last executing test programs: 4.051365852s ago: executing program 1 (id=539): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="10"}], 0x1}, 0x40080c0) sendmsg$inet6(r0, 0x0, 0x4048805) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="90", 0x1}, {&(0x7f00000022c0)="5582f2d6fc1baa6a2567cc8fb0918f5ac2ccc25ee44c5391db8b0b57572723d911cbbd4a0782e8bdc0931b4c37fd8a92172fbe30f1a909e4a118f5dcfa3fd35c37c737196d3d5787655b0bd0ec2c7348e7eb35a0aa753fbf453bcf12578bcb202c76095964e0ed368e47c881778e94d1bfef2edf211dd6a3c0339e605c6a5b2bfccacd276c6f3bc37dcde75bb5f91824107bc32587202e0178fa2c2cb7a335885813732e00b65a6e98aa92036ea447bdf7d623003ece500211eacfa01cdc7677f56a160f80dc4eb576ced399341589c064b34c491764e04e371a91a041dbbc835a1ed58921061c210ef00749814611926406b0b83bc6d5fdb2af77c1d0b87d71977ee4f54a6f24571f79f1be535b046b4afb563a5f3a81ccf0035eb3ecf1e2d3bc725dc96c8104910e85c22e879358d371b2a905022e58dc9632a1d3831392dca604f24c8d0bf2f2ff2af583fe0bdd4e14db9d5436ba6bbf6079a6b0da6505ac7b3f8b85d120e4576d4698343c591a58d1643ffcd03aaebdc828c0b78246b005d0139ebc4707df4183fdb26b2102d3cefb900c67a6c3e4a8db193921e74f406b39ed583824e424ebe1331741765cb5950965e3a58f636f3a79eff73cbb4da2d12b75e65738b0c4ce96f9cc28316de30c2a55cf6d30aa7f298b421d9e5082887c49885f44e0351e1a16ca18a72228ede3b0d00cc182557017ecccae234f3a2beadf7a677f781f244f25791e31629ec56d43e8f49ebe9bcc444c1f2b1d61a358cea842df48225c59d17c73e4c264e0c41c80b6ff7dbcbc6854997a6dd50c26e40932d18660b0479c16c5c5a47242fc2dd62a6975126aac315eb3c12b860143c332d107b29a70e12491262c09564269c0c7783e9d70d225b2bfe2789def5c60332c238faf477fb8f76e50e474f7b40dd9c7348f44906550ec815a79d9acabf45e0b9532a979a4fe4b4a03e7ea254d5a9728566e8d03ae63a46a26b0456fcd427ce10c12bf48867c99fe8142716fca501e61c05a5408740e538402345a28928d98e0d7f77c3bdc6b6dfdf6729dd29869a699f80cade6650e36971443f7d04b57b146f624fe0d78ddc409c17fcf1dc897f722c1037aa64ec922353af4193a0dd815bad759f7747b0c5143131fb96033eb63bd82f58bf7ad02ab91eb0e13269e20631f3b553f2184d9de7745a1c3ee1b1db9490fe289c22686454fc53d87742bc06ec4540e5fc0818f0450d7a4807fe205af0e2e274111d4f1ad159585e0f648253c7d3ad50809f1d6b6c044a5a62483b433a4decd94b276d7948da1f2b8f80b47e980cb26dcd19b5843ebac50fcd8b7884373e73387e03310bdacc4a998c48b53061367e2f45e2492bb11b1bee582c8e89a4d464b0f8f82343a622642f9f3b67b55ef745f169b105450d782b4a07b2a665b9470e35e23ffc11349162f948422d9d5e0865045d2cb89f917ca2c856d2c00edbaacdac98e70e7173df9b9bb8b6a6a682397a75bb3561298b92f071d4ba8f1e54010a7c7281efb36dc8530be0ae3bc68ad45e23a6b2ccb1dc15c04b5364f8b0314ef4717c176f5f0ca43f4c51328460798c4776102e24bd56ac8e36ee912f02db2ad49ad1d5b4ed3507003c2e1223bd457510e6f646e2dc32a88794744d60d42bd333953c5c65a2b4f3bb17bb24b68bd6576652e45f912ed5a534565faf5391d13ea4139467eccb6f6acd8d6fd1c7bbb147b99cdf8c158a1e3d8ce00da2d4b1a7e510453c683d7519e8a4eae41e2fc14beddf6928e4879a38a469a3aae008f428a7eb9ef7cecfcd6aa515c614b6f8971f1c71a5d03224b0c16310055e2dfba012b4e1454f3366ff420c8109b52afa8e2f9cc6b224f0a09e599806a2886db89cb297decb0d0c1aa969aee8930b0d940d2bc388de2a3938cf82d4f230356748a5660baf3c89f7a6263310553d4008d00d2fa39ee548f9e3afeb24913118daa1f69c89c3f1dafcc0581105fe21e7cc228ab040ca4bd282aac91e7702a64f6cd86f8574ddc051d6719bfaf389ca0e5653a2c7d13725ad79ea5d170f0ffa096d005b1cc47ff2755cb3f62b397daba90ba63fe72224902bad5831d8e9a2c57b903cb8aea3cbcaaa1ea6f6d3668b9c449ff6ac854545a0e459d3a979644307332f515a1f38c71a80866dd07447dfe9246f5ea100eb15a8b8bd42fe882fa4d3419d4b3fd58244efa9113dff7d0c0c9c4e135e5cd690e43737985f281a5dfad92643a4af62945dcfba484456b0cdc7a5dde02317840889487c0241182184f8e045b1635d542a097b0e265a7d60f5de3a82630496addb1ffc59329747a2e5e8ac001017abb7ed4027cc477b678f76b059e7cf713430170f7f274c264beb0177d2dc66da769bbabd3ccdc23608916182e3447b336343d39874831e984db1bb3eed2ef71694f1cc42a33d1cc8f6f1465b512c8ddd79e7644a9020aa0a0a92b9706c4cc81e816abbbcf675d08a9d48d915d0e7af4d723dbf8ac2119cfad99f6b0b0fe9b564127fb8ea81fd59fc88ad348bfe3bf9ab37b1758bab6a21b54375b8ae2f9877f13fdfa50eaa009588a25945ad14b519490c879f2f247bce9b5c3d09ec1a3f22d50641f6d6109f750d7910cf48eef74614f08d41fd86a431e28d0b2a616285e6e44bbf7f9781073bdfbbbd374b1da74e588269c5dfd9bd22e71bd0710b2c687e03274b9f105f2fc031d95423ff9dc70a9e37488e9f65287ce5d50f961948c7a06c23dc0ed20c7b31f58ffac39482d06073f64a1488e7760681c8dd93a1b85a8d10996ee300126c3944cb6e16e88ee5ff04463880b19bad20ccb41b9287743bde8469f3ab56159ce0f21b1090db58286f52dec225078f8910a9a9044b7f553dc01ed2f70b8fec988338f5cd292509663d583bf3a6ee97fbd7a70397bd2e856b3c54c80c317800f81e17e07cf364473b4eb7d851f4452a4758d7518c0c1b18a4e1c1e7b04359c94312b57eb2c8a630ba35df5a4b9797ba6a731e86dd53d68c0e58a02429445c7e1d120266d4db1395d1e487e536d528403e4a3a57db621a9caaf28e2e14bea578eaeb226427ed0d494fb6dae9b83fc647f77ee85c274f0d15e17baa00cb964e59bd6cc3a692c74bf728eac7f03c55474e1ecc5a1714f3b3ea3433bdc820539f971dc073f2beabce241b6f13be648edf69550370f7b146c2f89efdaacc2378b88de328885c2adbec7f33ad02b481031a7d61b33cdd1c9863b7cf02e5ee898f61d541cf293b1a873ec3d0612352a68f70030b20c0eaa10c0644008cd25a08465a2bb4c4cea859f30e4b1338b63c2c46c198ab0228aa99ed5fa11f59c022940efabb0ad1e6103aa1dd02c7e2540fa73b057b663dec54d9bdd88fe61e584f1336199514570bbbbb59420285a9806199b4ffc69fc265781f730aac1dc314679a457f28e5b6fc939d7876cfb5e3ff05bd33d3114786375f7e14074c7c14bd1cd08e4065ccf4e7f91b702df46bf66c3742c91cf28baff9dec10429d1ee1d36876fc3e65e89ee78175e60016b388cc6278df02d4cb9f4dc5463b9d836922e866f5d84edff3996dcc51ba0e49a033d34e34ac2edd10ac8fd87f23414a42fafd0dec3530f95bf57432790b11b3418330930031276d7dbd38806cebc4f9950e10a8235b6a1ec4c5ffc2f01998aec4314c30adab9d2074c8188ea3ad1674a19a7a2b9d7726c6e89ad1d494b65457810722892479b9e73dba47afa6bba071ac2d6c54b0b2727adfe9f23b97dfec73ecd4e5a4bf601ce056cbb6aa378d9debd4eda618c9301b5e7e4a7a2e27b73ca35fac5ab766bdf7fc681bd08889fb8912ba187dbaf4916fd1633fcf4fa181444b1724b7f08a47848bad8db7bc55ce1fc2c4d1c1a958baf372a149e16cea9d499fbb675f26d5c981414a8c4364389690cac5db6badad633791827dc590441710327ed6d083eaf13dcd57e21f3041418b6d605bd4e0089991c9b4dde7f905f3e3b4d8ee7900d341aa12e62197e581b549b4f77d60b298392a984985fc646b29cd05b0874af7f01152006efbd47ad75c49229e9fdd0e6839337c52fd4eda3b627509ae72c5c23bcf1ffce11b67a39d1af1d047b0650b221a960e03304ef8571aa7dd77be6396bda8b3a22decf89d4b58442d7cb9f985282502d82da3b63b4967724f1f5f5069dc354aa60ea1d524cdfcb24e98fbae83f85569a7a9877dd432a7cbb591e058772ea5e8263541051ceb7f0a43adfca9a923ebe0d5d11e497271eaef471d5cd7db44a7b75d6fc7a162631b480a7cedadd8cb2cbc0f9cb9557d3cbf038b2905cbc780ea954b09e6f3bc71848bd8f3caa89e8ccef8999ca661b0e74321d22cc71f490c9969ba84b37ad30a47900195ac57f0fd12a693b0cda20dcb82cbfc3dc4e0d9929b0df637974a43a008ac372898ee3fcf3ef14599dbc82634e5a5e95671ed12bb96164429e2d6cdfe7dacb704ab80b2f86bc97af2554ee1aeafce33547743663c498814cc3cb0bbe31b143ceb876786f227c677682cafe8b6e407085fc8e9a731c64576a0453259e95fdc14e9998aeee002fb3240e0756ada21543355bb85d3fdb13ca662f136238fd31877e3fd35082aa120c80f287d9dfcd8f2f61793a1680940cc37a187c880ff0fd5c435c474a00c600635a8eaf5c81aa0bea7b7d7a41396c229242a6d42df78c5d1bda3a7c0bf59f0bcf88bd835953eb6cfa3fcaaba33e6115aa6275362b77f0706e5a3ee707703000b0a03651f647154e74c68f5d32cb97e53f11ff432daa45b4c90d7a8718d3cc92c9073fd278e5ab13a2b0ef81cd8310d0b4927b80c0967c05205452a52f6ac4c60cb2110dcdbc0e13285a67dac54f3a27eaf9b893bcf96f864c6b1b52adca066e2d199c8a11be5b121c4c3367f5898452734733ca78644ff07a6a73cd752e065429873ee206dbb5e698a86af5cc6beffffdd4ea8831385ccf29be3bbc6a7ee94bf40d7b1e98d3e36b090364694f2b0dd434db407c5c9f540056faf1118c98d0b19fada58c311e8715ef424852d51d6570614d77e0ec2c4ccee57a3665b9c69ff6ad2aca8417586447b629efb1fee654216f13a91f5201448f97d9fa654de1fc6e72bc471c5d4a16f4f23417bcab51ebb5e7bd1a4c8837fb95f643916ce9e59768defab75716f9aa7e77696a36ff178d215367767ba9813e68a2ef6b796a8a729a7a8ef8969f44d88937fcd64735e8f1506e47e9be4e62351e2c731fd6ea9669a352e7d3e97075262f5a18a918ebd77ad5d1a69e40c422492e9495cb1754e97898bc1103b62dc6ceae95d18954f92e8f7a96b7b4abc1eeb68166d3607615532877af1329c8932c254004713272102f176a88b7d876ccda952739c189ecd861a7754ab7a63f07cadfd49643899b84a90d381b9400db1ad70c486478eaf740e53d18a47f54ce8e9e418004313293a584ea5a6ccc3e3cbd0489fbc5e60d304498f860a2619b72ef2f8073e1110400e5d1fecfe88b38cf2c5e3773384e8b61bd61524f00665c76de2233e61163bdd296461829ab85ded54ea356c658a1d5663c9e234caa10facfcf84ee28987d9b0ea7cb901cfcefb5241e9fc536e376e3edb775e9b1f09499e00553b0a9d4bbd052a2827ba8b5523b0193b639ff2cd49fb1fcb87a43ed117907267f45ebdf742798aa65ca3d2b37a1d45ca9dbff02e876a8bfbdf48c2ca7b57257c001deebcebe25c55f7b037167b6e6c202b261ab1fc3e03c269d34842541ea2517fca1637d297f765cc42abc7e821ea357bb5a3f1a10feb99afd26bf5a8617b6d0cda4f0df7eb75320d53", 0x1000}], 0x2, &(0x7f0000001300)="5f6eb5d6b4e4ffd9d028ed0de67d7dad700a07f830f2a4f4c6b526d3d3be2ddf802432fe76ed22290a9c6838e7d9e0769edb37426c570a1507f12d1c39c885738a32af1196047d967a9363cb5547609e62db2fb0cf03863c45c80bf826053204cd10404860292d2d8f0a43a02c9440c126e2584b77b0b238", 0x78, 0x2400c000}, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000000034f0000000000000bfa2000000000000000008000000b704000000000000850000005900000095000000000000000000006faa7aeb0f2fd68b86d54f151e40bc61f6c6187e59706a3b8baef64129df2032870a5a8bcf6066ce0f091e23c37bb81cf445bf70b1aab48bef0407396d07241f7f541f48d533dfd482cfcc683ee96234c97868d70566659955db329fd247147ecc0de6c267adfb6e7227b630ef76df66b579536b2da325e482b37d7b8301646e4ed85d75ef11a16256821fae97054298c85525a15f56ec73ef"], 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x4e20, 0x2fe4, 0x4e21, 0x4, 0x2, 0xa0, 0x80, 0x67}, {0x80, 0x8, 0x7, 0x6, 0x10000, 0x3, 0x6, 0x800}, {0xf7, 0x100000001, 0x8c7, 0x9}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3507, 0x0, 0x3, 0x6, 0x7ff, 0x3, 0x2}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001780)={&(0x7f00000017c0)='xprtrdma_cb_setup\x00', 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 3.585008748s ago: executing program 1 (id=547): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="031b05bfe11850b716441386fe30217b1e6a12800b0001006d6179343f5fd4f40dd76dcdd01f0711650fcd8d87a60b505d7819e67e34000000000000", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r7, &(0x7f0000003580)={&(0x7f0000001fc0)={0xa, 0x2, 0x8, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000000000080000000018000000000000002900000037"], 0x30}, 0x2000) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_newneigh={0x2c, 0x1c, 0x4, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x2, 0x18, 0x7b7bf37a2acd0256}, [@NDA_VLAN={0x6, 0x5, 0x2}, @NDA_MASTER={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x200088c4) setns(r3, 0x66020000) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) 3.102960746s ago: executing program 3 (id=552): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchownat(r0, &(0x7f0000000140)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="feab0b8fa3af76c35b3fe75b06b9aa66a82d2a158a493b58b61e9baf6a5b88a92677f9348ae2", @ANYRESDEC=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYRESOCT=r0], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) tkill(r4, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@oldalloc}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x200) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRESDEC], 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.688625476s ago: executing program 4 (id=554): ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x100, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r3, 0x402, 0x8000003d) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000b00)={0xcc, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x292}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000c0}, 0x410) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000880)={[{@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@noquota, 0x0}, {@data_journal}, {@stripe={'stripe', 0x3d, 0xc3}}, {@i_version}, {@nouid32}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000005, 0x50032, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r5, @ANYRES32], 0x48) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r6}, 0x38) 2.300269724s ago: executing program 0 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 2.083561066s ago: executing program 2 (id=556): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000048000)=0x1, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.023249931s ago: executing program 0 (id=557): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="10"}], 0x1}, 0x40080c0) sendmsg$inet6(r1, 0x0, 0x4048805) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$tipc(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="90", 0x1}, {&(0x7f00000022c0)="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", 0x1000}], 0x2, &(0x7f0000001300)="5f6eb5d6b4e4ffd9d028ed0de67d7dad700a07f830f2a4f4c6b526d3d3be2ddf802432fe76ed22290a9c6838e7d9e0769edb37426c570a1507f12d1c39c885738a32af1196047d967a9363cb5547609e62db2fb0cf03863c45c80bf826053204cd10404860292d2d8f0a43a02c9440c126e2584b77b0b238", 0x78, 0x2400c000}, 0x1) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT=r2], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000000034f0000000000000bfa2000000000000000008000000b704000000000000850000005900000095000000000000000000006faa7aeb0f2fd68b86d54f151e40bc61f6c6187e59706a3b8baef64129df2032870a5a8bcf6066ce0f091e23c37bb81cf445bf70b1aab48bef0407396d07241f7f541f48d533dfd482cfcc683ee96234c97868d70566659955db329fd247147ecc0de6c267adfb6e7227b630ef76df66b579536b2da325e482b37d7b8301646e4ed85d75ef11a16256821fae97054298c85525a15f56ec73ef"], 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) accept$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x4e20, 0x2fe4, 0x4e21, 0x4, 0x2, 0xa0, 0x80, 0x67}, {0x80, 0x8, 0x7, 0x6, 0x10000, 0x3, 0x6, 0x800}, {0xf7, 0x100000001, 0x8c7, 0x9}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3507, 0x0, 0x3, 0x6, 0x7ff, 0x3, 0x2}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001780)={&(0x7f00000017c0)='xprtrdma_cb_setup\x00', 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 1.950131089s ago: executing program 1 (id=558): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) syz_io_uring_setup(0x4766, 0x0, &(0x7f0000000140), 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f00000001c0)=r8, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1312f}, [@IFLA_PHYS_PORT_ID={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000002340)=[@in={0x2, 0x4e23, @local}], 0x10) process_vm_writev(0x0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/184, 0xb8}, {&(0x7f00000011c0)=""/174, 0xae}, {&(0x7f0000001280)=""/129, 0x81}], 0x6, &(0x7f00000016c0)=[{&(0x7f00000013c0)=""/218, 0xda}, {&(0x7f00000014c0)=""/210, 0xd2}, {&(0x7f00000015c0)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x4, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1.925006911s ago: executing program 2 (id=559): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000010c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0xfc, 0xfa, 0x2, 0x1, 0x9, 0x5, 0x1, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001100)=0x8, 0x4) recvmmsg(r0, &(0x7f0000008b00)=[{{&(0x7f0000001140)=@sco={0x1f, @none}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000011c0)=""/211, 0xd3}], 0x1, &(0x7f0000001300)=""/192, 0xc0}, 0xe214}, {{&(0x7f00000013c0)=@hci, 0x80, &(0x7f0000002500)=[{&(0x7f0000001440)=""/13, 0xd}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/100, 0x64}], 0x3}, 0x6}, {{&(0x7f0000002540)=@isdn, 0x80, &(0x7f0000003a40)=[{&(0x7f00000025c0)=""/95, 0x5f}, {&(0x7f0000008cc0)=""/35, 0x23}, {&(0x7f0000002680)=""/13, 0xd}, {&(0x7f00000026c0)=""/222, 0xde}, {&(0x7f00000027c0)=""/165, 0xa5}, {&(0x7f0000002880)=""/199, 0xc7}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/175, 0xaf}], 0x8, &(0x7f0000003ac0)=""/4, 0x4}, 0x2}, {{&(0x7f0000003b00)=@pptp, 0x80, &(0x7f0000005040)=[{&(0x7f0000003b80)=""/220, 0xdc}, {&(0x7f0000003c80)=""/231, 0xe7}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/144, 0x90}, {&(0x7f0000004e40)=""/230, 0xe6}, {&(0x7f0000004f40)=""/233, 0xe9}], 0x6, &(0x7f00000050c0)=""/24, 0x18}, 0x400}, {{&(0x7f0000005100)=@ieee802154, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005180)=""/239, 0xef}, {&(0x7f0000005280)=""/170, 0xaa}, {&(0x7f0000005340)=""/82, 0x52}], 0x3, &(0x7f0000005400)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000006400)=@isdn, 0x80, &(0x7f0000008800)=[{&(0x7f0000006480)=""/229, 0xe5}, {&(0x7f0000006580)=""/148, 0x94}, {&(0x7f0000006640)=""/4096, 0x1000}, {&(0x7f0000007640)=""/3, 0x3}, {&(0x7f0000007680)=""/4096, 0x1000}, {&(0x7f0000008680)=""/156, 0x9c}, {&(0x7f0000008740)=""/187, 0xbb}], 0x7, &(0x7f0000008880)=""/108, 0x6c}, 0x5}, {{&(0x7f0000008900)=@nfc, 0x80, &(0x7f0000008a40)=[{&(0x7f0000008980)=""/132, 0x84}], 0x1, &(0x7f0000008a80)=""/119, 0x77}, 0x357}], 0x7, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x6, 0x3}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x80000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f00000000c0)={{r2}, "143bd851645546da5d8ef77311edd42870cedf9cd11e70d599978d588facffb8c6bf78d25cd4a52a061e0d5c33467c68c3ca8b95891b940785893b9a4d78d31621e3ecea7adf2fb2c63775d8b5be1d6bd8dfdd7bd2cd16b4c9976fd43733676c5dd36df40efaa1c00dc671c1ab339061a0f7f1ea3701bcb7ad0c4a3d182ef0d268af574d1cc0745196b7a7be74ace948264cef131690daa9f4e50f7aeeb11f5ab1fb0604081a6eeb3f4a43bc586e7b3761dfe1e603d7dfe0bf5bf86d582afa4aed7dfbe33ed3e67f211dab2dc7aabb755141da9dfed645fbfae676f5f4270739ef6ca63b6756170a5af9cd64de19599619a584a4cfb7bcc88aeab35e2bd3c47ee287501ac48a9221aa24a0a0c2c578e0075795a92dc263a978f0b37de657afa0d0496ae1c7d3762716cefe979350c8587d087f3045258eab47656ad916a92f363439c889d17ba45ba37886fe82e66d2297e98652ad8e3a8e94c1c0142b2e470aa622b46f9ee3792f92d38476dc415ef75b1a6cf7a674bd12bc6069dcfca58ed956cc11b73c632f43af1ccd3f205b14583a972abf4ae665d1a1b609bb290ebeccaa41b938ea3712ee84cdc52139e4068a4e6a0940696931b7c0d6e775f8582ebd1227e39c3aeba6c2e9a8e53842fca6f88a52e2a19712bd81748d3f1764931ce952b252302015d3da7f3f24a0ea8cd287cd929a17c5130d2f5b41c64f8ffa9dcecbb121ffec593f667662c9e7af775399e126a820438c11d4e90e672fd7b9e3db975bd8b96c3865347cc0725bea35717f198f7f30f978afbfe5b42649ab19f2ca6f9a8fa78658dd5734e69a9cfcecf158128a496b61540804caba2cd06887a5945e703beba7f469971c8c34d101ff56b8d886be868e0eb813c6202c1323dbfa24b7d3ecc9cc4b9fc4319bfa03b8780e52a3e1629ad3d06ab4cceab71ab8f471353b2682a49e79982c08178ebf79477a97ab88bd8b0600ebdc86f3a2fc54a051635dbb5f183a0b2a3e7d329892a888b9cfb403121b9df7a253cf33e6fe6733ce0ea7e2a0fe620c6353391c4bb4c34edc423542c568c1fabfc7bf8eb9125209e78482d397a23233fe4c7a9ffe1fbe0b31ffadad9724d7cc39fec16fd02112a9c24016dc09e6f4290c32f2953b2fda932e341d71f8d78fb1345f1af2b66682f16e61ebbfcae68710830ab8b318056205af0b6ff43f5f5f43216841e745c66fc16ad4df63a50df6f375b3296b5bef95e06833f3f41969ad0b9ee187d0091b29b1a02702436785590436cfe2c5b7bf63eb33782d360431ee5af7e6299c7511ace8af428b6c6b3315772c0e2d53e939003916081fc2793032d8082deec92bb9eec15221b960f75b6e7f2f7eb00a6a7e3eb398ac7ecab3058cf81eb8dd4da4943737610f9cc6bb4e7fcd3a526f9c7306597ba009a6d2a2eae5c8de050943d775c2821b8684ee7ab09fd3e9449585b0f3f7589435ee8c14000c64ebbf236114f677edc944279149d10f7d8f23a7a7a7121db8a24d93f97ea0f9b1ab81c031aca0c2f67d81e76fa118ed638cb39f3f93a0f355793bf386d790fa943fde4c7f03a8ff00d47bbc91f42cb99ea997cb0bcff43ec25a4cfa8784e89a08c75ec1909b33a879bc0007c4ad85a2133f1aa2fa2bf3519b30b9b6817460fe09c41c83080f63d955b6a312bdde8b8accb22bcd7f3871fd9e40c2cdd4d8cc871d7cf6c85a2351c1a6cd75785aad20249b6f25b9239a2db9457a2ba777e686692793f69fdc1d8d5a38d84f806a9380502cbc4f54d8505d0d458905f1fe608e1fe982073c26b72cfbcab1c630287640647ef4e71c980351bd3d19c60f417a81b08bb06f373782049348bcf2f14ea44f0b36a269f1bbf3bc7e30bd7e4839ade6c9b2d15e568da50e45ecc7493033f8e1ad5c05e59d0ce570ef9e38b2c3add86213ac2b4c425952e6aadad9fc0f8b2809c4f9e1b97d4a9ec1b431ff812853b5cbf9f29d6a079b2de29e00037129046e7812a73bb9f4fdbf75c7d7add972009b3d37d673590d5860aee5bffc1c788068fb7181137cd09c0e726888612698521d3eceab34f413138aa73368721f2572e2cebffdd0a5622449b9322952b96992c35b2cc37df7f6c23ec4de596c7c6e0ffd408ba0f675bc569c81798eb00586859c82db4712e6ebc9e9fd45bd8814715c3276064bf7af5a2660b86511d3d088a958a9196cabe3b04752f113105ed327079ce900e00a6079a2b6c0b82bf53abca55331482aee80b695502bf3df40594403882cb3040541fbca94ff8ad1f56d1bd21ddea98b610e287582a8f30a25bda13e5d7836fcf0c0d1f24c493e3e10c888248b346eafb8051a914016af7d7527137125c54988164412aeae4b9b404d966aa7a5672abd28fbeba09d816c44589548131988a0c3891399a1f954045efbf0a250106290b05f5ffcd3450d723d031db78c7fd6dc7743ffffe308c86a8db46da7aa5b7cd7875c9236fd57f232ee295a7e1617666f6bdd1ff122b58f5f0f1322fee270fb494fbd7a7eccba75d72f32c3c25710264f8e73dfab233be79b857f55e94a29ba938242bf0a7e77215e33874c2b36ca7d45899265064a740c368e3b054a0d8d061093d7a93d973010f9907b76a55026a45d0479425807f35e717ce43158a591a815360b4168b2f68fca3b9825969212815c9e727da72bc740e50dd134fe1bbf0e04e66c28f853f7e092fb3001162d73976b1119a9c10e4ebf476cfbbd60c058ee781ae76cd2b8bdf337628a7dc9628952c42fa2c608d1118d20a4f71c4221762c34cc10cc6ceb87a32edd5a0b7bcb59d45b726adda99b95f93e72be2b716d5878c979e2ca9b2cc5a7c96efedd7115226d231241508ff5731ecae0c79b5a19544f3ce2c5eb7752d09b4f5c2b8ca266dee17c5ccc8d178c3e23fe3855ca16dfa3dfd2848287f236cb6e4f0da5a5c8cc18e9b76428a4e45438aa4bb0ecf0deee91f640c2808827450f5366a30ba915484e18a706099400d918a99faa9502fb41d301ec70eb650c4204381cf991568e8a1b97f30ce56667c86a5ba19d0c21cfee3b2aee088122c5fa1dda5044e0f83b9a04c0ee0e47e6caae14af0c8836eda76a5fbcc15991cf3f1239419f88c63fc1e9ed0bf37d5ce23667b747c52dd0a650e74132dd253ecb3b8b7904974561985aa099ad29258ce2beb934c6e13fa6e32f0600c8841477856feab14476b499d29c9633a101dfbef5f9497860e817046984167d4d2a4c0e2df02d77df63237610af74a2f513c6f55e8c70a7d4f94b4ccddcb3c96e92dcbcc8605c9ab06001560d5795b67f561583826afbff36fb037b4d502348f07013f65ea23b466a99750b6b07f65500611ee172aaddd56e6279c5098c8543976764818760ba4ff0d9d16e58670c67228f5f509689472a9fbe9c4f7ba0b745af1a35ccf0e5dfeac88e28ea3757996c80b5806d876d390653698b492b06c8a11454c6b8847dfabf0d3f87fedb3dcd0ebdc03b9cead63270abbe84ba1ee452910241ffbfc4942cf781835d53663963689dd04fa3e5f702cb5f12687a60b31aae9d94964d8536b699c7c11140bd11a39e6bd99dbd3993bda9f9b07172fa93f585abbce84b90adb63dafc37295cecc0e69417ccd1216fe02ba97845a3fb83126a1d7c1239262491314d6b25456c798368825e1fcba6564f655d9221f2dc77aaf0e7ff939601faf30a2c8a4fae0ec6373906c02b2638653155a114b611166845b4591e3260958c57b7824cb8e05686f6b66c0f434f198139edd4d282f9c84490aeb3aa612e743cc55b679ad64411847b9a0fd1342dab0441d8a35797b19c826e98fac42350895cc7c8d6cf674355f7354e1481b5d5ab85e96a45eb8d589fa1c11cefb2daca0a82dda6b8ca450da48a9ffea850f2766278cfe88981f8f7e2255748f56a6527168e014dd1ca3f261b5fbb7da9dacdb7c18334a65a54ff8fee727705f60c56a6dfd4bcdff488176b133e38000792918ca82f764fe02dd9319e5b50d404667ba994da2780751dde6f29a58cbd4cbfc4e05511b7ed9f515593785ce98fe0c395881294f163acc8dbcf1ca5ead510f5eb72e5a6827918adfa9636503e0c0bbb910df54b3cbf4bd34c171c1da27505857d98495c96c50726f175ce21c39daf89cb0fd52f4ad4f3d4f7e3cf31aee8a424f2a94523ecb8bb17d28b1923c90a911100aa07cec8b8823aa85e620bf7beaf0cb24a8b373a1ebf0e6bc7dc2e4b6ec49ac9ce4bb73ad867d30262df10784345e5b7d4329f0577a2928f4cc7b00efae04bbdc184b0776c716c109c6d5bbc1f544d714d9dea2e76846a8ed1e677e9ccc2e636460fa12f358a52c4ed33cb5362e209b61554330bc78becc3b95968675834278e8dc5eafeee6815f30fa53481eab11950aa090506ed719ba5746a6b5066968614ad33b07b4469b07561649296d04d7aaf69215e7f90feb3d00b684bfe4590df7aa48db10a6d755fd75772f736c213c89cb27dd576d627817747aa3e77cfe117cea3bcea9de4203c6c6dff418a45ebbf5561661484a86725c7c46b7a3286d847bb04a4382e0942fac5e151405cdfdabc47490f391469cd485bbeb6b7c040ccd17d47c6d2eecc6b67eec24ed2d4a76e17d9e35f85a50fbafacccab66fbf2beda7042c00f7ea6d1288d6a0d1334a1ecc246958d5c6991ac4192dad2ecbe4b6e3779dfa9a65b30535fbadd4c91bc5fe4e88bbe1dbe90b752107ab649f04e83315bcc3b0a821e9b491d0fa7843f9670fa926ade10695d38870610de524fc7d7755163077380a42d8a7b0c1b0d415d8fa41544de6207866d599593063e3eb988cdc94217f4dde3e7419062ef349a04c05d8226c12d40400ea9b4e8165a2d3cb4b289f72219c9565ebe3f5e0a0ed36ebb47fb5f823c574d83d3575cfe4bad8d16b19714778066778316142e4e46a564f437cc3baa0ab36b146a74d80fc318f5c589b6bca3c944bf8604d096f67cc692cd5d64a79c6a46d97f5e36cddace4126084313927af02aa5a98e4a2ee9c0c55486340e050594fedb0a584e503ffc49a3deb3fdcde6117ae7f1b556c678fb9167a83b395c21931d4846203a1b38a03048a8a891857079906c17348237a8a7507582e28cd90f65fbd999c57212db22842e4474b56f822917e0254e490fd6b30e10bc1b4c653de615680c7332682a828bdd2abe077aa5d874fadf1286e46743f374e8a8682b975b249a5ba50eccf885ba0f8703d56b0320dc2f279009e5e369a34be8c5489397b36a382d787897a5b0c3dad824a84533be430b931edbad7347741b91ee5b8ea68c675f876f5415e4d20589bd022f7684851b59426967e9503f378417021282e48121b121fe1b45109a644291dfda4fe36a14241b8225fcaccfe6e584c3386aa8dc39742c1bebc674a063eec20ab0bf4f4917df6f3904ac65530216a08a77725edaa3c084c53b12b2e477967476530ed88ec1090efc9f264025ce7bbf89262fba68d4e168c6e14fe20ea342345d53cf9a1fe4a1abc152dd1fef57251a07ba4bfddf92a98c66e023e2c372597ef4952c0fe34145bc6b2e10b5bc3eebc2124ac69864692b4def8d3d2d589177a64375a4351a79bfe379b5b550371b2b0a1a6db47b6c7e14b72da0e73732317bc039294f06185898c3a98594a4e60e537eee6986a73a44b16529b2e1ebb101fde85b307282836f4ea118d243497ed6c6e74029f0a3c4c62a02f7527e447d7cec37a0f9359caed77f70615d2554e30920898c3f5c8b3ab897f873df23485a5dfd961cd7b0ea0e54"}) 1.866030757s ago: executing program 4 (id=560): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@oldalloc, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@oldalloc, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r4 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r3, r4) r5 = getegid() statx(r0, &(0x7f00000003c0)='\x00', 0x6000, 0x8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x0, &(0x7f0000000600)) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x1}, [{0x2, 0x5, r1}], {0x4, 0x3}, [{0x8, 0x0, r4}, {0x8, 0x2, r5}, {0x8, 0x3, r6}, {}], {0x10, 0x3}, {0x20, 0x2}}, 0x4c, 0x1) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000700)={[{@session={'session', 0x3d, 0xe}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@unhide}, {@uid}, {@check_strict}, {@mode={'mode', 0x3d, 0x3ff}}]}, 0x1, 0x550, &(0x7f0000000d80)="$eJzs3d9u01YcwPGf+2dUYWPTNiFUFTiUTSpSCU4CQRFXnnOSGhw7sh3UXqGKpqgihYkyae3VuEGbtD0Et3uIPcLeBO0RmGwnbdrmD4Um6dj3E23nxD4+53dM5J/cxLYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx7LJp5gxxHa+xqvqzy4FfG7C+09+NQ8WAcUWM+D+Zm5NL6aJL3x6svhj/b1EW0ncLMhcXc7J3/uJX976ZmepsPyCgsdjZ3Xu63mo1X5xko+nRxTNuVe05oe/UrKpWTuirUrFo3lqphKriuDpcCyNdU3agrcgP1JJ9Q+VKpYLS2TW/4VXLlqs7C+/ezJtmUd3P1rUVhL536342tFcc13W8atImXh23uRt/EB84kYq0VVNqc6vVLCilzg8KMm6UGzaTuFF+WKO8mc/ncvl8rnindOeuac4cW2AeIe0W74z0k2zOTP5Di8k6zcM38FGm2vlfXHHEk4asiur5sqUsgfhS67O+rZP/v7+l98f4rMe43fm/k+UvHayelyT/X0nfXemX//vEMr7XjuzKnjyVdWlJS5ryYuIRjfdVFS2eOBKKL47UxEqWqPYSJSUpSlFMeSQrUpFQlFTEEVe0hLImoUSik0+ULYFosSQSXwJRsiS23BAlOSlJSQqiREtW1sSXhnhSlbJYSS+bspXs90LP6PaljXIDJrLfU35Ao5Pk/3NxtjePb0L+/7875SM48OHedfJ/f7PjiwYAAAAAAIyCkfz13UhO8y8ntYrjanPSYQEAAAAAgFOUfPO/EBfJ1/yXxeD8HwAAAACAT42RXGNniEhGrqa1zpVQ/BEAAAAAAIBPRPL9/5W4yMS1q2Jw/g8AAAAAwKfm16H32A/r54y//pEgmDVe1Ve/M7atuJ21PZ1uN320x6gyb1xod5IUxZn2O1svGO27X+7fBPNtu9jsF8fnyVLDME4hAPldrqVtrm2k5UZnTTrbTMVxddb23Xs5sawLU5FejX56tvWzJNP/zatdMGRzq9XMPn7e2khieRX38mq7fQPFY/dRHBDLy+R+C8k1Fz33/GxyIUY6rvFLOq7ZPf+pdPOpE4z5WhbTNouZtMwcnv9cPGYu22/2mTSK3JGZ97x75MAorqdtri9dT4seUeT7RhEPt9Vq5ruj+KB98R5RFIbti0InitmD4U8SBQBMyuaQLGQcT/wfcJTrm907o5xKdn8tS2mbpfnkwDoz3+OIbg47opsfmdf/nD36DKR+OTYe948jWfVNvMGbvuOGbt6Id+H0y+0f5eLO7t7Nre31J80nzWf5fKFo3jbNO3mZTabRLsg9AIAehj9jZ2gL4/aQs+qv939SkJXH8lxasiHLydUGyS8OunutftnuNdP1M4TlIWetB21zsjzkrC7T9aCX929bGMO/BAAA47PYOw+fKP8vDznvPpzLB58dd+dyAAAwGjp4e69drT/KlUo5K1rRKvDtBypwylWtHC/Sgb1ieVWt6oEf+bbvxpWHTlmHKmzU634QqYofqLofOqvJk99V+9Hvoa5ZXuTYYd3VVqiV7XuRZUeq7IS2qjd+cJ1wRQfxxp1nDNpW5PieCv1GYOusUqHWXQ2dsvYip+LEVU/VA6dmBWvqoe82alqVdWgHTj3ykw73x3K8ih/UrMj5QrIT3M8AAJwlO7t7T9dbreaLEVYmPUcAAHAYWRoAAAAAAAAAAAAAAAAAAAAAgLNvHNf/Tb7yd/oUATkr8fwHK3NnI4wTVqZE5AyEMcKKMaqeJ31kAjBq/wYAAP//YbxJJw==") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='jbd2_end_commit\x00', r9, 0x0, 0x1000000100000}, 0xfffffffffffffee5) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7, 0x2a4, 0x8, 0x2, 0x4000000000000005}) ioctl$SG_BLKTRACETEARDOWN(r10, 0x1276, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) munlockall() 1.589414974s ago: executing program 0 (id=561): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r4 = inotify_init() mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x152, r4, 0x1d786000) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x2c, 0x11, 0x1, 0x70bd28, 0x1002000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x44, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r9, 0x400454cc, r10) 1.563089657s ago: executing program 1 (id=562): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") (fail_nth: 1) 995.648092ms ago: executing program 4 (id=563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 936.230418ms ago: executing program 4 (id=564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) syz_io_uring_setup(0x4766, 0x0, &(0x7f0000000140), 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f00000001c0)=r8, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1312f}, [@IFLA_PHYS_PORT_ID={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000002340)=[@in={0x2, 0x4e23, @local}], 0x10) r10 = getpgid(0xffffffffffffffff) process_vm_writev(r10, &(0x7f0000001340)=[{&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/184, 0xb8}, {&(0x7f00000011c0)=""/174, 0xae}, {&(0x7f0000001280)=""/129, 0x81}], 0x6, &(0x7f00000016c0)=[{&(0x7f00000013c0)=""/218, 0xda}, {&(0x7f00000014c0)=""/210, 0xd2}, {&(0x7f00000015c0)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x4, 0x0) 870.176255ms ago: executing program 3 (id=565): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrandom(&(0x7f0000000380)=""/175, 0xaf, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r7, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000021c0)="1eb228", 0x3}], 0x1, &(0x7f0000001b00)=ANY=[@ANYBLOB="10000000000000000151230004000000"], 0x10}}], 0x2, 0x4000045) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000040)={@local, @empty, r1}, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab23bd7000fdffffff3200000008001701"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendto$packet(r0, &(0x7f0000000340)="600088a8", 0x5dc, 0x14008b00, &(0x7f0000000200)={0x11, 0x86dd, r1, 0x1, 0x97, 0x6, @multicast}, 0x14) 789.282143ms ago: executing program 3 (id=566): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000380)="084e86dbca1ca85362fb835c6fd5948b2dd9b6804bb70f8878e514734fca76c52df9ed2583ee285bb78122e067f241b74ff89134a03f528ea812d8a17e22e7aae832f482c5f430d982fc642df7078336c6a44a3ae9f8583d3e85da7a2e0027d0d77cdcf36a584acd3ee65e38e903a37403fe0c38ff8911bb213badad6c7e641aeaf77f14fa988c3c424d958f27a3ea8d3656dbe0d8a2b5643ae11a5c18919c3e64", 0xa1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r2}, &(0x7f0000000fc0), &(0x7f0000001000)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="537f419a132070776935f7c03f4fb1c38ad576389c56bc49c6cd3214cb671819beb89d9a5fbf4fdb60be2af881bd8dce3b4e62a3132f96db45b75112a10f834c6e9011bc9ee33c7971e26aaed0064532ce46cd72b9e407521dac7f55d04d91398135bc063c55f7e2efe31d888b776a4d088a0068d3faf0aeeabb6c079c5faf4b4391c8", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x3}]}}, &(0x7f0000000900)=""/252, 0x26, 0xfc, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 779.496094ms ago: executing program 4 (id=567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) socket$inet6(0xa, 0x805, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xec, r7, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xec}, 0x1, 0x0, 0x0, 0x24004080}, 0x810) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='keyring\x00', 0x0, &(0x7f0000000200)="0100000002", 0x5, r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r1, 0x7, 0x0, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) 769.978795ms ago: executing program 2 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000240)={[{@dax_inode}, {@jqfmt_vfsv0}], [{@seclabel}]}, 0x1, 0x456, &(0x7f00000014c0)="$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") 709.798471ms ago: executing program 0 (id=569): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000048000)=0x1, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 649.149676ms ago: executing program 2 (id=570): ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x100, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r3, 0x402, 0x8000003d) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000b00)={0xcc, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x292}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000c0}, 0x410) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000880)={[{@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@noquota, 0x0}, {@data_journal}, {@stripe={'stripe', 0x3d, 0xc3}}, {@i_version}, {@nouid32}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000005, 0x50032, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r5, @ANYRES32], 0x48) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r6}, 0x38) 611.78432ms ago: executing program 0 (id=571): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) socketpair(0x2, 0xa, 0xfffffffe, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x65, 0x3ff}, 0xb, 0x8000, 0xb0f0, 0x2, 0x0, 0x0, 0x4}) shmctl$SHM_LOCK(0x0, 0xb) 574.724054ms ago: executing program 0 (id=572): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000680)="164ca29e1455eac54d2e4c93dcd2b51fc5c62f22c93893d04dbbc21fe781744c40220a3faa01a99b382d35ecac3f4a58c8f05dac1dd2af3fb16f0454db50f6f50797b0063dad470e6e731a2f1d9c0a8794f0f3d8eae48f65bdd4ade46934d19e459068cc90e89e47e67af7c07f7b3a9533e77433d7250a7228a5e4ab897165262d3f9902e2dd7da04001da9bf37b86557b3700449d1501e85ed1b172", 0x9c}, {&(0x7f0000000340)="a3c14a2ea7cd5c60891c30e7cd689a04924d1243a8faeae79a8726c8f9cbf1ddeca10b13e683e64a85965f20fb65c7d6e05027e1edea8f5bad92ba36dbafb3d916", 0x41}, {&(0x7f00000008c0)="e4c5be491e840cc1056c0fa2d5d78ac1f05e12adb8ee0d96266ea59528f7e7ca23aadd498beaf72cfffc898367f2500491fdf4c09fe7ee885c1c7818b909aa0905e9b1c30fdabcdeb75b45335ae67dca7363d2cbc7c3f0d7cadc2904e1d1c6f82f06050aee07c4a09020dc3d9b0b864c6b2fe5b32b75205ade965566e3c075e83c18938f17c1e900198eb85add489bd07c838897e416100564eec79b3727d7225e23fbc1f10ea01c3f48a4ce79ce6357812bad45ae119043e737fa6a9f9342075b0ab0c7", 0xc4}], 0x4}], 0x1, 0x0) r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r2, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/43, @ANYRES32=0x0], 0x30}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@private0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) unshare(0x50030700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='bcache_invalidate\x00'}, 0x18) sync() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000900"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 383.156483ms ago: executing program 1 (id=573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000b80)='GPL\x00', 0xf, 0xdb, &(0x7f0000000bc0)=""/219, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d00)=[0xffffffffffffffff], &(0x7f0000000d40)=[{0x1, 0x1, 0xf, 0xc}, {0x3, 0x1, 0xd, 0x1}, {0x4, 0x5, 0xe, 0x3}], 0x10, 0x6a90}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000640)='afs_call\x00', r0, 0x0, 0xc}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x19) writev(r2, &(0x7f0000000000)=[{&(0x7f00000003c0)='!', 0x1}], 0x1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000280)="39c57682a4a9033cf50d7adfc4aca0a5ab1090fac66d130e2432415e90c1fddf4aacf64c74ef7e6d8b5b26068434fa7b8bc9b384cef4456f5394963e7e44fd4580a939e847fdabf3cb928097b8842b3ba7a2819fa7b3", 0x56}, {&(0x7f0000000300)="ffd31651c19f92514c7c0bd6a1013ed1b6d00f46543e95e92de0609fc110b36627dd5396fac9f2836180605486b024b717b3a16f38a4669b11ee76c4a41f0a30fa18c87034f69c91a4899a", 0x4b}, {&(0x7f0000000400)="594da9a674b52371e175731c", 0xc}, {&(0x7f0000000440)="a48fa4e7cb728020702e4295b541fda536fa5aa640bdc68409bdc5e3957a62646903370c2cec91e68ce52c426fd0e56ee0905eb691f439c0db28245fc76831bca449557d11476a24b2a2ed149a172f112d6f2abd94d2b62d43d745fae63e9ee1ebbf6e5ef0e3160bb3803df49cf70c52f04bdb11046aa0124c0d7608c47782b2ca51beb305c25be3a6f4146d55334cb6c0fdb37c80a4225de7bedacc4bae665e12ca4284d8b0bf706d6b967bb5631f3e0d933e4db67f", 0xb6}, {&(0x7f0000000500)="56e3eee2a572a66740de278747fa00e6cc7b1ca8648612faf5055248f1c881a4474d1b92e612ac3d8ab696dd3e720701b2eb3fb5bb67daafff9050e13e7f1cd2946199b05aef4486e70955c2b42d2243e78a1c1fb032c14a6fd5b4dbbe3ff265e441c2691cbc51165f59c046f619ec4a52fb45cb314df998cf476668dd", 0x7d}, {&(0x7f0000000580)="c8e5c7f1931b4aa2b345fbb9bb537960323c136520d478210fe21a6d37a5b9d5b1d6f023d0739dd045d4703d911b99a5b40be3c63b045dd3d734bb377b897eeb8e751f15ca1fbf17122220b882bdfec759b5b7ed4d464d097c1e2135e9c768121f8f9e291a07e520574af77e77edc0b32083504ff0586a9a08d7bd649c5d6016197c26767bd032", 0x87}, {&(0x7f0000000800)="80ab474067e5c802da3b5795f113f39b042d0c7bf47b72962fa17759cc814d8a9b90c735c5c724f18603d9e3bda0091d372e95c29d43a9556dde5d6f8c2cfafe636733001fae24e0dea587fbf182589dda6509096bb72d156a7cbf724275b096b20871b908e5e946c223bea36d76cd770d61b62fbd52e664e9bb90d66d03c9c9602ed8128af6196c6e620be528a3ef5cec6f6fdec55bd5a5594c14d67907c5f7ad8ced5815e718478c322176a9982beb152d041524576b97a05e299f6e600ae461a7c8621663", 0xc6}, {&(0x7f0000000900)="effa38005076c9b415f1429926ebb87c201f0aea965ff92f68a00e790a00342ab6592b35544b14dfc935a53098f81b6a8fedd244290966c7a07aa810e0540d181e83cec17d2742caea4b598d755cd0c651be0a6042d2a7a1c789f022e990e0eb63ed2d1ac935c90a40b3241d83a1f13c356a37f687e28df6e7ed063009d9250ad0fd9b7c206a47b5e2d0397d759112c283182e6331617f25216009f038334abdcf03d16d387b03dfa4d0f35d503204d8a8366ae0f82d64544bd4bd316f3e251aa5236b856c9319ab9faef5e41e58b31dc852506b0fad451fa19c9122ace5f2c50a7fd621", 0xe4}], 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000e80)={{{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000f80)=0xe8) setfsuid(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fff7fffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r6, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 349.874676ms ago: executing program 2 (id=574): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 239.653627ms ago: executing program 1 (id=575): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="10"}], 0x1}, 0x40080c0) sendmsg$inet6(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)}, 0x4048805) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$tipc(r0, 0x0, 0x1) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT=r2], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) accept$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x4e20, 0x2fe4, 0x4e21, 0x4, 0x2, 0xa0, 0x80, 0x67}, {0x80, 0x8, 0x7, 0x6, 0x10000, 0x3, 0x6, 0x800}, {0xf7, 0x100000001, 0x8c7, 0x9}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3507, 0x0, 0x3, 0x6, 0x7ff, 0x3, 0x2}}, 0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000050000000000000000001801000020646c2100000000002020207b1af8ffd700000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r4], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001780)={&(0x7f00000017c0)='xprtrdma_cb_setup\x00', r6, 0x0, 0x7fffffff}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 175.028223ms ago: executing program 3 (id=576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/11], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) 165.075424ms ago: executing program 2 (id=577): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@oldalloc, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@oldalloc, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="cc0200003100000425bd7000fddbdf25d2004b8090e985c10e41bc16c3afdfa48f5504b1be674defb8e523ca931fc47fca0761f089f12dee7390f97c1afc9919b1fe48e849ff8dfba904c78d93262ae3d33f0064ebf13671c70daa79cc0fe13e298fd364e11960d535c26097d135265e7942c4c5db720b1846c07b77ed5d954b166fd8b48c9e0f6ca471ddfcbb5f163f777786f7a3fbfa7733802ee8c4a951358fe78e1ef7f4dbe179e9502c3354b1cebef86cef6a5c32967a223845ba9396fced3f604240981e8f247067e1349e286bc6c8269ebede928867184559936b04001380000072f367e932248bbb5f84927c213d001b02bcf2d2bd5b90abb49e35b671d5cc9e8646e4ecaf6db0c14b26d2c061e2895d84e85ee2272e330857cf5816d5761dcdb9cbd0815823a9e2e08d59f3a8cac38f824e82d6a380359c14f0b327fd5004cfcb9ba79164d762baff997f2fd16507defa04591b820f92c60d5c85e8eab1cc5c87f6a6027e19ea6adec8a708b47f58365690e1f34b33cc001933f43099cbdb9dc2e741283e1400b300fc0000000000000000000000000000008b004180040037800c001496532832", @ANYRES32=r2, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r3 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r2, r3) r4 = getegid() statx(r0, &(0x7f00000003c0)='\x00', 0x6000, 0x8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000600)=[0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x1}, [], {0x4, 0x3}, [{0x8, 0x0, r3}, {0x8, 0x2, r4}, {0x8, 0x3, r5}, {0x8, 0x0, r6}], {0x10, 0x3}, {0x20, 0x2}}, 0x44, 0x1) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000700)={[{@session={'session', 0x3d, 0xe}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@unhide}, {@uid}, {@check_strict}, {@mode={'mode', 0x3d, 0x3ff}}]}, 0x1, 0x550, &(0x7f0000000d80)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='jbd2_end_commit\x00', r9, 0x0, 0x1000000100000}, 0xfffffffffffffee5) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7, 0x2a4, 0x8, 0x2, 0x4000000000000005}) ioctl$SG_BLKTRACETEARDOWN(r10, 0x1276, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) munlockall() 67.293004ms ago: executing program 3 (id=578): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000048000)=0x1, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 29.037397ms ago: executing program 4 (id=579): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000010c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0xfc, 0xfa, 0x2, 0x1, 0x9, 0x5, 0x1, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001100)=0x8, 0x4) recvmmsg(r0, &(0x7f0000008b00)=[{{&(0x7f0000001140)=@sco={0x1f, @none}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000011c0)=""/211, 0xd3}], 0x1, &(0x7f0000001300)=""/192, 0xc0}, 0xe214}, {{&(0x7f00000013c0)=@hci, 0x80, &(0x7f0000002500)=[{&(0x7f0000001440)=""/13, 0xd}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/100, 0x64}], 0x3}, 0x6}, {{&(0x7f0000002540)=@isdn, 0x80, &(0x7f0000003a40)=[{&(0x7f00000025c0)=""/95, 0x5f}, {&(0x7f0000008cc0)=""/35, 0x23}, {&(0x7f0000002680)=""/13, 0xd}, {&(0x7f00000026c0)=""/222, 0xde}, {&(0x7f00000027c0)=""/165, 0xa5}, {&(0x7f0000002880)=""/199, 0xc7}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/175, 0xaf}], 0x8, &(0x7f0000003ac0)=""/4, 0x4}, 0x2}, {{&(0x7f0000003b00)=@pptp, 0x80, &(0x7f0000005040)=[{&(0x7f0000003b80)=""/220, 0xdc}, {&(0x7f0000003c80)=""/231, 0xe7}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/144, 0x90}, {&(0x7f0000004e40)=""/230, 0xe6}, {&(0x7f0000004f40)=""/233, 0xe9}], 0x6, &(0x7f00000050c0)=""/24, 0x18}, 0x400}, {{&(0x7f0000005100)=@ieee802154, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005180)=""/239, 0xef}, {&(0x7f0000005280)=""/170, 0xaa}, {&(0x7f0000005340)=""/82, 0x52}], 0x3, &(0x7f0000005400)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000006400)=@isdn, 0x80, &(0x7f0000008800)=[{&(0x7f0000006480)=""/229, 0xe5}, {&(0x7f0000006580)=""/148, 0x94}, {&(0x7f0000006640)=""/4096, 0x1000}, {&(0x7f0000007640)=""/3, 0x3}, {&(0x7f0000007680)=""/4096, 0x1000}, {&(0x7f0000008680)=""/156, 0x9c}, {&(0x7f0000008740)=""/187, 0xbb}], 0x7, &(0x7f0000008880)=""/108, 0x6c}, 0x5}, {{&(0x7f0000008900)=@nfc, 0x80, &(0x7f0000008a40)=[{&(0x7f0000008980)=""/132, 0x84}], 0x1, &(0x7f0000008a80)=""/119, 0x77}, 0x357}], 0x7, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x6, 0x3}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x80000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f00000000c0)={{r2}, "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"}) 0s ago: executing program 3 (id=580): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socketpair(0x23, 0x1, 0x9, &(0x7f0000000080)) r1 = epoll_create1(0x80000) fcntl$setpipe(r1, 0x407, 0xfffffffffffffef1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="05", 0x1}, {0x0}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="300000000000000084000000010000000200000041"], 0x30}, 0x0) r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000580)='cpu<-0||!') setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) kernel console output (not intermixed with test programs): pid 4149) Use of int in max_burst socket option. [ 52.865994][ T4149] Use struct sctp_assoc_value instead [ 52.890158][ T4149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.925784][ T4152] FAULT_INJECTION: forcing a failure. [ 52.925784][ T4152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.939023][ T4152] CPU: 1 UID: 0 PID: 4152 Comm: syz.3.224 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.939099][ T4152] Tainted: [W]=WARN [ 52.939105][ T4152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.939116][ T4152] Call Trace: [ 52.939121][ T4152] [ 52.939127][ T4152] __dump_stack+0x1d/0x30 [ 52.939198][ T4152] dump_stack_lvl+0xe8/0x140 [ 52.939215][ T4152] dump_stack+0x15/0x1b [ 52.939230][ T4152] should_fail_ex+0x265/0x280 [ 52.939306][ T4152] should_fail+0xb/0x20 [ 52.939346][ T4152] should_fail_usercopy+0x1a/0x20 [ 52.939365][ T4152] _copy_to_user+0x20/0xa0 [ 52.939458][ T4152] simple_read_from_buffer+0xb5/0x130 [ 52.939479][ T4152] proc_fail_nth_read+0x10e/0x150 [ 52.939505][ T4152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.939591][ T4152] vfs_read+0x1a8/0x770 [ 52.939633][ T4152] ? __rcu_read_unlock+0x4f/0x70 [ 52.939697][ T4152] ? __fget_files+0x184/0x1c0 [ 52.939721][ T4152] ksys_read+0xda/0x1a0 [ 52.939741][ T4152] __x64_sys_read+0x40/0x50 [ 52.939762][ T4152] x64_sys_call+0x27c0/0x3000 [ 52.939825][ T4152] do_syscall_64+0xd2/0x200 [ 52.939847][ T4152] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.939867][ T4152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.939939][ T4152] RIP: 0033:0x7efe7aafd8dc [ 52.939964][ T4152] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.939980][ T4152] RSP: 002b:00007efe79567030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.940037][ T4152] RAX: ffffffffffffffda RBX: 00007efe7ad55fa0 RCX: 00007efe7aafd8dc [ 52.940048][ T4152] RDX: 000000000000000f RSI: 00007efe795670a0 RDI: 0000000000000004 [ 52.940059][ T4152] RBP: 00007efe79567090 R08: 0000000000000000 R09: 0000000000000000 [ 52.940069][ T4152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.940080][ T4152] R13: 00007efe7ad56038 R14: 00007efe7ad55fa0 R15: 00007ffdab8e96c8 [ 52.940097][ T4152] [ 53.155226][ T4154] loop3: detected capacity change from 0 to 512 [ 53.172196][ T4154] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 53.180249][ T4154] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.188703][ T4154] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.225: corrupted inode contents [ 53.200737][ T4154] EXT4-fs (loop3): Remounting filesystem read-only [ 53.207590][ T4154] EXT4-fs (loop3): 1 truncate cleaned up [ 53.213596][ T175] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.224217][ T175] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.234887][ T175] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 53.245457][ T4154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.269861][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.311391][ T4160] sctp: [Deprecated]: syz.3.227 (pid 4160) Use of int in max_burst socket option. [ 53.311391][ T4160] Use struct sctp_assoc_value instead [ 53.336068][ T4160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.379738][ T4163] netlink: 'syz.3.228': attribute type 10 has an invalid length. [ 53.390554][ T4163] bond0: (slave dummy0): Releasing backup interface [ 53.398351][ T4163] dummy0: left promiscuous mode [ 53.404765][ T4163] dummy0: entered promiscuous mode [ 53.410149][ T4163] team0: Port device dummy0 added [ 53.454335][ T4167] sch_tbf: peakrate 9 is lower than or equals to rate 6829859379779001161 ! [ 53.487745][ T4169] loop3: detected capacity change from 0 to 512 [ 53.495033][ T4169] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.501556][ T4169] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.508816][ T4169] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.517350][ T4169] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.532768][ T4169] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.231: Allocating blocks 41-42 which overlap fs metadata [ 53.546712][ T4169] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.231: Allocating blocks 41-42 which overlap fs metadata [ 53.560756][ T4169] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.231: Failed to acquire dquot type 1 [ 53.572217][ T4169] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 53.586916][ T4169] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.231: corrupted inode contents [ 53.599054][ T4169] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #12: comm syz.3.231: mark_inode_dirty error [ 53.610516][ T4169] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.231: corrupted inode contents [ 53.622654][ T4169] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.231: mark_inode_dirty error [ 53.634085][ T4169] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.231: corrupted inode contents [ 53.646143][ T4169] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 53.655056][ T4169] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.231: corrupted inode contents [ 53.667420][ T4169] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.231: mark_inode_dirty error [ 53.678754][ T4169] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 53.688183][ T4169] EXT4-fs (loop3): 1 truncate cleaned up [ 53.695415][ T4169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.719898][ T4169] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 53.724791][ T4175] loop4: detected capacity change from 0 to 512 [ 53.739006][ T4175] ext4: Unknown parameter 'oldalloc"data' [ 53.746496][ T4175] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 53.754288][ T4175] netlink: 224 bytes leftover after parsing attributes in process `syz.4.233'. [ 53.765893][ T4175] loop4: detected capacity change from 0 to 164 [ 53.772534][ T4175] iso9660: Bad value for 'uid' [ 53.777348][ T4175] iso9660: Bad value for 'uid' [ 53.830551][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.852506][ T4179] loop3: detected capacity change from 0 to 512 [ 53.873726][ T4179] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 53.882247][ T4179] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.889953][ T4179] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.235: corrupted inode contents [ 53.902114][ T4179] EXT4-fs (loop3): Remounting filesystem read-only [ 53.908807][ T4179] EXT4-fs (loop3): 1 truncate cleaned up [ 53.914267][ T4180] loop4: detected capacity change from 0 to 8192 [ 53.914717][ T175] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.931344][ T175] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.942598][ T175] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 54.001473][ T4186] loop3: detected capacity change from 0 to 512 [ 54.022768][ T4186] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 54.030932][ T4186] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.038808][ T4186] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.236: corrupted inode contents [ 54.050865][ T4186] EXT4-fs (loop3): Remounting filesystem read-only [ 54.057673][ T4186] EXT4-fs (loop3): 1 truncate cleaned up [ 54.063551][ T1650] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.074239][ T1650] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.084976][ T1650] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 54.118092][ T4190] netlink: 'syz.3.237': attribute type 10 has an invalid length. [ 54.134688][ T4190] netlink: 'syz.3.237': attribute type 10 has an invalid length. [ 54.142787][ T4190] dummy0: left promiscuous mode [ 54.148344][ T4190] team0: Port device dummy0 removed [ 54.155476][ T4190] dummy0: entered promiscuous mode [ 54.161510][ T4190] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 54.192406][ T4192] sctp: [Deprecated]: syz.3.238 (pid 4192) Use of int in max_burst socket option. [ 54.192406][ T4192] Use struct sctp_assoc_value instead [ 54.217396][ T4192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.260845][ T4195] netlink: 'syz.3.239': attribute type 10 has an invalid length. [ 54.276556][ T4195] bond0: (slave dummy0): Releasing backup interface [ 54.284368][ T4195] dummy0: left promiscuous mode [ 54.290651][ T4195] dummy0: entered promiscuous mode [ 54.296572][ T4195] team0: Port device dummy0 added [ 54.312605][ T175] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.320949][ T175] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.361339][ T175] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.369572][ T175] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.394440][ T4199] netlink: 'syz.0.241': attribute type 10 has an invalid length. [ 54.496912][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.508898][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.532144][ T4205] loop0: detected capacity change from 0 to 2048 [ 54.539488][ T4205] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 54.560373][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.579040][ T4203] loop1: detected capacity change from 0 to 164 [ 54.585627][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.585916][ T4203] iso9660: Bad value for 'uid' [ 54.598752][ T4203] iso9660: Bad value for 'uid' [ 54.671289][ T4211] FAULT_INJECTION: forcing a failure. [ 54.671289][ T4211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.684524][ T4211] CPU: 0 UID: 0 PID: 4211 Comm: syz.2.245 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.684561][ T4211] Tainted: [W]=WARN [ 54.684638][ T4211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.684654][ T4211] Call Trace: [ 54.684662][ T4211] [ 54.684671][ T4211] __dump_stack+0x1d/0x30 [ 54.684695][ T4211] dump_stack_lvl+0xe8/0x140 [ 54.684718][ T4211] dump_stack+0x15/0x1b [ 54.684739][ T4211] should_fail_ex+0x265/0x280 [ 54.684860][ T4211] should_fail+0xb/0x20 [ 54.684900][ T4211] should_fail_usercopy+0x1a/0x20 [ 54.684927][ T4211] _copy_from_user+0x1c/0xb0 [ 54.685025][ T4211] __sys_bpf+0x183/0x7c0 [ 54.685074][ T4211] __x64_sys_bpf+0x41/0x50 [ 54.685109][ T4211] x64_sys_call+0x2aee/0x3000 [ 54.685131][ T4211] do_syscall_64+0xd2/0x200 [ 54.685230][ T4211] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.685310][ T4211] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.685336][ T4211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.685364][ T4211] RIP: 0033:0x7fd86583eec9 [ 54.685378][ T4211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.685466][ T4211] RSP: 002b:00007fd8642a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.685491][ T4211] RAX: ffffffffffffffda RBX: 00007fd865a95fa0 RCX: 00007fd86583eec9 [ 54.685507][ T4211] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 54.685533][ T4211] RBP: 00007fd8642a7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.685549][ T4211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.685566][ T4211] R13: 00007fd865a96038 R14: 00007fd865a95fa0 R15: 00007ffdc300e438 [ 54.685590][ T4211] [ 54.900414][ T4215] loop4: detected capacity change from 0 to 512 [ 54.928566][ T4215] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 54.944472][ T4215] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.944705][ T4222] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.249'. [ 54.952572][ T4215] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.248: corrupted inode contents [ 54.972369][ T4215] EXT4-fs (loop4): Remounting filesystem read-only [ 54.979179][ T4215] EXT4-fs (loop4): 1 truncate cleaned up [ 54.985516][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.989577][ T4224] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.250'. [ 54.996083][ T52] __quota_error: 237 callbacks suppressed [ 54.996097][ T52] Quota error (device loop4): write_blk: dquota write failed [ 54.996110][ T52] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 55.028416][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.039146][ T52] Quota error (device loop4): write_blk: dquota write failed [ 55.046578][ T52] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 55.058796][ T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 55.069101][ T52] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 55.119953][ T4227] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.131013][ T52] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 55.171135][ T29] audit: type=1326 audit(1760232687.654:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d08a4eec9 code=0x7ffc0000 [ 55.194552][ T29] audit: type=1326 audit(1760232687.654:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d08a4eec9 code=0x7ffc0000 [ 55.217877][ T29] audit: type=1326 audit(1760232687.654:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d08a4eec9 code=0x7ffc0000 [ 55.241360][ T29] audit: type=1326 audit(1760232687.654:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d08a4eec9 code=0x7ffc0000 [ 55.272113][ T4227] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.342969][ T4227] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.373281][ T4235] dummy0: left promiscuous mode [ 55.389826][ T4235] team0: Port device dummy0 removed [ 55.410877][ T4235] dummy0: entered promiscuous mode [ 55.413592][ T4237] loop4: detected capacity change from 0 to 512 [ 55.420153][ T4235] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 55.442435][ T4227] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.491208][ T4237] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.511720][ T4241] sch_tbf: peakrate 9 is lower than or equals to rate 6829859379779001161 ! [ 55.552007][ T4237] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.256: invalid indirect mapped block 4294967295 (level 0) [ 55.589322][ T4237] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.256: invalid indirect mapped block 4294967295 (level 1) [ 55.611962][ T4245] FAULT_INJECTION: forcing a failure. [ 55.611962][ T4245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.625158][ T4245] CPU: 1 UID: 0 PID: 4245 Comm: syz.3.258 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.625264][ T4245] Tainted: [W]=WARN [ 55.625271][ T4245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 55.625284][ T4245] Call Trace: [ 55.625290][ T4245] [ 55.625298][ T4245] __dump_stack+0x1d/0x30 [ 55.625319][ T4245] dump_stack_lvl+0xe8/0x140 [ 55.625339][ T4245] dump_stack+0x15/0x1b [ 55.625361][ T4245] should_fail_ex+0x265/0x280 [ 55.625465][ T4245] should_fail+0xb/0x20 [ 55.625524][ T4245] should_fail_usercopy+0x1a/0x20 [ 55.625550][ T4245] _copy_from_user+0x1c/0xb0 [ 55.625576][ T4245] ucma_write+0xd9/0x250 [ 55.625606][ T4245] vfs_writev+0x406/0x8b0 [ 55.625659][ T4245] ? __pfx_ucma_write+0x10/0x10 [ 55.625694][ T4245] do_writev+0xe7/0x210 [ 55.625759][ T4245] __x64_sys_writev+0x45/0x50 [ 55.625787][ T4245] x64_sys_call+0x1e9a/0x3000 [ 55.625836][ T4245] do_syscall_64+0xd2/0x200 [ 55.625861][ T4245] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.625923][ T4245] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.625945][ T4245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.625966][ T4245] RIP: 0033:0x7efe7aafeec9 [ 55.625986][ T4245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.626007][ T4245] RSP: 002b:00007efe79567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 55.626046][ T4245] RAX: ffffffffffffffda RBX: 00007efe7ad55fa0 RCX: 00007efe7aafeec9 [ 55.626064][ T4245] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 55.626080][ T4245] RBP: 00007efe79567090 R08: 0000000000000000 R09: 0000000000000000 [ 55.626200][ T4245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.626229][ T4245] R13: 00007efe7ad56038 R14: 00007efe7ad55fa0 R15: 00007ffdab8e96c8 [ 55.626253][ T4245] [ 55.657065][ T4237] EXT4-fs (loop4): 1 orphan inode deleted [ 55.825880][ T4237] EXT4-fs (loop4): 1 truncate cleaned up [ 55.874505][ T4250] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.260'. [ 56.013625][ T4258] loop2: detected capacity change from 0 to 512 [ 56.020525][ T4258] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.038769][ T4248] loop3: detected capacity change from 0 to 164 [ 56.046935][ T4248] iso9660: Bad value for 'uid' [ 56.050322][ T4258] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.262: invalid indirect mapped block 4294967295 (level 0) [ 56.051766][ T4248] iso9660: Bad value for 'uid' [ 56.105750][ T4258] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.262: invalid indirect mapped block 4294967295 (level 1) [ 56.124382][ T4258] EXT4-fs (loop2): 1 orphan inode deleted [ 56.130206][ T4258] EXT4-fs (loop2): 1 truncate cleaned up [ 56.136815][ T4256] bond0: (slave dummy0): Releasing backup interface [ 56.144433][ T4256] dummy0: left promiscuous mode [ 56.152654][ T4256] dummy0: entered promiscuous mode [ 56.158238][ T4256] team0: Port device dummy0 added [ 56.242568][ T4261] loop0: detected capacity change from 0 to 512 [ 56.254104][ T4261] EXT4-fs: dax option not supported [ 56.297674][ T4272] bond0: (slave dummy0): Releasing backup interface [ 56.305472][ T4272] dummy0: left promiscuous mode [ 56.316686][ T4275] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.271'. [ 56.325072][ T4272] dummy0: entered promiscuous mode [ 56.332400][ T4272] team0: Port device dummy0 added [ 56.398319][ T4285] dummy0: left promiscuous mode [ 56.404630][ T4285] team0: Port device dummy0 removed [ 56.411936][ T4285] dummy0: entered promiscuous mode [ 56.418135][ T4285] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.460928][ T4293] loop0: detected capacity change from 0 to 512 [ 56.479667][ T4293] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.497534][ T4293] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.276: invalid indirect mapped block 4294967295 (level 0) [ 56.512206][ T4293] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.276: invalid indirect mapped block 4294967295 (level 1) [ 56.527068][ T4293] EXT4-fs (loop0): 1 orphan inode deleted [ 56.532896][ T4293] EXT4-fs (loop0): 1 truncate cleaned up [ 56.577183][ T4298] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.278'. [ 56.764881][ T4308] loop2: detected capacity change from 0 to 512 [ 56.772763][ T4308] ext4: Unknown parameter 'oldalloc"data' [ 56.782137][ T4308] netlink: 224 bytes leftover after parsing attributes in process `syz.2.282'. [ 56.791939][ T4309] loop0: detected capacity change from 0 to 8192 [ 56.889638][ T4314] bond0: (slave dummy0): Releasing backup interface [ 56.901756][ T4314] team0: Port device dummy0 added [ 56.940369][ T4316] loop2: detected capacity change from 0 to 512 [ 56.948290][ T4316] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.956015][ T4316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.963518][ T4316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.972017][ T4316] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.993428][ T4316] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.284: Allocating blocks 41-42 which overlap fs metadata [ 57.007722][ T4316] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.284: Failed to acquire dquot type 1 [ 57.019310][ T4316] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 57.033893][ T4316] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.284: corrupted inode contents [ 57.046013][ T4316] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.284: mark_inode_dirty error [ 57.057693][ T4316] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.284: corrupted inode contents [ 57.069680][ T4316] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.284: mark_inode_dirty error [ 57.081476][ T4316] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.284: corrupted inode contents [ 57.093694][ T4316] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 57.103414][ T4316] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.284: corrupted inode contents [ 57.113690][ T4320] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.285'. [ 57.115898][ T4316] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.284: mark_inode_dirty error [ 57.136165][ T4316] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 57.145724][ T4316] EXT4-fs (loop2): 1 truncate cleaned up [ 57.157685][ T4322] dummy0: left promiscuous mode [ 57.160681][ T4316] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 57.171484][ T4322] team0: Port device dummy0 removed [ 57.178805][ T4322] dummy0: entered promiscuous mode [ 57.184838][ T4322] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.242848][ T4326] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.267131][ T4330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 57.313059][ T4326] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.349904][ T4332] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.373097][ T4326] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.413712][ T4332] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.476564][ T4326] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.513143][ T4332] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.567106][ T4341] loop0: detected capacity change from 0 to 512 [ 57.584004][ T4341] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 57.593768][ T175] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.594039][ T4341] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.614175][ T4332] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.625633][ T4341] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.293: corrupted inode contents [ 57.637580][ T4341] EXT4-fs (loop0): Remounting filesystem read-only [ 57.644402][ T4341] EXT4-fs (loop0): 1 truncate cleaned up [ 57.650284][ T3458] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.660970][ T3458] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.671890][ T175] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.680187][ T175] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.701570][ T3458] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 57.718282][ T175] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.794923][ T175] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.809073][ T175] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.826749][ T4349] loop4: detected capacity change from 0 to 512 [ 57.841575][ T175] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.849902][ T175] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.854185][ T4349] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.890093][ T4351] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.296'. [ 57.920140][ T4349] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.295: invalid indirect mapped block 4294967295 (level 0) [ 57.947134][ T4349] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.295: invalid indirect mapped block 4294967295 (level 1) [ 57.962233][ T4349] EXT4-fs (loop4): 1 orphan inode deleted [ 57.968159][ T4349] EXT4-fs (loop4): 1 truncate cleaned up [ 57.980956][ T4358] validate_nla: 10 callbacks suppressed [ 57.980971][ T4358] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 58.033975][ T4358] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 58.045073][ T4347] loop0: detected capacity change from 0 to 512 [ 58.051924][ T4358] team0: Port device dummy0 removed [ 58.055253][ T4347] ext4: Unknown parameter 'oldalloc"data' [ 58.059739][ T4358] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.079860][ T4347] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 58.087586][ T4347] netlink: 224 bytes leftover after parsing attributes in process `syz.0.294'. [ 58.087650][ T4355] loop3: detected capacity change from 0 to 512 [ 58.088022][ T4355] ext4: Unknown parameter 'oldalloc"data' [ 58.129011][ T4355] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 58.130889][ T4347] loop0: detected capacity change from 0 to 164 [ 58.136735][ T4355] netlink: 224 bytes leftover after parsing attributes in process `syz.3.297'. [ 58.141427][ T4355] loop3: detected capacity change from 0 to 164 [ 58.147513][ T4347] iso9660: Bad value for 'uid' [ 58.163335][ T4347] iso9660: Bad value for 'uid' [ 58.167132][ T4355] iso9660: Bad value for 'uid' [ 58.173051][ T4355] iso9660: Bad value for 'uid' [ 58.197030][ T4364] loop2: detected capacity change from 0 to 512 [ 58.232924][ T4364] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.246453][ T4364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.257482][ T4364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.266135][ T4364] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.282226][ T4366] sctp: [Deprecated]: syz.0.301 (pid 4366) Use of int in max_burst socket option. [ 58.282226][ T4366] Use struct sctp_assoc_value instead [ 58.310749][ T4366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.330921][ T4371] loop3: detected capacity change from 0 to 512 [ 58.332605][ T4364] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.300: Allocating blocks 41-42 which overlap fs metadata [ 58.344924][ T4371] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.370971][ T4371] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.302: invalid indirect mapped block 4294967295 (level 0) [ 58.388371][ T4364] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.300: Allocating blocks 41-42 which overlap fs metadata [ 58.409662][ T4364] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.300: Failed to acquire dquot type 1 [ 58.421268][ T4371] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.302: invalid indirect mapped block 4294967295 (level 1) [ 58.435859][ T4364] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 58.451499][ T4371] EXT4-fs (loop3): 1 orphan inode deleted [ 58.457265][ T4371] EXT4-fs (loop3): 1 truncate cleaned up [ 58.463346][ T4364] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.300: corrupted inode contents [ 58.476020][ T4364] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.300: mark_inode_dirty error [ 58.488513][ T4364] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.300: corrupted inode contents [ 58.500854][ T4364] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.300: mark_inode_dirty error [ 58.514141][ T4364] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.300: corrupted inode contents [ 58.526317][ T4364] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 58.536766][ T4364] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.300: corrupted inode contents [ 58.548916][ T4364] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.300: mark_inode_dirty error [ 58.560613][ T4364] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 58.573401][ T4364] EXT4-fs (loop2): 1 truncate cleaned up [ 58.601319][ T4364] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.639441][ T4382] sctp: [Deprecated]: syz.3.305 (pid 4382) Use of int in max_burst socket option. [ 58.639441][ T4382] Use struct sctp_assoc_value instead [ 58.685494][ T4382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.758173][ T3458] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.781217][ T3458] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.798600][ T3458] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.814084][ T4389] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.841531][ T3458] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.897306][ T4393] loop1: detected capacity change from 0 to 512 [ 58.907508][ T4393] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 58.917722][ T4389] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.928334][ T4393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 58.948206][ T4393] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.956454][ T4393] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.309: bg 0: block 361: padding at end of block bitmap is not set [ 58.972321][ T4393] EXT4-fs (loop1): Remounting filesystem read-only [ 58.979011][ T4393] EXT4-fs (loop1): 1 truncate cleaned up [ 59.041007][ T4389] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.058749][ T4398] netlink: 'syz.4.310': attribute type 10 has an invalid length. [ 59.090016][ T4398] bond0: (slave dummy0): Releasing backup interface [ 59.097459][ T4398] dummy0: left promiscuous mode [ 59.109427][ T4400] netlink: 'syz.4.310': attribute type 10 has an invalid length. [ 59.127324][ T4398] dummy0: entered promiscuous mode [ 59.134916][ T4398] team0: Port device dummy0 added [ 59.143020][ T4389] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.165855][ T4400] dummy0: left promiscuous mode [ 59.172526][ T4400] team0: Port device dummy0 removed [ 59.179467][ T4400] dummy0: entered promiscuous mode [ 59.186204][ T4400] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 59.229719][ T1650] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.243301][ T1650] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.257274][ T1650] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.272827][ T1650] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.280916][ T4401] loop1: detected capacity change from 0 to 512 [ 59.286232][ T4408] loop4: detected capacity change from 0 to 512 [ 59.305941][ T4401] ext4: Unknown parameter 'oldalloc"data' [ 59.327974][ T4408] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.333093][ T4401] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 59.345869][ T4401] netlink: 224 bytes leftover after parsing attributes in process `syz.1.311'. [ 59.354180][ T4408] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.314: invalid indirect mapped block 4294967295 (level 0) [ 59.369225][ T4408] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.314: invalid indirect mapped block 4294967295 (level 1) [ 59.384412][ T4408] EXT4-fs (loop4): 1 orphan inode deleted [ 59.390178][ T4408] EXT4-fs (loop4): 1 truncate cleaned up [ 59.392574][ T4401] loop1: detected capacity change from 0 to 164 [ 59.405404][ T4401] iso9660: Bad value for 'uid' [ 59.410215][ T4401] iso9660: Bad value for 'uid' [ 59.441525][ T4412] loop0: detected capacity change from 0 to 512 [ 59.456517][ T4405] loop3: detected capacity change from 0 to 164 [ 59.472871][ T4412] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 59.481374][ T4405] iso9660: Bad value for 'uid' [ 59.486222][ T4405] iso9660: Bad value for 'uid' [ 59.489955][ T4412] EXT4-fs (loop0): orphan cleanup on readonly fs [ 59.504166][ T4412] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.315: corrupted inode contents [ 59.527172][ T4412] EXT4-fs (loop0): Remounting filesystem read-only [ 59.536522][ T4412] EXT4-fs (loop0): 1 truncate cleaned up [ 59.548051][ T52] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.558788][ T52] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.569670][ T52] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 59.626511][ T4414] loop4: detected capacity change from 0 to 2048 [ 59.653071][ T4414] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 59.664638][ T4423] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.684787][ T4427] loop3: detected capacity change from 0 to 512 [ 59.692560][ T4421] sch_tbf: peakrate 9 is lower than or equals to rate 6829859379779001161 ! [ 59.751922][ T4427] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 59.767989][ T4427] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.783030][ T4427] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.321: corrupted inode contents [ 59.810999][ T4425] loop2: detected capacity change from 0 to 512 [ 59.829460][ T4425] EXT4-fs: dax option not supported [ 59.838196][ T4423] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.856622][ T4427] EXT4-fs (loop3): Remounting filesystem read-only [ 59.879876][ T4427] EXT4-fs (loop3): 1 truncate cleaned up [ 59.885929][ T1650] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.896527][ T1650] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.913913][ T4443] loop2: detected capacity change from 0 to 512 [ 59.933147][ T4423] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.951150][ T4443] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.971520][ T1650] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 59.991475][ T4443] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.326: invalid indirect mapped block 4294967295 (level 0) [ 60.014322][ T4443] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.326: invalid indirect mapped block 4294967295 (level 1) [ 60.030927][ T4443] EXT4-fs (loop2): 1 orphan inode deleted [ 60.036821][ T4443] EXT4-fs (loop2): 1 truncate cleaned up [ 60.086889][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 60.086953][ T29] audit: type=1326 audit(1760232692.574:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 60.088105][ T4423] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.093198][ T29] audit: type=1326 audit(1760232692.574:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 60.126565][ T4440] loop1: detected capacity change from 0 to 512 [ 60.126899][ T4440] ext4: Unknown parameter 'oldalloc"data' [ 60.194063][ T29] audit: type=1326 audit(1760232692.674:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 60.217547][ T29] audit: type=1326 audit(1760232692.674:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 60.240916][ T29] audit: type=1326 audit(1760232692.674:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 60.264388][ T29] audit: type=1326 audit(1760232692.674:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 60.272076][ T4440] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 60.287847][ T29] audit: type=1326 audit(1760232692.674:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 60.295515][ T4440] netlink: 224 bytes leftover after parsing attributes in process `syz.1.325'. [ 60.327864][ T29] audit: type=1326 audit(1760232692.674:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 60.351389][ T29] audit: type=1326 audit(1760232692.674:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 60.378010][ T4440] loop1: detected capacity change from 0 to 164 [ 60.385998][ T4440] iso9660: Bad value for 'uid' [ 60.390782][ T4440] iso9660: Bad value for 'uid' [ 60.409132][ T4447] loop3: detected capacity change from 0 to 512 [ 60.418092][ T4447] ext4: Unknown parameter 'oldalloc"data' [ 60.445101][ T29] audit: type=1326 audit(1760232692.934:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 60.488383][ T4447] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 60.496134][ T4447] netlink: 224 bytes leftover after parsing attributes in process `syz.3.327'. [ 60.556118][ T4447] loop3: detected capacity change from 0 to 164 [ 60.562775][ T4447] iso9660: Bad value for 'uid' [ 60.567555][ T4447] iso9660: Bad value for 'uid' [ 60.591662][ T4457] loop1: detected capacity change from 0 to 512 [ 60.642974][ T4457] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 60.680244][ T4457] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.698447][ T4457] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.330: corrupted inode contents [ 60.713975][ T4457] EXT4-fs (loop1): Remounting filesystem read-only [ 60.720696][ T4457] EXT4-fs (loop1): 1 truncate cleaned up [ 60.726686][ T175] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.737293][ T175] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.748451][ T175] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 60.826577][ T4462] loop3: detected capacity change from 0 to 164 [ 60.833330][ T4462] iso9660: Bad value for 'uid' [ 60.838111][ T4462] iso9660: Bad value for 'uid' [ 60.865634][ T4471] netlink: 'syz.4.335': attribute type 10 has an invalid length. [ 60.867329][ T4472] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.333'. [ 60.889204][ T4471] bond0: (slave dummy0): Releasing backup interface [ 60.902405][ T4471] dummy0: left promiscuous mode [ 60.912247][ T4471] dummy0: entered promiscuous mode [ 60.927459][ T4471] team0: Port device dummy0 added [ 60.979696][ T4472] loop1: detected capacity change from 0 to 8192 [ 60.987347][ T4475] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.090130][ T4475] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.175217][ T4483] loop4: detected capacity change from 0 to 512 [ 61.188092][ T4475] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.224771][ T4485] loop2: detected capacity change from 0 to 512 [ 61.244312][ T4485] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.250956][ T4485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.271041][ T4485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.279661][ T4485] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.293016][ T4475] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.293508][ T4485] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.338: Allocating blocks 41-42 which overlap fs metadata [ 61.317041][ T4485] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.338: Allocating blocks 41-42 which overlap fs metadata [ 61.331301][ T4485] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.338: Failed to acquire dquot type 1 [ 61.343189][ T4485] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 61.357839][ T4485] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.338: corrupted inode contents [ 61.370041][ T4485] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.338: mark_inode_dirty error [ 61.381878][ T4485] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.338: corrupted inode contents [ 61.394122][ T4485] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.338: mark_inode_dirty error [ 61.406009][ T4485] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.338: corrupted inode contents [ 61.418087][ T4485] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 61.426977][ T4485] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.338: corrupted inode contents [ 61.439071][ T4485] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.338: mark_inode_dirty error [ 61.450426][ T4485] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 61.459845][ T4485] EXT4-fs (loop2): 1 truncate cleaned up [ 61.476757][ T4485] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.506463][ T175] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.517953][ T1650] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.529622][ T1650] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.542133][ T175] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.583124][ T4493] loop2: detected capacity change from 0 to 512 [ 61.600340][ T4493] FAULT_INJECTION: forcing a failure. [ 61.600340][ T4493] name failslab, interval 1, probability 0, space 0, times 0 [ 61.613080][ T4493] CPU: 0 UID: 0 PID: 4493 Comm: syz.2.341 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.613119][ T4493] Tainted: [W]=WARN [ 61.613128][ T4493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.613144][ T4493] Call Trace: [ 61.613151][ T4493] [ 61.613201][ T4493] __dump_stack+0x1d/0x30 [ 61.613224][ T4493] dump_stack_lvl+0xe8/0x140 [ 61.613250][ T4493] dump_stack+0x15/0x1b [ 61.613272][ T4493] should_fail_ex+0x265/0x280 [ 61.613312][ T4493] should_failslab+0x8c/0xb0 [ 61.613344][ T4493] kmem_cache_alloc_noprof+0x50/0x480 [ 61.613428][ T4493] ? getname_flags+0x80/0x3b0 [ 61.613490][ T4493] getname_flags+0x80/0x3b0 [ 61.613527][ T4493] __x64_sys_rename+0x33/0x70 [ 61.613607][ T4493] x64_sys_call+0x1f9/0x3000 [ 61.613629][ T4493] do_syscall_64+0xd2/0x200 [ 61.613660][ T4493] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.613716][ T4493] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.613744][ T4493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.613793][ T4493] RIP: 0033:0x7fd86583eec9 [ 61.613831][ T4493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.613856][ T4493] RSP: 002b:00007fd8642a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 61.613882][ T4493] RAX: ffffffffffffffda RBX: 00007fd865a95fa0 RCX: 00007fd86583eec9 [ 61.613899][ T4493] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180 [ 61.613916][ T4493] RBP: 00007fd8642a7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.613933][ T4493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.613948][ T4493] R13: 00007fd865a96038 R14: 00007fd865a95fa0 R15: 00007ffdc300e438 [ 61.614049][ T4493] [ 61.887826][ T4503] loop1: detected capacity change from 0 to 512 [ 62.225726][ T4519] loop1: detected capacity change from 0 to 1024 [ 62.232849][ T4519] EXT4-fs: Ignoring removed oldalloc option [ 62.238932][ T4519] EXT4-fs: quotafile must be on filesystem root [ 63.391367][ T4530] macvtap1: entered allmulticast mode [ 63.396795][ T4530] bridge0: entered allmulticast mode [ 63.417655][ T4530] bridge0: port 3(macvtap1) entered blocking state [ 63.424350][ T4530] bridge0: port 3(macvtap1) entered disabled state [ 63.436364][ T4530] bridge0: left allmulticast mode [ 63.442089][ T4532] netlink: 'syz.4.351': attribute type 13 has an invalid length. [ 63.486313][ T4528] loop2: detected capacity change from 0 to 512 [ 63.529098][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.536597][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.546899][ T4528] ext4: Unknown parameter 'oldalloc"data' [ 63.628536][ T4532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.638967][ T4528] netlink: 'syz.2.350': attribute type 1 has an invalid length. [ 63.646719][ T4528] netlink: 224 bytes leftover after parsing attributes in process `syz.2.350'. [ 63.664161][ T4532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.673824][ T4528] loop2: detected capacity change from 0 to 164 [ 63.701723][ T4528] iso9660: Bad value for 'uid' [ 63.706553][ T4528] iso9660: Bad value for 'uid' [ 63.798971][ T4533] pim6reg1: entered promiscuous mode [ 63.804503][ T4533] pim6reg1: entered allmulticast mode [ 63.851056][ T1650] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.887941][ T1650] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.900681][ T1650] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.916480][ T4539] loop2: detected capacity change from 0 to 512 [ 63.921355][ T1650] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.933900][ T1650] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.942125][ T4539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.954928][ T4539] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.353: invalid indirect mapped block 4294967295 (level 0) [ 63.970818][ T1650] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.994896][ T1650] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.998193][ T4539] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.353: invalid indirect mapped block 4294967295 (level 1) [ 64.010320][ T1650] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.026272][ T4539] EXT4-fs (loop2): 1 orphan inode deleted [ 64.032113][ T4539] EXT4-fs (loop2): 1 truncate cleaned up [ 64.043652][ T4546] sctp: [Deprecated]: syz.0.355 (pid 4546) Use of int in max_burst socket option. [ 64.043652][ T4546] Use struct sctp_assoc_value instead [ 64.059398][ T4548] netlink: 596 bytes leftover after parsing attributes in process `syz.1.354'. [ 64.070254][ T4546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.134628][ T4551] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.182797][ T4551] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.198499][ T4554] mmap: syz.3.358 (4554) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.212900][ T4548] loop1: detected capacity change from 0 to 8192 [ 64.249622][ T4555] netlink: 'syz.2.357': attribute type 10 has an invalid length. [ 64.281649][ T4554] loop3: detected capacity change from 0 to 1024 [ 64.282936][ T4551] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.299756][ T4554] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 64.308265][ T4558] netlink: 'syz.2.357': attribute type 10 has an invalid length. [ 64.372891][ T4555] bond0: (slave dummy0): Releasing backup interface [ 64.391044][ T4555] team0: Port device dummy0 added [ 64.409987][ T4558] team0: Port device dummy0 removed [ 64.430750][ T4558] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 64.449048][ T4551] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.601939][ T4568] loop3: detected capacity change from 0 to 512 [ 64.612147][ T4568] EXT4-fs: dax option not supported [ 64.725719][ T4572] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.792696][ T4572] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.879299][ T4572] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.962579][ T4572] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.995883][ T4579] loop1: detected capacity change from 0 to 512 [ 65.013259][ T4579] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 65.021652][ T4579] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.029835][ T4579] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.365: corrupted inode contents [ 65.041944][ T4579] EXT4-fs (loop1): Remounting filesystem read-only [ 65.048671][ T4579] EXT4-fs (loop1): 1 truncate cleaned up [ 65.056574][ T146] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.067296][ T146] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.078270][ T146] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 65.227146][ T4584] loop1: detected capacity change from 0 to 8192 [ 65.464254][ T4588] loop2: detected capacity change from 0 to 512 [ 65.471527][ T4588] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.483068][ T4588] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.367: invalid indirect mapped block 4294967295 (level 0) [ 65.497279][ T4588] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.367: invalid indirect mapped block 4294967295 (level 1) [ 65.511827][ T4588] EXT4-fs (loop2): 1 orphan inode deleted [ 65.517689][ T4588] EXT4-fs (loop2): 1 truncate cleaned up [ 65.527875][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 65.527901][ T29] audit: type=1107 audit(1760232698.014:1527): pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 65.566954][ T4591] netlink: 'syz.2.368': attribute type 10 has an invalid length. [ 65.579091][ T4591] bond0: (slave dummy0): Releasing backup interface [ 65.588256][ T4591] team0: Port device dummy0 added [ 65.594891][ T4591] netlink: 'syz.2.368': attribute type 10 has an invalid length. [ 65.606908][ T4591] team0: Port device dummy0 removed [ 65.615608][ T4591] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.643138][ T4593] sch_tbf: peakrate 9 is lower than or equals to rate 6829859379779001161 ! [ 65.658995][ T3458] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.678283][ T3458] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.690388][ T3458] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.700142][ T3458] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.720958][ T4595] sctp: [Deprecated]: syz.2.370 (pid 4595) Use of int in max_burst socket option. [ 65.720958][ T4595] Use struct sctp_assoc_value instead [ 65.736315][ T4595] lo: entered promiscuous mode [ 65.742193][ T4595] tunl0: entered promiscuous mode [ 65.752429][ T4595] gre0: entered promiscuous mode [ 65.759056][ T4595] gretap0: entered promiscuous mode [ 65.765530][ T4595] erspan0: entered promiscuous mode [ 65.775988][ T4595] ip_vti0: entered promiscuous mode [ 65.782493][ T4595] ip6_vti0: entered promiscuous mode [ 65.794329][ T4595] sit0: entered promiscuous mode [ 65.800778][ T4595] ip6tnl0: entered promiscuous mode [ 65.807674][ T4595] ip6gre0: entered promiscuous mode [ 65.814400][ T4595] syz_tun: entered promiscuous mode [ 65.820652][ T4595] ip6gretap0: entered promiscuous mode [ 65.827386][ T4595] bridge0: entered promiscuous mode [ 65.833982][ T4595] vcan0: entered promiscuous mode [ 65.840335][ T4595] bond0: entered promiscuous mode [ 65.845460][ T4595] bond_slave_0: entered promiscuous mode [ 65.851341][ T4595] bond_slave_1: entered promiscuous mode [ 65.857414][ T4595] dummy0: entered promiscuous mode [ 65.865231][ T4595] team0: entered promiscuous mode [ 65.870318][ T4595] team_slave_0: entered promiscuous mode [ 65.876175][ T4595] team_slave_1: entered promiscuous mode [ 65.885119][ T4595] nlmon0: entered promiscuous mode [ 65.897474][ T4595] caif0: entered promiscuous mode [ 65.902601][ T4595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.922419][ T4603] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.973536][ T4603] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.026014][ T4603] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.088816][ T4603] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.106397][ T4607] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.146580][ T4614] sch_tbf: peakrate 9 is lower than or equals to rate 6829859379779001161 ! [ 66.187248][ T4607] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.222921][ T4607] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.313899][ T4607] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.377949][ T175] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.389354][ T1650] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.400917][ T1650] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.412594][ T1650] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.496579][ T4621] loop1: detected capacity change from 0 to 512 [ 66.519560][ T4621] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.534625][ T4623] netlink: 'syz.4.379': attribute type 10 has an invalid length. [ 66.538115][ T4621] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.378: invalid indirect mapped block 4294967295 (level 0) [ 66.542857][ T4623] netlink: 'syz.4.379': attribute type 10 has an invalid length. [ 66.556653][ T4621] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.378: invalid indirect mapped block 4294967295 (level 1) [ 66.579344][ T4621] EXT4-fs (loop1): 1 orphan inode deleted [ 66.582870][ T4623] dummy0: left promiscuous mode [ 66.585151][ T4621] EXT4-fs (loop1): 1 truncate cleaned up [ 66.607888][ T4623] team0: Port device dummy0 removed [ 66.611255][ T29] audit: type=1107 audit(1760232699.084:1528): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 66.628099][ T4623] dummy0: entered promiscuous mode [ 66.640236][ T4623] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.652787][ T29] audit: type=1400 audit(1760232699.144:1529): avc: denied { read } for pid=4625 comm="syz.1.380" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.676144][ T29] audit: type=1400 audit(1760232699.144:1530): avc: denied { open } for pid=4625 comm="syz.1.380" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.713004][ T4631] geneve0: entered allmulticast mode [ 66.725135][ T29] audit: type=1400 audit(1760232699.214:1531): avc: denied { ioctl } for pid=4625 comm="syz.1.380" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.814384][ T4638] Illegal XDP return value 12 on prog (id 166) dev N/A, expect packet loss! [ 66.849399][ T4636] loop1: detected capacity change from 0 to 512 [ 66.860338][ T4636] ext4: Unknown parameter 'oldalloc"data' [ 66.867274][ T4636] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 66.875095][ T4636] netlink: 224 bytes leftover after parsing attributes in process `syz.1.384'. [ 66.944025][ T4644] loop1: detected capacity change from 0 to 512 [ 66.962218][ T4644] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 66.970309][ T4644] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.979750][ T4644] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.386: corrupted inode contents [ 66.991906][ T4644] EXT4-fs (loop1): Remounting filesystem read-only [ 66.998619][ T4644] EXT4-fs (loop1): 1 truncate cleaned up [ 67.004751][ T1650] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.015365][ T1650] Quota error (device loop1): write_blk: dquota write failed [ 67.022860][ T1650] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 67.032873][ T1650] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.043407][ T1650] Quota error (device loop1): write_blk: dquota write failed [ 67.050837][ T1650] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 67.061432][ T1650] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 67.071614][ T1650] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 67.209349][ T4648] loop1: detected capacity change from 0 to 512 [ 67.216826][ T4648] ext4: Unknown parameter 'oldalloc"data' [ 67.226602][ T4648] netlink: 'syz.1.387': attribute type 1 has an invalid length. [ 67.234362][ T4648] netlink: 224 bytes leftover after parsing attributes in process `syz.1.387'. [ 67.245741][ T4648] loop1: detected capacity change from 0 to 164 [ 67.252450][ T4648] iso9660: Bad value for 'uid' [ 67.257258][ T4648] iso9660: Bad value for 'uid' [ 67.260278][ T4650] loop4: detected capacity change from 0 to 2048 [ 67.274525][ T4650] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 67.384456][ T4654] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.432737][ T4654] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.491180][ T3458] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.499428][ T3458] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.518412][ T4654] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.536809][ T3458] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.545574][ T3458] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.577001][ T4657] bond0: (slave dummy0): Releasing backup interface [ 67.585442][ T4657] dummy0: left promiscuous mode [ 67.592428][ T4657] dummy0: entered promiscuous mode [ 67.598029][ T4657] team0: Port device dummy0 added [ 67.604996][ T4654] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.636767][ T4660] loop2: detected capacity change from 0 to 512 [ 67.653960][ T4660] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.670645][ T4660] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.391: invalid indirect mapped block 4294967295 (level 0) [ 67.684888][ T4660] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.391: invalid indirect mapped block 4294967295 (level 1) [ 67.699782][ T4660] EXT4-fs (loop2): 1 orphan inode deleted [ 67.705570][ T4660] EXT4-fs (loop2): 1 truncate cleaned up [ 67.749498][ T4669] FAULT_INJECTION: forcing a failure. [ 67.749498][ T4669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.762874][ T4669] CPU: 0 UID: 0 PID: 4669 Comm: syz.2.394 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.762908][ T4669] Tainted: [W]=WARN [ 67.762915][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 67.763008][ T4669] Call Trace: [ 67.763014][ T4669] [ 67.763021][ T4669] __dump_stack+0x1d/0x30 [ 67.763044][ T4669] dump_stack_lvl+0xe8/0x140 [ 67.763065][ T4669] dump_stack+0x15/0x1b [ 67.763082][ T4669] should_fail_ex+0x265/0x280 [ 67.763144][ T4669] should_fail+0xb/0x20 [ 67.763219][ T4669] should_fail_usercopy+0x1a/0x20 [ 67.763241][ T4669] _copy_from_user+0x1c/0xb0 [ 67.763268][ T4669] vga_arb_write+0x98/0x13d0 [ 67.763306][ T4669] ? avc_policy_seqno+0x15/0x30 [ 67.763387][ T4669] ? __pfx_vga_arb_write+0x10/0x10 [ 67.763489][ T4669] vfs_write+0x269/0x960 [ 67.763541][ T4669] ? __rcu_read_unlock+0x4f/0x70 [ 67.763566][ T4669] ? __fget_files+0x184/0x1c0 [ 67.763616][ T4669] ksys_write+0xda/0x1a0 [ 67.763641][ T4669] __x64_sys_write+0x40/0x50 [ 67.763733][ T4669] x64_sys_call+0x2802/0x3000 [ 67.763756][ T4669] do_syscall_64+0xd2/0x200 [ 67.763780][ T4669] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.763818][ T4669] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 67.763841][ T4669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.763884][ T4669] RIP: 0033:0x7fd86583eec9 [ 67.763931][ T4669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.763951][ T4669] RSP: 002b:00007fd8642a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.763970][ T4669] RAX: ffffffffffffffda RBX: 00007fd865a95fa0 RCX: 00007fd86583eec9 [ 67.763984][ T4669] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000003 [ 67.763996][ T4669] RBP: 00007fd8642a7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.764063][ T4669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.764075][ T4669] R13: 00007fd865a96038 R14: 00007fd865a95fa0 R15: 00007ffdc300e438 [ 67.764095][ T4669] [ 67.901814][ T4671] loop0: detected capacity change from 0 to 512 [ 67.928676][ T4674] loop2: detected capacity change from 0 to 512 [ 67.935376][ T4671] ext4: Unknown parameter 'oldalloc"data' [ 67.954120][ T4674] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.984212][ T4671] netlink: 224 bytes leftover after parsing attributes in process `syz.0.396'. [ 68.015300][ T4671] loop0: detected capacity change from 0 to 164 [ 68.016951][ T4674] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.397: invalid indirect mapped block 4294967295 (level 0) [ 68.024722][ T4671] iso9660: Bad value for 'uid' [ 68.036238][ T4674] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.397: invalid indirect mapped block 4294967295 (level 1) [ 68.040437][ T4671] iso9660: Bad value for 'uid' [ 68.054899][ T4674] EXT4-fs (loop2): 1 orphan inode deleted [ 68.065057][ T4674] EXT4-fs (loop2): 1 truncate cleaned up [ 68.087069][ T4677] FAULT_INJECTION: forcing a failure. [ 68.087069][ T4677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.100428][ T4677] CPU: 1 UID: 0 PID: 4677 Comm: syz.4.398 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.100469][ T4677] Tainted: [W]=WARN [ 68.100476][ T4677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.100488][ T4677] Call Trace: [ 68.100496][ T4677] [ 68.100504][ T4677] __dump_stack+0x1d/0x30 [ 68.100525][ T4677] dump_stack_lvl+0xe8/0x140 [ 68.100585][ T4677] dump_stack+0x15/0x1b [ 68.100606][ T4677] should_fail_ex+0x265/0x280 [ 68.100660][ T4677] should_fail+0xb/0x20 [ 68.100700][ T4677] should_fail_usercopy+0x1a/0x20 [ 68.100728][ T4677] _copy_from_user+0x1c/0xb0 [ 68.100839][ T4677] ___sys_sendmsg+0xc1/0x1d0 [ 68.100998][ T4677] __x64_sys_sendmsg+0xd4/0x160 [ 68.101042][ T4677] x64_sys_call+0x191e/0x3000 [ 68.101075][ T4677] do_syscall_64+0xd2/0x200 [ 68.101107][ T4677] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.101193][ T4677] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.101223][ T4677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.101320][ T4677] RIP: 0033:0x7f0d08a4eec9 [ 68.101340][ T4677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.101363][ T4677] RSP: 002b:00007f0d074b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.101387][ T4677] RAX: ffffffffffffffda RBX: 00007f0d08ca5fa0 RCX: 00007f0d08a4eec9 [ 68.101404][ T4677] RDX: 0000000004008014 RSI: 0000200000000100 RDI: 0000000000000003 [ 68.101421][ T4677] RBP: 00007f0d074b7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.101438][ T4677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.101466][ T4677] R13: 00007f0d08ca6038 R14: 00007f0d08ca5fa0 R15: 00007ffe6ca99428 [ 68.101503][ T4677] [ 68.305427][ T4679] dummy0: left promiscuous mode [ 68.322036][ T4679] team0: Port device dummy0 removed [ 68.328898][ T4679] dummy0: entered promiscuous mode [ 68.341991][ T4679] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 68.390643][ T4683] bond0: (slave dummy0): Releasing backup interface [ 68.398305][ T4683] dummy0: left promiscuous mode [ 68.405722][ T4683] dummy0: entered promiscuous mode [ 68.411522][ T4683] team0: Port device dummy0 added [ 68.438530][ T4688] loop2: detected capacity change from 0 to 512 [ 68.445487][ T4688] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.452337][ T4688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.459780][ T4688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.468407][ T4688] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.482905][ T4688] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.403: Allocating blocks 41-42 which overlap fs metadata [ 68.497186][ T4688] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.403: Allocating blocks 41-42 which overlap fs metadata [ 68.511429][ T4688] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.403: Failed to acquire dquot type 1 [ 68.522821][ T4688] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 68.537709][ T4688] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.403: corrupted inode contents [ 68.549775][ T4688] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.403: mark_inode_dirty error [ 68.561616][ T4688] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.403: corrupted inode contents [ 68.573738][ T4688] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.403: mark_inode_dirty error [ 68.585252][ T4688] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.403: corrupted inode contents [ 68.597339][ T4688] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 68.608196][ T4688] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.403: corrupted inode contents [ 68.613242][ T4693] loop0: detected capacity change from 0 to 512 [ 68.626519][ T4688] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.403: mark_inode_dirty error [ 68.631340][ T4693] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.640009][ T4688] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 68.649129][ T4693] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.404: invalid indirect mapped block 4294967295 (level 0) [ 68.657256][ T4688] EXT4-fs (loop2): 1 truncate cleaned up [ 68.677496][ T4693] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.404: invalid indirect mapped block 4294967295 (level 1) [ 68.692534][ T4693] EXT4-fs (loop0): 1 orphan inode deleted [ 68.698352][ T4693] EXT4-fs (loop0): 1 truncate cleaned up [ 68.706013][ T4688] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.837421][ T4705] loop2: detected capacity change from 0 to 512 [ 68.847801][ T4705] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.851037][ T4707] loop0: detected capacity change from 0 to 512 [ 68.865685][ T4707] EXT4-fs: dax option not supported [ 68.881645][ T4705] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.409: invalid indirect mapped block 4294967295 (level 0) [ 68.898206][ T4705] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.409: invalid indirect mapped block 4294967295 (level 1) [ 68.901203][ T4710] validate_nla: 5 callbacks suppressed [ 68.901291][ T4710] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 68.922159][ T4705] EXT4-fs (loop2): 1 orphan inode deleted [ 68.931265][ T4705] EXT4-fs (loop2): 1 truncate cleaned up [ 68.937268][ T4710] bond0: (slave dummy0): Releasing backup interface [ 68.945104][ T4710] dummy0: left promiscuous mode [ 68.951629][ T4710] dummy0: entered promiscuous mode [ 68.956115][ T4711] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 68.957621][ T4710] team0: Port device dummy0 added [ 68.982371][ T4711] dummy0: left promiscuous mode [ 68.998549][ T4711] team0: Port device dummy0 removed [ 69.007497][ T4711] dummy0: entered promiscuous mode [ 69.014887][ T4711] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 69.073212][ T4723] loop2: detected capacity change from 0 to 512 [ 69.084871][ T4723] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 69.093051][ T4723] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.100889][ T4723] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.415: corrupted inode contents [ 69.113128][ T4723] EXT4-fs (loop2): Remounting filesystem read-only [ 69.119817][ T4723] EXT4-fs (loop2): 1 truncate cleaned up [ 69.125748][ T3458] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.136306][ T3458] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.147094][ T3458] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 69.190036][ T4730] netlink: 'syz.4.417': attribute type 10 has an invalid length. [ 69.204023][ T4732] loop2: detected capacity change from 0 to 512 [ 69.212064][ T4730] bond0: (slave dummy0): Releasing backup interface [ 69.219382][ T4732] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.226359][ T4732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.228016][ T4730] dummy0: left promiscuous mode [ 69.241918][ T4732] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.250396][ T4732] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.260370][ T4730] dummy0: entered promiscuous mode [ 69.266329][ T4730] team0: Port device dummy0 added [ 69.306665][ T4732] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.418: Allocating blocks 41-42 which overlap fs metadata [ 69.326812][ T4732] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.418: Allocating blocks 41-42 which overlap fs metadata [ 69.341807][ T4732] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.418: Failed to acquire dquot type 1 [ 69.372851][ T4732] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 69.393684][ T4741] loop4: detected capacity change from 0 to 512 [ 69.400124][ T4732] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.418: corrupted inode contents [ 69.412886][ T4741] EXT4-fs: dax option not supported [ 69.442197][ T4732] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.418: mark_inode_dirty error [ 69.481466][ T4732] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.418: corrupted inode contents [ 69.494578][ T4732] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.418: mark_inode_dirty error [ 69.498993][ T4743] netlink: 'syz.4.422': attribute type 10 has an invalid length. [ 69.506682][ T4732] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.418: corrupted inode contents [ 69.516000][ T4743] netlink: 'syz.4.422': attribute type 10 has an invalid length. [ 69.526263][ T4732] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 69.533374][ T4743] dummy0: left promiscuous mode [ 69.542609][ T4732] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.418: corrupted inode contents [ 69.558844][ T4732] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.418: mark_inode_dirty error [ 69.570120][ T4732] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 69.570328][ T4743] team0: Port device dummy0 removed [ 69.584953][ T4732] EXT4-fs (loop2): 1 truncate cleaned up [ 69.586309][ T4743] dummy0: entered promiscuous mode [ 69.599928][ T4743] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 69.611978][ T4732] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 69.747757][ T4747] loop4: detected capacity change from 0 to 512 [ 69.761790][ T4747] ext4: Unknown parameter 'oldalloc"data' [ 69.776195][ T4747] netlink: 'syz.4.424': attribute type 1 has an invalid length. [ 69.784029][ T4747] netlink: 224 bytes leftover after parsing attributes in process `syz.4.424'. [ 69.803495][ T4747] loop4: detected capacity change from 0 to 164 [ 69.811693][ T4747] iso9660: Bad value for 'uid' [ 69.816508][ T4747] iso9660: Bad value for 'uid' [ 69.842274][ T4751] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.942723][ T4751] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.002863][ T4751] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.082681][ T4751] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.137242][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.147936][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.159362][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.179833][ T3458] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.198357][ T3458] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.213222][ T3458] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.230936][ T3458] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.252491][ T3458] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.309915][ T3458] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.343859][ T3458] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.362465][ T3458] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.367853][ T4765] netlink: 'syz.0.430': attribute type 10 has an invalid length. [ 70.370826][ T3458] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.397259][ T4765] bond0: (slave dummy0): Releasing backup interface [ 70.409846][ T4765] dummy0: left promiscuous mode [ 70.420461][ T4765] dummy0: entered promiscuous mode [ 70.441555][ T4765] team0: Port device dummy0 added [ 70.473297][ T4774] sctp: [Deprecated]: syz.3.434 (pid 4774) Use of int in max_burst socket option. [ 70.473297][ T4774] Use struct sctp_assoc_value instead [ 70.511025][ T4778] loop0: detected capacity change from 0 to 512 [ 70.521694][ T4774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.525677][ T4778] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.554140][ T4778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.567342][ T4778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.575836][ T4778] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.598731][ T4783] loop3: detected capacity change from 0 to 512 [ 70.613692][ T4778] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.435: Allocating blocks 41-42 which overlap fs metadata [ 70.628125][ T4778] __quota_error: 137 callbacks suppressed [ 70.628143][ T4778] Quota error (device loop0): write_blk: dquota write failed [ 70.628148][ T4783] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 70.628353][ T4783] EXT4-fs (loop3): orphan cleanup on readonly fs [ 70.634044][ T4778] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 70.654379][ T4783] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.437: corrupted inode contents [ 70.657313][ T4778] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 70.672839][ T4783] EXT4-fs (loop3): Remounting filesystem read-only [ 70.677234][ T4778] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.435: Failed to acquire dquot type 1 [ 70.690256][ T4783] EXT4-fs (loop3): 1 truncate cleaned up [ 70.704609][ T4780] loop1: detected capacity change from 0 to 512 [ 70.710190][ T3458] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.719431][ T4780] ext4: Unknown parameter 'oldalloc"data' [ 70.726879][ T3458] Quota error (device loop3): write_blk: dquota write failed [ 70.734960][ T4780] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 70.740032][ T3458] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 70.747756][ T4780] netlink: 224 bytes leftover after parsing attributes in process `syz.1.436'. [ 70.757689][ T3458] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.777227][ T3458] Quota error (device loop3): write_blk: dquota write failed [ 70.784726][ T3458] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 70.796132][ T3458] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 70.797463][ T4778] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, [ 70.806282][ T3458] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 70.806287][ T4778] inode 12: [ 70.806329][ T3458] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 70.835723][ T4778] block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 70.845070][ T4783] EXT4-fs mount: 60 callbacks suppressed [ 70.845102][ T4783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.853360][ T4778] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.435: corrupted inode contents [ 70.875516][ T4778] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #12: comm syz.0.435: mark_inode_dirty error [ 70.884174][ T4780] loop1: detected capacity change from 0 to 164 [ 70.891903][ T4778] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.435: corrupted inode contents [ 70.900267][ T4780] iso9660: Bad value for 'uid' [ 70.909705][ T4780] iso9660: Bad value for 'uid' [ 70.921612][ T4778] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.435: mark_inode_dirty error [ 70.940373][ T4778] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.435: corrupted inode contents [ 70.949877][ T4780] blktrace: Concurrent blktraces are not allowed on sg0 [ 70.955980][ T4778] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 70.969464][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.971879][ T4778] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.435: corrupted inode contents [ 70.994810][ T4778] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.435: mark_inode_dirty error [ 71.012717][ T4778] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 71.014717][ T4792] netlink: 'syz.4.439': attribute type 10 has an invalid length. [ 71.025802][ T4778] EXT4-fs (loop0): 1 truncate cleaned up [ 71.041567][ T4778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.054372][ T4792] bond0: (slave dummy0): Releasing backup interface [ 71.064008][ T4792] dummy0: left promiscuous mode [ 71.069420][ T4797] netlink: 'syz.4.439': attribute type 10 has an invalid length. [ 71.070436][ T4792] dummy0: entered promiscuous mode [ 71.084399][ T4792] team0: Port device dummy0 added [ 71.091405][ T4797] dummy0: left promiscuous mode [ 71.097324][ T4797] team0: Port device dummy0 removed [ 71.103734][ T4797] dummy0: entered promiscuous mode [ 71.109369][ T4796] loop3: detected capacity change from 0 to 512 [ 71.109425][ T4797] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.147212][ T4778] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 71.158737][ T4796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.171409][ T4796] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.197603][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.206707][ T4799] loop1: detected capacity change from 0 to 2048 [ 71.214191][ T4799] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 71.257286][ T29] audit: type=1400 audit(1760232703.734:1654): avc: denied { accept } for pid=4806 comm=",]-" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.279989][ T4810] loop3: detected capacity change from 0 to 512 [ 71.298508][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.301146][ T4810] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.327581][ T4810] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.445: invalid indirect mapped block 4294967295 (level 0) [ 71.347890][ T4813] dummy0: left promiscuous mode [ 71.354090][ T4813] team0: Port device dummy0 removed [ 71.361005][ T4813] dummy0: entered promiscuous mode [ 71.408080][ T4813] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.413152][ T4810] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.445: invalid indirect mapped block 4294967295 (level 1) [ 71.449279][ T4810] EXT4-fs (loop3): 1 orphan inode deleted [ 71.455276][ T4810] EXT4-fs (loop3): 1 truncate cleaned up [ 71.464475][ T4810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.516176][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.549288][ T4823] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.450'. [ 71.738417][ T4828] loop3: detected capacity change from 0 to 512 [ 71.747063][ T4828] ext4: Unknown parameter 'oldalloc"data' [ 71.759736][ T4828] netlink: 224 bytes leftover after parsing attributes in process `syz.3.452'. [ 71.818342][ T4839] dummy0: left promiscuous mode [ 71.830069][ T4839] team0: Port device dummy0 removed [ 71.837771][ T4839] dummy0: entered promiscuous mode [ 71.843798][ T4839] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.965343][ T4855] sctp: [Deprecated]: syz.1.459 (pid 4855) Use of int in max_burst socket option. [ 71.965343][ T4855] Use struct sctp_assoc_value instead [ 71.980577][ T4855] lo: entered promiscuous mode [ 71.986905][ T4855] tunl0: entered promiscuous mode [ 71.993340][ T4855] gre0: entered promiscuous mode [ 71.999397][ T4855] gretap0: entered promiscuous mode [ 72.005969][ T4855] erspan0: entered promiscuous mode [ 72.012440][ T4855] ip_vti0: entered promiscuous mode [ 72.019737][ T4855] ip6_vti0: entered promiscuous mode [ 72.026738][ T4855] sit0: entered promiscuous mode [ 72.033777][ T4855] ip6tnl0: entered promiscuous mode [ 72.041320][ T4855] ip6gre0: entered promiscuous mode [ 72.047754][ T4855] syz_tun: entered promiscuous mode [ 72.054115][ T4855] ip6gretap0: entered promiscuous mode [ 72.060885][ T4855] bridge0: entered promiscuous mode [ 72.067499][ T4855] vcan0: entered promiscuous mode [ 72.073791][ T4855] bond0: entered promiscuous mode [ 72.078893][ T4855] bond_slave_0: entered promiscuous mode [ 72.084663][ T4855] bond_slave_1: entered promiscuous mode [ 72.093323][ T4855] team0: entered promiscuous mode [ 72.098429][ T4855] team_slave_0: entered promiscuous mode [ 72.104227][ T4855] team_slave_1: entered promiscuous mode [ 72.110229][ T4855] dummy0: entered promiscuous mode [ 72.119296][ T4855] nlmon0: entered promiscuous mode [ 72.126282][ T4855] caif0: entered promiscuous mode [ 72.131363][ T4855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.177146][ T4861] loop1: detected capacity change from 0 to 512 [ 72.193178][ T4861] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 72.206482][ T4861] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.214923][ T4861] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.460: corrupted inode contents [ 72.227088][ T4861] EXT4-fs (loop1): Remounting filesystem read-only [ 72.233977][ T4861] EXT4-fs (loop1): 1 truncate cleaned up [ 72.239798][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.250373][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.261600][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 72.272473][ T4861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.319414][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.332036][ T4865] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.461'. [ 72.528422][ T4871] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.544033][ T4876] loop2: detected capacity change from 0 to 512 [ 72.562269][ T4876] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 72.570853][ T4876] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.579741][ T4876] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.466: corrupted inode contents [ 72.592982][ T4876] EXT4-fs (loop2): Remounting filesystem read-only [ 72.600501][ T4871] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.604118][ T4876] EXT4-fs (loop2): 1 truncate cleaned up [ 72.616477][ T3458] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.627103][ T3458] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.640313][ T3458] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 72.651489][ T4876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.674730][ T4871] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.737949][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.832540][ T4871] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.893391][ T4890] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.952784][ T4884] loop2: detected capacity change from 0 to 512 [ 72.965885][ T4884] ext4: Unknown parameter 'oldalloc"data' [ 72.973330][ T4884] netlink: 224 bytes leftover after parsing attributes in process `syz.2.467'. [ 72.985597][ T4898] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.473'. [ 73.022274][ T4900] loop0: detected capacity change from 0 to 512 [ 73.034449][ T4890] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.081765][ T4900] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 73.089787][ T4900] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.098435][ T4900] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.474: corrupted inode contents [ 73.114782][ T4900] EXT4-fs (loop0): Remounting filesystem read-only [ 73.121649][ T4900] EXT4-fs (loop0): 1 truncate cleaned up [ 73.128226][ T4890] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.133474][ T175] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.148601][ T175] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.165887][ T175] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.177505][ T4900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.203366][ T4890] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.214471][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.239717][ T4909] loop2: detected capacity change from 0 to 512 [ 73.262071][ T4909] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 73.270165][ T4909] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.277934][ T4909] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.477: corrupted inode contents [ 73.290158][ T4909] EXT4-fs (loop2): Remounting filesystem read-only [ 73.296816][ T4909] EXT4-fs (loop2): 1 truncate cleaned up [ 73.302707][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.313415][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 73.324681][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 73.335537][ T4909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.361328][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.597006][ T4923] loop2: detected capacity change from 0 to 1024 [ 73.604228][ T4923] EXT4-fs: Ignoring removed oldalloc option [ 73.610259][ T4923] EXT4-fs: quotafile must be on filesystem root [ 74.307963][ T4934] netlink: 5464 bytes leftover after parsing attributes in process `syz.0.482'. [ 74.365523][ T4938] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.484'. [ 74.498646][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.520695][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.546712][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.571861][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.876757][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.912197][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.957824][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.993019][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.128357][ T4960] sctp: [Deprecated]: syz.3.490 (pid 4960) Use of int in max_burst socket option. [ 75.128357][ T4960] Use struct sctp_assoc_value instead [ 75.222182][ T4960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.245081][ T4965] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.332736][ T4965] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.376055][ T4971] loop3: detected capacity change from 0 to 512 [ 75.388289][ T4972] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.495'. [ 75.389134][ T4973] loop4: detected capacity change from 0 to 512 [ 75.401130][ T4971] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.414756][ T4965] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.463971][ T4971] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.493: invalid indirect mapped block 4294967295 (level 0) [ 75.478768][ T4973] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.499399][ T4977] validate_nla: 7 callbacks suppressed [ 75.499462][ T4977] netlink: 'syz.2.496': attribute type 10 has an invalid length. [ 75.524343][ T4965] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.541506][ T4973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.554070][ T4977] bond0: (slave dummy0): Releasing backup interface [ 75.564596][ T4973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.573126][ T4973] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.583041][ T4977] dummy0: left promiscuous mode [ 75.598884][ T4971] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.493: invalid indirect mapped block 4294967295 (level 1) [ 75.619348][ T4977] dummy0: entered promiscuous mode [ 75.631540][ T4977] team0: Port device dummy0 added [ 75.636547][ T4971] EXT4-fs (loop3): 1 orphan inode deleted [ 75.642529][ T4971] EXT4-fs (loop3): 1 truncate cleaned up [ 75.652311][ T4973] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.494: Allocating blocks 41-42 which overlap fs metadata [ 75.662935][ T4971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.691552][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 75.691570][ T29] audit: type=1400 audit(1760232708.184:1724): avc: denied { setopt } for pid=4981 comm="syz.2.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.721960][ T4973] Quota error (device loop4): write_blk: dquota write failed [ 75.729434][ T4973] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 75.740510][ T4973] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 75.740571][ T4973] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.494: Failed to acquire dquot type 1 [ 75.740986][ T4973] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 75.741245][ T4973] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.494: corrupted inode contents [ 75.741809][ T4973] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #12: comm syz.4.494: mark_inode_dirty error [ 75.742239][ T4973] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.494: corrupted inode contents [ 75.743183][ T4973] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.494: mark_inode_dirty error [ 75.749127][ T29] audit: type=1400 audit(1760232708.214:1725): avc: denied { bind } for pid=4981 comm="syz.2.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.761994][ T4984] netlink: 'syz.1.498': attribute type 10 has an invalid length. [ 75.762506][ T29] audit: type=1326 audit(1760232708.224:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7aafeec9 code=0x7ffc0000 [ 75.773591][ T1650] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.782366][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.788082][ T29] audit: type=1326 audit(1760232708.224:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7aafeec9 code=0x7ffc0000 [ 75.831988][ T4986] netlink: 'syz.1.498': attribute type 10 has an invalid length. [ 75.833946][ T29] audit: type=1326 audit(1760232708.224:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7aafeec9 code=0x7ffc0000 [ 75.884401][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.892620][ T29] audit: type=1326 audit(1760232708.224:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7aafeec9 code=0x7ffc0000 [ 75.901654][ T4973] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.494: corrupted inode contents [ 75.924097][ T29] audit: type=1326 audit(1760232708.224:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7aafeec9 code=0x7ffc0000 [ 75.933936][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.040253][ T4982] process 'syz.2.497' launched './file1' with NULL argv: empty string added [ 76.047691][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.070938][ T4986] dummy0: left promiscuous mode [ 76.075515][ T4973] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 76.087588][ T4973] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.494: corrupted inode contents [ 76.104024][ T4973] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.494: mark_inode_dirty error [ 76.109975][ T4992] netlink: 'syz.3.499': attribute type 10 has an invalid length. [ 76.115496][ T4973] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 76.126683][ T4986] team0: Port device dummy0 removed [ 76.137808][ T4973] EXT4-fs (loop4): 1 truncate cleaned up [ 76.138911][ T4986] dummy0: entered promiscuous mode [ 76.144102][ T4973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.149828][ T4986] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.180249][ T4995] netlink: 'syz.3.499': attribute type 10 has an invalid length. [ 76.188637][ T4984] bond0: (slave dummy0): Releasing backup interface [ 76.196760][ T4984] dummy0: left promiscuous mode [ 76.203399][ T4984] dummy0: entered promiscuous mode [ 76.208809][ T4984] team0: Port device dummy0 added [ 76.217014][ T4973] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 76.232247][ T4995] dummy0: left promiscuous mode [ 76.237850][ T4995] team0: Port device dummy0 removed [ 76.260302][ T4990] loop2: detected capacity change from 0 to 2048 [ 76.262351][ T4995] dummy0: entered promiscuous mode [ 76.274957][ T4995] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.288605][ T4990] GPT:first_usable_lbas don't match. [ 76.293953][ T4990] GPT:34 != 290 [ 76.297455][ T4990] GPT: Use GNU Parted to correct GPT errors. [ 76.303606][ T4990] loop2: p1 p2 p3 [ 76.329173][ T5001] sctp: [Deprecated]: syz.0.503 (pid 5001) Use of int in max_burst socket option. [ 76.329173][ T5001] Use struct sctp_assoc_value instead [ 76.368722][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.404569][ T5001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.539528][ T5014] loop3: detected capacity change from 0 to 512 [ 76.547458][ T5016] loop2: detected capacity change from 0 to 512 [ 76.554319][ T5016] EXT4-fs: dax option not supported [ 76.561324][ T5014] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 76.598617][ T5014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 76.655087][ T5014] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.671599][ T5014] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.506: bg 0: block 361: padding at end of block bitmap is not set [ 76.706862][ T5014] EXT4-fs (loop3): Remounting filesystem read-only [ 76.723671][ T5014] EXT4-fs (loop3): 1 truncate cleaned up [ 76.768993][ T5014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 77.029631][ T5031] netlink: 5464 bytes leftover after parsing attributes in process `syz.1.510'. [ 77.083236][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 77.103814][ T5033] netlink: 'syz.4.511': attribute type 10 has an invalid length. [ 77.141770][ T5033] bond0: (slave dummy0): Releasing backup interface [ 77.148765][ T5033] dummy0: left promiscuous mode [ 77.155193][ T5033] dummy0: entered promiscuous mode [ 77.160913][ T5033] team0: Port device dummy0 added [ 77.187078][ T5035] netlink: 'syz.1.513': attribute type 10 has an invalid length. [ 77.203960][ T5035] netlink: 'syz.1.513': attribute type 10 has an invalid length. [ 77.247231][ T5035] dummy0: left promiscuous mode [ 77.266322][ T5035] team0: Port device dummy0 removed [ 77.288046][ T5035] dummy0: entered promiscuous mode [ 77.311979][ T5035] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.423453][ T5040] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 77.608605][ T5051] loop3: detected capacity change from 0 to 512 [ 77.616151][ T5050] sctp: [Deprecated]: syz.0.518 (pid 5050) Use of int in max_burst socket option. [ 77.616151][ T5050] Use struct sctp_assoc_value instead [ 77.655374][ T5051] EXT4-fs: dax option not supported [ 77.663660][ T5055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5055 comm=syz.2.520 [ 77.704254][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'. [ 77.713406][ T5050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.736140][ T5057] loop3: detected capacity change from 0 to 512 [ 78.031864][ T5066] loop0: detected capacity change from 0 to 512 [ 78.042300][ T5057] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 78.094912][ T5066] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 78.131374][ T5057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 78.140117][ T5066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 78.148636][ T5057] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.165822][ T5057] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.521: bg 0: block 361: padding at end of block bitmap is not set [ 78.171375][ T5066] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.191257][ T5057] EXT4-fs (loop3): Remounting filesystem read-only [ 78.198481][ T5057] EXT4-fs (loop3): 1 truncate cleaned up [ 78.204944][ T5057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 78.232379][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 78.309633][ T5066] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.522: bg 0: block 361: padding at end of block bitmap is not set [ 78.379085][ T5066] EXT4-fs (loop0): Remounting filesystem read-only [ 78.390359][ T5077] netlink: 5464 bytes leftover after parsing attributes in process `syz.3.523'. [ 78.396272][ T5066] EXT4-fs (loop0): 1 truncate cleaned up [ 78.426240][ T5066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 78.505671][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 78.893848][ T5110] loop2: detected capacity change from 0 to 1024 [ 78.900552][ T5110] EXT4-fs: Ignoring removed oldalloc option [ 78.906602][ T5110] EXT4-fs: quotafile must be on filesystem root [ 79.804704][ T5114] loop4: detected capacity change from 0 to 512 [ 79.902837][ T5112] loop0: detected capacity change from 0 to 1024 [ 80.808979][ T5114] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 80.815624][ T5112] EXT4-fs: Ignoring removed oldalloc option [ 80.825669][ T5112] EXT4-fs: quotafile must be on filesystem root [ 80.855596][ T5114] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.799081][ T5114] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.535: corrupted inode contents [ 81.936800][ T5114] EXT4-fs (loop4): Remounting filesystem read-only [ 81.947196][ T5114] EXT4-fs (loop4): 1 truncate cleaned up [ 82.383854][ T5120] netlink: 5464 bytes leftover after parsing attributes in process `syz.3.537'. [ 82.440545][ T175] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 82.451270][ T175] __quota_error: 28 callbacks suppressed [ 82.451290][ T175] Quota error (device loop4): write_blk: dquota write failed [ 82.464441][ T175] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 82.474573][ T175] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 82.485519][ T175] Quota error (device loop4): write_blk: dquota write failed [ 82.493401][ T175] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 82.504124][ T175] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 82.514453][ T175] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 82.532977][ T29] audit: type=1326 audit(1760232715.024:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.0.542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a9f3deec9 code=0x0 [ 82.535829][ T175] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 82.566773][ T5114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.567436][ T5124] netlink: 'syz.1.539': attribute type 10 has an invalid length. [ 82.598483][ T5124] bond0: (slave dummy0): Releasing backup interface [ 82.601704][ T5129] netlink: 'syz.3.541': attribute type 10 has an invalid length. [ 82.613768][ T5124] dummy0: left promiscuous mode [ 82.620295][ T5124] dummy0: entered promiscuous mode [ 82.626074][ T5124] team0: Port device dummy0 added [ 82.632145][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.651363][ T5134] netlink: 'syz.1.539': attribute type 10 has an invalid length. [ 82.662170][ T5133] sctp: [Deprecated]: syz.4.543 (pid 5133) Use of int in max_burst socket option. [ 82.662170][ T5133] Use struct sctp_assoc_value instead [ 82.682810][ T5137] loop2: detected capacity change from 0 to 512 [ 82.689551][ T5129] bond0: (slave dummy0): Releasing backup interface [ 82.695584][ T5137] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.713584][ T5129] dummy0: left promiscuous mode [ 82.719298][ T5137] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.544: invalid indirect mapped block 4294967295 (level 0) [ 82.724145][ T5129] dummy0: entered promiscuous mode [ 82.734989][ T5137] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.544: invalid indirect mapped block 4294967295 (level 1) [ 82.739322][ T5129] team0: Port device dummy0 added [ 82.753635][ T5137] EXT4-fs (loop2): 1 orphan inode deleted [ 82.763438][ T5137] EXT4-fs (loop2): 1 truncate cleaned up [ 82.776182][ T5137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.788805][ T5134] dummy0: left promiscuous mode [ 82.801048][ T5134] team0: Port device dummy0 removed [ 82.808218][ T5134] dummy0: entered promiscuous mode [ 82.817533][ T29] audit: type=1326 audit(1760232715.294:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 82.841110][ T29] audit: type=1326 audit(1760232715.294:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 82.842099][ T5134] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.864863][ T29] audit: type=1326 audit(1760232715.294:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86583eec9 code=0x7ffc0000 [ 82.897405][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.912349][ T5133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.921691][ T5133] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.936219][ T5133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.062141][ T5142] loop3: detected capacity change from 0 to 8192 [ 83.076859][ T5148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7007 sclass=netlink_route_socket pid=5148 comm=syz.4.548 [ 83.348094][ T5151] lo speed is unknown, defaulting to 1000 [ 83.371417][ T5151] lo speed is unknown, defaulting to 1000 [ 83.391236][ T5151] lo speed is unknown, defaulting to 1000 [ 83.410436][ T5165] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.551'. [ 83.412409][ T5151] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.438329][ T5160] netlink: 36 bytes leftover after parsing attributes in process `syz.1.547'. [ 83.461034][ T5151] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 83.513617][ T5151] lo speed is unknown, defaulting to 1000 [ 83.544366][ T5173] netlink: 'syz.0.553': attribute type 10 has an invalid length. [ 83.557161][ T5151] lo speed is unknown, defaulting to 1000 [ 83.563769][ T5160] lo speed is unknown, defaulting to 1000 [ 83.603417][ T5174] netlink: 'syz.0.553': attribute type 10 has an invalid length. [ 83.633437][ T5173] bond0: (slave dummy0): Releasing backup interface [ 83.686050][ T5173] dummy0: left promiscuous mode [ 83.693302][ T5173] dummy0: entered promiscuous mode [ 83.698882][ T5173] team0: Port device dummy0 added [ 83.705424][ T5151] lo speed is unknown, defaulting to 1000 [ 83.749524][ T5176] loop3: detected capacity change from 0 to 1024 [ 83.756582][ T5176] EXT4-fs: Ignoring removed oldalloc option [ 83.762665][ T5176] EXT4-fs: quotafile must be on filesystem root [ 83.928896][ T5174] dummy0: left promiscuous mode [ 83.981897][ T5174] team0: Port device dummy0 removed [ 84.011382][ T5179] loop4: detected capacity change from 0 to 512 [ 84.036468][ T5174] dummy0: entered promiscuous mode [ 84.078984][ T5179] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 84.136525][ T5174] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.187746][ T5151] lo speed is unknown, defaulting to 1000 [ 84.232744][ T5179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 84.253938][ T5151] lo speed is unknown, defaulting to 1000 [ 84.280119][ T5179] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.297438][ T5182] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.555'. [ 84.334571][ T5179] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.554: bg 0: block 361: padding at end of block bitmap is not set [ 84.511317][ T5179] EXT4-fs (loop4): Remounting filesystem read-only [ 84.518109][ T5179] EXT4-fs (loop4): 1 truncate cleaned up [ 84.553820][ T5187] netlink: 'syz.0.557': attribute type 10 has an invalid length. [ 84.582040][ T5179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 84.610500][ T5188] netlink: 'syz.0.557': attribute type 10 has an invalid length. [ 84.640309][ T5190] sctp: [Deprecated]: syz.1.558 (pid 5190) Use of int in max_burst socket option. [ 84.640309][ T5190] Use struct sctp_assoc_value instead [ 84.661046][ T5187] bond0: (slave dummy0): Releasing backup interface [ 84.678835][ T5187] dummy0: left promiscuous mode [ 84.685512][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 84.696665][ T5187] dummy0: entered promiscuous mode [ 84.703261][ T5187] team0: Port device dummy0 added [ 84.752111][ T5188] dummy0: left promiscuous mode [ 84.759090][ T5192] loop2: detected capacity change from 0 to 2048 [ 84.776104][ T5188] team0: Port device dummy0 removed [ 84.788229][ T5192] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 84.824551][ T5188] dummy0: entered promiscuous mode [ 84.853508][ T5188] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.893140][ T5190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.908624][ T3487] lo speed is unknown, defaulting to 1000 [ 84.997242][ T5200] loop0: detected capacity change from 0 to 512 [ 85.046514][ T5200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.086810][ T5197] loop4: detected capacity change from 0 to 512 [ 85.093822][ T5197] ext4: Unknown parameter 'oldalloc"data' [ 85.102187][ T5197] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 85.109921][ T5197] netlink: 224 bytes leftover after parsing attributes in process `syz.4.560'. [ 85.133375][ T5197] loop4: detected capacity change from 0 to 164 [ 85.140042][ T5197] iso9660: Bad value for 'uid' [ 85.144876][ T5197] iso9660: Bad value for 'uid' [ 85.166387][ T5207] FAULT_INJECTION: forcing a failure. [ 85.166387][ T5207] name failslab, interval 1, probability 0, space 0, times 0 [ 85.179072][ T5207] CPU: 1 UID: 0 PID: 5207 Comm: syz.1.562 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 85.179127][ T5207] Tainted: [W]=WARN [ 85.179136][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.179213][ T5207] Call Trace: [ 85.179222][ T5207] [ 85.179281][ T5207] __dump_stack+0x1d/0x30 [ 85.179439][ T5207] dump_stack_lvl+0xe8/0x140 [ 85.179458][ T5207] dump_stack+0x15/0x1b [ 85.179474][ T5207] should_fail_ex+0x265/0x280 [ 85.179515][ T5207] ? __se_sys_memfd_create+0x1cc/0x590 [ 85.179545][ T5207] should_failslab+0x8c/0xb0 [ 85.179614][ T5207] __kmalloc_cache_noprof+0x4c/0x4a0 [ 85.179653][ T5207] ? fput+0x8f/0xc0 [ 85.179703][ T5207] __se_sys_memfd_create+0x1cc/0x590 [ 85.179734][ T5207] __x64_sys_memfd_create+0x31/0x40 [ 85.179763][ T5207] x64_sys_call+0x2ac2/0x3000 [ 85.179787][ T5207] do_syscall_64+0xd2/0x200 [ 85.179873][ T5207] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.179901][ T5207] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.179986][ T5207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.180015][ T5207] RIP: 0033:0x7f91f8a0eec9 [ 85.180030][ T5207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.180050][ T5207] RSP: 002b:00007f91f7434e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 85.180073][ T5207] RAX: ffffffffffffffda RBX: 00000000000005fc RCX: 00007f91f8a0eec9 [ 85.180090][ T5207] RDX: 00007f91f7434ef0 RSI: 0000000000000000 RDI: 00007f91f8a92960 [ 85.180104][ T5207] RBP: 0000200000000300 R08: 00007f91f7434bb7 R09: 00007f91f7434e40 [ 85.180128][ T5207] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 85.180195][ T5207] R13: 00007f91f7434ef0 R14: 00007f91f7434eb0 R15: 0000200000000080 [ 85.180220][ T5207] [ 85.362719][ T5200] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.382488][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 85.570773][ T5211] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.563'. [ 85.646617][ T5213] sctp: [Deprecated]: syz.4.564 (pid 5213) Use of int in max_burst socket option. [ 85.646617][ T5213] Use struct sctp_assoc_value instead [ 85.714197][ T5213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.729896][ T5216] netlink: '+}[@': attribute type 12 has an invalid length. [ 85.737249][ T5216] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 85.798218][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.799475][ T5220] loop2: detected capacity change from 0 to 512 [ 85.836026][ T5220] EXT4-fs: dax option not supported [ 85.943921][ T5227] loop2: detected capacity change from 0 to 512 [ 85.991732][ T5227] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 86.040793][ T5227] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 86.081681][ T5227] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.105053][ T5227] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.570: bg 0: block 361: padding at end of block bitmap is not set [ 86.161280][ T5227] EXT4-fs (loop2): Remounting filesystem read-only [ 86.168537][ T5227] EXT4-fs (loop2): 1 truncate cleaned up [ 86.175119][ T5227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 86.190563][ T5235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5235 comm=syz.1.573 [ 86.204899][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 86.242167][ T5236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 86.292307][ T5240] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.574'. [ 86.361115][ T5243] netlink: 'syz.1.575': attribute type 10 has an invalid length. [ 86.395905][ T5238] loop0: detected capacity change from 0 to 512 [ 86.413092][ T5238] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.572: bad orphan inode 11862016 [ 86.431421][ T5243] bond0: (slave dummy0): Releasing backup interface [ 86.450526][ T5243] dummy0: left promiscuous mode [ 86.462229][ T5238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.489798][ T5243] dummy0: entered promiscuous mode [ 86.493655][ T5238] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.506659][ T5243] team0: Port device dummy0 added [ 86.522756][ T5250] dummy0: left promiscuous mode [ 86.569059][ T5250] team0: Port device dummy0 removed [ 86.591018][ T5250] dummy0: entered promiscuous mode [ 86.594509][ T5254] loop4: detected capacity change from 0 to 2048 [ 86.607886][ T5231] capability: warning: `syz.0.572' uses deprecated v2 capabilities in a way that may be insecure [ 86.609451][ T5250] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 86.628251][ T5254] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 86.642991][ T5254] ================================================================== [ 86.651143][ T5254] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 86.660054][ T5254] [ 86.662398][ T5254] read-write to 0xffff8881005f11f8 of 8 bytes by task 3302 on cpu 0: [ 86.670483][ T5254] __filemap_add_folio+0x5b9/0x7d0 [ 86.675630][ T5254] filemap_add_folio+0x1d9/0x360 [ 86.680588][ T5254] page_cache_ra_unbounded+0x203/0x450 [ 86.686105][ T5254] page_cache_sync_ra+0x26e/0x6a0 [ 86.691156][ T5254] filemap_get_pages+0x2d0/0x11b0 [ 86.696204][ T5254] filemap_read+0x231/0xa00 [ 86.700746][ T5254] blkdev_read_iter+0x22d/0x2e0 [ 86.705613][ T5254] vfs_read+0x64c/0x770 [ 86.709785][ T5254] ksys_read+0xda/0x1a0 [ 86.713952][ T5254] __x64_sys_read+0x40/0x50 [ 86.718472][ T5254] x64_sys_call+0x27c0/0x3000 [ 86.723164][ T5254] do_syscall_64+0xd2/0x200 [ 86.727683][ T5254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.733595][ T5254] [ 86.735924][ T5254] read to 0xffff8881005f11f8 of 8 bytes by task 5254 on cpu 1: [ 86.743477][ T5254] filemap_write_and_wait_range+0x59/0x340 [ 86.749316][ T5254] sync_blockdev+0x35/0x50 [ 86.753740][ T5254] kill_block_super+0x3c/0x70 [ 86.758442][ T5254] ext4_kill_sb+0x63/0x80 [ 86.762790][ T5254] deactivate_locked_super+0x75/0x1c0 [ 86.768184][ T5254] get_tree_bdev_flags+0x2ad/0x300 [ 86.773400][ T5254] get_tree_bdev+0x1f/0x30 [ 86.777851][ T5254] ext4_get_tree+0x1c/0x30 [ 86.782368][ T5254] vfs_get_tree+0x57/0x1d0 [ 86.786801][ T5254] do_new_mount+0x24d/0x660 [ 86.791318][ T5254] path_mount+0x4a5/0xb70 [ 86.795664][ T5254] __se_sys_mount+0x28c/0x2e0 [ 86.800350][ T5254] __x64_sys_mount+0x67/0x80 [ 86.804964][ T5254] x64_sys_call+0x2b51/0x3000 [ 86.809673][ T5254] do_syscall_64+0xd2/0x200 [ 86.814191][ T5254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.820142][ T5254] [ 86.822497][ T5254] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 86.829608][ T5254] [ 86.831930][ T5254] Reported by Kernel Concurrency Sanitizer on: [ 86.838091][ T5254] CPU: 1 UID: 0 PID: 5254 Comm: syz.4.579 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.849302][ T5254] Tainted: [W]=WARN [ 86.853106][ T5254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.863198][ T5254] ================================================================== [ 86.901818][ T5246] loop2: detected capacity change from 0 to 512 [ 86.909449][ T5246] ext4: Unknown parameter 'oldalloc"data' [ 86.944341][ T5246] loop2: detected capacity change from 0 to 164 [ 86.951114][ T5246] iso9660: Bad value for 'uid' [ 86.956008][ T5246] iso9660: Bad value for 'uid' [ 87.127268][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.