last executing test programs: 38.795914699s ago: executing program 0 (id=1395): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r4, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r4) 37.894334643s ago: executing program 0 (id=1407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r3) umount2(&(0x7f0000000040)='.\x00', 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000200)={0x1}) fcntl$lock(r6, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 36.251114529s ago: executing program 0 (id=1405): ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, 0x0, &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b708738af0ff00000000bfa100000000000007010000f8fbffffbfa400000000000007040000f0ffffffb70200000800000018230000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRESHEX, @ANYRES16], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)='blkio.bfq.io_service_bytes\x00', 0xfffffffffffffffa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r5, @ANYBLOB="10a8ffe0fd241418fa5d7b9eac25d4554555cc08f05225e1a88622fb4089342547f50869f71a144a118ca1d76e45e50ec2dc2b93b47648229d527f38123a92df82677b26ff25cba22a1c71991f791351e53c493c04d1ac198088979d5c4fa6922c03dbff3a12e09cd39d44f2d1cec8815b5c3f14ea80b97b5c5641cb3b30a6900b90f84cedf65f811e0825907d59f4adacd46dcb0bc70087f941bd5eb943492783844ef08c6a1c1139fb664c6d1d7677fecc8c5a238287563147a67e5e6504ce"], 0x28}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 35.076913157s ago: executing program 0 (id=1413): socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nobh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0xfffe, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xfffe}}], {0x14, 0x10}}, 0x3c}}, 0x0) 34.657782233s ago: executing program 0 (id=1414): signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x0, 0x3) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x20000001) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) 34.22914477s ago: executing program 0 (id=1432): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x1aeb, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) getxattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000b80)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) write$binfmt_elf64(r5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 34.167836161s ago: executing program 32 (id=1432): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x1aeb, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) getxattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000b80)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) write$binfmt_elf64(r5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 3.111419042s ago: executing program 4 (id=1710): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) utime(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8005, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xd}, 0x100000, 0x0, 0x0, 0x9, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000600", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r4, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYRES64=r0, @ANYRES32, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) socket$inet6(0xa, 0x2, 0x0) 2.983969904s ago: executing program 4 (id=1714): r0 = socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpriority(0x3, 0x0, 0xfffffffd) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = syz_io_uring_setup(0x109, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newtaction={0x1ac, 0x30, 0x2, 0xfffffffe, 0x0, {}, [{0x198, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x4}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x1, 0xffffffffffffffff, 0x2d2f45bf, 0xaad1}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x9c, 0x2, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xffff, 0x0, 0x35, 0x401}, {0x5, 0x7f, 0x1, 0x9}, {0xfe00, 0x80, 0xb9, 0x305d00}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x2, 0x6, 0xfe, 0x2}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6554, 0x78, 0x8b, 0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2fb, 0x2, 0x10000000, 0x0, 0x7fff}}, @TCA_ACT_BPF_NAME={0x15, 0x6, './file0/../file0\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0xc33dee1181e99548}}}}]}]}, 0x1ac}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.59582904s ago: executing program 4 (id=1715): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) unlink(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 2.439067522s ago: executing program 5 (id=1719): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000240)={[{@nolazytime}, {@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x200000a, 0x1, 0x8, 0x40000}) syz_open_procfs(0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) 2.307497984s ago: executing program 5 (id=1723): syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@dstopts={0x2c}]}}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r4, &(0x7f0000000280)={'system_u:object_r:modules_dep_t:s0', 0x20, 'unconfined', 0x20, 0x4}, 0x43) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2}, {0x60}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.201368596s ago: executing program 4 (id=1725): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x301040, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x8, 0x1, 0x0, 0xa, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast2, @private=0xa010101, {[@noop]}}}}}) write(r0, &(0x7f0000000a00)="4c39f1a84fc435ac0af26ba6866d0305daf2a3dd86eeeb8130c7318c774f849d4c56861d349857f49cc13ebcc6bf7004a4ee5b1f6b5dc58aa9f7e8c2f262e0dc3606564004f5e06a6734fcc8722704b0a4c9f04d5f938e004f09035fa2e1591ea31fa942fbf612894a8677d3d72a5341d450fb1720490111c5f1208d639cd710f226e296351a56d00e9cca194d9ed501d8", 0x91) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = memfd_create(&(0x7f0000001f40)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xfa\xed\x04\x00\x00\x00\xd4N\x12;\x83-j\xa7\x02\x92\xecA\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4\xe1\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x19\b\x00\x00\x00\x00~\xf3S\x12\"\x00^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x00ZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99Y', 0x0) fchown(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f00000002c0)={&(0x7f00000004c0)=@in6={0xa, 0x4e21, 0xb832, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}, 0x2404000d) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) read$eventfd(r8, 0x0, 0x0) getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r2, r0, 0x2, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nobarrier}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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") 1.92262775s ago: executing program 1 (id=1729): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4276}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004f8ffffffffffffff0000f1220000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd2b, 0x0, {0x1d, 0x1, 0x3}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "bf7494fcd3a42289"}, 0x5}}, @CGW_CS_CRC8={0x11e, 0x6, {0xff, 0x9, 0x42, 0x0, 0x0, "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", 0x3, "5c8d586b2a88d86823991bca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") 1.91649676s ago: executing program 3 (id=1730): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x10000000000000) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000040)=""/138, 0x8a) getdents(r4, 0x0, 0x22) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) pause() sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/208, 0xd0, 0x1, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000980)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xd5, @local, 0x5}, 0x1c) 1.879695871s ago: executing program 4 (id=1731): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x300, 0x0, 0xc000}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) 1.777604492s ago: executing program 3 (id=1732): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x300, 0x0, 0xc000}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) sendmmsg$unix(r7, &(0x7f00000029c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000480)="7459f65067b382c90f07e0c3abc7d3eb3887a8866c00ac2310534e2032a84e532a7b2b735f0f9abe263c599f1cfd386bf075a0", 0x33}, {0x0}, {&(0x7f0000000800)="faaa5fd5d49bfb794ece3d5e9e5196282a9f6f97d9d54848a508caabcc4348e93202b9160d23cab56a7f01bef808136c8b95d77ee9aebed5fdc001069e91f6aff0826041ac11505bce38b9533c429512b4fbadd56deba8dbe9a0ae057c679823c52e2fc8f6c086f248a5fe987488c025853aa03ce4844ce4d1d33beb5c7270be15dcc33b544b4006404b78cf1bb2e80fc8927d10c7d1d39c90b9", 0x9a}], 0x5, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5], 0x48, 0x40}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)="6bf0d4b9bbcad9b1b86a62b8e32873057d6099bc847cb6e138e29a34ea0bbedc50b69e96462cbbe1955bfc6d0b39b96948bbbd264cb4e64f496c94253444bca9ad3d2ac3b779401a225aa6e110b64539be2c92425ab156a924ec74e8820cfb110564489d1dfe39c374b6192831464355c3c11be8661b3362a32ad4065521dd721fae6a0513ab71d7a0ad12c0595ba27c04c0ab942fac469c63084f2f8a805578b2d9b19838152d8f71428a6869a9bc82ffdacb6ba035b9c30f17014565c65e8268184d1c68a9965c0e8a052992b1bb15f84acc30f288cac8d8151e08496feb4c678c21740056157d922ba92d2bfbbe8b2a", 0xf1}, {&(0x7f0000000100)="4a298c0d3e6bab1e99ca3bb005bef99e59411d0c7ea29d858a56cce1a38520ec28f6ed9b9b33560533f000ccbe6af0", 0x2f}, {&(0x7f0000000b00)="df47aab77966914451d7f8ec160ee577edecfce8580843124b2807a244f76e286c6cd1283d5e2f56f5f8aab298f6850e2baf0253422bfb8e0cd020347b76a56c6725cd91f97791ff41df613190c4b6593936fb2b0abe41b0a8595e304c8e14d2810edcfd2056a88c06e78dddbdf4906f607c442708186560d60c5b83c16582cd801fba10ca2e1e8d646e877d827b0513fe7f28638fbca9b2d4b14aa85aca37c032286678b424427cebf1ca9ed7a73d9cf905ba52682f7c2218c4af7f49ff58243df296b69a21b225367dcbba01e7b1a3b2ae542ed2ad567bd75b4e26bd397a2fc48ac43c2a0893ba9d47e98625634ce035", 0xf1}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=r7, @ANYRES32, @ANYRES16=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x40001}}, {{&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000000700)="000000000000000016ceef2318fca88a58775af92f4cf255a5d81a030000000000000004b490880b94e8c745ec7743b7fbb1dc9b0671e3a59d3c022a1cb0a867c8628f97914b447bd5dcb78a68df86c65031b4bafa51c5a1f431de31a025d5fcd47aae2a7b03c0438e6c55fa79ea385f1013cae1ba7abf514863f7edbd5622aa261ccc83b0fb63f8a38c0fc3e191d49b092e44d3d0fbaadd57ebfe7a54a0889459c30a4b27f20f38a07cecb368d17dd08b84bb099cbb38f27620aafcc1440562abfdde196176e466fbc0367c91ea2697445dc03ac83892014ad0562ad9ec9f07b7862f839062c3ab2b2751a6d04937b08b315b8e899978428466052e1e07", 0xfe}, {&(0x7f00000004c0)="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", 0x154}, {&(0x7f0000002340)}, {&(0x7f00000023c0)}], 0x4, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000003c0)="d6435fc75231ac991094826b3ce5071d002126bfaa169213a30f4e99b7db5885bb6e7a0bc8dae3e7cde02c3a", 0x2c}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x4044}}], 0x4, 0xc004) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) lchown(0x0, 0x0, 0x0) 1.768213033s ago: executing program 1 (id=1733): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000240)={[{@nolazytime}, {@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x200000a, 0x1, 0x8, 0x40000}) syz_open_procfs(0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) 1.706283413s ago: executing program 1 (id=1734): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x1aeb, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) getxattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000b80)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) write$binfmt_elf64(r5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.689549094s ago: executing program 1 (id=1735): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x29, 0x2, 0x0) r4 = inotify_init1(0x800) socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$dupfd(r3, 0x406, r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0880, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x200) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1.432351218s ago: executing program 5 (id=1738): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x1c0da, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r2) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x138) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80500, 0x51) write$9p(r5, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff5295e8cd6f55ce071b304aa0a588b3b7a2efa2f167dd9c1b8b016268d37d9a30983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402c76caf85d4569a75dde2f64", 0x200) sendfile(r5, r6, 0x0, 0xe065) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x4000, 0x11ac3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc000) 1.383944199s ago: executing program 2 (id=1739): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(0x0, 0x141) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000008c0), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x9e, 0x0, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x8, 0xb, 0x4}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) inotify_init() 1.358818929s ago: executing program 2 (id=1740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x141) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) 1.339363989s ago: executing program 2 (id=1741): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x790, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='svcsock_new_socket\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1080f2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x128, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = memfd_secret(0x80000) fcntl$setlease(r5, 0x400, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 1.31146695s ago: executing program 5 (id=1742): syz_emit_ethernet(0x4a, &(0x7f00000043c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@grpquota}, {@nolazytime}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x56d, &(0x7f00000015c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x170, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) 1.156302362s ago: executing program 1 (id=1743): syz_open_dev$loop(0x0, 0x9, 0x12d600) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x18) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) rt_sigqueueinfo(0x0, 0x1b, &(0x7f0000000140)={0x3, 0x0, 0x9}) iopl(0x3) perf_event_open(&(0x7f00000012c0)={0x6, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffa3, 0xb}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugBj3VbCGGhhtZECJFqDF5MDImejUcT/wJvXox6MvGqd0NClAvoqWZmZ2C77PaFbncr+/kkA8+z83Sf57vPPDPPzLMbQN8ayf5JInZExG8RMVTPLi0wUv/vxrUL1b+vXagmsbj41p9JXu76tQvVsmj5d9uLzGgakX6SFJUsNXfu/KmpWm3mbJEfnz/93vjcufPPnjw9dWLmxMyZySNHDh+aeOH5yec6EmcW1/V9H87u3/vaO5dfrx67/O5P32bt3VHsb4yjU0aywP9azDXve6LTlfXYzoZ0MtDDhrAmlYjIumswH/9DUYlbnTcUr37c08YBGyq7Nm1tv3thEbiLJdHrFgC9UV7os/vfcuvS1GNTuPpS/QYoi/tGsdX3DERalBlsur/tpJGIOLbwz1fZFhv0HAIAoNFn1S+PxjOt5n9p3N9QblexhjIcEfdExO6IuDci9kTEfRF52Qci4sE11t+8NHT7/Ce9ckeBrVI2/3uxWNtaOv8rZ38xXClyO/P4B5PjJ2szB4vPZDQGt2b5iWXq+P6VXz9vt69x/pdtWf3lXLBox5WBpgd001PzU/mktAOufhSxb6BV/MnNlYAkIvZGxL61vfWuMnHyqW/2tyu0cvzL6MA60+LXEU/W+38hmuIvJcuvT47/L2ozB8fLo+J2P/9y6c129a8r/g7I+n/b0uO/uchw0rheO7f2Oi79/mnbe5o7Pf63JG/n56Oyoz6Ymp8/OxGxJTmav1geGvnrk7f+tsyX5bP4Rw+0Hv+741YFD0VEdhA/HBGPRMSjRdsfi4jHI+LAMvH/+HL7fZuh/6dbnv9uHv9N/b/2ROXUD9+1q391/X84T40Wr+TnvxWstoHr+ewAAADgvyLNvwOfpGM302k6Nlb/Dv+e2JbWZufmnz4++/6Z6fp35YdjMC2fdA01PA+dSBaKd6znJ4tnxeX+Q8Vz4y8q/8/zY9XZ2nSPY4d+t73N+M/8Uel164AN12odbXJLDxoCdF3z+E+XZi++0c3GAF3l99rQv1YY/2m32gF0n+s/9K9W4/9iU95aANydXP+hfxn/0L+Mf+hfxj/0pfX8rl+inxORbopmSGxQotdnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74NwAA//+8yu7V") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.150795792s ago: executing program 2 (id=1744): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r0 = memfd_create(&(0x7f0000000380)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5L\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x00a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xa3X\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97|\xd4yfW\xdf\x91\x18\xeb\x8e]\x9dn,\x96\xf6\x88\xac\xbd\b<\x11\xccm0 \xafc\xcdZ\x1eWz\x80*\"D\xf1\xfa\xeb\xac\x87\xe9\x00\x00\x00\x00\x00\xfb\xc3#Q \xefK,\r\xa2\x05\r\xbf\x97l\n\xf8\xf7\xa2{\xcd\xff^n,bjt\xa6,\x1a(\xf3', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000001f00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) lseek(r0, 0x100000, 0x3) 1.034200854s ago: executing program 2 (id=1745): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000240)={[{@nolazytime}, {@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x200000a, 0x1, 0x8, 0x40000}) syz_open_procfs(0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 911.818486ms ago: executing program 4 (id=1746): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0xd, 0x8, 0x4}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r2], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYRESOCT=r3], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) ioprio_set$pid(0x1, r4, 0x2007) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES32=r1, @ANYBLOB="af55ad77a43d45a5ee43a913588a952bdcc4faf0dee314d47017b796815beb072cf90cdd7aae6e3a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20008, @void, @value}, 0x94) r5 = getpid() r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x24020000) syz_usbip_server_init(0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 847.065537ms ago: executing program 3 (id=1747): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) unlink(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 634.0409ms ago: executing program 2 (id=1748): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES64=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r4, &(0x7f0000004200)='t', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000080e, @void, @value}, 0x94) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r5, 0x407, 0x6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8000, &(0x7f0000000100), 0x1, 0x7b2, &(0x7f00000007c0)="$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") socket$inet6(0xa, 0x2, 0x0) 384.205334ms ago: executing program 5 (id=1749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRESHEX=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd47, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x141) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f00000008c0), &(0x7f0000000040)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x9e, 0x0, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x8, 0xb, 0x4}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) inotify_init() 301.236146ms ago: executing program 3 (id=1750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(0x0, 0x141) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000008c0), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x9e, 0x0, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x8, 0xb, 0x4}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) inotify_init() 208.405077ms ago: executing program 3 (id=1751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x141) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) 168.029588ms ago: executing program 3 (id=1752): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x1c0da, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r2) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x138) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80500, 0x51) write$9p(r5, &(0x7f0000001400)="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", 0x200) sendfile(r5, r6, 0x0, 0xe065) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x4000, 0x11ac3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc000) 144.706208ms ago: executing program 5 (id=1753): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@bh}, {@stripe}, {@grpid}, {@block_validity}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x12, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000090000000000", @ANYRES64=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100004592a8cdb23f0eac196ecef0245798810000009500000000000000851000000100000018400000fbffffff0000000000000000bf91000000000000b7020000010000008500000085000000"], 0x0, 0x9, 0x6b, &(0x7f0000000540)=""/107, 0x40f00, 0x2, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0xa, 0xfe000000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x50822360, @void, @value}, 0x94) setsockopt$inet_mreq(r4, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 0s ago: executing program 1 (id=1754): r0 = socket$unix(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2ffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x11) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfe42, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}], 0x30, 0x4048015}, 0x0) fcntl$setown(r6, 0x8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01030000000000000000010000000800010012000000080003"], 0x30}}, 0x40) kernel console output (not intermixed with test programs): t(1750132619.189:10131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 182.408099][ T29] audit: type=1326 audit(1750132619.199:10132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 182.431704][ T29] audit: type=1326 audit(1750132619.199:10133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 182.455184][ T29] audit: type=1326 audit(1750132619.199:10134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.2.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f38ef5de929 code=0x7ffc0000 [ 182.940066][ T7470] loop0: detected capacity change from 0 to 1024 [ 182.970702][ T7470] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.003257][ T7472] SELinux: syz.2.1160 (7472) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 183.093237][ T7470] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1158: Invalid block bitmap block 0 in block_group 0 [ 183.165050][ T7470] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1158: Failed to acquire dquot type 0 [ 183.186942][ T7472] wireguard0: entered promiscuous mode [ 183.192761][ T7472] wireguard0: entered allmulticast mode [ 183.208637][ T7470] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.1158: Freeing blocks not in datazone - block = 0, count = 4096 [ 183.223914][ T7479] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 183.230426][ T7479] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 183.238133][ T7479] vhci_hcd vhci_hcd.0: Device attached [ 183.244069][ T7470] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1158: Invalid inode bitmap blk 0 in block_group 0 [ 183.256964][ T7470] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 183.265666][ T6206] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 0 [ 183.277988][ T7470] EXT4-fs (loop0): 1 orphan inode deleted [ 183.284080][ T7481] vhci_hcd: connection closed [ 183.284578][ T6206] vhci_hcd: stop threads [ 183.293613][ T6206] vhci_hcd: release socket [ 183.298031][ T6206] vhci_hcd: disconnect device [ 183.303276][ T7470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.340105][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.743570][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 183.776631][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 184.151160][ T7498] loop0: detected capacity change from 0 to 1024 [ 184.248322][ T7498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.285722][ T7498] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.312055][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 184.370551][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 184.379695][ T7504] lo speed is unknown, defaulting to 1000 [ 184.379896][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 184.395086][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 184.404227][ T7504] lo speed is unknown, defaulting to 1000 [ 184.404323][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 184.425790][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 184.444453][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 184.582361][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.649463][ T7519] netlink: zone id is out of range [ 184.662029][ T7519] netlink: zone id is out of range [ 184.672099][ T7519] netlink: zone id is out of range [ 184.677235][ T7519] netlink: zone id is out of range [ 184.692655][ T7519] netlink: zone id is out of range [ 184.697848][ T7519] netlink: zone id is out of range [ 184.712692][ T7519] netlink: zone id is out of range [ 184.718382][ T7519] netlink: zone id is out of range [ 184.734590][ T7519] netlink: zone id is out of range [ 184.739867][ T7519] netlink: zone id is out of range [ 185.185697][ T7531] netlink: 'syz.1.1184': attribute type 1 has an invalid length. [ 185.466250][ T7539] loop0: detected capacity change from 0 to 128 [ 185.583292][ T7539] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 185.591659][ T7539] FAT-fs (loop0): Filesystem has been set read-only [ 185.624464][ T7539] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 185.684231][ T7539] SELinux: syz.0.1175 (7539) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 185.688534][ T7546] loop1: detected capacity change from 0 to 512 [ 185.708522][ T7546] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 185.719504][ T7546] EXT4-fs (loop1): invalid journal inode [ 185.725830][ T7546] EXT4-fs (loop1): can't get journal size [ 185.732384][ T7546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 185.744575][ T7546] System zones: 1-12, 13-13 [ 185.751459][ T7546] EXT4-fs (loop1): 1 truncate cleaned up [ 185.762561][ T7546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.792771][ T7549] xt_hashlimit: max too large, truncated to 1048576 [ 185.815311][ T7546] vlan0: entered allmulticast mode [ 185.820575][ T7546] bridge_slave_0: entered allmulticast mode [ 185.860958][ T7539] wireguard0: entered promiscuous mode [ 185.866913][ T7539] wireguard0: entered allmulticast mode [ 185.961745][ T7557] netlink: 'syz.2.1180': attribute type 4 has an invalid length. [ 186.089763][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.431056][ T7563] lo speed is unknown, defaulting to 1000 [ 186.440158][ T7563] lo speed is unknown, defaulting to 1000 [ 186.678544][ T7577] team0 (unregistering): Port device team_slave_0 removed [ 186.693126][ T7577] team0 (unregistering): Port device team_slave_1 removed [ 186.706493][ T7581] random: crng reseeded on system resumption [ 186.729311][ T7583] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.863952][ T7590] loop0: detected capacity change from 0 to 512 [ 186.880111][ T7590] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 186.889079][ T7590] EXT4-fs (loop0): invalid journal inode [ 186.901894][ T7590] EXT4-fs (loop0): can't get journal size [ 186.912221][ T7590] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 186.920194][ T7590] System zones: 1-12, 13-13 [ 186.996515][ T7594] netlink: 'syz.3.1198': attribute type 4 has an invalid length. [ 187.052177][ T7590] EXT4-fs (loop0): 1 truncate cleaned up [ 187.062638][ T7590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.115575][ T7590] vlan0: entered allmulticast mode [ 187.120760][ T7590] bridge_slave_0: entered allmulticast mode [ 187.127654][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 187.127766][ T29] audit: type=1326 audit(1750132624.189:10546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 187.225264][ T29] audit: type=1326 audit(1750132624.219:10547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 187.248770][ T29] audit: type=1326 audit(1750132624.219:10548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 187.272733][ T29] audit: type=1326 audit(1750132624.219:10549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fee300847 code=0x7ffc0000 [ 187.296287][ T29] audit: type=1326 audit(1750132624.219:10550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 187.319943][ T29] audit: type=1326 audit(1750132624.219:10551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 187.343438][ T29] audit: type=1326 audit(1750132624.219:10552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 187.366898][ T29] audit: type=1326 audit(1750132624.219:10553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 187.390688][ T29] audit: type=1326 audit(1750132624.219:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 187.414230][ T29] audit: type=1326 audit(1750132624.219:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 187.438709][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.500012][ T7621] loop0: detected capacity change from 0 to 1024 [ 187.519258][ T7621] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.530728][ T7617] loop1: detected capacity change from 0 to 512 [ 187.551643][ T7621] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1206: Invalid block bitmap block 0 in block_group 0 [ 187.572096][ T7621] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1206: Failed to acquire dquot type 0 [ 187.586120][ T7617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.608372][ T7621] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.1206: Freeing blocks not in datazone - block = 0, count = 4096 [ 187.622646][ T7621] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1206: Invalid inode bitmap blk 0 in block_group 0 [ 187.635561][ T7621] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 187.644327][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 187.656140][ T7621] EXT4-fs (loop0): 1 orphan inode deleted [ 187.662247][ T7621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.686055][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.731353][ T3390] kernel write not supported for file /load (pid: 3390 comm: kworker/0:3) [ 187.826975][ T7636] loop0: detected capacity change from 0 to 1024 [ 187.881717][ T7630] lo speed is unknown, defaulting to 1000 [ 187.882374][ T7636] EXT4-fs: Ignoring removed orlov option [ 187.893284][ T7636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.915917][ T7630] lo speed is unknown, defaulting to 1000 [ 187.917456][ T7617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.970179][ T7617] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.998542][ T7636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.019065][ T7644] __nla_validate_parse: 30 callbacks suppressed [ 188.019083][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 188.083944][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.119960][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 188.169023][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 188.194434][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 188.206029][ T7650] lo speed is unknown, defaulting to 1000 [ 188.238309][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 188.248119][ T7650] lo speed is unknown, defaulting to 1000 [ 188.266402][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 188.291949][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 188.299379][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 188.329080][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.353586][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 188.402257][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 188.678518][ T7696] vlan2: entered promiscuous mode [ 188.683758][ T7696] vlan2: entered allmulticast mode [ 188.689059][ T7696] hsr_slave_1: entered allmulticast mode [ 189.270931][ T7711] loop1: detected capacity change from 0 to 1024 [ 189.302999][ T7706] lo speed is unknown, defaulting to 1000 [ 189.310060][ T7706] lo speed is unknown, defaulting to 1000 [ 189.373716][ T7711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.394404][ T7711] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.658407][ T7726] net_ratelimit: 92 callbacks suppressed [ 189.658420][ T7726] netlink: zone id is out of range [ 189.899863][ T7726] netlink: zone id is out of range [ 189.949095][ T7726] netlink: zone id is out of range [ 189.974640][ T7726] netlink: zone id is out of range [ 189.998515][ T7726] netlink: zone id is out of range [ 190.045478][ T7726] netlink: zone id is out of range [ 190.070159][ T7726] netlink: zone id is out of range [ 190.087614][ T7726] netlink: zone id is out of range [ 190.115204][ T7726] netlink: zone id is out of range [ 190.120446][ T7726] netlink: zone id is out of range [ 190.212976][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.481891][ T7762] 9pnet_fd: Insufficient options for proto=fd [ 190.632146][ T7766] lo speed is unknown, defaulting to 1000 [ 190.640010][ T7766] lo speed is unknown, defaulting to 1000 [ 191.551006][ T7815] Invalid ELF header magic: != ELF [ 191.608419][ T7818] sd 0:0:1:0: device reset [ 192.325691][ T7840] netlink: 'syz.2.1257': attribute type 10 has an invalid length. [ 192.493628][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 192.493708][ T29] audit: type=1326 audit(1750132629.559:10962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.3.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 192.541878][ T7849] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 192.577715][ T7842] lo speed is unknown, defaulting to 1000 [ 192.580641][ T29] audit: type=1326 audit(1750132629.559:10963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.3.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 192.590814][ T7842] lo speed is unknown, defaulting to 1000 [ 192.606944][ T29] audit: type=1326 audit(1750132629.559:10964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.3.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 192.636296][ T29] audit: type=1326 audit(1750132629.559:10965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.3.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 192.659804][ T29] audit: type=1326 audit(1750132629.559:10966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.3.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 192.683435][ T29] audit: type=1326 audit(1750132629.559:10967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.3.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 192.706813][ T29] audit: type=1326 audit(1750132629.559:10968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.3.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 192.730325][ T29] audit: type=1326 audit(1750132629.559:10969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.3.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 192.753793][ T29] audit: type=1326 audit(1750132629.559:10970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.3.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 192.777367][ T29] audit: type=1326 audit(1750132629.559:10971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.3.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1fee2fe929 code=0x7ffc0000 [ 193.162714][ T7864] __nla_validate_parse: 33 callbacks suppressed [ 193.162728][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 193.246205][ T7869] xt_connbytes: Forcing CT accounting to be enabled [ 193.272186][ T7869] Cannot find set identified by id 0 to match [ 193.552822][ T7875] lo speed is unknown, defaulting to 1000 [ 193.561304][ T7875] lo speed is unknown, defaulting to 1000 [ 193.872224][ T7874] loop1: detected capacity change from 0 to 128 [ 193.892677][ T7874] vfat: Unknown parameter '18446744073709551615j‰ù× òLG4ãwv/΄}] ¶Î¾šË֨ݥ°¶â²ÔH&ॷsÍøo^H”Æb]ùQéQ S«Ñ©"ô[bk°Iê”Q-Jˆ¶z#dï;¡$' [ 193.914818][ T7881] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1270'. [ 193.935328][ T7881] random: crng reseeded on system resumption [ 194.202801][ T7900] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 194.222033][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 194.250695][ T7899] loop1: detected capacity change from 0 to 164 [ 194.257981][ T7899] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.303342][ T7899] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.332006][ T7905] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 194.338624][ T7905] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 194.346399][ T7905] vhci_hcd vhci_hcd.0: Device attached [ 194.392162][ T7909] vhci_hcd: connection closed [ 194.392419][ T6198] vhci_hcd: stop threads [ 194.401479][ T6198] vhci_hcd: release socket [ 194.405936][ T6198] vhci_hcd: disconnect device [ 194.751998][ T7917] Falling back ldisc for ttyS3. [ 194.879253][ T7928] lo speed is unknown, defaulting to 1000 [ 194.887227][ T7928] lo speed is unknown, defaulting to 1000 [ 195.040020][ T7933] random: crng reseeded on system resumption [ 195.110655][ T7927] net_ratelimit: 41 callbacks suppressed [ 195.110721][ T7927] netlink: zone id is out of range [ 195.250440][ T7927] netlink: zone id is out of range [ 195.309048][ T7927] netlink: zone id is out of range [ 195.352171][ T7927] netlink: zone id is out of range [ 195.402410][ T7927] netlink: zone id is out of range [ 195.593686][ T7927] netlink: zone id is out of range [ 195.620791][ T7927] netlink: zone id is out of range [ 195.636186][ T7927] netlink: zone id is out of range [ 195.659732][ T7927] netlink: zone id is out of range [ 195.680355][ T7927] netlink: zone id is out of range [ 195.695856][ T7936] lo speed is unknown, defaulting to 1000 [ 195.723192][ T7936] lo speed is unknown, defaulting to 1000 [ 196.032852][ T7953] GUP no longer grows the stack in syz.1.1294 (7953): 200000004000-200000008000 (200000002000) [ 196.043423][ T7953] CPU: 1 UID: 0 PID: 7953 Comm: syz.1.1294 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 196.043518][ T7953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.043531][ T7953] Call Trace: [ 196.043562][ T7953] [ 196.043569][ T7953] __dump_stack+0x1d/0x30 [ 196.043605][ T7953] dump_stack_lvl+0xe8/0x140 [ 196.043630][ T7953] dump_stack+0x15/0x1b [ 196.043652][ T7953] __get_user_pages+0x199d/0x1fb0 [ 196.043690][ T7953] ? __rcu_read_unlock+0x4f/0x70 [ 196.043720][ T7953] get_user_pages_remote+0x1dc/0x7a0 [ 196.043795][ T7953] __access_remote_vm+0x156/0x560 [ 196.043829][ T7953] access_remote_vm+0x32/0x40 [ 196.043865][ T7953] proc_pid_cmdline_read+0x30f/0x6a0 [ 196.043908][ T7953] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 196.043939][ T7953] vfs_readv+0x3fb/0x690 [ 196.043969][ T7953] ? restore_fpregs_from_fpstate+0x61/0x120 [ 196.044038][ T7953] __x64_sys_preadv+0xfd/0x1c0 [ 196.044062][ T7953] x64_sys_call+0x1503/0x2fb0 [ 196.044089][ T7953] do_syscall_64+0xd2/0x200 [ 196.044112][ T7953] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 196.044159][ T7953] ? clear_bhb_loop+0x40/0x90 [ 196.044196][ T7953] ? clear_bhb_loop+0x40/0x90 [ 196.044220][ T7953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.044246][ T7953] RIP: 0033:0x7fae2f6ae929 [ 196.044314][ T7953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.044341][ T7953] RSP: 002b:00007fae2dd17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 196.044357][ T7953] RAX: ffffffffffffffda RBX: 00007fae2f8d5fa0 RCX: 00007fae2f6ae929 [ 196.044367][ T7953] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 000000000000000a [ 196.044378][ T7953] RBP: 00007fae2f730b39 R08: 0000000000000200 R09: 0000000000000000 [ 196.044388][ T7953] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 196.044402][ T7953] R13: 0000000000000000 R14: 00007fae2f8d5fa0 R15: 00007fff185cea98 [ 196.044509][ T7953] [ 196.412083][ T7930] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 196.436019][ T7967] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 196.442757][ T7967] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 196.450601][ T7967] vhci_hcd vhci_hcd.0: Device attached [ 196.463841][ T7969] vhci_hcd: connection closed [ 196.464095][ T6208] vhci_hcd: stop threads [ 196.473091][ T6208] vhci_hcd: release socket [ 196.477536][ T6208] vhci_hcd: disconnect device [ 196.516186][ T7974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1301'. [ 196.913918][ T7982] lo speed is unknown, defaulting to 1000 [ 196.921664][ T7982] lo speed is unknown, defaulting to 1000 [ 197.217681][ T7989] lo speed is unknown, defaulting to 1000 [ 197.224624][ T7989] lo speed is unknown, defaulting to 1000 [ 197.421011][ T7997] netlink: 'syz.4.1307': attribute type 10 has an invalid length. [ 197.505898][ T8001] ipvlan2: entered promiscuous mode [ 197.512706][ T8001] bridge0: port 1(ipvlan2) entered blocking state [ 197.519166][ T8001] bridge0: port 1(ipvlan2) entered disabled state [ 197.549932][ T8001] ipvlan2: entered allmulticast mode [ 197.555332][ T8001] bridge0: entered allmulticast mode [ 197.592668][ T8001] ipvlan2: left allmulticast mode [ 197.597856][ T8001] bridge0: left allmulticast mode [ 197.627297][ T29] kauditd_printk_skb: 527 callbacks suppressed [ 197.627312][ T29] audit: type=1400 audit(1750132634.689:11499): avc: denied { ioctl } for pid=8000 comm="syz.4.1309" path="socket:[20777]" dev="sockfs" ino=20777 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.684946][ T29] audit: type=1400 audit(1750132634.749:11500): avc: denied { read } for pid=8012 comm="syz.2.1314" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.708598][ T29] audit: type=1400 audit(1750132634.749:11501): avc: denied { open } for pid=8012 comm="syz.2.1314" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.780136][ T29] audit: type=1326 audit(1750132634.829:11502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 197.803722][ T29] audit: type=1326 audit(1750132634.829:11503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 197.827221][ T29] audit: type=1326 audit(1750132634.829:11504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 197.850726][ T29] audit: type=1326 audit(1750132634.829:11505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae2f6b0847 code=0x7ffc0000 [ 197.874133][ T29] audit: type=1326 audit(1750132634.829:11506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 197.897762][ T29] audit: type=1326 audit(1750132634.829:11507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 197.897792][ T29] audit: type=1326 audit(1750132634.829:11508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 197.919942][ T8021] lo speed is unknown, defaulting to 1000 [ 197.920846][ T8021] lo speed is unknown, defaulting to 1000 [ 198.084805][ T8002] tipc: Can't bind to reserved service type 0 [ 198.119329][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'. [ 198.149311][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'. [ 198.166772][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'. [ 198.179409][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'. [ 198.379218][ T8027] loop1: detected capacity change from 0 to 512 [ 198.433904][ T8027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.446498][ T8027] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.571524][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 198.645858][ T8037] lo speed is unknown, defaulting to 1000 [ 198.664193][ T8037] lo speed is unknown, defaulting to 1000 [ 199.026661][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 199.097537][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'. [ 199.131480][ T8062] random: crng reseeded on system resumption [ 199.199089][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.241584][ T8064] loop1: detected capacity change from 0 to 1024 [ 199.268023][ T8064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.280438][ T8064] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.361248][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.381633][ T8074] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 199.558969][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 199.658572][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 199.690236][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 199.693774][ T8097] xt_connbytes: Forcing CT accounting to be enabled [ 199.707772][ T8097] Cannot find set identified by id 0 to match [ 199.837524][ T8102] loop0: detected capacity change from 0 to 1024 [ 199.859890][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1339'. [ 199.871041][ T8105] random: crng reseeded on system resumption [ 199.881563][ T8102] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 199.918883][ T8104] team0 (unregistering): Port device team_slave_0 removed [ 199.943299][ T8104] team0 (unregistering): Port device team_slave_1 removed [ 199.955524][ T36] syz!: Port: 1 Link DOWN [ 200.302073][ T8113] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1341'. [ 200.608122][ T8102] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1349: Invalid block bitmap block 0 in block_group 0 [ 200.638033][ T8102] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1349: Failed to acquire dquot type 0 [ 200.722508][ T8102] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.1349: Freeing blocks not in datazone - block = 0, count = 4096 [ 200.755911][ T8102] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1349: Invalid inode bitmap blk 0 in block_group 0 [ 200.770053][ T8129] blktrace: Concurrent blktraces are not allowed on loop9 [ 200.791932][ T6202] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:22: Failed to release dquot type 0 [ 200.817209][ T8102] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 200.831613][ T8102] EXT4-fs (loop0): 1 orphan inode deleted [ 200.837796][ T8102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.886476][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.899855][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1348'. [ 201.020984][ T8146] SELinux: syz.3.1350 (8146) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 201.070704][ T8146] wireguard0: entered promiscuous mode [ 201.076392][ T8146] wireguard0: entered allmulticast mode [ 201.368364][ T8152] random: crng reseeded on system resumption [ 201.387175][ T8154] loop1: detected capacity change from 0 to 1024 [ 201.407950][ T8154] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.433002][ T8154] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1356: Invalid block bitmap block 0 in block_group 0 [ 201.453066][ T8154] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1356: Failed to acquire dquot type 0 [ 201.481147][ T8154] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.1356: Freeing blocks not in datazone - block = 0, count = 4096 [ 201.494713][ T8154] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1356: Invalid inode bitmap blk 0 in block_group 0 [ 201.515059][ T6202] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:22: Failed to release dquot type 0 [ 201.517704][ T8154] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 201.558546][ T8154] EXT4-fs (loop1): 1 orphan inode deleted [ 201.572616][ T8154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.625724][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.659125][ T8184] loop1: detected capacity change from 0 to 256 [ 201.893650][ T8215] loop1: detected capacity change from 0 to 512 [ 201.931302][ T8215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 201.957045][ T8215] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 202.009839][ T8215] block device autoloading is deprecated and will be removed. [ 202.300035][ T8267] loop3: detected capacity change from 0 to 128 [ 202.332600][ T8267] vfat: Unknown parameter '18446744073709551615j‰ù× òLG4ãwv/΄}] ¶Î¾šË֨ݥ°¶â²ÔH&ॷsÍøo^H”Æb]ùQéQ S«Ñ©"ô[bk°Iê”Q-Jˆ¶z#dï;¡$' [ 202.430017][ T8279] lo speed is unknown, defaulting to 1000 [ 202.442609][ T8279] lo speed is unknown, defaulting to 1000 [ 202.590882][ T8289] loop3: detected capacity change from 0 to 1024 [ 202.604913][ T8289] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.610405][ T8289] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1369: Invalid block bitmap block 0 in block_group 0 [ 202.610825][ T8289] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1369: Failed to acquire dquot type 0 [ 202.611693][ T8289] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.1369: Freeing blocks not in datazone - block = 0, count = 4096 [ 202.612090][ T8289] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1369: Invalid inode bitmap blk 0 in block_group 0 [ 202.612404][ T8289] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 202.612694][ T8289] EXT4-fs (loop3): 1 orphan inode deleted [ 202.613140][ T8289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.622564][ T6214] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:34: Failed to release dquot type 0 [ 202.674841][ T8281] lo speed is unknown, defaulting to 1000 [ 202.700908][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.702999][ T8281] lo speed is unknown, defaulting to 1000 [ 202.733466][ T8302] loop3: detected capacity change from 0 to 256 [ 202.768700][ T8303] block device autoloading is deprecated and will be removed. [ 202.909075][ T8305] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 203.066656][ T8312] loop3: detected capacity change from 0 to 512 [ 203.070616][ T8312] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.070745][ T8312] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 203.073301][ T8312] blktrace: Concurrent blktraces are not allowed on loop7 [ 203.102661][ T3397] hid-generic 0000:0800:0001.0002: item fetching failed at offset 0/3 [ 203.102802][ T3397] hid-generic 0000:0800:0001.0002: probe with driver hid-generic failed with error -22 [ 203.108526][ T8316] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 203.108685][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 203.108702][ T29] audit: type=1400 audit(1750132640.169:12013): avc: denied { relabelto } for pid=8315 comm="+}[@" name="280" dev="tmpfs" ino=1557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 203.110829][ T29] audit: type=1400 audit(1750132640.169:12014): avc: denied { associate } for pid=8315 comm="+}[@" name="280" dev="tmpfs" ino=1557 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 203.151710][ T8318] loop3: detected capacity change from 0 to 256 [ 203.176719][ T8320] netlink: 'syz.4.1381': attribute type 27 has an invalid length. [ 203.251965][ T29] audit: type=1326 audit(1750132640.289:12015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 203.341526][ T29] audit: type=1326 audit(1750132640.289:12016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 203.365006][ T29] audit: type=1326 audit(1750132640.289:12017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 203.388410][ T29] audit: type=1326 audit(1750132640.289:12018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 203.411953][ T29] audit: type=1326 audit(1750132640.289:12019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 203.435469][ T29] audit: type=1326 audit(1750132640.289:12020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae2f6b0847 code=0x7ffc0000 [ 203.458866][ T29] audit: type=1326 audit(1750132640.289:12021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 203.482492][ T29] audit: type=1326 audit(1750132640.289:12022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 203.542270][ T8320] 1ªX¹¦À: left allmulticast mode [ 203.632036][ T8320] veth0_vlan: left allmulticast mode [ 203.657204][ T8320] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.664724][ T8336] loop0: detected capacity change from 0 to 256 [ 203.665647][ T8320] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.680285][ T8320] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.688755][ T8320] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.694236][ T8338] loop3: detected capacity change from 0 to 256 [ 203.712666][ T8320] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.721224][ T8320] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.729685][ T8320] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.738093][ T8320] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.777854][ T8342] __nla_validate_parse: 2 callbacks suppressed [ 203.777869][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 203.811454][ T8325] syz_tun: entered allmulticast mode [ 203.817057][ T3397] lo speed is unknown, defaulting to 1000 [ 203.822876][ T3397] s…z0: Port: 1 Link DOWN [ 203.885239][ T8349] netlink: 'syz.0.1387': attribute type 10 has an invalid length. [ 203.908207][ T8351] loop1: detected capacity change from 0 to 256 [ 203.987849][ T8320] net_ratelimit: 41 callbacks suppressed [ 203.987861][ T8320] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 204.009546][ T3397] lo speed is unknown, defaulting to 1000 [ 204.015417][ T3397] s…z0: Port: 1 Link ACTIVE [ 204.029955][ T8355] loop0: detected capacity change from 0 to 512 [ 204.043282][ T8355] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 204.053930][ T8355] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 204.088346][ T8357] loop0: detected capacity change from 0 to 512 [ 204.097346][ T8357] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 204.120795][ T8357] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 204.297681][ T8364] loop0: detected capacity change from 0 to 128 [ 204.344186][ T8364] bio_check_eod: 29 callbacks suppressed [ 204.344235][ T8364] syz.0.1392: attempt to access beyond end of device [ 204.344235][ T8364] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 204.397771][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 204.423170][ T8368] loop1: detected capacity change from 0 to 1024 [ 204.432070][ T8368] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 204.452193][ T8368] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1394: Invalid block bitmap block 0 in block_group 0 [ 204.466156][ T8368] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1394: Failed to acquire dquot type 0 [ 204.477636][ T8368] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.1394: Freeing blocks not in datazone - block = 0, count = 4096 [ 204.491515][ T8368] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1394: Invalid inode bitmap blk 0 in block_group 0 [ 204.501818][ T8373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8373 comm=syz.2.1396 [ 204.504539][ T6206] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 0 [ 204.517245][ T8368] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 204.537100][ T8368] EXT4-fs (loop1): 1 orphan inode deleted [ 204.543336][ T8368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.566654][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.354719][ T8382] loop3: detected capacity change from 0 to 256 [ 206.490376][ T8390] loop1: detected capacity change from 0 to 256 [ 206.600768][ T8397] lo speed is unknown, defaulting to 1000 [ 206.608166][ T8397] lo speed is unknown, defaulting to 1000 [ 206.794889][ T8408] loop3: detected capacity change from 0 to 256 [ 207.008116][ T8418] loop3: detected capacity change from 0 to 512 [ 207.025437][ T8416] loop0: detected capacity change from 0 to 8192 [ 207.045507][ T8418] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.092200][ T8418] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 207.356511][ T8410] Set syz1 is full, maxelem 65536 reached [ 207.420627][ T8429] loop1: detected capacity change from 0 to 256 [ 207.892533][ T8319] syz_tun: left allmulticast mode [ 207.912003][ T8432] Falling back ldisc for ttyS3. [ 207.980724][ T8444] netlink: 'syz.4.1410': attribute type 10 has an invalid length. [ 208.113660][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 208.113683][ T29] audit: type=1326 audit(1750132645.179:12233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0ba51ce929 code=0x7ffc0000 [ 208.172694][ T29] audit: type=1326 audit(1750132645.209:12234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0ba51ce929 code=0x7ffc0000 [ 208.196463][ T29] audit: type=1326 audit(1750132645.219:12235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0ba51ce929 code=0x7ffc0000 [ 208.220022][ T29] audit: type=1326 audit(1750132645.229:12236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0ba51ce929 code=0x7ffc0000 [ 208.324375][ T29] audit: type=1326 audit(1750132645.309:12237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0ba51ce929 code=0x7ffc0000 [ 208.324438][ T29] audit: type=1326 audit(1750132645.319:12238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0ba51ce929 code=0x7ffc0000 [ 208.324460][ T29] audit: type=1326 audit(1750132645.329:12239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0ba51ce929 code=0x7ffc0000 [ 208.324481][ T29] audit: type=1326 audit(1750132645.339:12240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0ba51ce929 code=0x7ffc0000 [ 208.324578][ T29] audit: type=1326 audit(1750132645.349:12241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0ba51ce929 code=0x7ffc0000 [ 208.324623][ T29] audit: type=1326 audit(1750132645.359:12242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f0ba51ce929 code=0x7ffc0000 [ 208.384919][ T8472] loop0: detected capacity change from 0 to 1024 [ 208.385605][ T8472] EXT4-fs: Ignoring removed nobh option [ 208.385628][ T8472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.414806][ T8472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.436225][ T8472] syzkaller1: entered promiscuous mode [ 208.436244][ T8472] syzkaller1: entered allmulticast mode [ 208.578319][ T3315] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 208.578874][ T3315] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 208.718100][ T8483] loop3: detected capacity change from 0 to 2048 [ 208.734562][ T8483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.761680][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 208.781173][ T8483] hsr_slave_0 (unregistering): left promiscuous mode [ 208.903979][ T3839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.912888][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.167808][ T8510] loop3: detected capacity change from 0 to 1024 [ 209.183619][ T8510] EXT4-fs: dax option not supported [ 209.247190][ T8510] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1424'. [ 209.309139][ T8502] lo speed is unknown, defaulting to 1000 [ 209.315899][ T8502] lo speed is unknown, defaulting to 1000 [ 209.664675][ T8502] chnl_net:caif_netlink_parms(): no params data found [ 209.832348][ T6209] hsr_slave_0: left promiscuous mode [ 209.846039][ T6209] hsr_slave_1: left promiscuous mode [ 210.391674][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.398794][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.408682][ T8502] bridge_slave_0: entered allmulticast mode [ 210.415145][ T8502] bridge_slave_0: entered promiscuous mode [ 210.422349][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.429542][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.436933][ T8502] bridge_slave_1: entered allmulticast mode [ 210.443812][ T8502] bridge_slave_1: entered promiscuous mode [ 210.475457][ T8502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.486721][ T8560] lo speed is unknown, defaulting to 1000 [ 210.494298][ T8560] lo speed is unknown, defaulting to 1000 [ 210.506037][ T8502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.561989][ T8563] Falling back ldisc for ttyS3. [ 210.616725][ T8583] loop3: detected capacity change from 0 to 256 [ 210.637024][ T8502] team0: Port device team_slave_0 added [ 210.652310][ T8502] team0: Port device team_slave_1 added [ 210.698356][ T6209] IPVS: stop unused estimator thread 0... [ 210.708470][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.715480][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.741573][ T8502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.786823][ T8594] loop3: detected capacity change from 0 to 512 [ 210.798911][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.805961][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.831946][ T8502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.857523][ T8594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.880229][ T8593] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1438'. [ 210.910508][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'. [ 210.940740][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.947125][ T8502] hsr_slave_0: entered promiscuous mode [ 210.962537][ T8502] hsr_slave_1: entered promiscuous mode [ 210.976657][ T8502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.086768][ T8502] Cannot create hsr debugfs directory [ 211.122651][ T8599] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 211.157060][ T8599] (: renamed from lo (while UP) [ 211.595446][ T8502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.634090][ T8502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.660627][ T8502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.687946][ T8502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.806519][ T8502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.925319][ T8502] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.940671][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.947778][ T6220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.960522][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.967718][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.112336][ T8642] Falling back ldisc for ttyS3. [ 212.313201][ T8650] 9pnet_fd: Insufficient options for proto=fd [ 212.340139][ T8650] lo speed is unknown, defaulting to 1000 [ 212.355563][ T8650] lo speed is unknown, defaulting to 1000 [ 212.361603][ T8650] lo speed is unknown, defaulting to 1000 [ 212.369381][ T8650] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 212.377449][ T8502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.430014][ T8650] lo speed is unknown, defaulting to 1000 [ 212.444458][ T8650] lo speed is unknown, defaulting to 1000 [ 212.445666][ T8671] loop3: detected capacity change from 0 to 256 [ 212.457432][ T8650] lo speed is unknown, defaulting to 1000 [ 212.464423][ T8650] lo speed is unknown, defaulting to 1000 [ 212.477653][ T8650] lo speed is unknown, defaulting to 1000 [ 212.567565][ T8684] loop1: detected capacity change from 0 to 1024 [ 212.592271][ T8684] EXT4-fs: dax option not supported [ 212.637266][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1454'. [ 212.637436][ T8684] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.1451'. [ 212.646686][ T8688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1454'. [ 212.691803][ T8502] veth0_vlan: entered promiscuous mode [ 212.702472][ T8502] veth1_vlan: entered promiscuous mode [ 212.731190][ T8502] veth0_macvtap: entered promiscuous mode [ 212.741013][ T8502] veth1_macvtap: entered promiscuous mode [ 212.760360][ T8502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.771162][ T8502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.794253][ T8705] loop1: detected capacity change from 0 to 512 [ 212.807421][ T8502] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.816277][ T8502] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.825072][ T8502] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.833865][ T8502] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.836687][ T8705] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 212.921271][ T8705] EXT4-fs (loop1): 1 truncate cleaned up [ 212.927579][ T8705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.001529][ T8719] loop5: detected capacity change from 0 to 736 [ 213.122717][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.126164][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 213.126179][ T29] audit: type=1326 audit(1750132650.189:12599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f38ef5d58e7 code=0x7ffc0000 [ 213.161359][ T29] audit: type=1326 audit(1750132650.189:12600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38ef57ab19 code=0x7ffc0000 [ 213.184782][ T29] audit: type=1326 audit(1750132650.189:12601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f38ef5de929 code=0x7ffc0000 [ 213.190439][ T8719] rock: directory entry would overflow storage [ 213.209233][ T29] audit: type=1326 audit(1750132650.269:12602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f38ef5d58e7 code=0x7ffc0000 [ 213.214312][ T8719] rock: sig=0x3b10, size=4, remaining=3 [ 213.237634][ T29] audit: type=1326 audit(1750132650.269:12603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38ef57ab19 code=0x7ffc0000 [ 213.266615][ T29] audit: type=1326 audit(1750132650.269:12604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f38ef5de929 code=0x7ffc0000 [ 213.275157][ T8725] loop1: detected capacity change from 0 to 256 [ 213.325406][ T8719] netlink: 'syz.5.1422': attribute type 27 has an invalid length. [ 213.338178][ T29] audit: type=1326 audit(1750132650.379:12605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f38ef5d58e7 code=0x7ffc0000 [ 213.361816][ T29] audit: type=1326 audit(1750132650.379:12606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38ef57ab19 code=0x7ffc0000 [ 213.385387][ T29] audit: type=1326 audit(1750132650.379:12607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f38ef5de929 code=0x7ffc0000 [ 213.462300][ T8731] 9pnet_fd: Insufficient options for proto=fd [ 213.486964][ T29] audit: type=1326 audit(1750132650.419:12608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.2.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f38ef5d58e7 code=0x7ffc0000 [ 213.585307][ T8704] Set syz1 is full, maxelem 65536 reached [ 213.595883][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.603211][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.664527][ T8719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.674350][ T8719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.703534][ T8719] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.712735][ T8719] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.720485][ T8757] loop3: detected capacity change from 0 to 1024 [ 213.722029][ T8719] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.736990][ T8719] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.751565][ T8733] syz_tun: entered allmulticast mode [ 213.758039][ T8757] EXT4-fs: Ignoring removed bh option [ 213.764773][ T8757] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 213.796365][ T8757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.819461][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.843361][ T8758] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.862321][ T8758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.882611][ T8765] ipvlan0: entered promiscuous mode [ 213.901390][ T8765] bridge0: port 1(ipvlan0) entered blocking state [ 213.907957][ T8765] bridge0: port 1(ipvlan0) entered disabled state [ 213.908231][ T8757] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.922865][ T8765] ipvlan0: entered allmulticast mode [ 213.928379][ T8765] bridge0: entered allmulticast mode [ 213.934408][ T8765] ipvlan0: left allmulticast mode [ 213.939461][ T8765] bridge0: left allmulticast mode [ 213.957514][ T8766] netlink: '+}[@': attribute type 13 has an invalid length. [ 213.968018][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 213.977818][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 213.987171][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 213.987260][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.117090][ T8772] loop3: detected capacity change from 0 to 2048 [ 214.135704][ T8772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.273161][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.055515][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1475'. [ 215.240416][ T8842] loop3: detected capacity change from 0 to 1024 [ 215.253259][ T8842] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 215.270621][ T8842] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1477: Invalid block bitmap block 0 in block_group 0 [ 215.284774][ T8842] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1477: Failed to acquire dquot type 0 [ 215.298496][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1479'. [ 215.303307][ T8842] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.1477: Freeing blocks not in datazone - block = 0, count = 4096 [ 215.321038][ T8842] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1477: Invalid inode bitmap blk 0 in block_group 0 [ 215.322177][ T6220] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:40: Failed to release dquot type 0 [ 215.334501][ T8842] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 215.354130][ T8842] EXT4-fs (loop3): 1 orphan inode deleted [ 215.360288][ T8842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.364448][ T8848] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 215.395014][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.413446][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 215.440846][ T8853] ipvlan2: entered promiscuous mode [ 215.447206][ T8853] bridge0: port 1(ipvlan2) entered blocking state [ 215.453797][ T8853] bridge0: port 1(ipvlan2) entered disabled state [ 215.460485][ T8853] ipvlan2: entered allmulticast mode [ 215.465863][ T8853] bridge0: entered allmulticast mode [ 215.471968][ T8853] ipvlan2: left allmulticast mode [ 215.477061][ T8853] bridge0: left allmulticast mode [ 215.494430][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 215.504219][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 215.513652][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 215.523169][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 215.588242][ T8859] loop3: detected capacity change from 0 to 512 [ 215.596766][ T8859] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 215.617591][ T8859] EXT4-fs (loop3): 1 truncate cleaned up [ 215.623984][ T8859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.704078][ T8856] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1482'. [ 215.895002][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.216355][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 216.304280][ T8890] hsr_slave_0 (unregistering): left promiscuous mode [ 216.550983][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 216.848981][ T8915] ipvlan2: entered promiscuous mode [ 216.872449][ T8915] bridge0: port 1(ipvlan2) entered blocking state [ 216.878943][ T8915] bridge0: port 1(ipvlan2) entered disabled state [ 216.898900][ T8915] ipvlan2: entered allmulticast mode [ 216.904325][ T8915] bridge0: entered allmulticast mode [ 216.925510][ T8915] ipvlan2: left allmulticast mode [ 216.930572][ T8915] bridge0: left allmulticast mode [ 217.451941][ T8919] lo speed is unknown, defaulting to 1000 [ 217.468338][ T8919] lo speed is unknown, defaulting to 1000 [ 217.474652][ T8919] lo speed is unknown, defaulting to 1000 [ 218.657873][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 218.657891][ T29] audit: type=1326 audit(1750132655.719:12905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 218.688472][ T29] audit: type=1326 audit(1750132655.719:12906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 218.711980][ T29] audit: type=1326 audit(1750132655.719:12907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 218.735499][ T29] audit: type=1326 audit(1750132655.719:12908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 218.759122][ T29] audit: type=1326 audit(1750132655.719:12909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae2f6b0847 code=0x7ffc0000 [ 218.782643][ T29] audit: type=1326 audit(1750132655.719:12910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 218.806224][ T29] audit: type=1326 audit(1750132655.719:12911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 218.829761][ T29] audit: type=1326 audit(1750132655.719:12912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 218.853357][ T29] audit: type=1326 audit(1750132655.719:12913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 218.876940][ T29] audit: type=1326 audit(1750132655.719:12914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.1.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 219.143646][ T8958] xt_hashlimit: size too large, truncated to 1048576 [ 219.356794][ T8961] lo speed is unknown, defaulting to 1000 [ 219.364144][ T8961] lo speed is unknown, defaulting to 1000 [ 219.370500][ T8961] lo speed is unknown, defaulting to 1000 [ 219.533118][ T8718] syz_tun: left allmulticast mode [ 220.179132][ T8974] rdma_op ffff888139e3cd80 conn xmit_rdma 0000000000000000 [ 220.656103][ T8986] loop5: detected capacity change from 0 to 8192 [ 220.713165][ T8986] loop5: p1 p4 < > [ 220.717276][ T8986] loop5: p1 start 4261412864 is beyond EOD, truncated [ 220.733080][ T2996] loop5: p1 p4 < > [ 220.737019][ T2996] loop5: p1 start 4261412864 is beyond EOD, truncated [ 220.890920][ T8298] udevd[8298]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 220.952269][ T8997] Falling back ldisc for ttyS3. [ 220.958191][ T9002] __nla_validate_parse: 6 callbacks suppressed [ 220.958203][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 221.020612][ T9012] loop5: detected capacity change from 0 to 512 [ 221.045050][ T9012] EXT4-fs: Ignoring removed bh option [ 221.065588][ T9019] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.072828][ T9012] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 221.113284][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 221.123982][ T9012] EXT4-fs (loop5): 1 truncate cleaned up [ 221.151401][ T9012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.247748][ T9012] netlink: 'syz.5.1519': attribute type 4 has an invalid length. [ 221.363069][ T8502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.489982][ T9043] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1523'. [ 221.514718][ T9036] lo speed is unknown, defaulting to 1000 [ 221.544956][ T9036] lo speed is unknown, defaulting to 1000 [ 221.551008][ T9036] lo speed is unknown, defaulting to 1000 [ 221.640748][ T9058] netlink: 'syz.3.1524': attribute type 4 has an invalid length. [ 222.230631][ T9036] netlink: 'syz.3.1524': attribute type 4 has an invalid length. [ 222.437076][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 222.474615][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 222.504349][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 222.523515][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 222.534354][ T9092] loop3: detected capacity change from 0 to 1024 [ 222.558735][ T9089] vhci_hcd: invalid port number 96 [ 222.563925][ T9089] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 222.566169][ T9093] lo speed is unknown, defaulting to 1000 [ 222.582300][ T9093] lo speed is unknown, defaulting to 1000 [ 222.584673][ T9092] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 222.588739][ T9093] lo speed is unknown, defaulting to 1000 [ 222.609778][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 222.623267][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 222.633771][ T9092] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1533: Invalid block bitmap block 0 in block_group 0 [ 222.662598][ T9092] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1533: Failed to acquire dquot type 0 [ 222.668281][ T9094] vhci_hcd: invalid port number 96 [ 222.679138][ T9094] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 222.686884][ T9092] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.1533: Freeing blocks not in datazone - block = 0, count = 4096 [ 222.701038][ T9092] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1533: Invalid inode bitmap blk 0 in block_group 0 [ 222.721505][ T9092] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 222.727615][ T6205] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 0 [ 222.744275][ T9092] EXT4-fs (loop3): 1 orphan inode deleted [ 222.750742][ T9092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.777812][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1536'. [ 222.833649][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.876752][ T9111] bridge_slave_1: left allmulticast mode [ 222.882476][ T9111] bridge_slave_1: left promiscuous mode [ 222.888123][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.933934][ T9115] netlink: zone id is out of range [ 222.939136][ T9115] netlink: zone id is out of range [ 222.952938][ T9115] netlink: zone id is out of range [ 222.958079][ T9115] netlink: zone id is out of range [ 222.963223][ T9115] netlink: zone id is out of range [ 222.968347][ T9115] netlink: zone id is out of range [ 222.973537][ T9115] netlink: zone id is out of range [ 222.978734][ T9115] netlink: zone id is out of range [ 222.983868][ T9115] netlink: zone id is out of range [ 222.988983][ T9115] netlink: zone id is out of range [ 222.997460][ T9113] loop3: detected capacity change from 0 to 512 [ 223.006977][ T9113] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 223.062285][ T9113] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 223.077263][ T9120] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 223.087849][ T9111] bridge_slave_0: left allmulticast mode [ 223.093631][ T9111] bridge_slave_0: left promiscuous mode [ 223.099334][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.301821][ T9134] IPv6: Can't replace route, no match found [ 223.585779][ T9144] lo speed is unknown, defaulting to 1000 [ 223.593745][ T9144] lo speed is unknown, defaulting to 1000 [ 223.600119][ T9144] lo speed is unknown, defaulting to 1000 [ 223.849886][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 223.849898][ T29] audit: type=1326 audit(1750132660.909:13333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 223.890926][ T29] audit: type=1326 audit(1750132660.919:13334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 223.914578][ T29] audit: type=1326 audit(1750132660.919:13335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 223.938322][ T29] audit: type=1326 audit(1750132660.919:13336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 223.961817][ T29] audit: type=1326 audit(1750132660.919:13337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 223.985441][ T29] audit: type=1326 audit(1750132660.919:13338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 223.985476][ T29] audit: type=1326 audit(1750132660.919:13339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 223.985570][ T29] audit: type=1326 audit(1750132660.919:13340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 223.985601][ T29] audit: type=1326 audit(1750132660.919:13341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 223.985626][ T29] audit: type=1326 audit(1750132660.939:13342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.5.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 224.096006][ T9154] loop5: detected capacity change from 0 to 1024 [ 224.160329][ T9154] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 224.177134][ T9154] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1549: Invalid block bitmap block 0 in block_group 0 [ 224.177397][ T9154] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1549: Failed to acquire dquot type 0 [ 224.177509][ T9154] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.1549: Freeing blocks not in datazone - block = 0, count = 4096 [ 224.177762][ T9154] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1549: Invalid inode bitmap blk 0 in block_group 0 [ 224.177839][ T9154] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 224.177956][ T9154] EXT4-fs (loop5): 1 orphan inode deleted [ 224.178325][ T9154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.184303][ T9157] block device autoloading is deprecated and will be removed. [ 224.198913][ T6203] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 0 [ 224.302446][ T9161] loop4: detected capacity change from 0 to 1024 [ 224.322100][ T9161] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 224.350123][ T9164] loop1: detected capacity change from 0 to 512 [ 224.350453][ T8502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.376488][ T9161] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1552: Invalid block bitmap block 0 in block_group 0 [ 224.392292][ T9164] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 224.443492][ T9161] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1552: Failed to acquire dquot type 0 [ 224.462434][ T9164] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 224.485786][ T9166] loop2: detected capacity change from 0 to 8192 [ 224.492506][ T9161] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1552: Freeing blocks not in datazone - block = 0, count = 4096 [ 224.530831][ T9161] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1552: Invalid inode bitmap blk 0 in block_group 0 [ 224.543946][ T6212] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:32: Failed to release dquot type 0 [ 224.556276][ T9161] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 224.565449][ T9161] EXT4-fs (loop4): 1 orphan inode deleted [ 224.571713][ T9161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.613251][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.676350][ T9166] loop2: p1 p4 < > [ 224.680491][ T9166] loop2: p1 start 4261412864 is beyond EOD, truncated [ 224.846113][ T9197] lo speed is unknown, defaulting to 1000 [ 224.853511][ T9197] lo speed is unknown, defaulting to 1000 [ 224.860084][ T9197] lo speed is unknown, defaulting to 1000 [ 224.996701][ T9197] loop5: detected capacity change from 0 to 512 [ 225.011813][ T9197] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 225.090050][ T9197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.102643][ T9197] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.191110][ T9208] loop1: detected capacity change from 0 to 1024 [ 225.206698][ T9208] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 225.253660][ T9208] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1559: Invalid block bitmap block 0 in block_group 0 [ 225.289168][ T9208] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1559: Failed to acquire dquot type 0 [ 225.331935][ T9208] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.1559: Freeing blocks not in datazone - block = 0, count = 4096 [ 225.496839][ T9226] lo speed is unknown, defaulting to 1000 [ 225.504459][ T9226] lo speed is unknown, defaulting to 1000 [ 225.510644][ T9226] lo speed is unknown, defaulting to 1000 [ 225.776003][ T9208] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1559: Invalid inode bitmap blk 0 in block_group 0 [ 225.806432][ T9208] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 225.815575][ T8502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.822277][ T6203] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 0 [ 225.833869][ T9208] EXT4-fs (loop1): 1 orphan inode deleted [ 225.844311][ T9208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.878250][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.982336][ T9238] lo speed is unknown, defaulting to 1000 [ 225.989341][ T9238] lo speed is unknown, defaulting to 1000 [ 225.996146][ T9238] lo speed is unknown, defaulting to 1000 [ 226.165192][ T9256] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 226.256422][ T9255] lo speed is unknown, defaulting to 1000 [ 226.264372][ T9255] lo speed is unknown, defaulting to 1000 [ 226.270748][ T9255] lo speed is unknown, defaulting to 1000 [ 226.473341][ T9250] bond0 (unregistering): Released all slaves [ 226.488890][ T9258] loop3: detected capacity change from 0 to 1024 [ 226.515063][ T9258] EXT4-fs: Ignoring removed orlov option [ 226.539315][ T9258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.732237][ T9282] __nla_validate_parse: 7 callbacks suppressed [ 226.732250][ T9282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1569'. [ 226.825060][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.847464][ T9289] loop1: detected capacity change from 0 to 512 [ 226.854576][ T9289] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 226.872770][ T9289] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 226.918784][ T9282] lo speed is unknown, defaulting to 1000 [ 226.954552][ T9282] lo speed is unknown, defaulting to 1000 [ 226.968459][ T9282] lo speed is unknown, defaulting to 1000 [ 227.005724][ T9303] loop3: detected capacity change from 0 to 1024 [ 227.031088][ T9303] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 227.032096][ T9306] loop1: detected capacity change from 0 to 512 [ 227.086310][ T9303] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1575: Invalid block bitmap block 0 in block_group 0 [ 227.101504][ T9303] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1575: Failed to acquire dquot type 0 [ 227.113245][ T9303] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.1575: Freeing blocks not in datazone - block = 0, count = 4096 [ 227.127715][ T9303] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1575: Invalid inode bitmap blk 0 in block_group 0 [ 227.142033][ T6205] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 0 [ 227.153944][ T9303] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 227.173051][ T9306] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 227.184733][ T9313] loop2: detected capacity change from 0 to 512 [ 227.195071][ T9306] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.1573: iget: bad i_size value: 12154757448730 [ 227.213610][ T9303] EXT4-fs (loop3): 1 orphan inode deleted [ 227.242563][ T9303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.261483][ T9313] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 227.275443][ T9306] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1573: couldn't read orphan inode 13 (err -117) [ 227.323965][ T9313] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 227.359245][ T9313] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #11: comm syz.2.1574: corrupted inode contents [ 227.404181][ T9327] loop5: detected capacity change from 0 to 512 [ 227.414127][ T9306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.448255][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.463873][ T9313] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #11: comm syz.2.1574: mark_inode_dirty error [ 227.479620][ T9306] EXT4-fs warning (device loop1): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 227.506161][ T9306] netlink: 'syz.1.1573': attribute type 10 has an invalid length. [ 227.514075][ T9306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1573'. [ 227.528450][ T9327] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1576: Parent and EA inode have the same ino 15 [ 227.541057][ T9313] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1574: invalid indirect mapped block 1 (level 1) [ 227.541262][ T9306] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.562504][ T9306] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.570680][ T9306] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.578907][ T9306] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.590097][ T9306] team0: Port device geneve1 added [ 227.612756][ T9327] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1576: Parent and EA inode have the same ino 15 [ 227.635601][ T9327] EXT4-fs (loop5): 1 orphan inode deleted [ 227.639399][ T9313] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #11: comm syz.2.1574: corrupted inode contents [ 227.649868][ T9327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.752088][ T9313] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 227.793140][ T9313] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #11: comm syz.2.1574: corrupted inode contents [ 227.816752][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.825988][ T9313] EXT4-fs error (device loop2): ext4_truncate:4597: inode #11: comm syz.2.1574: mark_inode_dirty error [ 227.882667][ T9313] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 227.908555][ T9313] EXT4-fs (loop2): 1 truncate cleaned up [ 227.927083][ T9313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.624747][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.774378][ T8502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.857933][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 228.857945][ T29] audit: type=1326 audit(1750132665.919:13528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 228.888881][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 228.959452][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 229.032068][ T29] audit: type=1326 audit(1750132665.949:13529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 229.055676][ T29] audit: type=1326 audit(1750132665.969:13530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 229.079210][ T29] audit: type=1326 audit(1750132665.969:13531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 229.102840][ T29] audit: type=1326 audit(1750132665.969:13532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 229.126488][ T29] audit: type=1326 audit(1750132665.969:13533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 229.150354][ T29] audit: type=1326 audit(1750132665.969:13534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 229.174042][ T29] audit: type=1326 audit(1750132665.969:13535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 229.197676][ T29] audit: type=1326 audit(1750132665.969:13536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 229.221450][ T29] audit: type=1326 audit(1750132665.969:13537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 229.248488][ T9367] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 229.277822][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 229.278649][ T9368] loop3: detected capacity change from 0 to 512 [ 229.302964][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 229.360851][ T9368] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 229.375596][ T9360] vhci_hcd: invalid port number 96 [ 229.375616][ T9368] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 229.380724][ T9360] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 229.454321][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 229.490824][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 229.516036][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 229.537781][ T9350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1580'. [ 229.551248][ T9355] lo speed is unknown, defaulting to 1000 [ 229.576479][ T9355] lo speed is unknown, defaulting to 1000 [ 229.584450][ T9355] lo speed is unknown, defaulting to 1000 [ 230.051879][ T9401] bond0 (unregistering): left promiscuous mode [ 230.058066][ T9401] bond_slave_1: left promiscuous mode [ 230.090771][ T9401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.124357][ T9416] loop5: detected capacity change from 0 to 164 [ 230.131739][ T9416] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 230.162489][ T9401] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 230.179876][ T9401] bond0 (unregistering): Released all slaves [ 230.313732][ T9402] lo speed is unknown, defaulting to 1000 [ 230.335536][ T9402] lo speed is unknown, defaulting to 1000 [ 230.352613][ T9424] rdma_op ffff888139e3c180 conn xmit_rdma 0000000000000000 [ 230.360142][ T9402] lo speed is unknown, defaulting to 1000 [ 230.443127][ T9426] loop3: detected capacity change from 0 to 512 [ 230.450495][ T9426] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 230.523139][ T9434] loop3: detected capacity change from 0 to 256 [ 230.576287][ T9438] 0·: renamed from hsr_slave_1 [ 230.595402][ T9438] 0·: entered allmulticast mode [ 230.615230][ T9438] net_ratelimit: 24 callbacks suppressed [ 230.615244][ T9438] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 230.728930][ T9444] netlink: 'syz.2.1598': attribute type 298 has an invalid length. [ 230.752292][ T9448] loop3: detected capacity change from 0 to 1024 [ 230.762198][ T9438] ALSA: seq fatal error: cannot create timer (-22) [ 230.801541][ T9448] EXT4-fs: Ignoring removed i_version option [ 230.817051][ T9458] loop5: detected capacity change from 0 to 256 [ 230.824702][ T9460] loop2: detected capacity change from 0 to 164 [ 230.842516][ T9448] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.849014][ T9448] EXT4-fs: Ignoring removed nobh option [ 230.854635][ T9448] EXT4-fs: Ignoring removed bh option [ 230.891692][ T9448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.940571][ T9463] loop4: detected capacity change from 0 to 1024 [ 230.968843][ T9463] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 230.987983][ T9448] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 231.038399][ T9463] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1588: Invalid block bitmap block 0 in block_group 0 [ 231.054060][ T9482] loop1: detected capacity change from 0 to 1024 [ 231.063209][ T9482] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 231.084227][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.084871][ T9463] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1588: Failed to acquire dquot type 0 [ 231.116670][ T9482] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1604: Invalid block bitmap block 0 in block_group 0 [ 231.138147][ T9463] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1588: Freeing blocks not in datazone - block = 0, count = 4096 [ 231.146379][ T9493] loop3: detected capacity change from 0 to 256 [ 231.165049][ T9482] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1604: Failed to acquire dquot type 0 [ 231.176754][ T9463] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1588: Invalid inode bitmap blk 0 in block_group 0 [ 231.187378][ T9482] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.1604: Freeing blocks not in datazone - block = 0, count = 4096 [ 231.203185][ T9463] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 231.209489][ T9482] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1604: Invalid inode bitmap blk 0 in block_group 0 [ 231.224840][ T6209] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 0 [ 231.236645][ T9463] EXT4-fs (loop4): 1 orphan inode deleted [ 231.243177][ T6209] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 0 [ 231.246473][ T9463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.270881][ T9482] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 231.293461][ T9482] EXT4-fs (loop1): 1 orphan inode deleted [ 231.303559][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.330834][ T9482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.383400][ T9507] loop3: detected capacity change from 0 to 512 [ 231.392538][ T9507] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 231.401160][ T9507] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 231.402865][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.410589][ T9507] EXT4-fs (loop3): 1 truncate cleaned up [ 231.430008][ T9507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.458839][ T9517] loop1: detected capacity change from 0 to 1024 [ 231.473584][ T9517] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 231.484556][ T9517] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 231.525327][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.529278][ T9517] JBD2: no valid journal superblock found [ 231.540040][ T9517] EXT4-fs (loop1): Could not load journal inode [ 231.654128][ T9536] loop1: detected capacity change from 0 to 512 [ 231.709617][ T9544] loop4: detected capacity change from 0 to 256 [ 231.798886][ T9559] __nla_validate_parse: 5 callbacks suppressed [ 231.798917][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'. [ 231.820053][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'. [ 231.856627][ T9563] loop4: detected capacity change from 0 to 512 [ 231.860967][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'. [ 231.881703][ T9563] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 231.898353][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'. [ 231.909722][ T9568] loop2: detected capacity change from 0 to 1024 [ 231.916676][ T9563] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 231.926896][ T9568] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 231.938594][ T9568] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1618: Invalid block bitmap block 0 in block_group 0 [ 231.973904][ T9568] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1618: Failed to acquire dquot type 0 [ 232.012877][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'. [ 232.024948][ T9568] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.1618: Freeing blocks not in datazone - block = 0, count = 4096 [ 232.041767][ T9569] lo speed is unknown, defaulting to 1000 [ 232.050115][ T9573] vhci_hcd: invalid port number 96 [ 232.055308][ T9573] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 232.072019][ T9568] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1618: Invalid inode bitmap blk 0 in block_group 0 [ 232.088965][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 232.098077][ T6209] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 0 [ 232.100531][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'. [ 232.110402][ T9568] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 232.129378][ T9568] EXT4-fs (loop2): 1 orphan inode deleted [ 232.136579][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'. [ 232.146019][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1614'. [ 232.161875][ T9568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.163640][ T9569] lo speed is unknown, defaulting to 1000 [ 232.219252][ T9569] lo speed is unknown, defaulting to 1000 [ 232.231808][ T9591] loop4: detected capacity change from 0 to 8192 [ 232.245199][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.444633][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 232.709194][ T9618] loop6: detected capacity change from 0 to 7 [ 232.846899][ T9619] lo speed is unknown, defaulting to 1000 [ 232.853317][ T9619] lo speed is unknown, defaulting to 1000 [ 232.859396][ T9619] lo speed is unknown, defaulting to 1000 [ 233.365472][ T9619] loop1: detected capacity change from 0 to 512 [ 233.543266][ T9621] loop3: detected capacity change from 0 to 164 [ 233.732663][ T9623] loop5: detected capacity change from 0 to 512 [ 233.742559][ T9623] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 234.278116][ T9621] isofs_fill_super: root inode is not a directory. Corrupted media? [ 234.294103][ T9619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.315273][ T9619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.327998][ T9619] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.607437][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.630752][ T29] kauditd_printk_skb: 637 callbacks suppressed [ 234.630766][ T29] audit: type=1326 audit(1750132671.689:14166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 234.691372][ T9628] lo speed is unknown, defaulting to 1000 [ 234.697795][ T9628] lo speed is unknown, defaulting to 1000 [ 234.704076][ T9628] lo speed is unknown, defaulting to 1000 [ 234.711788][ T29] audit: type=1326 audit(1750132671.689:14167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 234.735420][ T29] audit: type=1326 audit(1750132671.689:14168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 234.758953][ T29] audit: type=1326 audit(1750132671.689:14169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 234.782447][ T29] audit: type=1326 audit(1750132671.689:14170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 234.793161][ T9636] loop4: detected capacity change from 0 to 128 [ 234.805996][ T29] audit: type=1326 audit(1750132671.689:14171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 234.835704][ T29] audit: type=1326 audit(1750132671.689:14172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 234.835752][ T29] audit: type=1326 audit(1750132671.699:14173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 234.835774][ T29] audit: type=1326 audit(1750132671.699:14174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 234.906226][ T29] audit: type=1326 audit(1750132671.699:14175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16689ee929 code=0x7ffc0000 [ 235.474523][ T9663] wireguard0: entered promiscuous mode [ 235.480026][ T9663] wireguard0: entered allmulticast mode [ 235.487841][ T9669] loop5: detected capacity change from 0 to 256 [ 235.778825][ T9676] loop2: detected capacity change from 0 to 128 [ 235.902737][ T9676] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.923063][ T9676] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.089413][ T9704] loop5: detected capacity change from 0 to 512 [ 236.116523][ T9694] loop1: detected capacity change from 0 to 2048 [ 236.135050][ T9704] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 236.160477][ T9704] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 236.183263][ T9694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.221398][ T9712] loop5: detected capacity change from 0 to 256 [ 236.258425][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.338971][ T9707] lo speed is unknown, defaulting to 1000 [ 236.345986][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.346118][ T9707] lo speed is unknown, defaulting to 1000 [ 236.362205][ T9707] lo speed is unknown, defaulting to 1000 [ 236.578625][ T9727] loop5: detected capacity change from 0 to 1024 [ 236.585922][ T9727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.595032][ T9727] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 236.611367][ T9727] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 236.621437][ T9727] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.1664: lblock 2 mapped to illegal pblock 2 (length 1) [ 236.636244][ T9727] EXT4-fs (loop5): Remounting filesystem read-only [ 236.643202][ T9727] EXT4-fs (loop5): 1 orphan inode deleted [ 236.649377][ T9727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.662323][ T9727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.997804][ T9742] loop4: detected capacity change from 0 to 1024 [ 237.004923][ T9742] EXT4-fs: Ignoring removed orlov option [ 237.141323][ T9741] lo speed is unknown, defaulting to 1000 [ 237.150687][ T9741] lo speed is unknown, defaulting to 1000 [ 237.157540][ T9741] lo speed is unknown, defaulting to 1000 [ 237.183664][ T9742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.444603][ T9750] loop1: detected capacity change from 0 to 512 [ 237.478862][ T9750] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 237.536914][ T9750] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 237.662950][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.843082][ T9762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=9762 comm=syz.2.1676 [ 237.926963][ T9767] __nla_validate_parse: 1 callbacks suppressed [ 237.926974][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1677'. [ 237.944660][ T9767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.950361][ T9756] program syz.1.1672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.962976][ T9767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.093451][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 238.156521][ T9779] hub 9-0:1.0: USB hub found [ 238.161339][ T9779] hub 9-0:1.0: 8 ports detected [ 238.169754][ T9781] loop1: detected capacity change from 0 to 736 [ 238.189144][ T9783] loop5: detected capacity change from 0 to 256 [ 238.197044][ T9785] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1685'. [ 238.206388][ T9785] 0·: renamed from hsr_slave_1 [ 238.213472][ T9785] 0·: entered allmulticast mode [ 238.218816][ T9781] rock: directory entry would overflow storage [ 238.225063][ T9781] rock: sig=0x3b10, size=4, remaining=3 [ 238.235328][ T9785] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 238.256203][ T9781] netlink: 'syz.1.1683': attribute type 27 has an invalid length. [ 238.267664][ T9785] ALSA: seq fatal error: cannot create timer (-22) [ 238.375703][ T9781] 0ªX¹¦À: left allmulticast mode [ 238.391703][ T9791] loop2: detected capacity change from 0 to 1024 [ 238.399201][ T9791] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 238.492090][ T9781] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.500476][ T9781] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.508931][ T9781] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.517308][ T9781] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.534660][ T9795] hub 9-0:1.0: USB hub found [ 238.539524][ T9795] hub 9-0:1.0: 8 ports detected [ 238.558341][ T9791] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1687: Invalid block bitmap block 0 in block_group 0 [ 238.597898][ T9791] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1687: Failed to acquire dquot type 0 [ 238.648784][ T9791] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.1687: Freeing blocks not in datazone - block = 0, count = 4096 [ 238.767757][ T9791] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1687: Invalid inode bitmap blk 0 in block_group 0 [ 238.793561][ T3390] lo speed is unknown, defaulting to 1000 [ 238.799317][ T3390] syz0: Port: 1 Link DOWN [ 238.807626][ T6212] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:32: Failed to release dquot type 0 [ 238.820368][ T9792] syz_tun: entered allmulticast mode [ 238.821968][ T9791] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 238.854591][ T9791] EXT4-fs (loop2): 1 orphan inode deleted [ 238.860806][ T9791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.877847][ T9794] lo speed is unknown, defaulting to 1000 [ 238.884316][ T9794] lo speed is unknown, defaulting to 1000 [ 238.890376][ T9794] lo speed is unknown, defaulting to 1000 [ 238.933462][ T9781] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.978574][ T9781] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 238.994391][ T3390] lo speed is unknown, defaulting to 1000 [ 239.000220][ T3390] syz0: Port: 1 Link ACTIVE [ 239.049850][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.121232][ T9810] loop2: detected capacity change from 0 to 512 [ 239.156679][ T9810] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 239.170569][ T9810] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 239.171431][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1692'. [ 239.215674][ T9812] netlink: 'syz.4.1692': attribute type 39 has an invalid length. [ 239.238843][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 239.315832][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1696'. [ 239.331296][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 239.378250][ T9824] veth1_to_bridge: left promiscuous mode [ 239.407610][ T9824] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.416100][ T9824] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.424658][ T9824] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.433097][ T9824] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.443544][ T9824] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.451961][ T9824] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.460508][ T9824] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.469019][ T9824] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.483586][ T9780] syz_tun: left allmulticast mode [ 239.533412][ T9838] loop5: detected capacity change from 0 to 256 [ 239.682302][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 239.682324][ T29] audit: type=1326 audit(1750132676.749:14678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 239.712650][ T29] audit: type=1326 audit(1750132676.749:14679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 239.736327][ T29] audit: type=1326 audit(1750132676.749:14680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 239.759942][ T29] audit: type=1326 audit(1750132676.749:14681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 239.783440][ T29] audit: type=1326 audit(1750132676.749:14682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae2f6b0847 code=0x7ffc0000 [ 239.787668][ T9850] loop5: detected capacity change from 0 to 256 [ 239.806802][ T29] audit: type=1326 audit(1750132676.749:14683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 239.806897][ T29] audit: type=1326 audit(1750132676.749:14684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 239.860221][ T29] audit: type=1326 audit(1750132676.749:14685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 239.883735][ T29] audit: type=1326 audit(1750132676.749:14686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 239.907343][ T29] audit: type=1326 audit(1750132676.759:14687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2f6ae929 code=0x7ffc0000 [ 239.935408][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1705'. [ 239.976285][ T9857] wireguard0: entered promiscuous mode [ 239.981801][ T9857] wireguard0: entered allmulticast mode [ 239.992714][ T9855] tipc: Started in network mode [ 239.997677][ T9855] tipc: Node identity 4, cluster identity 4711 [ 240.003885][ T9855] tipc: Node number set to 4 [ 240.046835][ T9863] batadv_slave_0: entered promiscuous mode [ 240.053575][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1708'. [ 240.063994][ T9863] batadv_slave_0 (unregistering): left promiscuous mode [ 240.107227][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 240.136522][ T9868] loop4: detected capacity change from 0 to 128 [ 240.150530][ T9868] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.177214][ T9868] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.253702][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.284918][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.292414][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.299820][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.302547][ T9871] loop5: detected capacity change from 0 to 512 [ 240.329189][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.336672][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.344092][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.351500][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.358946][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.366404][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.373854][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.381259][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.388740][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.396210][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.416864][ T9871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.429707][ T9871] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.443389][ T9876] lo speed is unknown, defaulting to 1000 [ 240.449497][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.453568][ T9876] lo speed is unknown, defaulting to 1000 [ 240.456974][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.456993][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.457010][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.457030][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.467430][ T9876] lo speed is unknown, defaulting to 1000 [ 240.470170][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.505585][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.513015][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.520490][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.527910][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.535315][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.542709][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.550098][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.557587][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.565096][ T3390] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.592296][ T3390] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 240.674666][ T9885] fido_id[9885]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 240.746664][ T8502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.763325][ T9891] random: crng reseeded on system resumption [ 240.784511][ T9891] Restarting kernel threads ... [ 240.808178][ T9891] Done restarting kernel threads. [ 240.817249][ T9895] loop5: detected capacity change from 0 to 512 [ 240.826404][ T9891] 0ªX¹¦À: renamed from 61ªX¹¦À [ 240.835637][ T9891] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 240.853969][ T9895] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 240.867735][ T9895] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 240.975780][ T9908] loop3: detected capacity change from 0 to 256 [ 240.984253][ T9898] netlink: 'syz.2.1720': attribute type 15 has an invalid length. [ 240.994449][ T9898] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.002654][ T9898] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.010831][ T9898] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.019093][ T9898] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.033003][ T9898] vxlan1: entered promiscuous mode [ 241.064672][ T9912] loop5: detected capacity change from 0 to 512 [ 241.092220][ T9912] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 241.100367][ T9912] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.1723: iget: bad i_size value: 12154757448730 [ 241.101674][ T9911] loop4: detected capacity change from 0 to 1024 [ 241.122837][ T9911] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 241.136458][ T9912] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1723: couldn't read orphan inode 13 (err -117) [ 241.142756][ T9911] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1725: Invalid block bitmap block 0 in block_group 0 [ 241.149152][ T9912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.162436][ T9911] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1725: Failed to acquire dquot type 0 [ 241.184077][ T9912] EXT4-fs warning (device loop5): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 241.197485][ T9912] netlink: 'syz.5.1723': attribute type 10 has an invalid length. [ 241.211904][ T9911] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1725: Freeing blocks not in datazone - block = 0, count = 4096 [ 241.225035][ T9912] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.234002][ T9912] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.234423][ T9911] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1725: Invalid inode bitmap blk 0 in block_group 0 [ 241.242707][ T9912] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.255471][ T6220] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:40: Failed to release dquot type 0 [ 241.264017][ T9912] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.275774][ T9911] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 241.293889][ T9912] team0: Port device geneve1 added [ 241.301430][ T9911] EXT4-fs (loop4): 1 orphan inode deleted [ 241.308827][ T9911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.338972][ T9925] loop1: detected capacity change from 0 to 512 [ 241.359028][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.368902][ T9925] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 241.377126][ T9925] EXT4-fs (loop1): orphan cleanup on readonly fs [ 241.383786][ T9925] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 241.398929][ T9925] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 241.413227][ T9925] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1729: bg 0: block 40: padding at end of block bitmap is not set [ 241.427951][ T9925] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 241.441054][ T9925] EXT4-fs (loop1): 1 truncate cleaned up [ 241.447254][ T9925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.470163][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.490476][ T9935] loop1: detected capacity change from 0 to 512 [ 241.500140][ T9935] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 241.510824][ T9935] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 241.805943][ T8502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.830915][ T9948] loop5: detected capacity change from 0 to 256 [ 241.961358][ T9958] loop5: detected capacity change from 0 to 1024 [ 241.984356][ T9958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.223504][ T9980] loop2: detected capacity change from 0 to 512 [ 242.251276][ T9980] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 242.354344][ T9980] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 242.419476][ T9981] loop1: detected capacity change from 0 to 512 [ 242.579461][ T9981] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1743: Parent and EA inode have the same ino 15 [ 242.662241][ T9981] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1743: Parent and EA inode have the same ino 15 [ 242.664636][ T9993] loop2: detected capacity change from 0 to 2048 [ 242.705691][ T9983] lo speed is unknown, defaulting to 1000 [ 242.720369][ T9983] lo speed is unknown, defaulting to 1000 [ 242.733438][ T9983] lo speed is unknown, defaulting to 1000 [ 242.758057][ T9993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.770701][ T9981] EXT4-fs (loop1): 1 orphan inode deleted [ 242.862689][ T8502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.866549][ T9981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.011873][T10014] __nla_validate_parse: 7 callbacks suppressed [ 243.011956][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1749'. [ 243.104146][T10024] loop3: detected capacity change from 0 to 256 [ 243.122999][T10026] loop5: detected capacity change from 0 to 1024 [ 243.141078][T10026] EXT4-fs: Ignoring removed bh option [ 243.238314][T10026] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 243.264421][T10026] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 243.272845][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.296608][ T3308] ================================================================== [ 243.304708][ T3308] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 243.312285][ T3308] [ 243.314610][ T3308] read-write to 0xffff888237d25e68 of 1 bytes by task 9993 on cpu 1: [ 243.322678][ T3308] folio_add_lru+0xa5/0x1f0 [ 243.327200][ T3308] filemap_add_folio+0x129/0x1b0 [ 243.332158][ T3308] page_cache_ra_unbounded+0x1f3/0x380 [ 243.337626][ T3308] page_cache_sync_ra+0x687/0x6a0 [ 243.342657][ T3308] filemap_get_pages+0x2d0/0x1150 [ 243.347688][ T3308] filemap_splice_read+0x333/0x6b0 [ 243.352807][ T3308] ext4_file_splice_read+0x8f/0xb0 [ 243.357920][ T3308] splice_direct_to_actor+0x26c/0x680 [ 243.363296][ T3308] do_splice_direct+0xda/0x150 [ 243.368064][ T3308] do_sendfile+0x380/0x650 [ 243.372480][ T3308] __x64_sys_sendfile64+0x105/0x150 [ 243.377676][ T3308] x64_sys_call+0xb39/0x2fb0 [ 243.382264][ T3308] do_syscall_64+0xd2/0x200 [ 243.386762][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.392650][ T3308] [ 243.394967][ T3308] read to 0xffff888237d25e68 of 1 bytes by task 3308 on cpu 0: [ 243.402504][ T3308] __lru_add_drain_all+0x12b/0x3f0 [ 243.407623][ T3308] lru_add_drain_all+0x10/0x20 [ 243.412402][ T3308] invalidate_bdev+0x47/0x70 [ 243.416987][ T3308] ext4_put_super+0x624/0x7d0 [ 243.421671][ T3308] generic_shutdown_super+0xe6/0x210 [ 243.426962][ T3308] kill_block_super+0x2a/0x70 [ 243.431656][ T3308] ext4_kill_sb+0x42/0x80 [ 243.435981][ T3308] deactivate_locked_super+0x72/0x1c0 [ 243.441369][ T3308] deactivate_super+0x97/0xa0 [ 243.446061][ T3308] cleanup_mnt+0x269/0x2e0 [ 243.450484][ T3308] __cleanup_mnt+0x19/0x20 [ 243.454897][ T3308] task_work_run+0x12e/0x1a0 [ 243.459490][ T3308] exit_to_user_mode_loop+0xe4/0x100 [ 243.464784][ T3308] do_syscall_64+0x1d6/0x200 [ 243.469372][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.475274][ T3308] [ 243.477606][ T3308] value changed: 0x00 -> 0x01 [ 243.482275][ T3308] [ 243.484594][ T3308] Reported by Kernel Concurrency Sanitizer on: [ 243.490747][ T3308] CPU: 0 UID: 0 PID: 3308 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 243.503338][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.513396][ T3308] ================================================================== [ 243.522106][T10026] EXT4-fs (loop5): orphan cleanup on readonly fs [ 243.530031][T10026] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.1753: Invalid inode table block 0 in block_group 0 [ 243.558556][T10026] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 243.584464][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.593758][T10026] EXT4-fs error (device loop5): ext4_quota_write:7322: inode #3: comm syz.5.1753: mark_inode_dirty error [ 243.607553][T10026] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1753: Failed to acquire dquot type 0 [ 243.637869][T10030] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 243.644715][T10026] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.1753: Invalid inode table block 0 in block_group 0 [ 243.659869][T10030] SELinux: failed to load policy [ 243.660194][T10026] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 243.674541][T10026] EXT4-fs error (device loop5): ext4_ext_truncate:4475: inode #15: comm syz.5.1753: mark_inode_dirty error [ 243.686154][T10026] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.1753: Invalid inode table block 0 in block_group 0 [ 243.699113][T10026] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 243.708750][T10026] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 243.717408][T10026] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.1753: Invalid inode table block 0 in block_group 0 [ 243.730129][T10026] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 243.741069][T10030] can0: slcan on ttyS3. [ 243.751871][T10026] EXT4-fs error (device loop5): ext4_truncate:4597: inode #15: comm syz.5.1753: mark_inode_dirty error [ 243.774424][T10026] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 243.783613][T10026] EXT4-fs (loop5): 1 truncate cleaned up [ 243.789834][T10026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.811963][T10030] can0 (unregistered): slcan off ttyS3. [ 243.823367][T10026] syz_tun: entered allmulticast mode [ 243.837345][T10026] syzkaller1: entered promiscuous mode [ 243.842886][T10026] syzkaller1: entered allmulticast mode [ 243.868857][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 243.942270][T10025] syz_tun: left allmulticast mode [ 243.956843][ T8502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.