd vhci_hcd.0: Device attached [ 98.419432][ T6491] 9pnet_fd: Insufficient options for proto=fd [ 98.465213][ T6512] FAULT_INJECTION: forcing a failure. [ 98.465213][ T6512] name failslab, interval 1, probability 0, space 0, times 0 [ 98.477993][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.2.1141 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.478019][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.478111][ T6512] Call Trace: [ 98.478118][ T6512] [ 98.478127][ T6512] __dump_stack+0x1d/0x30 [ 98.478164][ T6512] dump_stack_lvl+0xe8/0x140 [ 98.478208][ T6512] dump_stack+0x15/0x1b [ 98.478236][ T6512] should_fail_ex+0x265/0x280 [ 98.478327][ T6512] should_failslab+0x8c/0xb0 [ 98.478351][ T6512] kmem_cache_alloc_noprof+0x50/0x480 [ 98.478423][ T6512] ? getname_flags+0x80/0x3b0 [ 98.478451][ T6512] getname_flags+0x80/0x3b0 [ 98.478499][ T6512] __x64_sys_mkdir+0x33/0x50 [ 98.478535][ T6512] x64_sys_call+0x2db9/0x3000 [ 98.478646][ T6512] do_syscall_64+0xd2/0x200 [ 98.478681][ T6512] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.478709][ T6512] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 98.478745][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.478773][ T6512] RIP: 0033:0x7f6b3fe2efc9 [ 98.478792][ T6512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.478817][ T6512] RSP: 002b:00007f6b3e86e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 98.478841][ T6512] RAX: ffffffffffffffda RBX: 00007f6b40086090 RCX: 00007f6b3fe2efc9 [ 98.478854][ T6512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 98.478865][ T6512] RBP: 00007f6b3e86e090 R08: 0000000000000000 R09: 0000000000000000 [ 98.478900][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.478916][ T6512] R13: 00007f6b40086128 R14: 00007f6b40086090 R15: 00007fffdce97428 [ 98.478953][ T6512] [ 98.479533][ T6500] vhci_hcd: connection closed [ 98.547736][ T6511] loop4: detected capacity change from 0 to 128 [ 98.570019][ T1387] vhci_hcd: stop threads [ 98.654183][ T6516] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 98.654960][ T1387] vhci_hcd: release socket [ 98.661177][ T6516] FAT-fs (loop4): Filesystem has been set read-only [ 98.665459][ T1387] vhci_hcd: disconnect device [ 98.665634][ T3413] vhci_hcd: vhci_device speed not set [ 98.673863][ T6516] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 98.702504][ T6516] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 98.754188][ T10] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 98.795970][ T6521] loop1: detected capacity change from 0 to 512 [ 98.805445][ T6521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.817679][ T6521] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.832475][ T6521] EXT4-fs (loop1): 1 truncate cleaned up [ 98.838966][ T6521] EXT4-fs mount: 38 callbacks suppressed [ 98.838979][ T6521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.974647][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.005163][ T6527] loop1: detected capacity change from 0 to 256 [ 99.035749][ T6527] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 99.043173][ T6527] FAT-fs (loop1): Filesystem has been set read-only [ 99.050291][ T6527] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 99.065158][ T6527] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 99.073969][ T6527] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 99.120260][ T6531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1149'. [ 99.186526][ T6502] vhci_hcd: connection reset by peer [ 99.193622][ T1387] vhci_hcd: stop threads [ 99.198039][ T1387] vhci_hcd: release socket [ 99.202670][ T1387] vhci_hcd: disconnect device [ 99.374486][ T6544] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 99.383754][ T6544] 9pnet_fd: Insufficient options for proto=fd [ 99.610057][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 99.634570][ T6551] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1157'. [ 99.802112][ T6571] loop3: detected capacity change from 0 to 512 [ 99.810292][ T6571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.821488][ T6571] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.844395][ T6571] EXT4-fs (loop3): 1 truncate cleaned up [ 99.850574][ T6571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.888236][ T6573] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 99.900935][ T6573] 9pnet_fd: Insufficient options for proto=fd [ 100.048815][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.113013][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 100.133269][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 100.186571][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1172'. [ 100.228718][ T6591] loop4: detected capacity change from 0 to 512 [ 100.242119][ T6591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.264670][ T6591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.282810][ T6597] loop0: detected capacity change from 0 to 1024 [ 100.290194][ T6591] EXT4-fs (loop4): 1 truncate cleaned up [ 100.292118][ T6597] EXT4-fs: Ignoring removed oldalloc option [ 100.298047][ T6591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.302093][ T6597] EXT4-fs: Ignoring removed bh option [ 100.351655][ T6597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.415344][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.556028][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.691677][ T6613] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1181'. [ 100.742252][ T6623] veth0: entered promiscuous mode [ 100.748282][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'. [ 100.757226][ T6623] netlink: 'syz.1.1186': attribute type 30 has an invalid length. [ 100.773904][ T1387] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.784201][ T1387] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.793006][ T1387] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.801643][ T1387] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.859055][ T6623] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.878656][ T6622] veth0: left promiscuous mode [ 100.999084][ T6636] loop1: detected capacity change from 0 to 1024 [ 101.006108][ T6636] EXT4-fs: Ignoring removed oldalloc option [ 101.012059][ T6636] EXT4-fs: Ignoring removed bh option [ 101.025702][ T6636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.050893][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.206184][ T6654] loop3: detected capacity change from 0 to 128 [ 101.235680][ T6654] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 101.243566][ T6654] FAT-fs (loop3): Filesystem has been set read-only [ 101.264951][ T6654] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 101.272921][ T6654] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 101.580981][ T6671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1206'. [ 101.760413][ T6676] 9pnet_fd: Insufficient options for proto=fd [ 101.774323][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'. [ 102.205461][ T6705] loop3: detected capacity change from 0 to 512 [ 102.214316][ T6705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.224271][ T6705] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.235522][ T6705] EXT4-fs (loop3): 1 truncate cleaned up [ 102.241639][ T6705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.361839][ T6718] loop0: detected capacity change from 0 to 256 [ 102.369618][ T6718] vfat: Unknown parameter 'GPL' [ 102.415653][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.449811][ T6722] loop3: detected capacity change from 0 to 128 [ 102.483754][ T6722] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 102.491765][ T6722] FAT-fs (loop3): Filesystem has been set read-only [ 102.498716][ T6722] bio_check_eod: 41032 callbacks suppressed [ 102.498733][ T6722] syz.3.1227: attempt to access beyond end of device [ 102.498733][ T6722] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 102.518543][ T6722] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 102.526494][ T6722] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 102.537089][ T6722] syz.3.1227: attempt to access beyond end of device [ 102.537089][ T6722] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 102.550616][ T6722] syz.3.1227: attempt to access beyond end of device [ 102.550616][ T6722] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 102.564379][ T6722] syz.3.1227: attempt to access beyond end of device [ 102.564379][ T6722] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 102.577831][ T6722] syz.3.1227: attempt to access beyond end of device [ 102.577831][ T6722] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 102.591395][ T6722] syz.3.1227: attempt to access beyond end of device [ 102.591395][ T6722] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 102.604815][ T6722] syz.3.1227: attempt to access beyond end of device [ 102.604815][ T6722] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 102.619046][ T6722] syz.3.1227: attempt to access beyond end of device [ 102.619046][ T6722] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 102.632467][ T6722] syz.3.1227: attempt to access beyond end of device [ 102.632467][ T6722] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 102.645877][ T6722] syz.3.1227: attempt to access beyond end of device [ 102.645877][ T6722] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 103.016393][ T29] kauditd_printk_skb: 638 callbacks suppressed [ 103.016412][ T29] audit: type=1326 audit(1760987594.862:11815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.1.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 103.073830][ T29] audit: type=1326 audit(1760987594.862:11816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.1.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 103.138607][ T29] audit: type=1326 audit(1760987594.922:11817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.1.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 103.162177][ T29] audit: type=1326 audit(1760987594.922:11818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.1.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 103.185760][ T29] audit: type=1326 audit(1760987594.922:11819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.1.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a804efc9 code=0x7ffc0000 [ 103.209250][ T29] audit: type=1326 audit(1760987594.942:11820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 103.232837][ T29] audit: type=1326 audit(1760987594.942:11821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 103.256556][ T29] audit: type=1326 audit(1760987594.942:11822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 103.280353][ T29] audit: type=1326 audit(1760987594.942:11823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 103.303938][ T29] audit: type=1326 audit(1760987594.942:11824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fe2efc9 code=0x7ffc0000 [ 103.562925][ T6756] pim6reg: entered allmulticast mode [ 103.569851][ T6756] pim6reg: left allmulticast mode [ 103.627762][ T6759] loop4: detected capacity change from 0 to 256 [ 103.651317][ T6759] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 103.658780][ T6759] FAT-fs (loop4): Filesystem has been set read-only [ 103.665807][ T6759] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 103.676324][ T6759] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 103.685219][ T6759] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 103.813944][ T10] usb 5-1: enqueue for inactive port 0 [ 103.819547][ T10] usb 5-1: enqueue for inactive port 0 [ 103.894807][ T10] vhci_hcd: vhci_device speed not set [ 104.241270][ T6791] __nla_validate_parse: 7 callbacks suppressed [ 104.241289][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 104.260588][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 104.296358][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 104.314554][ T6791] x_tables: ip_tables: ah match: only valid for protocol 51 [ 104.398505][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 104.408066][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 104.428734][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 104.546292][ T3004] ================================================================== [ 104.554531][ T3004] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 104.561157][ T3004] [ 104.563487][ T3004] read-write to 0xffff888106f98840 of 4 bytes by task 3300 on cpu 0: [ 104.571578][ T3004] dont_mount+0x2a/0x40 [ 104.575770][ T3004] vfs_unlink+0x28f/0x420 [ 104.580125][ T3004] do_unlinkat+0x24e/0x480 [ 104.584570][ T3004] __x64_sys_unlink+0x2e/0x40 [ 104.589281][ T3004] x64_sys_call+0x2dcf/0x3000 [ 104.593984][ T3004] do_syscall_64+0xd2/0x200 [ 104.598524][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.604426][ T3004] [ 104.606758][ T3004] read to 0xffff888106f98840 of 4 bytes by task 3004 on cpu 1: [ 104.614304][ T3004] lookup_fast+0xf0/0x320 [ 104.618650][ T3004] walk_component+0x3f/0x220 [ 104.623257][ T3004] path_lookupat+0xfe/0x2a0 [ 104.627780][ T3004] filename_lookup+0x147/0x340 [ 104.632559][ T3004] do_readlinkat+0x7d/0x320 [ 104.637081][ T3004] __x64_sys_readlink+0x47/0x60 [ 104.641946][ T3004] x64_sys_call+0x28de/0x3000 [ 104.646651][ T3004] do_syscall_64+0xd2/0x200 [ 104.651174][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.657077][ T3004] [ 104.659406][ T3004] value changed: 0x00300080 -> 0x00004080 [ 104.665125][ T3004] [ 104.667448][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 104.673600][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.682893][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.693128][ T3004] ================================================================== [ 104.804809][ T6791] Cannot find add_set index 0 as target