last executing test programs: 4m27.612741063s ago: executing program 4 (id=5): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) lseek(0xffffffffffffffff, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000200000000000000000000000007100a5abc7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m27.542979534s ago: executing program 4 (id=12): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x3cf67f, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) sendfile(r5, r6, 0x0, 0x1000000201005) lseek(r3, 0x2, 0x4) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r8, 0x0, 0x2, 0x2}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000200000000000000000000000007100a5abc7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m27.366062246s ago: executing program 4 (id=15): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd7, 0x0, 0x5, 0x3, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x58, &(0x7f0000000740)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd}, @in6={0xa, 0x4e23, 0x6, @private1}]}, &(0x7f0000000800)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000880)={r1, 0x2b25}, 0xfede) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0xa043}], 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xfc, 0x553, &(0x7f0000000180)="$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") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x3, 0x5003) syz_open_procfs$namespace(r4, &(0x7f0000000700)='ns/mnt\x00') 4m26.35431453s ago: executing program 4 (id=28): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 4m24.363053977s ago: executing program 4 (id=52): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000200001002abd700000000000020000000000000100000002050013000100"], 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000700), 0x41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x202101, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) 4m24.362734017s ago: executing program 32 (id=52): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000200001002abd700000000000020000000000000100000002050013000100"], 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000700), 0x41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x202101, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) 5.135290711s ago: executing program 5 (id=3317): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = dup3(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(r1, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) 5.078639101s ago: executing program 5 (id=3319): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000040)='devpts\x00', 0x0) r1 = mq_open(&(0x7f0000000280)='\x00', 0x1, 0x1, &(0x7f00000002c0)={0x8, 0xcf, 0x2a758a99, 0x40}) mq_getsetattr(r1, &(0x7f0000000300)={0x8, 0x6, 0x3, 0x8}, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x7fffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000067000000000000d981c11805968488efeb0dfe0683a75d5da018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 2.189334191s ago: executing program 5 (id=3333): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x79a, &(0x7f0000001240)="$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") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) 1.819950636s ago: executing program 5 (id=3383): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, 0x0, 0x2328) 1.682707368s ago: executing program 3 (id=3384): accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x401, 0x7, 0x0, 0x0, 0xb, "72737f805a00005400000077ffeb00"}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001500)={0x8, {"8d503261fe3520d6120604a53b7021df602c1c6805aa445e1d910c07822028a640a177705cb7a136f3fa182537b961b479025d4ca0c5db6fbd41474081649cf5ee75cd8128ca4436014f9f4014767cebcf25f663571a2c9145cdc90202e875585719326319aba7fc0d8e2171dad1d058a86990b82ebe62524c2a452b76a1a8d1959397cf17e95a340ad3e1a5bc4be67955be60e3af280c0927ad9df2baeb645c3fc47f5b5fec5627ea9802d8a6806411de9142933220f28193aba2c21de4ccd95b6740f7bc4e07a0b5f8a56d1d0870511beef10bf374c2f4dededeb36630c1c53cad9c220adcb8fa029981d68f933904fe3ac80b8e1a678ec9bdc8d2439726a0c0b6e7efb3b3c21f656bac4234f9ab49a524e0a3bddc07903680112b983ca2c690a079e1f77e8dbbc0f3b5fe51b686516d25576886c29b70cb1658380b6681b15dce450d6966f9089acb62c1fafaa0961a5a3c01649bd156a1e5e177b7bb16f04f7c256543fa1654d499779565802e82268a75aef61dc063b0d6d740dab58bc6b68d6c0a3572af77aa525f31e34cddf34b332280968d0c8a65ed5688d90f8ab1eab0ae79468bbeed4057630da2b195d2e7586ae6d59229572c83878b7ec9f547793e926b9b4d51f354eb67a79761ff7960a9ed1823ac246a0890e3c950a2ddbedd88d252d8e966845265b20e50b46ce066c441e23c88a14d753bc602f351dc133bd4ecb95c8db3a2434d60efa62109a9c4e19c5d90587c23d98328dd82fdf7d61e922e01c3272f71d20277adb2f91ae8a1fa4e5f80235a1b4304130eadd728cc67f01d4d800a1d580d6c98d173f2507892cbe9b56aebb041efe773569c7f2e2de64dbb3b378572e35da68a1de7d99a771c6ce42a0f875933e6e1a0f9b58e266f249efad1659854b45ec9fb0ff93c6904c814d90dcf10e26cb8f293e0957f41cc6918b54b4adbc30dda052d6afe55fa5ad6e0130593721c03ba095a66f6180aedeb1abb83927c8f36e54df5625d4e229db109f7c12afda09d1d9917de494033950cf77904027ee12f3dea369f14361c327d3d6b817ae5f38e32ef586cfab510aca5e51fa0cf93af8ce578146d825763bba57e681ed94e0e464ee60f7ed373fb641004d858ab98f9311b7ef045e5f34f13c40f9d2175861b0d50b0b6dede74bf56963e1c593c381e5cb4c5daa2a2e7dc260630fbab67e798e616d63fdc699a93112f79ba9c692c0a15ad9c2aa74f47c9d352c7f178183e16a8646fd223598a9f2b17954ddca99d431a279bdff2b03be094947b068093000820cab60107767bedc7d30e214374c9197d371bb38edb35165c26a51a1ae71c3165f3bb7ce52614464ad7fc465700aac6f19c319ec0e6249b317760c8b2a153df400cbd8dcf17e815d82a1e142d33d9744af07ccafa2a26337ec92f770f920e08471c94720fae9fe806e32bb7b20d38d233e695fdfb1e8f87f8040fccf433f8eadb106d039236789fdcfa37ea036c2a426232b68da6e0d3ec5b0dfe1dfc05cf0201c2ff4840e8c3b12c9b9762750bdc0a6e7302bf07924a54261bd72059e1dd8593977ac8cef37ffa18fbf3e957381b8adc3476c5e6fe724357f2cbd64bf5e650e498d579aca5471ee76580c8b4a047b0e8abdc1d841d7373412566f5cd0003b8861e3aaa8dcad8084784b1c8868ab059168d638875fac6f37f92bdc38b2f240b0865ab714f0d0962fca9e1e151a05aff8f0c7ed864bec08c63b6bb2655de5adeacd23d2b544f0d93bfcf71312e4af6073e0908cd870b81eddeed042ce33d15462d3c835d5f796bf29d977e7ac2ea551ce24c4aff7064a9f9bee6f7304b242a3c8c3c40fbf313297c7213c0935e71c22fd02905cf60e1591650e6f1f814010cc860fc4a94d6e61369f9528602207ae7ff40ebf89e5c7704f62f6a0719dd5aff6b3c5dcb6eb9bca3f6f90b3b78f0ed916a6b0bace84b26563a9f966312c2a64762d8c243f59959f9d7545ccb2482e3ee176b63891a5fa0f55ae2f703a23e3abb55009962bafbf8ddca097f42bf31061e606d4cf9dd4c74a7ff0f78805d306e22976feccc40f20f8dd722f94c5a2db83a3ab8a58f53c197d6dcb4c39b5af990b60364ffdea232ee5deca3f80498d0f322740547b22fdb902fa1273ad5f2c52f5317d2f50a0f4302f848c0ec0e48a0ad57937e49f011389590c81843b29862de1cbb0f9ec82f2585aaf4d0ba2c4e30f5ea1bd8bddb01e218af5af4d3dc7235b251023b8eb6d4e649f632416ffa1e2ced7656b8dcc744befc1a923229ca96942f832e1cd45d084dfc5f0ad95a22b926162d3251d25ac68d49439cfb09d830abe9d76d7ad90f3e1fc4c53334d780677eede9a9958e4fe9d56d4654e5527ac82a52e6efda6aabca02225221f67a5979ad1b452ac80258694d464c03e6e0a09ca00f8cb1f8e814c7d1cb6ebffb0361d8954cf8ffcbe6b2b23e6553e5caeecf984f13081ed28d1e3bf808b5bd42358c50fa40409fae401c62bfa6619f120aeed198d4aca9933ff13ffab4987626d9035c7d768869a4367e800a09f578da7daf9977c4b85ff829bb401e41f78c71f9240338bcdeacc78e772dede6110daa8ce1822d8bd397ee15e92f50efab6e2a66050abd2bb98f0b445b3de06736d41f469bde5c4234a4933c3a27be2aefb729b1a38d81ea4c667a66d3ce6cf7f51ef1d08a6dde5052b96f92ce4edab6c6b6afbb9c37a16d18a8967fa8701f78da161a26d095698ab649a6df2226d0e8d63fa76c559b43115126dbd30908410718818cfe9336d3ac86818793701225f03d460f215991893179f8bda4d060ee28060e565e15247fdcaed1c10fdb4b0c383ca8429612527b3e2b74825ca77edced6398b445d7cb8ab695403810fa175b9d706b1f54c920d7b73419f58c1d3eb4a1b4a8efa63634cba00ef8557177708f97e0187127d7dd51b1fe7105877c7cd7f51eac500d541d94efbf43aba630a91b4bd2b506ae24b2764fffd9dfa045c4bf7f91d3a9ff59ca3910428c8416539e3fd9b0f6c02d8e3b8bb3d5b2ed844d73bc4ef207fadb4a066c9ea65b044395f95417ebc6d81e1ebb63c96c2a774b93b0668910ba8a8b2ed2e9f27054364c548fb915aa1c851444fc83dfe16f256d24e122ea7a09687202eacac63f6dfa39db5605a012f2dbaeb8b94c01dfd853e25afd5b698c384fe751047a619ef4d1cce2ef24b35b3ae5d7c694126886435f10f8b0b8528c22fbbc5e3ca4622d05df2e26aaa02e0f59120ebe84e6d0e05e43917a475da8a0574cc0f0692f64692d020a54ee0a2361afab507fcc80c49fd9de0824b5d5e37daa0741bf27f05ad0d1fe23c375848db260e1dd5d4e5ed58e6d83c709ef4f7debe4bff580bd8622f89219d1e03f7958f6b7adad5cd641c279e7c303965da735518a7470c606004413cddca8c46cb5b3db64011edf83c24a4a6de97b7083df65259553baa14b4637605a40607ae3a012f83a218f96ebfda3817c98918a35f6efe9c96220f3a13fb78475ab6094e20b12a2a4ba0cff83d4162cb9d4ce08474efbbe03c3661c960a9fba4e6a213135b4211f3bf4ec1ef27292093573793d0168ffca7561b56c2f1ec8b12d238236c9998f92348e5058a14df58809d8e83667b1b9af9c57a54492316d5168f2b4a39f389aeeb078a5517a9ba95c26d1d26b42161031b70dc074fea82f9560e8ba5330ed128bbf4019933b651bce522da6a19f63e72667a6b8a8e705f316c77e7ede648dc0e80a3988155874bb3cee1f360f94e12d00e55ee3e128774fbacf583a7326f5884ec3b24c4d18b7ffb6185558249c62d35f2c71553b7472818df61419248ccfb11b2c44786c179b461040fb86253a6331e6a23a7a5acffb402f0692ec2fca0ea7e6aaf6f15c7f54146a71f9f9d35131fd199c8004136b227a7231fd69c75c5f39c19722e1227f5f77c93199fed298bec4dcaac722be07e5e2e63f82c808f617121b4f8aa5b2ef0f0037d79b476359b41398fba6903a22688d638343b33f3c08c3ac8a4b105f91931045a54b4cb2ff08c5d23e98caa9cbdb3a9d2df3b4c28ff6724b178fd45487662f73f471e16a0c837a34867c9f56379d9320ad80535042cd7341387565288fb7e6525959f8c63c0d2e1735ca2af245bcdee83ef9732419b742dcac35ddaf62ec162999d77cf048097233550572733e7287d0b43c18cea92a1434410acea49a4901ef11bd1d097409ba96da21c535f33993d92911dcc69e9359e9934f97519b927528f309294ad70060325a1abdf75cc368e2461abe6688040d621bbb5f87d5b66ce85cac6eeda7c284cf1452c32d69b6c0d10a9214e172aab7fffd395d0ebcab675f7fd10cfdffe501db7e707d47f1a79375e33730296e6b56b85208a6140f39944737514bfb8d37c7c76ff167a66a304e5fb0c77d8166212800c72bb7bd1c5ee46f11a630b62a8ec0e8acccfc03734f175c9677a8ab049c16aec2d7d440a32d269cf995b7bb02fc7d0f99debaf76efd094f440dfd98fed6fcde8fda1ba48eef1804b91164b63a2ae9faea6daadb5891817711542badde5a9532746f99aed95941dafe5bdeb83190507cdbf9b3b6aa8d60c96e8f9c829634f2c4d063371daaae7682f85f2171a7cc943e477731bfc8eb4d44802e7d503f604f24e4a768d6ae5b7981379f3f5ac85c643ad371f7d4fa564463fc76d1fabd59ddb0148cbedac9afc700cd90b74f44a490593978942d0afdda6ef26b00d70ca6cbabd26fcdfc9c0611056fdc0b815b6c85f238571b11368aacc544a119a85ac6f95eea5113e705e1fa80f9ae9a15402afdd2c8e9eabfa2ff4524f1daaf26cd3daa1072527feb137387eef7ddda025f173411555212f7a83190a9e0acd5f3c3c6a8085aa93e4c8b7f42af9a90bffca1c3a93a775984e77fc98d45f86dd4f3acad75008abec23142880576e8f3bf3831588e1bae13c5d04c6c7aee5a52ab2085a4d189f24037426d90dfba226756d98fc44b278ffa567cda8896b57b6c843b29eaa84074242694acdf14e71cfd1ec559b293a529571ba649362c2ebd506de885dd91a644a116911efc4655211a80450477efb8d2d9c2b1145d88f012aa5656e39e8d24a9d1c930bf7f25ce771bb5d8d76cd826c690662ac004e9571f2e42938569cea0ae98dff0c8a3730972b28fc06adf960db0ad7f7c9ec5b205120e8f0cbff829fb0c25f8a66a095ec4f5fed7af0cce182880ef997192a6e96a262707496db5d0871afb6721313d78c8fb2ba7622a8a8e18f9c24fa87dd9def2761812261ec9c470662e16a04564389fec2823ff826d9521cd86c235815ae59bed909ec3d4470750f2835469fe72097384120dae1d03b46a68ac37a53f77df24c820ff55af8ba3db02aa9ee56cf28d50c7df22be6512e592ae1f007f262e56263b47abfc20efe50814c205f4008a102a899b089e78d5596ca0f757c01f7ec5b4e5be9c1679f73cbf1c09f76d5f8bdf8150331bfe2277dcd49bdb90911b0cc4a6fcf56cf4392690bdcd2f6615863a8520f65e890af0eaa3a112a56cda470c06707f43ad4c194890aa9a6f88482c65c68095ca5ed4b150526373a05202a44577502ff6d5e455d77aeb974eec3578a3ac594631a963b5f3a808de360d9eacdd03bc6914d4022923e978690da955897859d8a0102d53501b9c8d5a50edb99f8b882a799c4ff13c2c7d07734d71d5a90849dc79c893fddb08595ca3047bfd9a8f1ce9205905d175c50b0f13a6f9c22582267ab5881da01959c61a3586921eaef93885be9bd2cf6bdb126f5170", 0x1000}}, 0x1006) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r4}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000740)=0xff) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000001480)={[{@errors_continue}, {@resuid}, {@noload}, {@dioread_lock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@lazytime}]}, 0xfe, 0x479, &(0x7f00000004c0)="$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") fsmount(r3, 0x0, 0xd) 1.52051627s ago: executing program 5 (id=3386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a0000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 1.271274133s ago: executing program 3 (id=3388): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x6a6e81, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) unshare(0x22020400) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x0) dup3(r1, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {&(0x7f0000000540)}], 0x2, 0x0) 1.214350124s ago: executing program 5 (id=3390): syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0x22, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x12, 0x8, 0x408, 0x0, "67328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c158f5c563524df4f34de949509868d522a81cd34a99546e74c7f8725419f8e1af17a281d0f7914e267c1fc4f70fee6200286b016552268cce85ede55f12704942"}]}, 0x110}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x4, 0x6}, 0x400, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = syz_usb_connect$cdc_ncm(0x1, 0x73, &(0x7f0000000280)=ANY=[@ANYBLOB="12010001020000ff2505a1a44000010203010902610002010190fc0904000001020d0000052406000105240007000d1a01000c05240101030905810320000008d5b251c199a3bf900a0904010000020d00000904010102020d0000090582020800e502100905030220000102f500"/123], &(0x7f00000042c0)={0xa, &(0x7f0000004040)={0xa, 0x6, 0x201, 0xf4, 0x4, 0x3, 0x40, 0xe}, 0x54, &(0x7f0000004080)={0x5, 0xf, 0x54, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "cb7314e227fe9eb92928b4ed6ecf5337"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x4, 0x800}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "bad3ef35787a159559c4e4f6ff5523ba"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x8, 0xff00, 0x1, [0xc0, 0xfff0, 0xffbe00, 0xf0, 0xc0]}]}, 0x4, [{0x8c, &(0x7f0000004100)=@string={0x8c, 0x3, "3b02bbdbf2c4826c522f1bcb4280f74a6bcbf8f2e62d544b03043a1801fe81c98169383775e5d976c3090db3a24d0dbd6a8ac60f7f96beb6974cf32519d2eb9d82f26795e61028b7974e819796dd21c193c13a3f1feac6e109b59b5eed593809ce712d2a098278c46b63f98f440167e19775f14e969e73189458f30c305d902a53cdde8753b645a4f935"}}, {0x57, &(0x7f00000041c0)=@string={0x57, 0x3, "0da29772aaa9f5b8e22ab527fde4c64d6ca66e2c5d712d619961514bbaf46a25b2cd7ecbc471d9e2371af8a7b79ba0f114cb6f20627d7d1331fbfe7e6f9f3c3e2c4b4b6e292ff355fe6c417d542b1371d1c75b1f93"}}, {0x4, &(0x7f0000004240)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000004280)=@lang_id={0x4, 0x3, 0x810}}]}) syz_usb_disconnect(r3) syz_usb_disconnect(r3) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.192390194s ago: executing program 2 (id=3392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 1.114955215s ago: executing program 1 (id=3394): socket$kcm(0x29, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) io_setup(0x8, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x3, 0x1000}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x6, 0xd, {{0x36, 0x4, 0x0, 0x20, 0xd8, 0x65, 0x0, 0x40, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, {[@timestamp={0x44, 0x8, 0x4c, 0x0, 0x8, [0x6]}, @generic={0x83, 0x3, "b6"}, @cipso={0x86, 0x49, 0x3, [{0x7, 0xb, "c05bab776cdfbd3dbd"}, {0x6, 0x10, "da9c1c03efb7ed37331012c9dbdd"}, {0x0, 0xf, "aaa049088b54456c7d969ad7e1"}, {0x7, 0x12, "d508fe9ff839aaaae3095e92a1bd5c21"}, {0x7, 0x7, "671b700363"}]}, @lsrr={0x83, 0x13, 0xa2, [@dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @loopback]}, @lsrr={0x83, 0x17, 0x23, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}]}, @lsrr={0x83, 0x13, 0xeb, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0x4, [@multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x9, 0x0, 0xb, [0x80000000]}]}}}}}) r11 = syz_open_dev$vcsu(&(0x7f0000000280), 0xdd2, 0x200000) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f00000006c0)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xd0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000700)='syzkaller\x00', 0x6, 0xc7, &(0x7f0000000740)=""/199, 0x41000, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0xc, 0x632aeec6, 0x552f}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[r0, r0, r0], &(0x7f0000000900)=[{0x1, 0x4, 0x4, 0x8}, {0x2, 0x5, 0x2, 0x2}, {0x5, 0x4, 0x9}, {0x0, 0x1, 0x0, 0x1}, {0x3, 0x2, 0xd, 0xa}, {0x5, 0x5, 0x1, 0x4}, {0x3, 0x2, 0x10}], 0x10, 0xaef8, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0xa, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x3, 0x3, 0x6, 0x7, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000080)='GPL\x00', 0x6, 0xb0, &(0x7f0000000500)=""/176, 0x41000, 0x24, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1159f, r12, 0x8, &(0x7f0000000b00)=[r0], &(0x7f0000000b40)=[{0x0, 0x1, 0x4, 0x1}, {0x0, 0x3, 0xe, 0x2}, {0x1, 0x2, 0x10, 0x3}, {0x4, 0x4, 0x0, 0x3}, {0x5, 0x5, 0xd, 0x8}, {0x2, 0x5, 0xa, 0x5}, {0x5, 0x4, 0x8, 0xb}, {0x1, 0x2, 0x7, 0x2}], 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) 1.108234666s ago: executing program 2 (id=3395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1.025403287s ago: executing program 1 (id=3397): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r1, 0x0, 0x2328) 1.017714957s ago: executing program 2 (id=3398): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000040)='devpts\x00', 0x0) r1 = mq_open(&(0x7f0000000280)='\x00', 0x1, 0x1, &(0x7f00000002c0)={0x8, 0xcf, 0x2a758a99, 0x40}) mq_getsetattr(r1, &(0x7f0000000300)={0x8, 0x6, 0x3, 0x8}, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x7fffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000067000000000000d981c11805968488efeb0dfe0683a75d5da018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 997.256597ms ago: executing program 0 (id=3399): accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x401, 0x7, 0x0, 0x0, 0xb, "72737f805a00005400000077ffeb00"}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001500)={0x8, {"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", 0x1000}}, 0x1006) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r4}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000740)=0xff) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000001480)={[{@errors_continue}, {@resuid}, {@noload}, {@dioread_lock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@lazytime}]}, 0xfe, 0x479, &(0x7f00000004c0)="$eJzs3EtvG1UbAOB3HCdNeku/fuHS0EKgICIuSZNe6IINCCQWIJBgUcQqOGkV6jaoCRKtIggsghALVIk9YonEL2AFGwSskNjCH6iEUDYtrIzGnkkT1w65OHGKn0ea9pyZcc/7zsyxz5yxG0DHGkr/SCL2R8RvEdEfEcX6HYZqf91ami/9tTRfSqJSef3PJH1Z3FyaL2X/RHVJ7autqFSy+p4G7S6+FTFRLk9dyeqjc5feHZ29eu3p6UsTF6YuTF0eP3v21MljPWfGT7ckzzSvm4MfzBw98tKb118pnbv+9k/fpPHuz7bnebTSUO3oNvRYqxtrswMrykmxjYGwIQey/t5d7f/90RV9y9v648WP2xocsK0qlUql0edzZqEC/Icl0e4IgPbIP+jT+9982aGhx67wx3O1G6A071vZUttSjEK2T3fd/W0r9UbEuYW/v0yX2KZ5CACAlb5Lxz9PNRr/FeLeFfsdzJ6hHIqI/0XE4Yj4f0QMRMQ9EdV974uI+zfYfv0TkjvHP4Ubm0psndLx37PZs63V47989BeHurLagWr+3cn56fLUieyYDEf3nrQ+tuolq33/wq+f16/7LJtmH1ox/kuXtP18LJjFcaNYN0E3OTE30ZLk0/w/ihgsNso/WX4OmETEkYgY3GQb0098fbTZtn/Pfw0teM5U+Sri8dr5X4i6/HNJ0+eTY8+cGT892hvlqROj+VVxp59/WXytWftbyr8F0vO/t+H1X8s/vUdMeiNmr167WH1eO7vxNhZ//6SUNNk2sMnrvyd5o1ruyda9PzE3d2Usoid5Oa32rVo/fvu1eT3fP81/+Hjj/n+4dntWPRIPRER6ER+LiAcj4qHs3D0cEY9ExPE18v/x+Uffabat+flfY1a+hdL8J9c4/+lbXlq6ff43Xui6+MO3zdqvrOv8n6qWhrM163n/W2+AWzl2AAAAcLcoVL8DnxRGlsuFwshI7Tv8A7G3UJ6ZnXvy/Mx7lydr35U/FN2FfKarf8V86Fg2N5zXx+vqJ7N54y+6+qr1kdJMebLdyUOH29ek/0fEwb1d7Y4O2HZ+rwWdS/+HzqX/Q+fS/6Fzbb7/97U0DmCH9TRe/eFOxwG0xcY//3u3JQ5g57n/h86l/0Pn0v+hIzX9bXxhSz/5v1sLxd0RRsNC3+4IIy9EYVeE0brCq5/WusRuiScvFNf9n1lssrCn4aZ2vzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0xj8BAAD//wN/5bI=") fsmount(r3, 0x0, 0xd) 966.454937ms ago: executing program 1 (id=3400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 927.417948ms ago: executing program 2 (id=3401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x10, 0x2, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f00000005c0)={r3, 0xffffffffffffffff, 0x24, 0x7, @val=@netfilter={0x0, 0x0, 0x7fff, 0x1}}, 0x20) 827.235979ms ago: executing program 2 (id=3402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") chown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 792.42909ms ago: executing program 1 (id=3403): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000040)='devpts\x00', 0x0) r1 = mq_open(&(0x7f0000000280)='\x00', 0x1, 0x1, &(0x7f00000002c0)={0x8, 0xcf, 0x2a758a99, 0x40}) mq_getsetattr(r1, &(0x7f0000000300)={0x8, 0x6, 0x3, 0x8}, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x7fffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000067000000000000d981c11805968488efeb0dfe0683a75d5da018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 791.75333ms ago: executing program 2 (id=3404): syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$cgroup_int(r1, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0x22, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x12, 0x8, 0x408, 0x0, "67328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c158f5c563524df4f34de949509868d522a81cd34a99546e74c7f8725419f8e1af17a281d0f7914e267c1fc4f70fee6200286b016552268cce85ede55f12704942"}]}, 0x110}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x4, 0x6}, 0x400, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = syz_usb_connect$cdc_ncm(0x1, 0x73, &(0x7f0000000280)=ANY=[@ANYBLOB="12010001020000ff2505a1a44000010203010902610002010190fc0904000001020d0000052406000105240007000d1a01000c05240101030905810320000008d5b251c199a3bf900a0904010000020d00000904010102020d0000090582020800e502100905030220000102f500"/123], &(0x7f00000042c0)={0xa, &(0x7f0000004040)={0xa, 0x6, 0x201, 0xf4, 0x4, 0x3, 0x40, 0xe}, 0x54, &(0x7f0000004080)={0x5, 0xf, 0x54, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "cb7314e227fe9eb92928b4ed6ecf5337"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x4, 0x800}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "bad3ef35787a159559c4e4f6ff5523ba"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x8, 0xff00, 0x1, [0xc0, 0xfff0, 0xffbe00, 0xf0, 0xc0]}]}, 0x4, [{0x8c, &(0x7f0000004100)=@string={0x8c, 0x3, "3b02bbdbf2c4826c522f1bcb4280f74a6bcbf8f2e62d544b03043a1801fe81c98169383775e5d976c3090db3a24d0dbd6a8ac60f7f96beb6974cf32519d2eb9d82f26795e61028b7974e819796dd21c193c13a3f1feac6e109b59b5eed593809ce712d2a098278c46b63f98f440167e19775f14e969e73189458f30c305d902a53cdde8753b645a4f935"}}, {0x57, &(0x7f00000041c0)=@string={0x57, 0x3, "0da29772aaa9f5b8e22ab527fde4c64d6ca66e2c5d712d619961514bbaf46a25b2cd7ecbc471d9e2371af8a7b79ba0f114cb6f20627d7d1331fbfe7e6f9f3c3e2c4b4b6e292ff355fe6c417d542b1371d1c75b1f93"}}, {0x4, &(0x7f0000004240)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000004280)=@lang_id={0x4, 0x3, 0x810}}]}) syz_usb_disconnect(r3) syz_usb_disconnect(r3) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 749.65223ms ago: executing program 0 (id=3405): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x79a, &(0x7f0000001240)="$eJzs3MFrG1caAPBvJlYcJ96VF/awuWQXEkggRLbjS3KK97LsJRAI9JoaWzbGYytYcmq7gTi9FQppfGlLobT3HnsthPQP6K0EWuith0JpU/fQ9qIiWVYSR1LkRraS9PeDsd4bvZnv+2bk5xnwKIC/rP/UfiQRwxFxJSLyjfVpRByut45EbGyP23p4c7q2JFGtXv0xqW0WW9V8c19J4/VY1DeJf0XE/VzE2beejlteW1+YyrLicqM/Wlm8PlpeWz83vzg1V5wrLo1PXBy7MDFxYWyiZ7Weeu3i0N0v/7e5+dVnlTsnBs4lMVmvOxq19SzQY7aPSS4md61f2o9gfZR0MWbgAPIAAKCz2nX+oca1WS7ycajTVZoLOAAAAHgpVQer3fqt65EAAADACyaJfmcAAAAA7K+d/wPYebZ3v56DbeeH/0bESKv4A/VniCOORC4ijm4lTzx+kGxvBs9l43ZE3Jts8fnr5onmzsYeNYd6s0d67V5t/plsNf+kzfknWsw/AzvfnfCc2s9/j+IfajP/XekyxucfHc+1jX+7vPr2iVbxk2b8pE3817uMf2fznbvt3qt+EnG65d+f5IlYHb4fYnR2Pmv1q9VM9/7vZx60rz/i6FPxk6QeNelc//Uu639z6+eFjQ7xz5zsfP634w8+sV3tM/FuI480Iu42Xmv9zV0xTi5+/cXTkZONnfgzbY5/6/P//2b9H3dZ/7efDq52ORQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq0ogYjiQtNNtpWihEHIuIf8bRNCuVK2dnSytLM7X3IkYil87OZ8WxiMhv95Naf7zeftQ/v6s/ERH/+GZoO+h8VixMl7KZfhcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA07GIGI4kLUREGhG/5NO0UOh3VgAAAEBPDUTESLM31NdcAAAAgP0z0u8EAAAAgH33Z+//kx7nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzSrly+XFuqWw9vTtf6MzfWVhZKN87NFMsLhcWV6cJ0afl6Ya5UmsuKhenS4rP2l0bE+MVYWR2tFMuV0fLa+rXF0spS5dr84tRc8VoxdyBVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsFfD9SVJCxGR1ttpWihE/C0iRiKXzM5nxbGI+HtEPMjnBmv98X4nDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQM+V19YXprKsuPxyN6q9K2cy+l9O141IIl6ANNo0PmiclU5jko2IrPhdY2SfUk0b4Z9nP3tL/tYzDku/G//uw1wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/ldfWF6ayrLhc7ncmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Ff6fRIRteV0/tTw7ncPJ7/m66+XjscbH159b3WqUlker63/aXt9RFTeb6w//9iGtw6yBgAAAHjlXdrL4J379J37eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG6V19YXprKsuLyPjbjdLvrgwRYLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsyR8BAAD///Pvtxo=") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) 641.821832ms ago: executing program 0 (id=3406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 423.296475ms ago: executing program 0 (id=3407): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfdfffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 400.936555ms ago: executing program 3 (id=3408): socket$kcm(0x29, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) io_setup(0x8, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x3, 0x1000}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x6, 0xd, {{0x36, 0x4, 0x0, 0x20, 0xd8, 0x65, 0x0, 0x40, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, {[@timestamp={0x44, 0x8, 0x4c, 0x0, 0x8, [0x6]}, @generic={0x83, 0x3, "b6"}, @cipso={0x86, 0x49, 0x3, [{0x7, 0xb, "c05bab776cdfbd3dbd"}, {0x6, 0x10, "da9c1c03efb7ed37331012c9dbdd"}, {0x0, 0xf, "aaa049088b54456c7d969ad7e1"}, {0x7, 0x12, "d508fe9ff839aaaae3095e92a1bd5c21"}, {0x7, 0x7, "671b700363"}]}, @lsrr={0x83, 0x13, 0xa2, [@dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @loopback]}, @lsrr={0x83, 0x17, 0x23, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}]}, @lsrr={0x83, 0x13, 0xeb, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0x4, [@multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x9, 0x0, 0xb, [0x80000000]}]}}}}}) r11 = syz_open_dev$vcsu(&(0x7f0000000280), 0xdd2, 0x200000) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f00000006c0)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xd0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000700)='syzkaller\x00', 0x6, 0xc7, &(0x7f0000000740)=""/199, 0x41000, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0xc, 0x632aeec6, 0x552f}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[r0, r0, r0], &(0x7f0000000900)=[{0x1, 0x4, 0x4, 0x8}, {0x2, 0x5, 0x2, 0x2}, {0x5, 0x4, 0x9}, {0x0, 0x1, 0x0, 0x1}, {0x3, 0x2, 0xd, 0xa}, {0x5, 0x5, 0x1, 0x4}, {0x3, 0x2, 0x10}], 0x10, 0xaef8, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0xa, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x3, 0x3, 0x6, 0x7, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000080)='GPL\x00', 0x6, 0xb0, &(0x7f0000000500)=""/176, 0x41000, 0x24, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1159f, r12, 0x8, &(0x7f0000000b00)=[r0], &(0x7f0000000b40)=[{0x0, 0x1, 0x4, 0x1}, {0x0, 0x3, 0xe, 0x2}, {0x1, 0x2, 0x10, 0x3}, {0x4, 0x4, 0x0, 0x3}, {0x5, 0x5, 0xd, 0x8}, {0x2, 0x5, 0xa, 0x5}, {0x5, 0x4, 0x8, 0xb}, {0x1, 0x2, 0x7, 0x2}], 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) 322.259996ms ago: executing program 1 (id=3409): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x3cf67f, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = open(0x0, 0x60142, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r6, 0x2007ffb) sendfile(r5, r6, 0x0, 0x1000000201005) lseek(r3, 0x2, 0x4) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r8, 0x0, 0x2, 0x2}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000200000000000000000000000007100a5abc7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 262.336537ms ago: executing program 3 (id=3410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, 0x0, 0x2328) 234.975477ms ago: executing program 1 (id=3411): r0 = semget$private(0x0, 0x4000000009, 0x42a) semop(r0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}], 0x4) semop(r0, &(0x7f0000000200), 0x53) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000580)='kvm_halt_poll_ns\x00', r1, 0x0, 0x80000001}, 0x18) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futex(&(0x7f0000000300)=0x2, 0x7, 0x2, &(0x7f00000003c0)={r4, r5+10000000}, &(0x7f0000000400)=0x2, 0x2) socket(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000340), &(0x7f00000004c0)=r7}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_delneigh={0x30, 0x1e, 0x300, 0x80000, 0x0, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x5, 0x2, 0x3, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5903963197640ec6}, 0x20004800) socket$nl_netfilter(0x10, 0x3, 0xc) 214.253858ms ago: executing program 3 (id=3412): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000040)='devpts\x00', 0x0) r1 = mq_open(&(0x7f0000000280)='\x00', 0x1, 0x1, &(0x7f00000002c0)={0x8, 0xcf, 0x2a758a99, 0x40}) mq_getsetattr(r1, &(0x7f0000000300)={0x8, 0x6, 0x3, 0x8}, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x7fffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000067000000000000d981c11805968488efeb0dfe0683a75d5da018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 176.394568ms ago: executing program 0 (id=3413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 46.89215ms ago: executing program 3 (id=3414): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") chown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 0s ago: executing program 0 (id=3415): accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0xc17a) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x401, 0x7, 0x0, 0x0, 0xb, "72737f805a00005400000077ffeb00"}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001500)={0x8, {"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", 0x1000}}, 0x1006) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r4}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000740)=0xff) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000001480)={[{@errors_continue}, {@resuid}, {@noload}, {@dioread_lock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@lazytime}]}, 0xfe, 0x479, &(0x7f00000004c0)="$eJzs3EtvG1UbAOB3HCdNeku/fuHS0EKgICIuSZNe6IINCCQWIJBgUcQqOGkV6jaoCRKtIggsghALVIk9YonEL2AFGwSskNjCH6iEUDYtrIzGnkkT1w65OHGKn0ea9pyZcc/7zsyxz5yxG0DHGkr/SCL2R8RvEdEfEcX6HYZqf91ami/9tTRfSqJSef3PJH1Z3FyaL2X/RHVJ7autqFSy+p4G7S6+FTFRLk9dyeqjc5feHZ29eu3p6UsTF6YuTF0eP3v21MljPWfGT7ckzzSvm4MfzBw98tKb118pnbv+9k/fpPHuz7bnebTSUO3oNvRYqxtrswMrykmxjYGwIQey/t5d7f/90RV9y9v648WP2xocsK0qlUql0edzZqEC/Icl0e4IgPbIP+jT+9982aGhx67wx3O1G6A071vZUttSjEK2T3fd/W0r9UbEuYW/v0yX2KZ5CACAlb5Lxz9PNRr/FeLeFfsdzJ6hHIqI/0XE4Yj4f0QMRMQ9EdV974uI+zfYfv0TkjvHP4Ubm0psndLx37PZs63V47989BeHurLagWr+3cn56fLUieyYDEf3nrQ+tuolq33/wq+f16/7LJtmH1ox/kuXtP18LJjFcaNYN0E3OTE30ZLk0/w/ihgsNso/WX4OmETEkYgY3GQb0098fbTZtn/Pfw0teM5U+Sri8dr5X4i6/HNJ0+eTY8+cGT892hvlqROj+VVxp59/WXytWftbyr8F0vO/t+H1X8s/vUdMeiNmr167WH1eO7vxNhZ//6SUNNk2sMnrvyd5o1ruyda9PzE3d2Usoid5Oa32rVo/fvu1eT3fP81/+Hjj/n+4dntWPRIPRER6ER+LiAcj4qHs3D0cEY9ExPE18v/x+Uffabat+flfY1a+hdL8J9c4/+lbXlq6ff43Xui6+MO3zdqvrOv8n6qWhrM163n/W2+AWzl2AAAAcLcoVL8DnxRGlsuFwshI7Tv8A7G3UJ6ZnXvy/Mx7lydr35U/FN2FfKarf8V86Fg2N5zXx+vqJ7N54y+6+qr1kdJMebLdyUOH29ek/0fEwb1d7Y4O2HZ+rwWdS/+HzqX/Q+fS/6Fzbb7/97U0DmCH9TRe/eFOxwG0xcY//3u3JQ5g57n/h86l/0Pn0v+hIzX9bXxhSz/5v1sLxd0RRsNC3+4IIy9EYVeE0brCq5/WusRuiScvFNf9n1lssrCn4aZ2vzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0xj8BAAD//wN/5bI=") fsmount(r3, 0x0, 0xd) kernel console output (not intermixed with test programs): phys. 369, len 9 [ 266.425991][ T29] audit: type=1326 audit(1747380545.578:174113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34deb6e969 code=0x7ffc0000 [ 266.449581][T11922] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, [ 266.457611][ T29] audit: type=1326 audit(1747380545.578:174114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f34deb6e969 code=0x7ffc0000 [ 266.481247][T11922] free 0, pa_free 3 [ 266.489767][ T29] audit: type=1326 audit(1747380545.578:174115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34deb6e969 code=0x7ffc0000 [ 266.516446][T11922] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, [ 266.517171][ T29] audit: type=1326 audit(1747380545.578:174116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f34deb6e969 code=0x7ffc0000 [ 266.540911][T11922] inode 18: [ 266.548385][ T29] audit: type=1326 audit(1747380545.578:174117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34deb6e969 code=0x7ffc0000 [ 266.571959][T11922] block 113: [ 266.575193][ T29] audit: type=1326 audit(1747380545.578:174118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f34deb6e969 code=0x7ffc0000 [ 266.575222][ T29] audit: type=1326 audit(1747380545.578:174119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34deb6e969 code=0x7ffc0000 [ 266.598848][T11922] freeing already freed block (bit 7); block bitmap corrupt. [ 266.602066][ T29] audit: type=1326 audit(1747380545.578:174120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f34deb6e969 code=0x7ffc0000 [ 266.680799][ T29] audit: type=1326 audit(1747380545.688:174121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11932 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34deb65927 code=0x7ffc0000 [ 266.682474][T11926] tipc: Resetting bearer [ 266.726062][T11926] tipc: Disabling bearer [ 266.773156][T11939] serio: Serial port ptm0 [ 266.789985][T11941] loop1: detected capacity change from 0 to 2048 [ 266.802036][T11915] lo speed is unknown, defaulting to 1000 [ 266.936372][ T9642] bridge_slave_1: left allmulticast mode [ 266.942238][ T9642] bridge_slave_1: left promiscuous mode [ 266.947959][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.955666][ T9642] bridge_slave_0: left allmulticast mode [ 266.955683][ T9642] bridge_slave_0: left promiscuous mode [ 266.955800][ T9642] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.034410][ T9642]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.044552][ T9642]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.053708][ T9642]  (unregistering): Released all slaves [ 267.071984][T11915] chnl_net:caif_netlink_parms(): no params data found [ 267.072871][T11958] loop1: detected capacity change from 0 to 512 [ 267.094181][ T9642] tipc: Left network mode [ 267.094504][T11958] EXT4-fs (loop1): 1 orphan inode deleted [ 267.105099][T11958] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.115882][ T3414] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 267.150395][T11915] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.157642][T11915] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.164854][T11915] bridge_slave_0: entered allmulticast mode [ 267.171443][T11915] bridge_slave_0: entered promiscuous mode [ 267.180086][ T9642] hsr_slave_0: left promiscuous mode [ 267.186505][ T9642] hsr_slave_1: left promiscuous mode [ 267.192423][ T9642] batman_adv: batadv0: Removing interface: dummy0 [ 267.199257][ T9642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.207025][ T9642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.228466][T11966] loop1: detected capacity change from 0 to 1024 [ 267.243386][T11966] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 267.252756][ T9642] team0 (unregistering): Port device team_slave_1 removed [ 267.263143][ T9642] team0 (unregistering): Port device team_slave_0 removed [ 267.287495][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 267.306218][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.313424][T11915] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.320656][T11915] bridge_slave_1: entered allmulticast mode [ 267.327484][T11915] bridge_slave_1: entered promiscuous mode [ 267.348863][T11915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.366061][T11915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.390785][T11915] team0: Port device team_slave_0 added [ 267.399808][T11915] team0: Port device team_slave_1 added [ 267.422451][T11915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.429460][T11915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.455532][T11915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.468665][T11915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.475711][T11915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.501816][T11915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.532324][T11915] hsr_slave_0: entered promiscuous mode [ 267.538777][T11915] hsr_slave_1: entered promiscuous mode [ 267.544812][T11915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.552578][T11915] Cannot create hsr debugfs directory [ 267.686304][T11971] loop5: detected capacity change from 0 to 1024 [ 267.705634][T11971] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2818: Allocating blocks 465-513 which overlap fs metadata [ 267.720309][T11971] EXT4-fs (loop5): pa ffff888107256c40: logic 256, phys. 369, len 9 [ 267.728384][T11971] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 3 [ 267.738516][T11971] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 267.761555][T11979] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2819'. [ 267.857260][T11915] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.878498][T11915] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.888160][T11915] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.912723][T11915] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.927845][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2821'. [ 267.934817][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.944118][T11915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.944250][T11987] loop5: detected capacity change from 0 to 512 [ 267.951403][T11915] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.951456][T11915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.959327][T11987] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 267.994154][T11915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.007223][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.017011][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.026279][T11987] EXT4-fs (loop5): 1 truncate cleaned up [ 268.044632][T11915] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.057751][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.064971][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.097922][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.105063][ T3414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.146988][T11915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.157428][T11915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.252736][T11915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.399184][T12008] loop5: detected capacity change from 0 to 2048 [ 268.409542][T11915] veth0_vlan: entered promiscuous mode [ 268.422402][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'. [ 268.426744][T11915] veth1_vlan: entered promiscuous mode [ 268.457200][T12008] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.471258][T11915] veth0_macvtap: entered promiscuous mode [ 268.489266][T11915] veth1_macvtap: entered promiscuous mode [ 268.522635][T11915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.540513][T12008] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2826: corrupted xattr block 128: overlapping e_value [ 268.567844][T11915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.598997][T12008] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 268.618325][T11915] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.627382][T11915] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.636215][T11915] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.645058][T11915] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.654037][T12008] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2826: corrupted xattr block 128: overlapping e_value [ 268.674856][T12013] loop3: detected capacity change from 0 to 128 [ 268.694140][T12008] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 268.742485][T12008] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2826: corrupted xattr block 128: overlapping e_value [ 268.757428][T12015] loop3: detected capacity change from 0 to 512 [ 268.774214][T12015] EXT4-fs (loop3): 1 orphan inode deleted [ 268.783226][T12008] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 268.794265][T12015] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.794351][ T9643] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 268.904121][T12024] loop1: detected capacity change from 0 to 512 [ 268.911299][T12024] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 268.923275][T12024] EXT4-fs (loop1): 1 truncate cleaned up [ 268.953717][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2833'. [ 269.138728][T12035] loop5: detected capacity change from 0 to 1024 [ 269.155269][T12035] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2835: Allocating blocks 497-513 which overlap fs metadata [ 269.170097][T12035] EXT4-fs (loop5): pa ffff888105b19f50: logic 256, phys. 369, len 9 [ 269.178182][T12035] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 269.219589][T12042] loop5: detected capacity change from 0 to 256 [ 269.229300][T12042] loop5: detected capacity change from 0 to 512 [ 269.235826][T12042] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 269.324076][T12045] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2837'. [ 269.628321][T12047] loop2: detected capacity change from 0 to 128 [ 269.670559][T12049] loop2: detected capacity change from 0 to 512 [ 269.683466][T12049] EXT4-fs (loop2): 1 orphan inode deleted [ 269.689916][T12049] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.701577][ T9640] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 1 [ 269.750535][T12059] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 269.788023][T12063] loop3: detected capacity change from 0 to 2048 [ 269.804657][T12063] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.892725][T12063] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2843: corrupted xattr block 128: overlapping e_value [ 269.914567][T12063] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 269.926430][T12063] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2843: corrupted xattr block 128: overlapping e_value [ 269.951230][T12063] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 269.960763][T12071] loop1: detected capacity change from 0 to 256 [ 269.967380][T12063] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2843: corrupted xattr block 128: overlapping e_value [ 269.994233][T12063] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 270.062212][T12074] tipc: Enabling of bearer rejected, failed to enable media [ 270.157728][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2849'. [ 270.190775][T12086] loop5: detected capacity change from 0 to 128 [ 270.269309][T12091] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 270.358077][T12096] loop5: detected capacity change from 0 to 512 [ 270.367619][T12098] loop3: detected capacity change from 0 to 256 [ 270.421302][T12096] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 270.485808][T12096] EXT4-fs (loop5): 1 truncate cleaned up [ 270.519602][T12102] tipc: Enabling of bearer rejected, failed to enable media [ 270.590476][T12110] loop5: detected capacity change from 0 to 512 [ 270.702945][T12110] EXT4-fs (loop5): 1 orphan inode deleted [ 270.709327][T12110] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.721580][ T9643] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 270.824556][T12114] loop5: detected capacity change from 0 to 512 [ 270.834837][T12114] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 270.847727][T12114] EXT4-fs (loop5): 1 truncate cleaned up [ 270.875942][T12116] loop3: detected capacity change from 0 to 1024 [ 270.915794][T12116] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2862: Allocating blocks 465-513 which overlap fs metadata [ 270.932589][T12116] EXT4-fs (loop3): pa ffff888105b19f50: logic 256, phys. 369, len 9 [ 270.940647][T12116] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 3 [ 270.951500][T12116] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 270.989566][T12126] loop1: detected capacity change from 0 to 1024 [ 271.007614][T12134] netlink: 'syz.3.2865': attribute type 13 has an invalid length. [ 271.014858][T12126] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2864: Allocating blocks 497-513 which overlap fs metadata [ 271.030433][T12126] EXT4-fs (loop1): pa ffff888105b19f50: logic 256, phys. 369, len 9 [ 271.038673][T12126] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 271.043368][T12134] netlink: 'syz.3.2865': attribute type 21 has an invalid length. [ 271.062049][T12134] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2865'. [ 271.090590][T12136] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 271.107589][T12140] loop1: detected capacity change from 0 to 256 [ 271.169544][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2868'. [ 271.181474][T12147] lo speed is unknown, defaulting to 1000 [ 271.202794][T12142] tipc: Enabling of bearer rejected, failed to enable media [ 271.391155][T12162] tipc: Enabling of bearer rejected, failed to enable media [ 271.460102][T12164] loop5: detected capacity change from 0 to 1024 [ 271.467433][T12171] netlink: 'syz.2.2881': attribute type 13 has an invalid length. [ 271.475490][T12173] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 271.498429][T12164] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2878: Allocating blocks 497-513 which overlap fs metadata [ 271.513610][T12164] EXT4-fs (loop5): pa ffff888105b19e00: logic 256, phys. 369, len 9 [ 271.519225][T12176] loop1: detected capacity change from 0 to 1024 [ 271.521766][T12164] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 271.544704][T12171] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.547111][T12176] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 271.551953][T12171] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.587223][T12182] netlink: 'syz.2.2881': attribute type 21 has an invalid length. [ 271.598479][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2883'. [ 271.613554][T12171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.624139][T12171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.658171][T12171] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.667142][T12171] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.676302][T12171] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.685344][T12171] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.701839][T12182] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2881'. [ 271.988992][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2890'. [ 272.009843][T12205] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 272.073357][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'. [ 272.312279][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2894'. [ 272.323047][T12212] netlink: 'syz.1.2895': attribute type 13 has an invalid length. [ 272.360449][T12212] netlink: 'syz.1.2895': attribute type 21 has an invalid length. [ 272.368615][T12212] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2895'. [ 272.458138][T12214] loop5: detected capacity change from 0 to 512 [ 272.466208][T12214] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 272.469816][T12216] loop1: detected capacity change from 0 to 512 [ 272.488789][T12216] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.504944][T12214] EXT4-fs (loop5): 1 truncate cleaned up [ 272.536822][T12216] EXT4-fs (loop1): 1 truncate cleaned up [ 272.589190][T12222] loop5: detected capacity change from 0 to 1024 [ 272.616922][T12222] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2899: Allocating blocks 497-513 which overlap fs metadata [ 272.636458][T12222] EXT4-fs (loop5): pa ffff888105b19f50: logic 256, phys. 369, len 9 [ 272.644607][T12222] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 272.709316][T12231] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 272.749372][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 272.749391][ T29] audit: type=1326 audit(1747380551.908:174372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a948be969 code=0x7ffc0000 [ 272.783712][T12242] netlink: 'syz.3.2907': attribute type 13 has an invalid length. [ 272.796367][T12242] netlink: 'syz.3.2907': attribute type 21 has an invalid length. [ 272.800547][ T29] audit: type=1326 audit(1747380551.908:174373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a948be969 code=0x7ffc0000 [ 272.827931][ T29] audit: type=1326 audit(1747380551.918:174374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2a948be969 code=0x7ffc0000 [ 272.851798][ T29] audit: type=1326 audit(1747380551.918:174375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a948be969 code=0x7ffc0000 [ 272.875694][ T29] audit: type=1326 audit(1747380551.918:174376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f2a948be969 code=0x7ffc0000 [ 272.904732][T12239] tipc: Started in network mode [ 272.909686][T12239] tipc: Node identity 8658e5b4f139, cluster identity 4711 [ 272.916908][T12239] tipc: Enabled bearer , priority 0 [ 272.927705][ T29] audit: type=1326 audit(1747380552.098:174377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a948be969 code=0x7ffc0000 [ 272.951468][ T29] audit: type=1326 audit(1747380552.098:174378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a948be969 code=0x7ffc0000 [ 272.978468][T12239] netlink: 'syz.2.2906': attribute type 4 has an invalid length. [ 272.987684][T12239] : renamed from bond0 [ 272.997367][T12237] tipc: Disabling bearer [ 273.004028][T12245] loop1: detected capacity change from 0 to 512 [ 273.020901][ T29] audit: type=1326 audit(1747380552.098:174379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f2a948be969 code=0x7ffc0000 [ 273.044753][ T29] audit: type=1326 audit(1747380552.098:174380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a948be969 code=0x7ffc0000 [ 273.068485][ T29] audit: type=1326 audit(1747380552.098:174381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a948be969 code=0x7ffc0000 [ 273.101326][T12245] EXT4-fs (loop1): 1 orphan inode deleted [ 273.107569][T12245] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.121264][ T9640] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 1 [ 273.194117][T12258] loop3: detected capacity change from 0 to 512 [ 273.201155][T12258] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 273.218256][T12262] loop2: detected capacity change from 0 to 1024 [ 273.240328][T12267] loop1: detected capacity change from 0 to 2048 [ 273.262511][T12262] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.2914: Allocating blocks 497-513 which overlap fs metadata [ 273.293250][T12267] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.306312][T12262] EXT4-fs (loop2): pa ffff888107256cb0: logic 256, phys. 369, len 9 [ 273.314489][T12262] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 273.332617][T12275] loop3: detected capacity change from 0 to 1024 [ 273.361377][T12267] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2912: corrupted xattr block 128: overlapping e_value [ 273.382758][T12275] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2916: Allocating blocks 465-513 which overlap fs metadata [ 273.399232][T12267] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 273.423953][T12275] EXT4-fs (loop3): pa ffff888105b19d90: logic 256, phys. 369, len 9 [ 273.432187][T12275] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 3 [ 273.436837][T12267] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2912: corrupted xattr block 128: overlapping e_value [ 273.458879][T12275] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: [ 273.458903][T12267] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 273.458916][T12275] block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 273.491982][T12267] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2912: corrupted xattr block 128: overlapping e_value [ 273.508465][T12285] tipc: Enabling of bearer rejected, failed to enable media [ 273.531837][T12267] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 273.604370][T12294] loop3: detected capacity change from 0 to 128 [ 273.643726][T12299] tipc: Enabling of bearer rejected, failed to enable media [ 273.681403][T12303] serio: Serial port ptm0 [ 273.692491][T12301] loop3: detected capacity change from 0 to 512 [ 273.713989][T12301] EXT4-fs (loop3): 1 orphan inode deleted [ 273.720092][T12308] loop5: detected capacity change from 0 to 256 [ 273.720422][T12301] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.730532][T12308] loop5: detected capacity change from 0 to 512 [ 273.743216][ T9642] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 273.743589][T12308] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 273.834265][T12313] loop1: detected capacity change from 0 to 1024 [ 273.854636][T12313] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2928: Allocating blocks 465-513 which overlap fs metadata [ 273.874409][T12317] tipc: Enabling of bearer rejected, failed to enable media [ 273.883575][T12313] EXT4-fs (loop1): pa ffff888107256d20: logic 256, phys. 369, len 9 [ 273.891647][T12313] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 3 [ 273.901901][T12313] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 273.916816][T12330] Cannot find del_set index 4 as target [ 273.976112][T12335] loop5: detected capacity change from 0 to 128 [ 274.054896][T12341] Cannot find del_set index 4 as target [ 274.085918][T12341] loop5: detected capacity change from 0 to 2048 [ 274.426135][T12349] loop2: detected capacity change from 0 to 512 [ 274.455650][T12349] EXT4-fs (loop2): 1 orphan inode deleted [ 274.472926][T12349] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.491066][T11817] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 274.505968][ T9643] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 274.568479][T12354] loop2: detected capacity change from 0 to 256 [ 274.584165][T12354] loop2: detected capacity change from 0 to 512 [ 274.599947][T12354] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 274.626298][ T9640] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 274.638829][ T9640] EXT4-fs (loop5): This should not happen!! Data will be lost [ 274.638829][ T9640] [ 274.648507][ T9640] EXT4-fs (loop5): Total free blocks count 0 [ 274.654528][ T9640] EXT4-fs (loop5): Free/Dirty block details [ 274.660446][ T9640] EXT4-fs (loop5): free_blocks=2415919504 [ 274.666205][ T9640] EXT4-fs (loop5): dirty_blocks=16400 [ 274.671611][ T9640] EXT4-fs (loop5): Block reservation details [ 274.677702][ T9640] EXT4-fs (loop5): i_reserved_data_blocks=1025 [ 274.694122][ T9640] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 274.694150][ T9640] EXT4-fs (loop5): This should not happen!! Data will be lost [ 274.694150][ T9640] [ 274.832954][T12358] loop2: detected capacity change from 0 to 128 [ 274.886859][T12364] loop3: detected capacity change from 0 to 128 [ 274.927749][T12360] tipc: Enabled bearer , priority 0 [ 274.935727][T12359] tipc: Disabling bearer [ 274.954375][T12373] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 274.989972][T12379] loop5: detected capacity change from 0 to 128 [ 275.048353][T12382] loop2: detected capacity change from 0 to 2048 [ 275.074084][T12377] tipc: Enabled bearer , priority 0 [ 275.085307][T12386] serio: Serial port ptm0 [ 275.097328][T12377] netlink: 'syz.3.2950': attribute type 4 has an invalid length. [ 275.105141][T12377] __nla_validate_parse: 3 callbacks suppressed [ 275.105152][T12377] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2950'. [ 275.122871][T12376] tipc: Resetting bearer [ 275.139115][T12376] tipc: Disabling bearer [ 275.318878][T12402] loop3: detected capacity change from 0 to 512 [ 275.361543][T12402] EXT4-fs (loop3): 1 orphan inode deleted [ 275.374654][T12402] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.386385][ T9637] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 275.553804][T12411] loop3: detected capacity change from 0 to 128 [ 275.599047][ T9637] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 275.614426][ T9637] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 275.627059][ T9637] EXT4-fs (loop2): This should not happen!! Data will be lost [ 275.627059][ T9637] [ 275.636751][ T9637] EXT4-fs (loop2): Total free blocks count 0 [ 275.642801][ T9637] EXT4-fs (loop2): Free/Dirty block details [ 275.648747][ T9637] EXT4-fs (loop2): free_blocks=2415919504 [ 275.654556][ T9637] EXT4-fs (loop2): dirty_blocks=16400 [ 275.660015][ T9637] EXT4-fs (loop2): Block reservation details [ 275.666030][ T9637] EXT4-fs (loop2): i_reserved_data_blocks=1025 [ 275.688149][ T9637] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 275.700982][ T9637] EXT4-fs (loop2): This should not happen!! Data will be lost [ 275.700982][ T9637] [ 275.721847][T12418] loop3: detected capacity change from 0 to 1024 [ 275.734824][T12418] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2965: Allocating blocks 497-513 which overlap fs metadata [ 275.750250][T12418] EXT4-fs (loop3): pa ffff888105b19d90: logic 256, phys. 369, len 9 [ 275.758432][T12418] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 275.870967][T12430] loop3: detected capacity change from 0 to 1024 [ 275.894367][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'. [ 275.906496][T12430] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2967: Allocating blocks 497-513 which overlap fs metadata [ 275.922655][T12430] EXT4-fs (loop3): pa ffff888105b19d20: logic 256, phys. 369, len 9 [ 275.930868][T12430] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 276.060568][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2973'. [ 276.143845][T12444] lo speed is unknown, defaulting to 1000 [ 276.278118][T12444] chnl_net:caif_netlink_parms(): no params data found [ 276.293726][T12455] tipc: Enabled bearer , priority 0 [ 276.330001][T12455] netlink: 'syz.5.2974': attribute type 4 has an invalid length. [ 276.337839][T12455] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2974'. [ 276.370134][T12444] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.377259][T12444] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.384629][T12444] bridge_slave_0: entered allmulticast mode [ 276.391482][T12444] bridge_slave_0: entered promiscuous mode [ 276.398754][T12453] tipc: Disabling bearer [ 276.414104][T12444] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.421243][T12444] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.428557][T12444] bridge_slave_1: entered allmulticast mode [ 276.435449][T12444] bridge_slave_1: entered promiscuous mode [ 276.442067][ T12] bridge_slave_1: left allmulticast mode [ 276.447803][ T12] bridge_slave_1: left promiscuous mode [ 276.453764][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.461781][ T12] bridge_slave_0: left allmulticast mode [ 276.467447][ T12] bridge_slave_0: left promiscuous mode [ 276.473225][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.493208][ T12] team0: Port device geneve1 removed [ 276.544740][ T12]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.555038][ T12]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.566203][ T12]  (unregistering): Released all slaves [ 276.589256][T12444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.602241][T12444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.611461][ T12] tipc: Left network mode [ 276.656396][T12444] team0: Port device team_slave_0 added [ 276.675995][T12444] team0: Port device team_slave_1 added [ 276.684874][ T12] hsr_slave_0: left promiscuous mode [ 276.701564][ T12] hsr_slave_1: left promiscuous mode [ 276.707218][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.717792][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.785969][ T12] team0 (unregistering): Port device team_slave_1 removed [ 276.816097][T12475] serio: Serial port ptm0 [ 276.820939][ T12] team0 (unregistering): Port device team_slave_0 removed [ 276.957159][T12444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.964185][T12444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.990187][T12444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.012776][T12444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.019749][T12444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.045748][T12444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.098239][T12444] hsr_slave_0: entered promiscuous mode [ 277.104502][T12444] hsr_slave_1: entered promiscuous mode [ 277.110513][T12444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.127556][T12444] Cannot create hsr debugfs directory [ 277.193442][T12473] lo speed is unknown, defaulting to 1000 [ 277.426790][T12497] netlink: 'syz.1.2988': attribute type 13 has an invalid length. [ 277.451542][T12497] netlink: 'syz.1.2988': attribute type 21 has an invalid length. [ 277.461868][T12497] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2988'. [ 277.815971][T12444] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.833599][T12444] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.852990][T12444] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.867164][T12444] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.939170][T12444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.955253][T12444] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.980128][ T9640] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.987224][ T9640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.000851][ T9640] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.007998][ T9640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.084177][T12444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.170474][T12444] veth0_vlan: entered promiscuous mode [ 278.179469][T12444] veth1_vlan: entered promiscuous mode [ 278.198088][T12444] veth0_macvtap: entered promiscuous mode [ 278.208313][T12444] veth1_macvtap: entered promiscuous mode [ 278.215067][T12507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.220695][T12444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.223606][T12507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.237073][T12444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.249797][T12444] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.258552][T12444] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.267326][T12444] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.276046][T12444] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.315255][T12520] loop3: detected capacity change from 0 to 128 [ 278.342234][T12522] loop3: detected capacity change from 0 to 512 [ 278.353761][T12522] EXT4-fs (loop3): 1 orphan inode deleted [ 278.360095][T12522] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.371858][ T9643] __quota_error: 194 callbacks suppressed [ 278.371874][ T9643] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 278.387598][ T9643] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 278.426798][T12526] serio: Serial port ptm0 [ 278.517437][T12531] loop2: detected capacity change from 0 to 2048 [ 278.542432][T12531] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.563638][T12531] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2996: corrupted xattr block 128: overlapping e_value [ 278.580051][T12531] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 278.591491][T12531] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2996: corrupted xattr block 128: overlapping e_value [ 278.608022][T12531] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 278.618529][T12531] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2996: corrupted xattr block 128: overlapping e_value [ 278.636434][T12536] loop1: detected capacity change from 0 to 512 [ 278.643082][T12507] xt_hashlimit: size too large, truncated to 1048576 [ 278.650414][T12531] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 278.656842][T12536] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 278.690241][T12538] loop3: detected capacity change from 0 to 256 [ 278.700481][T12538] loop3: detected capacity change from 0 to 512 [ 278.710694][T12538] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 278.793647][T12536] EXT4-fs (loop1): 1 truncate cleaned up [ 278.811972][T12545] geneve0: entered allmulticast mode [ 278.926601][T12552] loop2: detected capacity change from 0 to 1024 [ 278.967754][T12549] tipc: Started in network mode [ 278.972725][T12549] tipc: Node identity 4ecd5122258, cluster identity 4711 [ 278.979816][T12549] tipc: Enabled bearer , priority 0 [ 278.988995][T12546] tipc: Resetting bearer [ 279.001090][T12552] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3002: Allocating blocks 497-513 which overlap fs metadata [ 279.015836][T12552] EXT4-fs (loop2): pa ffff888105b19d20: logic 256, phys. 369, len 9 [ 279.024048][T12552] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 279.045861][T12546] tipc: Disabling bearer [ 279.070022][T12564] loop2: detected capacity change from 0 to 512 [ 279.077062][T12564] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 279.088551][T12564] EXT4-fs (loop2): 1 truncate cleaned up [ 279.125461][T12567] serio: Serial port ptm0 [ 279.144080][ T29] audit: type=1326 audit(1747380558.308:174572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 279.167801][ T29] audit: type=1326 audit(1747380558.308:174573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 279.221961][T12569] SELinux: failed to load policy [ 279.230599][ T29] audit: type=1326 audit(1747380558.358:174574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 279.254352][ T29] audit: type=1326 audit(1747380558.358:174575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 279.278764][ T29] audit: type=1326 audit(1747380558.358:174576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 279.302581][ T29] audit: type=1326 audit(1747380558.358:174577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 279.326549][ T29] audit: type=1326 audit(1747380558.358:174578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 279.350349][ T29] audit: type=1326 audit(1747380558.358:174579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 279.374514][ T29] audit: type=1326 audit(1747380558.358:174580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 279.398534][T12569] 9pnet: Could not find request transport: r [ 279.430253][T12583] tipc: Enabling of bearer rejected, failed to enable media [ 279.458830][T12585] loop3: detected capacity change from 0 to 512 [ 279.476146][T12585] EXT4-fs (loop3): 1 orphan inode deleted [ 279.482920][T12585] EXT4-fs mount: 123 callbacks suppressed [ 279.482993][T12585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.502269][T12585] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.511145][ T9637] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 279.532722][T12589] loop5: detected capacity change from 0 to 512 [ 279.549704][T12444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.564200][T12589] EXT4-fs (loop5): 1 orphan inode deleted [ 279.568278][T12593] loop2: detected capacity change from 0 to 512 [ 279.576760][T12589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.591412][T12589] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.602452][ T9637] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 279.617409][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.637129][T12593] EXT4-fs (loop2): 1 orphan inode deleted [ 279.643319][T12593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.655863][ T9637] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 279.669320][T12593] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.700659][T11915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.709782][T12607] loop3: detected capacity change from 0 to 128 [ 279.752895][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3022'. [ 280.190601][T12634] SELinux: failed to load policy [ 280.213656][T12634] 9pnet: Could not find request transport: r [ 280.270672][T12640] loop1: detected capacity change from 0 to 128 [ 280.277413][T12638] loop3: detected capacity change from 0 to 512 [ 280.295169][T12638] EXT4-fs (loop3): 1 orphan inode deleted [ 280.304963][T12638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.319202][ T9637] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 280.337068][T12638] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.354553][T12644] loop1: detected capacity change from 0 to 1024 [ 280.378076][T12444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.388583][T12644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.415032][T12644] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3034: Allocating blocks 497-513 which overlap fs metadata [ 280.431893][T12644] EXT4-fs (loop1): pa ffff888107256e00: logic 256, phys. 369, len 9 [ 280.440053][T12644] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 280.464019][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.607828][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'. [ 280.682151][T12659] loop2: detected capacity change from 0 to 512 [ 280.693495][T12659] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 280.717242][T12659] EXT4-fs (loop2): 1 truncate cleaned up [ 280.726558][T12659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.843494][T11915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.952474][T12662] lo speed is unknown, defaulting to 1000 [ 280.971602][T12672] loop5: detected capacity change from 0 to 512 [ 280.989738][T12672] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 281.030035][T12672] EXT4-fs (loop5): 1 truncate cleaned up [ 281.061512][T12672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.084200][T12677] SELinux: failed to load policy [ 281.100458][T12677] 9pnet: Could not find request transport: r [ 281.183979][ T9637] bridge_slave_1: left allmulticast mode [ 281.189663][ T9637] bridge_slave_1: left promiscuous mode [ 281.195453][ T9637] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.206076][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3045'. [ 281.223237][ T9637] bridge_slave_0: left allmulticast mode [ 281.228985][ T9637] bridge_slave_0: left promiscuous mode [ 281.234762][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.234803][T12685] loop2: detected capacity change from 0 to 1024 [ 281.260077][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.273885][T12685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.289378][T12685] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3046: Allocating blocks 497-513 which overlap fs metadata [ 281.305606][T12685] EXT4-fs (loop2): pa ffff888107256e00: logic 256, phys. 369, len 9 [ 281.308114][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 281.313706][T12685] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 281.347604][T11915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.360357][ T9637]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.371373][ T9637]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.385643][ T9637]  (unregistering): Released all slaves [ 281.414337][T12697] Cannot find del_set index 4 as target [ 281.428741][ T9637] tipc: Left network mode [ 281.452940][T12697] loop3: detected capacity change from 0 to 2048 [ 281.462923][T12691] tipc: Enabling of bearer rejected, failed to enable media [ 281.479656][T12699] serio: Serial port ptm0 [ 281.498569][T12691] netlink: 'syz.5.3048': attribute type 4 has an invalid length. [ 281.506423][T12691] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3048'. [ 281.535474][T12697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.557550][T12662] chnl_net:caif_netlink_parms(): no params data found [ 281.568456][ T9637] hsr_slave_0: left promiscuous mode [ 281.649790][ T9637] hsr_slave_1: left promiscuous mode [ 281.656287][ T9637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.669208][T12709] loop5: detected capacity change from 0 to 2048 [ 281.677274][ T9637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.744609][T12709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.759968][T12709] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.780567][T12709] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3053: corrupted xattr block 128: overlapping e_value [ 281.797557][T12709] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 281.807702][T12709] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3053: corrupted xattr block 128: overlapping e_value [ 281.825171][T12709] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 281.835260][T12709] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3053: corrupted xattr block 128: overlapping e_value [ 281.852328][T12709] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 281.875811][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.921470][ T9637] team0 (unregistering): Port device team_slave_1 removed [ 281.946110][ T9637] team0 (unregistering): Port device team_slave_0 removed [ 281.956597][ T9643] smc: removing ib device syz! [ 282.046762][ T3414] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 282.102216][ T3414] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 282.114885][ T3414] EXT4-fs (loop3): This should not happen!! Data will be lost [ 282.114885][ T3414] [ 282.124830][ T3414] EXT4-fs (loop3): Total free blocks count 0 [ 282.130862][ T3414] EXT4-fs (loop3): Free/Dirty block details [ 282.136849][ T3414] EXT4-fs (loop3): free_blocks=2415919504 [ 282.142718][ T3414] EXT4-fs (loop3): dirty_blocks=16400 [ 282.148131][ T3414] EXT4-fs (loop3): Block reservation details [ 282.154176][ T3414] EXT4-fs (loop3): i_reserved_data_blocks=1025 [ 282.177732][ T3414] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 282.206603][T12662] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.213852][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.235895][T12662] bridge_slave_0: entered allmulticast mode [ 282.261572][T12662] bridge_slave_0: entered promiscuous mode [ 282.270171][T12662] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.277330][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.302586][T12662] bridge_slave_1: entered allmulticast mode [ 282.320100][T12662] bridge_slave_1: entered promiscuous mode [ 282.382148][T12662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.392823][T12662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.439512][T12662] team0: Port device team_slave_0 added [ 282.451141][T12735] loop3: detected capacity change from 0 to 512 [ 282.458158][T12662] team0: Port device team_slave_1 added [ 282.458295][T12735] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 282.475874][T12735] EXT4-fs (loop3): 1 truncate cleaned up [ 282.481963][T12735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.503578][ T9637] IPVS: stop unused estimator thread 0... [ 282.509972][T12662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.517042][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.543105][T12662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.554901][T12662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.560126][T12444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.561896][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.561956][T12662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.627495][T12741] loop3: detected capacity change from 0 to 256 [ 282.637664][T12741] loop3: detected capacity change from 0 to 512 [ 282.645056][T12741] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 282.657690][T12662] hsr_slave_0: entered promiscuous mode [ 282.665091][T12662] hsr_slave_1: entered promiscuous mode [ 282.671191][T12662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.676424][T12743] serio: Serial port ptm0 [ 282.678880][T12662] Cannot create hsr debugfs directory [ 282.746367][T12746] infiniband syz!: set active [ 282.751155][T12746] infiniband syz!: added team_slave_0 [ 282.761824][T12746] RDS/IB: syz!: added [ 282.765886][T12746] smc: adding ib device syz! with port count 1 [ 282.772189][T12746] smc: ib device syz! port 1 has pnetid [ 282.799601][T12750] netlink: 'syz.2.3065': attribute type 13 has an invalid length. [ 282.814498][T12750] netlink: 'syz.2.3065': attribute type 21 has an invalid length. [ 282.823464][T12750] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3065'. [ 282.933849][T12752] SELinux: failed to load policy [ 282.947854][T12752] 9pnet: Could not find request transport: r [ 282.970325][T12755] loop3: detected capacity change from 0 to 512 [ 282.977260][T12755] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 282.993349][T12755] EXT4-fs (loop3): 1 truncate cleaned up [ 282.999675][T12755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.000733][T12662] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 283.021574][T12662] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 283.032568][T12662] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 283.041931][T12662] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 283.081241][T12662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.104555][T12444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.113107][T12662] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.125004][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.132181][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.153043][T12662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.163535][T12662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.176963][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.184219][ T3414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.253295][T12770] Cannot find del_set index 4 as target [ 283.267400][T12767] SELinux: failed to load policy [ 283.287223][T12767] 9pnet: Could not find request transport: r [ 283.325989][T12662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.334349][T12774] tipc: Enabling of bearer rejected, failed to enable media [ 283.398351][T12778] loop5: detected capacity change from 0 to 2048 [ 283.407157][T12781] netlink: 'syz.3.3075': attribute type 13 has an invalid length. [ 283.456790][T12783] loop2: detected capacity change from 0 to 1024 [ 283.493517][T12778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.510550][T12781] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.517951][T12781] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.544628][T12788] netlink: 'syz.3.3075': attribute type 21 has an invalid length. [ 283.565791][T12783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.597614][T12783] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3076: Allocating blocks 497-513 which overlap fs metadata [ 283.629211][T12781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.641665][T12781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.649653][T12783] EXT4-fs (loop2): pa ffff888105b19d90: logic 256, phys. 369, len 9 [ 283.657717][T12783] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 283.705560][T11915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.727241][T12781] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.736348][T12781] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.744794][T12798] loop2: detected capacity change from 0 to 512 [ 283.745410][T12781] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.760583][T12781] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.762466][T12798] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 283.784168][T12798] EXT4-fs (loop2): 1 truncate cleaned up [ 283.788817][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3078'. [ 283.790381][T12798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.822143][T12788] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3075'. [ 283.874075][T11915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.937952][T12662] veth0_vlan: entered promiscuous mode [ 283.948943][T12662] veth1_vlan: entered promiscuous mode [ 283.972821][T12662] veth0_macvtap: entered promiscuous mode [ 283.993336][T12662] veth1_macvtap: entered promiscuous mode [ 284.021414][T12662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.035623][T12662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.053749][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.072380][T12662] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.081366][T12662] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.090078][T12662] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.098884][T12662] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.110729][T12811] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 284.220518][T12821] loop5: detected capacity change from 0 to 256 [ 284.227459][T12825] geneve0: entered allmulticast mode [ 284.238008][T12821] loop5: detected capacity change from 0 to 512 [ 284.247775][T12826] loop3: detected capacity change from 0 to 512 [ 284.262577][T12825] loop1: detected capacity change from 0 to 1024 [ 284.271439][T12821] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 284.291812][T12826] EXT4-fs (loop3): 1 orphan inode deleted [ 284.292311][T12835] netlink: 'syz.0.3091': attribute type 13 has an invalid length. [ 284.298252][T12826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.307969][T12825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.330204][ T9637] __quota_error: 449 callbacks suppressed [ 284.330220][ T9637] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 284.345864][ T9637] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 284.363345][T12825] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3040: Allocating blocks 497-513 which overlap fs metadata [ 284.370953][ T29] audit: type=1326 audit(1747380563.528:175026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 284.379115][T12824] tipc: Enabled bearer , priority 0 [ 284.401085][ T29] audit: type=1326 audit(1747380563.528:175027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 284.424728][T12825] EXT4-fs (loop1): pa ffff888105b19d90: logic 256, phys. 369, len 9 [ 284.431353][ T29] audit: type=1326 audit(1747380563.528:175028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 284.439309][T12825] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 284.441030][T12826] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.463005][ T29] audit: type=1326 audit(1747380563.528:175029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 284.479229][T12841] netlink: 'syz.2.3087': attribute type 4 has an invalid length. [ 284.483281][ T29] audit: type=1326 audit(1747380563.528:175030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 284.507024][T12841] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3087'. [ 284.514728][ T29] audit: type=1326 audit(1747380563.528:175031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 284.571392][ T29] audit: type=1326 audit(1747380563.528:175032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 284.571481][ T29] audit: type=1326 audit(1747380563.528:175033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 284.619965][ T29] audit: type=1326 audit(1747380563.538:175034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 284.660393][T12842] netlink: 'syz.0.3091': attribute type 21 has an invalid length. [ 284.671435][T12844] serio: Serial port ptm0 [ 284.677963][T12444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.683162][T12835] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.694278][T12835] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.741130][T12835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.743699][T12850] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 284.752878][T12835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.756936][T12846] serio: Serial port ptm0 [ 284.793179][T12835] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.802212][T12835] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.811405][T12835] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.821007][T12835] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.840445][T12842] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3091'. [ 284.853163][T12822] tipc: Resetting bearer [ 284.866708][T12822] tipc: Disabling bearer [ 284.875564][T12662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.911207][T12859] loop1: detected capacity change from 0 to 256 [ 284.921295][T12859] loop1: detected capacity change from 0 to 512 [ 284.927842][T12859] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 284.951554][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3098'. [ 285.014195][T12865] loop2: detected capacity change from 0 to 2048 [ 285.051268][T12865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.080986][T12865] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.104711][T12865] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.3100: corrupted xattr block 128: overlapping e_value [ 285.126690][T12865] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 285.148543][T12865] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.3100: corrupted xattr block 128: overlapping e_value [ 285.183597][T12865] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 285.219561][T12865] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.3100: corrupted xattr block 128: overlapping e_value [ 285.258960][T12865] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 285.308670][T11915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.321077][T12875] serio: Serial port ptm0 [ 285.411696][T12883] loop5: detected capacity change from 0 to 1024 [ 285.423495][T12883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.438343][T12883] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.3107: Allocating blocks 497-513 which overlap fs metadata [ 285.455103][T12883] EXT4-fs (loop5): pa ffff888107256e70: logic 256, phys. 369, len 9 [ 285.463146][T12883] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 285.520500][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.608846][T12895] tipc: Started in network mode [ 285.613872][T12895] tipc: Node identity 92302631d27b, cluster identity 4711 [ 285.621230][T12895] tipc: Enabled bearer , priority 0 [ 285.633010][T12895] netlink: 'syz.0.3110': attribute type 4 has an invalid length. [ 285.640791][T12895] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3110'. [ 285.641483][T12898] loop2: detected capacity change from 0 to 512 [ 285.651849][T12895] : renamed from bond0 [ 285.659203][T12898] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 285.673519][T12898] EXT4-fs (loop2): 1 truncate cleaned up [ 285.679663][T12898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.694953][T12894] tipc: Resetting bearer [ 285.711506][T12894] tipc: Disabling bearer [ 285.719814][T11915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.740607][T12904] netlink: 'syz.2.3113': attribute type 13 has an invalid length. [ 285.757616][T12904] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3113'. [ 285.782318][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'. [ 285.855357][T12911] tipc: Enabling of bearer rejected, failed to enable media [ 285.869746][T12913] serio: Serial port ptm0 [ 285.903680][T12915] loop1: detected capacity change from 0 to 512 [ 285.946251][T12919] loop2: detected capacity change from 0 to 256 [ 285.955740][T12915] EXT4-fs (loop1): 1 orphan inode deleted [ 285.965325][T12919] loop2: detected capacity change from 0 to 512 [ 285.972006][ T9637] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 285.984205][T12915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.018230][T12915] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.039112][T12919] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 286.131026][T12662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.184708][T12929] loop3: detected capacity change from 0 to 512 [ 286.207512][T12929] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 286.221827][T12933] loop1: detected capacity change from 0 to 512 [ 286.232524][T12929] EXT4-fs (loop3): 1 truncate cleaned up [ 286.265775][T12933] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 286.276055][T12929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.293181][T12932] tipc: Enabled bearer , priority 0 [ 286.308360][T12936] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3126'. [ 286.325231][T12932] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3125'. [ 286.350322][T12930] tipc: Resetting bearer [ 286.357582][T12933] EXT4-fs (loop1): 1 truncate cleaned up [ 286.370614][T12930] tipc: Disabling bearer [ 286.381913][T12933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.397060][T12444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.420312][T12939] loop5: detected capacity change from 0 to 512 [ 286.458234][T12941] SELinux: failed to load policy [ 286.464984][T12939] EXT4-fs (loop5): 1 orphan inode deleted [ 286.471582][T12939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.484365][ T3414] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 286.484674][T12939] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.508807][T12941] 9pnet: Could not find request transport: r [ 286.540274][T12662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.563181][T12948] serio: Serial port ptm0 [ 286.576974][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.634480][T12959] loop3: detected capacity change from 0 to 128 [ 286.663026][T12965] Cannot find del_set index 4 as target [ 286.693559][T12965] loop1: detected capacity change from 0 to 2048 [ 286.714083][T12965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.787542][T12975] tipc: Enabled bearer , priority 0 [ 286.799888][T12975] validate_nla: 4 callbacks suppressed [ 286.799975][T12975] netlink: 'syz.0.3141': attribute type 4 has an invalid length. [ 286.813376][T12975] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3141'. [ 286.823724][T12974] tipc: Resetting bearer [ 286.851307][T12974] tipc: Disabling bearer [ 287.061468][T12984] loop5: detected capacity change from 0 to 1024 [ 287.093781][T12984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.108713][T12984] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.3144: Allocating blocks 465-513 which overlap fs metadata [ 287.123992][T12984] EXT4-fs (loop5): pa ffff888107256ee0: logic 256, phys. 369, len 9 [ 287.132150][T12984] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 3 [ 287.142529][T12984] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 287.149813][ T12] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 287.172231][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 287.172259][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 287.172259][ T12] [ 287.172336][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 287.172410][ T12] EXT4-fs (loop1): Free/Dirty block details [ 287.172421][ T12] EXT4-fs (loop1): free_blocks=2415919504 [ 287.172475][ T12] EXT4-fs (loop1): dirty_blocks=16400 [ 287.172486][ T12] EXT4-fs (loop1): Block reservation details [ 287.172496][ T12] EXT4-fs (loop1): i_reserved_data_blocks=1025 [ 287.186531][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 287.244440][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.337428][T12997] serio: Serial port ptm0 [ 287.398995][T13001] serio: Serial port ptm0 [ 287.416743][T13004] loop5: detected capacity change from 0 to 2048 [ 287.432614][T13004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.444909][T13004] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.461834][T13004] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3151: corrupted xattr block 128: overlapping e_value [ 287.477390][T13004] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 287.487003][T13004] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3151: corrupted xattr block 128: overlapping e_value [ 287.515886][T13009] loop2: detected capacity change from 0 to 256 [ 287.527092][T13004] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 287.528240][T13009] loop2: detected capacity change from 0 to 512 [ 287.537300][T13004] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3151: corrupted xattr block 128: overlapping e_value [ 287.542948][T13009] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 287.569692][T13004] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 287.618377][T13015] Cannot find del_set index 4 as target [ 287.632953][T13015] loop2: detected capacity change from 0 to 2048 [ 287.651579][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.679500][T13015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.763421][T13033] loop5: detected capacity change from 0 to 1024 [ 287.773263][T13033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.808034][T13033] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.3162: Allocating blocks 497-513 which overlap fs metadata [ 287.837293][T13033] EXT4-fs (loop5): pa ffff888105b19d90: logic 256, phys. 369, len 9 [ 287.845429][T13033] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 287.880660][T13038] serio: Serial port ptm0 [ 287.891757][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.947612][T13040] SELinux: failed to load policy [ 287.976815][T13040] 9pnet: Could not find request transport: r [ 288.148075][T13053] loop5: detected capacity change from 0 to 2048 [ 288.175151][T13053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.208962][ T9637] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 288.224954][T13053] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.238369][ T9637] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 288.251146][ T9637] EXT4-fs (loop2): This should not happen!! Data will be lost [ 288.251146][ T9637] [ 288.260947][ T9637] EXT4-fs (loop2): Total free blocks count 0 [ 288.266957][ T9637] EXT4-fs (loop2): Free/Dirty block details [ 288.272893][ T9637] EXT4-fs (loop2): free_blocks=2415919504 [ 288.278672][ T9637] EXT4-fs (loop2): dirty_blocks=16400 [ 288.284124][ T9637] EXT4-fs (loop2): Block reservation details [ 288.290119][ T9637] EXT4-fs (loop2): i_reserved_data_blocks=1025 [ 288.303311][T13053] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3169: corrupted xattr block 128: overlapping e_value [ 288.320245][T13053] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 288.331801][T13053] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3169: corrupted xattr block 128: overlapping e_value [ 288.354267][T13053] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 288.364509][ T3414] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 288.384395][T13053] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3169: corrupted xattr block 128: overlapping e_value [ 288.413907][T13053] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 288.500212][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.551736][T13060] loop5: detected capacity change from 0 to 128 [ 288.583798][T13064] loop5: detected capacity change from 0 to 512 [ 288.590695][T13064] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 288.625812][T13064] EXT4-fs (loop5): 1 truncate cleaned up [ 288.632038][T13064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.669286][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3170'. [ 288.699252][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.732281][T13072] serio: Serial port ptm0 [ 288.768134][T13074] SELinux: failed to load policy [ 288.782962][T13074] 9pnet: Could not find request transport: r [ 288.819606][T13080] loop5: detected capacity change from 0 to 512 [ 288.826919][T13080] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 288.839497][T13080] EXT4-fs (loop5): 1 truncate cleaned up [ 288.845825][T13080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.888379][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.909211][T13083] loop1: detected capacity change from 0 to 512 [ 288.917761][T13083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 288.930113][T13083] EXT4-fs (loop1): 1 truncate cleaned up [ 289.198916][T13097] netlink: 'syz.2.3185': attribute type 13 has an invalid length. [ 289.212343][T13097] netlink: 'syz.2.3185': attribute type 21 has an invalid length. [ 289.220363][T13097] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3185'. [ 289.312534][T13099] loop2: detected capacity change from 0 to 256 [ 289.322561][T13099] loop2: detected capacity change from 0 to 512 [ 289.329215][T13099] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 289.375267][T13102] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 289.392701][T13105] loop3: detected capacity change from 0 to 512 [ 289.399949][T13105] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 289.412295][T13105] EXT4-fs (loop3): 1 truncate cleaned up [ 289.428491][ T29] kauditd_printk_skb: 609 callbacks suppressed [ 289.428508][ T29] audit: type=1326 audit(1747380568.588:175642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 289.458511][ T29] audit: type=1326 audit(1747380568.588:175643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 289.507138][T13113] SELinux: failed to load policy [ 289.512985][ T29] audit: type=1326 audit(1747380568.648:175644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 289.536787][ T29] audit: type=1326 audit(1747380568.648:175645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 289.560661][ T29] audit: type=1326 audit(1747380568.648:175646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 289.584411][ T29] audit: type=1326 audit(1747380568.648:175647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 289.608211][ T29] audit: type=1326 audit(1747380568.648:175648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 289.632101][ T29] audit: type=1326 audit(1747380568.648:175649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 289.655797][ T29] audit: type=1326 audit(1747380568.648:175650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 289.679636][ T29] audit: type=1326 audit(1747380568.648:175651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.2.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13916be969 code=0x7ffc0000 [ 289.703614][T13113] 9pnet: Could not find request transport: r [ 289.733222][T13119] geneve0: entered allmulticast mode [ 289.741735][T13121] loop2: detected capacity change from 0 to 128 [ 289.754814][T13119] loop3: detected capacity change from 0 to 1024 [ 289.776524][T13119] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3192: Allocating blocks 465-513 which overlap fs metadata [ 289.795740][T13119] EXT4-fs (loop3): pa ffff888107256e70: logic 256, phys. 369, len 9 [ 289.803897][T13119] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 3 [ 289.817729][T13119] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 289.898653][T13135] loop1: detected capacity change from 0 to 512 [ 289.905971][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'. [ 289.916765][T13137] loop2: detected capacity change from 0 to 256 [ 289.920352][T13137] loop2: detected capacity change from 0 to 512 [ 289.920560][T13137] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 289.924102][T13135] EXT4-fs (loop1): 1 orphan inode deleted [ 289.950981][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 289.971672][T13135] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.003535][T13143] loop2: detected capacity change from 0 to 128 [ 290.013759][T13141] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 290.022559][T13145] loop3: detected capacity change from 0 to 1024 [ 290.100500][T13149] SELinux: failed to load policy [ 290.119350][T13149] 9pnet: Could not find request transport: r [ 290.127707][T13150] geneve0: entered allmulticast mode [ 290.137965][T13155] Cannot find del_set index 4 as target [ 290.152949][T13145] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3198: Allocating blocks 497-513 which overlap fs metadata [ 290.160628][T13155] loop1: detected capacity change from 0 to 2048 [ 290.175604][T13145] EXT4-fs (loop3): pa ffff888107256f50: logic 256, phys. 369, len 9 [ 290.183828][T13145] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 290.206996][T13150] loop2: detected capacity change from 0 to 1024 [ 290.225921][T13161] loop5: detected capacity change from 0 to 2048 [ 290.238277][T13150] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3203: Allocating blocks 497-513 which overlap fs metadata [ 290.279798][T13161] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.293581][T13150] EXT4-fs (loop2): pa ffff888105b19d90: logic 256, phys. 369, len 9 [ 290.301713][T13150] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 290.319337][T13161] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3205: corrupted xattr block 128: overlapping e_value [ 290.370761][T13161] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 290.401361][T13161] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3205: corrupted xattr block 128: overlapping e_value [ 290.420928][T13161] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 290.440384][T13161] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3205: corrupted xattr block 128: overlapping e_value [ 290.456583][T13161] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 290.510325][T13179] serio: Serial port ptm0 [ 290.524220][T13180] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3210'. [ 290.641351][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'. [ 290.740363][ T12] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 290.756618][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 290.769151][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 290.769151][ T12] [ 290.778871][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 290.784918][ T12] EXT4-fs (loop1): Free/Dirty block details [ 290.790861][ T12] EXT4-fs (loop1): free_blocks=2415919504 [ 290.796669][ T12] EXT4-fs (loop1): dirty_blocks=16400 [ 290.802072][ T12] EXT4-fs (loop1): Block reservation details [ 290.808118][ T12] EXT4-fs (loop1): i_reserved_data_blocks=1025 [ 290.832920][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 290.845704][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 290.845704][ T12] [ 291.010634][T13191] loop1: detected capacity change from 0 to 512 [ 291.017630][T13191] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 291.030652][T13191] EXT4-fs (loop1): 1 truncate cleaned up [ 291.082149][T13196] loop1: detected capacity change from 0 to 512 [ 291.089108][T13196] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 291.102015][T13196] EXT4-fs (loop1): 1 truncate cleaned up [ 291.185713][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3221'. [ 291.210317][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'. [ 291.312316][T13211] serio: Serial port ptm0 [ 291.386749][T13218] loop2: detected capacity change from 0 to 128 [ 291.506131][T13223] loop5: detected capacity change from 0 to 1024 [ 291.519994][T13224] loop2: detected capacity change from 0 to 512 [ 291.527098][T13224] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 291.574492][T13223] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.3229: Allocating blocks 497-513 which overlap fs metadata [ 291.574811][T13224] EXT4-fs (loop2): 1 truncate cleaned up [ 291.602813][T13223] EXT4-fs (loop5): pa ffff888107256f50: logic 256, phys. 369, len 9 [ 291.610929][T13223] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 291.736856][T13234] loop5: detected capacity change from 0 to 512 [ 291.753459][T13234] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 291.788252][T13238] tipc: Enabling of bearer rejected, failed to enable media [ 291.798929][T13234] EXT4-fs (loop5): 1 truncate cleaned up [ 291.847110][T13242] netlink: 'syz.5.3234': attribute type 13 has an invalid length. [ 291.861932][T13242] netlink: 'syz.5.3234': attribute type 21 has an invalid length. [ 291.870410][T13242] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3234'. [ 291.895671][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3236'. [ 291.911120][T13241] loop2: detected capacity change from 0 to 1024 [ 291.936141][T13241] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3237: Allocating blocks 497-513 which overlap fs metadata [ 291.952134][T13241] EXT4-fs (loop2): pa ffff888105b19c40: logic 256, phys. 369, len 9 [ 291.960170][T13241] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 292.058979][T13257] loop2: detected capacity change from 0 to 512 [ 292.071393][T13257] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 292.093235][T13257] EXT4-fs (loop2): 1 truncate cleaned up [ 292.112531][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3241'. [ 292.224420][T13263] loop2: detected capacity change from 0 to 512 [ 292.232321][T13263] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 292.264154][T13263] EXT4-fs (loop2): 1 truncate cleaned up [ 292.335379][T13273] loop2: detected capacity change from 0 to 512 [ 292.353232][T13273] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 292.415683][T13273] EXT4-fs (loop2): 1 truncate cleaned up [ 292.708492][T13297] netlink: 'syz.1.3250': attribute type 13 has an invalid length. [ 292.720515][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3252'. [ 292.758613][T13299] loop3: detected capacity change from 0 to 512 [ 292.785346][T13302] loop5: detected capacity change from 0 to 2048 [ 292.789887][T13299] EXT4-fs (loop3): 1 orphan inode deleted [ 292.798634][T13299] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.804428][T13297] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.816284][T13297] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.841701][T13307] netlink: 'syz.1.3250': attribute type 21 has an invalid length. [ 292.849923][ T3414] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 292.877389][T13310] loop3: detected capacity change from 0 to 128 [ 292.907018][T13297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.937221][T13297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.973538][T13297] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.982629][T13297] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.983360][T13315] serio: Serial port ptm0 [ 292.991584][T13297] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.004994][T13297] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.033446][T13318] loop5: detected capacity change from 0 to 512 [ 293.049998][T13318] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 293.071879][T13307] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3250'. [ 293.090354][T13318] EXT4-fs (loop5): 1 truncate cleaned up [ 293.146460][T13322] tipc: Enabling of bearer rejected, failed to enable media [ 293.249337][T13332] loop5: detected capacity change from 0 to 2048 [ 293.279527][T13331] loop3: detected capacity change from 0 to 1024 [ 293.282045][T13332] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.314689][T13332] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3264: corrupted xattr block 128: overlapping e_value [ 293.355222][T13331] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3263: Allocating blocks 497-513 which overlap fs metadata [ 293.373574][T13331] EXT4-fs (loop3): pa ffff888107256e70: logic 256, phys. 369, len 9 [ 293.381702][T13331] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 293.396927][T13332] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 293.411420][T13332] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3264: corrupted xattr block 128: overlapping e_value [ 293.432886][T13346] SELinux: failed to load policy [ 293.449359][T13332] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 293.477142][T13350] loop2: detected capacity change from 0 to 128 [ 293.486792][T13332] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3264: corrupted xattr block 128: overlapping e_value [ 293.493726][T13346] 9pnet: Could not find request transport: r [ 293.526934][T13332] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 293.562590][T13356] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 293.578431][T13359] Cannot find del_set index 4 as target [ 293.595891][T13359] loop2: detected capacity change from 0 to 2048 [ 293.604109][T13357] loop3: detected capacity change from 0 to 1024 [ 293.614955][T13364] loop1: detected capacity change from 0 to 512 [ 293.622398][T13364] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 293.643572][T13364] EXT4-fs (loop1): 1 truncate cleaned up [ 293.652381][T13357] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3270: Allocating blocks 497-513 which overlap fs metadata [ 293.677564][T13357] EXT4-fs (loop3): pa ffff888107256ee0: logic 256, phys. 369, len 9 [ 293.683745][T13375] tipc: Enabling of bearer rejected, failed to enable media [ 293.685700][T13357] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 293.823476][T13383] loop3: detected capacity change from 0 to 512 [ 293.831601][T13380] loop1: detected capacity change from 0 to 2048 [ 293.838543][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'. [ 293.874134][T13380] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.886070][T13383] EXT4-fs (loop3): 1 orphan inode deleted [ 293.907552][T13380] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.3276: corrupted xattr block 128: overlapping e_value [ 293.925620][ T9643] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 293.948179][T13383] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.983685][T13380] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 294.048414][T13380] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.3276: corrupted xattr block 128: overlapping e_value [ 294.103575][T13380] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 294.114310][T13380] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.3276: corrupted xattr block 128: overlapping e_value [ 294.134713][T13380] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 294.173597][T13390] loop3: detected capacity change from 0 to 128 [ 294.201273][T12389] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 294.295782][T13393] SELinux: failed to load policy [ 294.319328][T13393] 9pnet: Could not find request transport: r [ 294.344329][T13397] serio: Serial port ptm0 [ 294.367198][T13399] tipc: Enabling of bearer rejected, failed to enable media [ 294.415010][ T9643] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 294.427534][ T9643] EXT4-fs (loop2): This should not happen!! Data will be lost [ 294.427534][ T9643] [ 294.437367][ T9643] EXT4-fs (loop2): Total free blocks count 0 [ 294.443455][ T9643] EXT4-fs (loop2): Free/Dirty block details [ 294.449375][ T9643] EXT4-fs (loop2): free_blocks=2415919504 [ 294.455143][ T9643] EXT4-fs (loop2): dirty_blocks=16400 [ 294.460540][ T9643] EXT4-fs (loop2): Block reservation details [ 294.466628][ T9643] EXT4-fs (loop2): i_reserved_data_blocks=1025 [ 294.538480][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 294.551256][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 294.551256][ T12] [ 294.565160][T13417] loop5: detected capacity change from 0 to 128 [ 294.577775][T13405] loop1: detected capacity change from 0 to 1024 [ 294.610444][T13423] loop5: detected capacity change from 0 to 128 [ 294.631422][T13414] loop3: detected capacity change from 0 to 1024 [ 294.643565][T13405] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3284: Allocating blocks 497-513 which overlap fs metadata [ 294.666507][T13405] EXT4-fs (loop1): pa ffff888107256e00: logic 256, phys. 369, len 9 [ 294.674618][T13405] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 294.681530][T13414] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3287: Allocating blocks 497-513 which overlap fs metadata [ 294.701905][T13414] EXT4-fs (loop3): pa ffff888107256e70: logic 256, phys. 369, len 9 [ 294.709942][T13414] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 294.746259][T13431] loop5: detected capacity change from 0 to 512 [ 294.761730][T13431] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 294.771724][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 294.771738][ T29] audit: type=1326 audit(1747380573.928:176059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1546bbe969 code=0x7ffc0000 [ 294.801678][ T29] audit: type=1326 audit(1747380573.928:176060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1546bbe969 code=0x7ffc0000 [ 294.825401][ T29] audit: type=1326 audit(1747380573.928:176061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1546bbe969 code=0x7ffc0000 [ 294.830722][T13434] SELinux: failed to load policy [ 294.849169][ T29] audit: type=1326 audit(1747380573.928:176062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1546bbe969 code=0x7ffc0000 [ 294.871925][T13434] 9pnet: Could not find request transport: r [ 294.877821][ T29] audit: type=1326 audit(1747380573.928:176063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1546bbe969 code=0x7ffc0000 [ 294.901961][T13431] EXT4-fs (loop5): 1 truncate cleaned up [ 294.907505][ T29] audit: type=1326 audit(1747380573.928:176064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1546bbe969 code=0x7ffc0000 [ 294.936872][ T29] audit: type=1326 audit(1747380573.928:176065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1546bbe969 code=0x7ffc0000 [ 294.960603][ T29] audit: type=1326 audit(1747380573.928:176066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1546bbe969 code=0x7ffc0000 [ 294.984277][ T29] audit: type=1326 audit(1747380573.928:176067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1546bbe969 code=0x7ffc0000 [ 295.008014][ T29] audit: type=1326 audit(1747380573.928:176068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1546bbe969 code=0x7ffc0000 [ 295.067216][T13443] loop3: detected capacity change from 0 to 512 [ 295.089672][T13443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 295.100741][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 295.119832][T13446] loop1: detected capacity change from 0 to 512 [ 295.138782][T13443] EXT4-fs (loop3): 1 truncate cleaned up [ 295.145906][T13450] serio: Serial port ptm0 [ 295.160292][T13446] EXT4-fs (loop1): 1 orphan inode deleted [ 295.169554][T13446] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.184001][ T9643] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 295.212739][T13454] loop3: detected capacity change from 0 to 512 [ 295.226283][T13454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 295.238906][T13454] EXT4-fs (loop3): 1 truncate cleaned up [ 295.249469][T13458] loop1: detected capacity change from 0 to 256 [ 295.259326][T13458] loop1: detected capacity change from 0 to 512 [ 295.269068][T13458] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 295.305130][T13462] loop3: detected capacity change from 0 to 128 [ 295.369656][T13469] loop1: detected capacity change from 0 to 1024 [ 295.377297][T13472] serio: Serial port ptm0 [ 295.406990][T13469] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3304: Allocating blocks 497-513 which overlap fs metadata [ 295.422865][T13469] EXT4-fs (loop1): pa ffff888105b19cb0: logic 256, phys. 369, len 9 [ 295.431085][T13469] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 295.431363][T13476] loop3: detected capacity change from 0 to 1024 [ 295.455224][T13476] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 295.498987][T13481] loop5: detected capacity change from 0 to 512 [ 295.509334][T13481] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 295.528357][T13481] EXT4-fs (loop5): 1 truncate cleaned up [ 295.545452][T13484] loop1: detected capacity change from 0 to 1024 [ 295.558010][T13489] netlink: 'syz.2.3311': attribute type 13 has an invalid length. [ 295.570488][T13489] netlink: 'syz.2.3311': attribute type 21 has an invalid length. [ 295.583876][T13484] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3308: Allocating blocks 497-513 which overlap fs metadata [ 295.598694][T13484] EXT4-fs (loop1): pa ffff888107256d90: logic 256, phys. 369, len 9 [ 295.606842][T13484] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 295.630580][T13495] loop5: detected capacity change from 0 to 512 [ 295.637733][T13495] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 295.650371][T13495] EXT4-fs (loop5): 1 truncate cleaned up [ 295.705683][T13505] loop5: detected capacity change from 0 to 256 [ 295.720592][T13499] __nla_validate_parse: 1 callbacks suppressed [ 295.720715][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'. [ 295.742787][T13505] loop5: detected capacity change from 0 to 512 [ 295.752815][T13505] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 295.832994][T13509] loop5: detected capacity change from 0 to 128 [ 295.977784][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3319'. [ 295.997170][T13515] loop1: detected capacity change from 0 to 1024 [ 296.018556][T13515] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3318: Allocating blocks 497-513 which overlap fs metadata [ 296.045514][T13515] EXT4-fs (loop1): pa ffff888105b19cb0: logic 256, phys. 369, len 9 [ 296.053621][T13515] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 296.128695][T13523] loop2: detected capacity change from 0 to 2048 [ 296.173554][T13523] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.203212][T13531] tipc: Enabling of bearer rejected, failed to enable media [ 296.205238][T13523] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.3320: corrupted xattr block 128: overlapping e_value [ 296.256060][T13534] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 296.265802][T13534] SELinux: failed to load policy [ 296.297346][T13537] netlink: 'syz.1.3325': attribute type 1 has an invalid length. [ 296.305283][T13536] loop3: detected capacity change from 0 to 256 [ 296.309105][T13537] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 296.315558][T13536] loop3: detected capacity change from 0 to 512 [ 296.324705][T13523] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 296.334768][T13536] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 296.350693][T13539] loop1: detected capacity change from 0 to 512 [ 296.359846][T13523] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.3320: corrupted xattr block 128: overlapping e_value [ 296.376916][T13539] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 296.402427][T13523] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 296.421681][T13539] EXT4-fs (loop1): 1 truncate cleaned up [ 296.426903][T13523] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.3320: corrupted xattr block 128: overlapping e_value [ 296.450111][T13523] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 296.468796][T13542] loop3: detected capacity change from 0 to 1024 [ 296.494346][T13542] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3329: Allocating blocks 497-513 which overlap fs metadata [ 296.541567][T13542] EXT4-fs (loop3): pa ffff888105b19bd0: logic 256, phys. 369, len 9 [ 296.541591][T13542] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 296.623472][T13557] loop1: detected capacity change from 0 to 1024 [ 296.647852][T13563] loop2: detected capacity change from 0 to 256 [ 296.658313][T13563] loop2: detected capacity change from 0 to 512 [ 296.667542][T13563] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 296.698811][T13557] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3331: Allocating blocks 497-513 which overlap fs metadata [ 296.726905][T13571] tipc: Enabling of bearer rejected, failed to enable media [ 296.740046][T13557] EXT4-fs (loop1): pa ffff888105b19cb0: logic 256, phys. 369, len 9 [ 296.748150][T13557] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 296.748222][T13568] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 296.768112][T13568] SELinux: failed to load policy [ 296.778082][T13574] tipc: Enabling of bearer rejected, failed to enable media [ 296.846911][T13588] loop1: detected capacity change from 0 to 128 [ 296.896277][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 296.908853][ T12] dummy0: left allmulticast mode [ 296.921662][ T12] bridge0: port 3(dummy0) entered disabled state [ 296.929639][ T12] bridge_slave_1: left allmulticast mode [ 296.935464][ T12] bridge_slave_1: left promiscuous mode [ 296.941173][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.951375][ T12] bridge_slave_0: left allmulticast mode [ 296.957043][ T12] bridge_slave_0: left promiscuous mode [ 296.957537][T13598] serio: Serial port ptm0 [ 296.962808][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.025132][ T12]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.034390][ T12]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.043073][ T12]  (unregistering): Released all slaves [ 297.051115][ T12] bond1 (unregistering): Released all slaves [ 297.093189][ T12] tipc: Left network mode [ 297.105680][T13603] tipc: Enabling of bearer rejected, failed to enable media [ 297.144504][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.175380][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.199724][ T12] hsr_slave_0: left promiscuous mode [ 297.205790][ T12] hsr_slave_1: left promiscuous mode [ 297.212202][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.219900][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.263817][ T12] team0 (unregistering): Port device team_slave_1 removed [ 297.276514][ T12] team0 (unregistering): Port device team_slave_0 removed [ 297.350023][T13569] chnl_net:caif_netlink_parms(): no params data found [ 297.381863][T13611] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 297.391529][T13611] SELinux: failed to load policy [ 297.422704][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.429851][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.437296][T13569] bridge_slave_0: entered allmulticast mode [ 297.444034][T13569] bridge_slave_0: entered promiscuous mode [ 297.451105][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.458171][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.465564][T13569] bridge_slave_1: entered allmulticast mode [ 297.472428][T13569] bridge_slave_1: entered promiscuous mode [ 297.516260][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.529765][T13616] tipc: Enabled bearer , priority 0 [ 297.537720][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.548095][T13615] tipc: Resetting bearer [ 297.561686][T13615] tipc: Disabling bearer [ 297.574348][T13569] team0: Port device team_slave_0 added [ 297.583727][T13569] team0: Port device team_slave_1 added [ 297.598742][T13592] xt_hashlimit: size too large, truncated to 1048576 [ 297.615650][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.622667][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.648705][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.681558][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.688534][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.714671][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.745128][T13632] serio: Serial port ptm0 [ 297.780775][T13569] hsr_slave_0: entered promiscuous mode [ 297.787257][T13569] hsr_slave_1: entered promiscuous mode [ 297.794270][T13569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.802316][T13569] Cannot create hsr debugfs directory [ 297.923926][T13647] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 297.933585][T13647] SELinux: failed to load policy [ 297.977573][T13650] loop3: detected capacity change from 0 to 2048 [ 297.992723][T13653] loop2: detected capacity change from 0 to 128 [ 298.073678][T13657] loop2: detected capacity change from 0 to 1024 [ 298.115372][T13657] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3362: Allocating blocks 497-513 which overlap fs metadata [ 298.116565][T13569] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.138551][T13569] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.142075][T13657] EXT4-fs (loop2): pa ffff888105b19bd0: logic 256, phys. 369, len 9 [ 298.153354][T13657] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 298.156646][T13569] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.173248][T13569] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.210783][T13569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.227723][T13569] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.244106][ T9643] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.251222][ T9643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.280368][T13670] loop2: detected capacity change from 0 to 512 [ 298.282748][T13569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.297097][T13569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.302376][ T9643] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.314601][ T9643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.324158][T13670] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 298.347941][T13670] EXT4-fs (loop2): 1 truncate cleaned up [ 298.390312][T13680] netlink: 'syz.3.3368': attribute type 13 has an invalid length. [ 298.393892][T13681] serio: Serial port ptm0 [ 298.398935][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.415613][T13680] netlink: 'syz.3.3368': attribute type 21 has an invalid length. [ 298.425117][T13680] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3368'. [ 298.473584][T13689] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 298.483299][T13689] SELinux: failed to load policy [ 298.495575][T13694] loop1: detected capacity change from 0 to 128 [ 298.540432][T13700] loop2: detected capacity change from 0 to 512 [ 298.561505][T13704] loop1: detected capacity change from 0 to 2048 [ 298.584630][T13569] veth0_vlan: entered promiscuous mode [ 298.591058][T13700] EXT4-fs (loop2): 1 orphan inode deleted [ 298.599327][T13569] veth1_vlan: entered promiscuous mode [ 298.601756][T13700] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.614458][T13569] veth0_macvtap: entered promiscuous mode [ 298.621158][ T9637] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 298.627742][T13569] veth1_macvtap: entered promiscuous mode [ 298.643756][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.645493][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.659241][T13569] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.668181][T13569] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.677118][T13569] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.685930][T13569] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.754864][T13717] tipc: Enabling of bearer rejected, failed to enable media [ 298.858419][T13723] loop5: detected capacity change from 0 to 2048 [ 298.887458][T13724] tipc: Enabled bearer , priority 0 [ 298.894073][T13723] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.950854][T13720] tipc: Resetting bearer [ 298.963778][T13720] tipc: Disabling bearer [ 298.970493][T13723] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3333: corrupted xattr block 128: overlapping e_value [ 298.989343][T13723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 299.058460][T13723] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3333: corrupted xattr block 128: overlapping e_value [ 299.061969][T13730] serio: Serial port ptm0 [ 299.082014][T13723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 299.095344][T13723] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3333: corrupted xattr block 128: overlapping e_value [ 299.138925][T13723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 299.168914][T13739] netlink: 'syz.3.3382': attribute type 13 has an invalid length. [ 299.189008][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3380'. [ 299.206661][T13739] netlink: 'syz.3.3382': attribute type 21 has an invalid length. [ 299.214548][T13739] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3382'. [ 299.240773][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'. [ 299.305742][T13741] loop5: detected capacity change from 0 to 128 [ 299.398066][T13743] loop3: detected capacity change from 0 to 2048 [ 299.617512][T13745] tipc: Started in network mode [ 299.617580][T13745] tipc: Node identity c2665a1659d7, cluster identity 4711 [ 299.629735][T13745] tipc: Enabled bearer , priority 0 [ 299.644790][T13744] tipc: Resetting bearer [ 299.700332][T13754] loop1: detected capacity change from 0 to 512 [ 299.720560][T13744] tipc: Disabling bearer [ 299.747467][T13754] EXT4-fs (loop1): 1 orphan inode deleted [ 299.757360][T13754] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.768383][ T3414] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 299.818060][T13764] serio: Serial port ptm0 [ 299.831537][T13766] loop2: detected capacity change from 0 to 1024 [ 299.855754][T13766] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3392: Allocating blocks 497-513 which overlap fs metadata [ 299.870593][T13766] EXT4-fs (loop2): pa ffff888107256cb0: logic 256, phys. 369, len 9 [ 299.878743][T13766] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 299.900126][T13774] netlink: 'syz.1.3394': attribute type 13 has an invalid length. [ 299.913570][T13774] netlink: 'syz.1.3394': attribute type 21 has an invalid length. [ 299.921742][T13774] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3394'. [ 299.938417][T13776] loop2: detected capacity change from 0 to 512 [ 299.945315][T13776] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 299.957019][T13776] EXT4-fs (loop2): 1 truncate cleaned up [ 299.995717][T13781] loop1: detected capacity change from 0 to 128 [ 300.011382][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 300.023429][T13762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.047353][T13762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.112031][T13787] tipc: Started in network mode [ 300.112063][T13787] tipc: Node identity 42c25abad4c5, cluster identity 4711 [ 300.124256][T13787] tipc: Enabled bearer , priority 0 [ 300.131878][T13786] tipc: Resetting bearer [ 300.144137][T13792] loop2: detected capacity change from 0 to 512 [ 300.147393][T13786] tipc: Disabling bearer [ 300.165140][T13792] EXT4-fs (loop2): 1 orphan inode deleted [ 300.165810][T13792] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.185856][ T9643] __quota_error: 618 callbacks suppressed [ 300.185869][ T9643] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 300.201512][ T9643] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 300.262446][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3403'. [ 300.441475][T13798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.450118][T13798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.505754][T13762] xt_hashlimit: size too large, truncated to 1048576 [ 300.619638][T13806] netlink: 'syz.3.3408': attribute type 13 has an invalid length. [ 300.652887][T13806] netlink: 'syz.3.3408': attribute type 21 has an invalid length. [ 300.696255][T13808] Cannot find del_set index 4 as target [ 300.711077][T13808] loop1: detected capacity change from 0 to 2048 [ 300.752145][T13812] loop3: detected capacity change from 0 to 128 [ 300.814253][T13818] __nla_validate_parse: 1 callbacks suppressed [ 300.814270][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3412'. [ 300.862509][T13798] xt_hashlimit: size too large, truncated to 1048576 [ 300.883275][T13820] tipc: Enabled bearer , priority 0 [ 300.892818][T13819] tipc: Resetting bearer [ 300.912498][T13819] tipc: Disabling bearer [ 300.969282][T13824] loop3: detected capacity change from 0 to 512 [ 301.047937][T13824] EXT4-fs (loop3): 1 orphan inode deleted [ 301.048034][T13827] ================================================================== [ 301.048076][T13827] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 301.048134][T13827] [ 301.048142][T13827] write to 0xffffffff8686aac0 of 8 bytes by task 13824 on cpu 1: [ 301.048163][T13827] data_alloc+0x271/0x2b0 [ 301.048199][T13827] prb_reserve+0x808/0xaf0 [ 301.048229][T13827] vprintk_store+0x56d/0x860 [ 301.048250][T13827] vprintk_emit+0x178/0x650 [ 301.048272][T13827] vprintk_default+0x26/0x30 [ 301.048291][T13827] vprintk+0x1d/0x30 [ 301.048314][T13827] _printk+0x79/0xa0 [ 301.048339][T13827] __ext4_msg+0x18f/0x1a0 [ 301.048369][T13827] ext4_orphan_cleanup+0x8e2/0xa00 [ 301.048407][T13827] ext4_fill_super+0x3171/0x34e0 [ 301.048440][T13827] get_tree_bdev_flags+0x291/0x300 [ 301.048472][T13827] get_tree_bdev+0x1f/0x30 [ 301.048505][T13827] ext4_get_tree+0x1c/0x30 [ 301.048536][T13827] vfs_get_tree+0x54/0x1d0 [ 301.048542][T13824] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.048565][T13827] do_new_mount+0x207/0x680 [ 301.048590][T13827] path_mount+0x4a4/0xb20 [ 301.048617][T13827] __se_sys_mount+0x28f/0x2e0 [ 301.048647][T13827] __x64_sys_mount+0x67/0x80 [ 301.048676][T13827] x64_sys_call+0xd36/0x2fb0 [ 301.048703][T13827] do_syscall_64+0xd0/0x1a0 [ 301.048726][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.048751][T13827] [ 301.048758][T13827] read to 0xffffffff8686aac0 of 16 bytes by task 13827 on cpu 0: [ 301.048779][T13827] _prb_read_valid+0x1bc/0x920 [ 301.048816][T13827] prb_read_valid+0x3c/0x60 [ 301.048849][T13827] printk_get_next_message+0xc8/0x510 [ 301.048873][T13827] console_flush_all+0x290/0x730 [ 301.048900][T13827] console_unlock+0xa1/0x330 [ 301.048919][T13827] do_con_write+0x25c3/0x2630 [ 301.048954][T13827] con_put_char+0x38/0x60 [ 301.048985][T13827] tty_put_char+0x65/0xc0 [ 301.049016][T13827] do_output_char+0x4de/0x500 [ 301.049042][T13827] n_tty_write+0x85b/0xb10 [ 301.049074][T13827] file_tty_write+0x389/0x670 [ 301.049097][T13827] tty_write+0x25/0x30 [ 301.049119][T13827] vfs_write+0x49d/0x8d0 [ 301.049145][T13827] ksys_write+0xda/0x1a0 [ 301.049170][T13827] __x64_sys_write+0x40/0x50 [ 301.049197][T13827] x64_sys_call+0x2cdd/0x2fb0 [ 301.049219][T13827] do_syscall_64+0xd0/0x1a0 [ 301.049243][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.049265][T13827] [ 301.049269][T13827] Reported by Kernel Concurrency Sanitizer on: [ 301.049281][T13827] CPU: 0 UID: 0 PID: 13827 Comm: syz.0.3415 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 301.049311][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 301.049325][T13827] ================================================================== [ 301.064612][ T9643] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 301.330032][ T9643] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1