last executing test programs: 44.201673484s ago: executing program 2 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = getpid() getitimer(0x2, &(0x7f0000000280)) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000020000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x6, 0xfff, 0xd}, r0, 0x2, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r3, 0x10e, 0x6, 0x0, &(0x7f0000000380)) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200007, 0x801, 0x4, 0x7}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) capget(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000100)={0x2, 0x1, 0x2, 0x4, 0x1, 0x4}) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') fcntl$dupfd(r5, 0x0, r4) ppoll(&(0x7f0000000000)=[{r5, 0x24b0}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xc) 43.286302475s ago: executing program 2 (id=609): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xa, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x9, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x8000005, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x800, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x401, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0xff, 0x9, 0xfffffff2, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x3, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x7, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0xfffffffe, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x0, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x1, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x1, 0x3, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dc0, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x2, 0xffff7ffc, 0x4f, 0x0, 0x10, 0x3, 0x8000, 0x2, 0x17, 0xffff, 0x8, 0x9, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x35, 0x1eb, 0x10001, 0xc, 0x5102, 0x6ce, 0x6, 0x3fe2fdbc, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x0, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0x2, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x2000009, 0x6, 0x1f, 0xb89, 0x80000006, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x5, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xffe00000, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xb, 0x0, 0x400008, 0xb, 0x0, 0xfe, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x2, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x3, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x7, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x40, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10001, 0x4, 0x1, 0x101, 0x800, 0x101, 0x5, 0x6, 0xd, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x3, 0x2, 0x81, 0xfff, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0xb127, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$tipc(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000b00)=[{0x0, 0xf5}, {&(0x7f0000000680)="5ffc", 0x2}], 0x2, 0x0, 0x0, 0x50}, 0x20048800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540), 0x4) r4 = fcntl$dupfd(r2, 0x0, r1) r5 = msgget(0x1, 0x50) msgrcv(r5, &(0x7f00000002c0)={0x0, ""/111}, 0x77, 0x3, 0x1000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r8, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000001"], 0x40}, 0x24004800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) poll(&(0x7f0000000180)=[{r6, 0x5099}], 0x1, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) pipe2(&(0x7f00000003c0), 0x4800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x20c0406, &(0x7f00000001c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@nombcache}, {@nodiscard}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") 42.278027674s ago: executing program 2 (id=622): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x4) unshare(0x2040000) r0 = socket(0x10, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8) unshare(0x68040200) r2 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 42.075336642s ago: executing program 2 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000002, 0x20010, r3, 0x6a855000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x28}}, 0x20048000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="000200000000000000000000002b73a6e652afd8627bd4e60da01b2864c51a3aeca93572320cc3f098e8552cbf541cf2481820aeb20bf3568a2f58c9f6bce92c3185d5640603e8e1fd58ea760fd40de39da15b5c530cda8e619b0dda665c4a477dd6a3b3b008733c405b49941f0cff47ef69a262bc596ca8cadfe18d2faad876b201c7a267"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000002}, 0x94) socket$inet6(0xa, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={0x0, r6}, 0x18) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1/../file0\x00', 0x900082, &(0x7f0000000100)=ANY=[@ANYRESDEC=r6], 0x1, 0x1b8, &(0x7f0000000440)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) 41.132920735s ago: executing program 2 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2000000000000}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x2a}, 0x8) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0xffffffffffffffff, 0xffffffffffffffff, 0x1}}, 0x89) 41.025885615s ago: executing program 2 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r2 = syz_io_uring_setup(0x760a, &(0x7f00000007c0)={0x0, 0x1f36, 0x400, 0x3, 0x220}, &(0x7f0000010080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 25.91276288s ago: executing program 32 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r2 = syz_io_uring_setup(0x760a, &(0x7f00000007c0)={0x0, 0x1f36, 0x400, 0x3, 0x220}, &(0x7f0000010080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 4.549896448s ago: executing program 1 (id=1176): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 4.512206351s ago: executing program 1 (id=1177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x20c4, &(0x7f0000000080)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ftruncate(r1, 0x81fd) 4.467579305s ago: executing program 1 (id=1179): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2a002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004b00004000000000fe0690780a0101020a01010244140601e0000001fffffffce00000010000000207020000000000009abf9ce2927a199898456b1450a6ada4a59c2b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="005593a2002c0000000054a4ddd7254e81b953f4324c00000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$TIOCMIWAIT(r0, 0x5453, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10010, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x248, 0x10000, 0x0, 0x5, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000000), &(0x7f0000000180)=r9}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x3e68, 0x0, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8081, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0x8, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x1ff, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x7e, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x3ff, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x0, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x10000006, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0x2, 0x400081, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x9, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x6, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x18, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x4, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x894}}, 0x0) 4.392561762s ago: executing program 1 (id=1182): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xa, 0x6, 0x5, 0x0, 0x0, 0x4, 0x4, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x62e466ce, 0x9}, 0x10062, 0x7, 0x4, 0x5, 0x9, 0x1, 0x0, 0x0, 0x7, 0x0, 0x71}, r0, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00') 3.50145173s ago: executing program 1 (id=1194): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB="0000aa0067000000007db4b052951b6257091507b4f7b9466b811362a1dee92a28f2744476ae41421e95288150f3a225bdbd2ba4e09d1c5b1785cd85099b184ac24b3d6c9f9e5969ab606fa5996d0b15dc999f833d4b7c18b28c61e8a351bde8009b9fa54b83f8ea47dff076fa94b8cead9133", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYRES64=r3], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x20000095}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2d, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xae, 0x7, 0x3, 0xd, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb263}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, @exit, @generic={0x40, 0x3, 0xa, 0xed, 0x6}, @call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000055"], 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r1, 0x0, 0x101, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r8, 0x0, 0x1100000000f334, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r11 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x3, &(0x7f0000000080)) bind$inet(r11, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) 3.192663578s ago: executing program 1 (id=1202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x20c4, &(0x7f0000000080)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ftruncate(r1, 0x81fd) 3.077926458s ago: executing program 33 (id=1202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x20c4, &(0x7f0000000080)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ftruncate(r1, 0x81fd) 2.293347187s ago: executing program 3 (id=1212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) 2.065736118s ago: executing program 3 (id=1213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB="00000000050000000000000000fa2348db2a18f8fe0965a1", @ANYRES32=r3, @ANYRES32], 0x50) sendto$packet(r1, 0x0, 0x0, 0x4000000, &(0x7f0000000440)={0x11, 0x10, r3, 0x1, 0x6, 0x6, @broadcast}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r6, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000ac000200000000000000001811000059185f6d05378801533804019155a58a4dd99f97b33d8b", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000060696c2500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b701000001000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x59032, 0xffffffffffffffff, 0x0) r10 = getpid() process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f00000002c0)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000) r11 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r11) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0xd}]}) close_range(r12, 0xffffffffffffffff, 0x0) 1.532950955s ago: executing program 0 (id=1222): creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = io_uring_setup(0x7f59, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x1009, 0x197}) socket$inet6_sctp(0xa, 0x801, 0x84) close_range(r1, 0xffffffffffffffff, 0x0) 1.532561145s ago: executing program 0 (id=1223): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b7050000000000040000000200", 0x81002, 0x2}) 1.24414308s ago: executing program 0 (id=1225): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 1.24045724s ago: executing program 3 (id=1226): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1200000, &(0x7f0000000080)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@user_xattr}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nodioread_nolock}, {@nolazytime}, {@grpid}, {@stripe}], [{@audit}, {@subj_role={'subj_role', 0x3d, 'nodioread_nolock'}}, {@dont_hash}, {@fowner_lt}, {@pcr={'pcr', 0x3d, 0x15}}, {@appraise_type}, {@hash}]}, 0x0, 0x511, &(0x7f00000004c0)="$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") r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x8402) close(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x190da) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x33, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) socket$inet6_sctp(0xa, 0x5, 0x84) 1.139462439s ago: executing program 0 (id=1229): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000020000", @ANYBLOB="01000000000000001c001280090001"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x40, 0x5, 0x3, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x7, 0x7, 0x4}}) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, &(0x7f0000000380)) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x12, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @alu={0x4, 0x0, 0xd, 0x8, 0x8, 0xfffffffffffffffc, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000400)='GPL\x00', 0x2, 0x61, &(0x7f0000000440)=""/97, 0x40f00, 0x50, '\x00', r6, @fallback=0x30, r8, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xa, 0x6, 0x2}, 0x10, 0x0, r9, 0x6, &(0x7f00000007c0)=[0xffffffffffffffff], &(0x7f0000000800)=[{0x2, 0x1, 0xe, 0xb}, {0x0, 0x4, 0x8, 0x5}, {0x3, 0x3, 0x8, 0xc}, {0x1, 0x4, 0x8, 0x6}, {0x0, 0x5, 0x6, 0x4}, {0x4, 0x5, 0x4, 0x9}], 0x10, 0xec6}, 0x94) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100100000000000000011"], 0x58}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x8815}, 0x24000004) 1.02238803s ago: executing program 4 (id=1231): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1.02197237s ago: executing program 3 (id=1232): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'veth0_macvtap\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) unshare(0x8000000) semget$private(0x0, 0x20000000102, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800080000070003000000000000ffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffff00"/28], 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) timer_delete(0x0) r6 = semget$private(0x0, 0x3, 0x220) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5d4, &(0x7f00000004c0)="$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") semtimedop(r6, &(0x7f0000000040), 0x3e, 0x0) 1.0116642s ago: executing program 4 (id=1233): kexec_load(0x1ff, 0x6, &(0x7f0000000880)=[{&(0x7f0000000100)="126efdcaa9e87267953a0d43a7ca57eb0542880bca43d17ce301d0825b02722fc61d711f93b90fd84b2d0deaeb2c93ff10073dde5a5c5be80e0c2b2983477388f4e838c31b1959a5c427b13316a93e31a59d62f299f9ff6c7920f287a69e6476d1b7965bf33356a508cf232dd8641a8f72d96280fc34eaa3c837e6e5cbdb2d986931aae518259059545943948097938114df4388f46ad26ba72da1979cf89455f86e20f365c430351ddf0fd44312ac6bb0db78d09607bfe60fcf94efec6a", 0xbe, 0xe19b, 0x2}, {&(0x7f0000000280)="8e45c8dd304370b88f24d8391927a1187cd18b5d5d9eb24040f85b1edbf7d3c89a50bde45e26450f8caa36f5f9b9368c0bf0ff19c951d5e06a0606c21f81724be1254a5ebc9d603f8f015ebbe180949412b22eae8ce38b4e0865e7383cb513ea30f0de2c00a029d8f21d1a", 0x6b, 0x1, 0x9}, {&(0x7f0000000340)="bfc07bf18d34dc83885ced314d1fec438de7f3dad7436d610075739599ba78d9f5ef78684374dfd7240dd561df6773bb6cf0814d5f463fdcd4eaeaec3e6168dbe2844a1e3b965c6eaa", 0x49, 0x1000000000000, 0x7d8}, {&(0x7f00000003c0)="fed2b8f599dd860fcece1207f14c66ae3ff7ec1a854abd648f63ef3f014791c7f3d8eae078590da048896025c5425c20d82e2f3e8069a08dfaf446e42e58fcd772224f88921cfaa881538438b3eff4492edbf121bb048b190e769c8d5d68dfc775fe09f293d0542b5b280124824323fc4078dd05df61609c4b13815f423bf5eea13da1ef4ac01089d60545d74836a43383444214d1bdfe0577b4a9c5358a16935e613fb0caa7f8d14db6686727e54592", 0xb0, 0x7, 0x4}, {&(0x7f0000000500)="d317b92143ab43bb1cb7ed76595b701151b108cacc5f9adc4383a339c1f44b4445623227800528fcd9934e25005a988d5429c7007deafd459e47353edf322c47c186f2f2cec871d7bc4109499991cf9cc8b18abe26e1a4701be732d6857c48ef048e98eacb2510af8275787e140a9833136cdaacac5765b14d61758ef8", 0x7d, 0x69ec, 0x1}, {&(0x7f0000000580)="30e64e4d8a78aef08f58860192108787cd13288026d050e7889e274a121520c8bb4f2b55ac62a07a8c3326d981c22ad713116af795136eae02bb0b9d8e43c0be3b9d36c62109aeca3bb77f6de560024f34620f1f6c7960b276bee0a2e1c711fdf6619690a199fd25675043c066f6da33a20743af219eb4f0369276e1ae483a45a706120ffe46629b468e0a00587cf6", 0x8f, 0x6c4, 0x81}], 0x30000) 919.585969ms ago: executing program 4 (id=1234): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) creat(&(0x7f0000000300)='./file0\x00', 0x142) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_open_procfs(0x0, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rpc_buf_alloc\x00', r4, 0x0, 0xfffffffffb}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) setns(r3, 0x66020000) umount2(0x0, 0x8) socket$kcm(0x10, 0x0, 0x0) r5 = syz_open_procfs(r1, &(0x7f0000000200)='net/hci\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) r6 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt(r6, 0xffff, 0x4080, &(0x7f00000004c0)=""/167, &(0x7f0000000280)=0xa7) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 877.275033ms ago: executing program 0 (id=1235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB="00000000050000000000000000fa2348db2a18f8fe0965a1", @ANYRES32=r3, @ANYRES32], 0x50) sendto$packet(r1, 0x0, 0x0, 0x4000000, &(0x7f0000000440)={0x11, 0x10, r3, 0x1, 0x6, 0x6, @broadcast}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r6, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000ac000200000000000000001811000059185f6d05378801533804019155a58a4dd99f97b33d8b", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000060696c2500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b701000001000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x59032, 0xffffffffffffffff, 0x0) r10 = getpid() process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f00000002c0)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000) r11 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r11) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0xd}]}) close_range(r12, 0xffffffffffffffff, 0x0) 776.843771ms ago: executing program 4 (id=1236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 716.392687ms ago: executing program 4 (id=1237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)=r6}, 0x20) chroot(&(0x7f0000000180)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 689.887559ms ago: executing program 3 (id=1238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 485.062777ms ago: executing program 5 (id=1241): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1200000, &(0x7f0000000080)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@user_xattr}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nodioread_nolock}, {@nolazytime}, {@grpid}, {@stripe}], [{@audit}, {@subj_role={'subj_role', 0x3d, 'nodioread_nolock'}}, {@dont_hash}, {@fowner_lt}, {@pcr={'pcr', 0x3d, 0x15}}, {@appraise_type}, {@hash}]}, 0x0, 0x511, &(0x7f00000004c0)="$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") r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x8402) close(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x190da) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x33, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) socket$inet6_sctp(0xa, 0x5, 0x84) 478.490017ms ago: executing program 3 (id=1242): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in=@rand_addr=0x64010101, 0x4d2, 0x6c}, @in=@local, {0x400, 0x400000000000, 0x0, 0x1}, {}, {0x0, 0x0, 0x100000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x89, 0xff}}}}]}, 0x44}}, 0x8010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0xfff3}, {}, {0x1c, 0x48a7c49da5505f56}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) r6 = syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r6, 0x29ab, 0xd480, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 409.755664ms ago: executing program 4 (id=1243): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) shmat(0x0, &(0x7f000055c000/0x2000)=nil, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) kexec_load(0x1ff, 0x6, &(0x7f0000000880)=[{&(0x7f0000000100)="126efdcaa9e87267953a0d43a7ca57eb0542880bca43d17ce301d0825b02722fc61d711f93b90fd84b2d0deaeb2c93ff10073dde5a5c5be80e0c2b2983477388f4e838c31b1959a5c427b13316a93e31a59d62f299f9ff6c7920f287a69e6476d1b7965bf33356a508cf232dd8641a8f72d96280fc34eaa3c837e6e5cbdb2d986931aae518259059545943948097938114df4388f46ad26ba72da1979cf89455f86e20f365c430351ddf0fd44312ac6bb0db78d09607bfe60fcf94efec6a", 0xbe, 0xe19b, 0x2}, {&(0x7f0000000280)="8e45c8dd304370b88f24d8391927a1187cd18b5d5d9eb24040f85b1edbf7d3c89a50bde45e26450f8caa36f5f9b9368c0bf0ff19c951d5e06a0606c21f81724be1254a5ebc9d603f8f015ebbe180949412b22eae8ce38b4e0865e7383cb513ea30f0de2c00a029d8f21d1a", 0x6b, 0x1, 0x9}, {&(0x7f0000000340)="bfc07bf18d34dc83885ced314d1fec438de7f3dad7436d610075739599ba78d9f5ef78684374dfd7240dd561df6773bb6cf0814d5f463fdcd4eaeaec3e6168dbe2844a1e3b965c6eaa", 0x49, 0x1000000000000, 0x7d8}, {&(0x7f00000003c0)="fed2b8f599dd860fcece1207f14c66ae3ff7ec1a854abd648f63ef3f014791c7f3d8eae078590da048896025c5425c20d82e2f3e8069a08dfaf446e42e58fcd772224f88921cfaa881538438b3eff4492edbf121bb048b190e769c8d5d68dfc775fe09f293d0542b5b280124824323fc4078dd05df61609c4b13815f423bf5eea13da1ef4ac01089d60545d74836a43383444214d1bdfe0577b4a9c5358a16935e613fb0caa7f8d14db6686727e54592", 0xb0, 0x7, 0x4}, {&(0x7f0000000500)="d317b92143ab43bb1cb7ed76595b701151b108cacc5f9adc4383a339c1f44b4445623227800528fcd9934e25005a988d5429c7007deafd459e47353edf322c47c186f2f2cec871d7bc4109499991cf9cc8b18abe26e1a4701be732d6857c48ef048e98eacb2510af8275787e140a9833136cdaacac5765b14d61758ef8", 0x7d, 0x69ec, 0x1}, {&(0x7f0000000580)="30e64e4d8a78aef08f58860192108787cd13288026d050e7889e274a121520c8bb4f2b55ac62a07a8c3326d981c22ad713116af795136eae02bb0b9d8e43c0be3b9d36c62109aeca3bb77f6de560024f34620f1f6c7960b276bee0a2e1c711fdf6619690a199fd25675043c066f6da33a20743af219eb4f0369276e1ae483a45a706120ffe46629b468e0a00587cf6", 0x8f, 0x6c4, 0x81}], 0x30000) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0xf}, 0x18) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB="000100001d00867728bd7000fcdbdf25ee006c8004003b800400280094001600fc02000000008ac92d109e9615000000000000000000000400f4800400238019410d88dd9443274b40e3ab4ccd189248b3216d57802902b829d57600bee119692ec177cda36fe144848f20a169845f9fd15fca4a680100c489cca7f491758e5ce2a2007bf6d1715fe81fb37e56adb8e2244b942443eba66fee7b63f009e80ea2226fbba1b03d3936cc6ba1ed50481ef7cad87faabdfff5228a7dbca19abbebb1c20965e4ab3b995da1819badcc7a546725c24e88c10232de7d405e7562516b25d8a52918e7761d2c46def83f2150afbb8316ba510a6b126fea01e115585de6eeaba537369c74527bc4365141", @ANYRESHEX, @ANYRES64=r4, @ANYRESOCT=r0], 0x100}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="031349bce71c00000000000000010020e7bfc47550be4c090e11b8f01c66c533980faa7702249785c45419c6aea3c82029dd2b59bf606cb446c727e20ad295d0f6faa7fb299e56039578b64cdb835e44774a9a1f744d7d3d8d0a88e6da3ffaf4f2e4112851a6ea108e49922d1f55042e04409e016b7d382bce128b797a58577b05d1e892b0344e4dfcf6cd292b8cc9560ceebfa9a3a6d400"/165, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRESDEC=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4], 0x60, 0x8001}, 0x5) mount$nfs(&(0x7f00000001c0)='sysfs\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000640), 0x400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='sysfs\x00,kfree\x00,/,&],sysfs\x00,\x00,!^}%$&{+-]!,,\\-,async,fowner<', @ANYRESDEC=0x0, @ANYBLOB="2c006fab68f16c8686bd2ca95a4971dd32373a61fec0092c39e821898905c35e23e7cb7d88d4803a3e4353515e911786ef3dac6f0e64cde79a0502e27e7e8dacf9f5d09e3c8767c13ad027e3b2bfd396ab8479769c6591925c89d527dda29bc8950819a0e1670291d47875516bb0438e9d96a33116225df074bfc0a5ef2d"]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 307.985893ms ago: executing program 5 (id=1244): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 307.510183ms ago: executing program 5 (id=1245): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000002000000000000000c"], 0x30}], 0x1, 0x0) 229.69138ms ago: executing program 5 (id=1246): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x4) unshare(0x2040000) r0 = socket(0x10, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8) unshare(0x68040200) r2 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 819.4µs ago: executing program 5 (id=1247): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x3e68, 0x0, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8081, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0x8, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x1ff, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x7e, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x3ff, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x0, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x10000006, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0x2, 0x400081, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x9, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x6, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x18, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x4, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x894}}, 0x0) 426.03µs ago: executing program 0 (id=1248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) 0s ago: executing program 5 (id=1249): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB="0000aa0067000000007db4b052951b6257091507b4f7b9466b811362a1dee92a28f2744476ae41421e95288150f3a225bdbd2ba4e09d1c5b1785cd85099b184ac24b3d6c9f9e5969ab606fa5996d0b15dc999f833d4b7c18b28c61e8a351bde8009b9fa54b83f8ea47dff076fa94b8cead9133", @ANYRES32=0x0, @ANYRES32], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYRES64=r3], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x20000095}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2d, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xae, 0x7, 0x3, 0xd, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb263}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, @exit, @generic={0x40, 0x3, 0xa, 0xed, 0x6}, @call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000055"], 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r1, 0x0, 0x101, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r8, 0x0, 0x1100000000f334, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r11 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x3, &(0x7f0000000080)) bind$inet(r11, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) kernel console output (not intermixed with test programs): 2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.942399][ T5632] Call Trace: [ 81.942409][ T5632] [ 81.942419][ T5632] __dump_stack+0x1d/0x30 [ 81.942444][ T5632] dump_stack_lvl+0x95/0xd0 [ 81.942518][ T5632] dump_stack+0x15/0x1b [ 81.942545][ T5632] should_fail_ex+0x265/0x280 [ 81.942582][ T5632] should_failslab+0x8c/0xb0 [ 81.942605][ T5632] kmem_cache_alloc_noprof+0x69/0x4b0 [ 81.942712][ T5632] ? getname_flags+0x80/0x3b0 [ 81.942742][ T5632] ? vfs_write+0x7e8/0x960 [ 81.942773][ T5632] getname_flags+0x80/0x3b0 [ 81.942796][ T5632] user_path_at+0x28/0x130 [ 81.942827][ T5632] vfs_open_tree+0xef/0x580 [ 81.942906][ T5632] __x64_sys_open_tree+0x5e/0xd0 [ 81.942933][ T5632] x64_sys_call+0x15ec/0x3000 [ 81.942958][ T5632] do_syscall_64+0xca/0x2b0 [ 81.942994][ T5632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.943029][ T5632] RIP: 0033:0x7fe35011f749 [ 81.943049][ T5632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.943073][ T5632] RSP: 002b:00007fe34eb7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 81.943131][ T5632] RAX: ffffffffffffffda RBX: 00007fe350375fa0 RCX: 00007fe35011f749 [ 81.943143][ T5632] RDX: 0000000000000800 RSI: 0000200000000140 RDI: ffffffffffffffff [ 81.943156][ T5632] RBP: 00007fe34eb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.943173][ T5632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.943188][ T5632] R13: 00007fe350376038 R14: 00007fe350375fa0 R15: 00007ffd1c419b88 [ 81.943214][ T5632] [ 81.944177][ T5631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.671'. [ 82.130308][ T5631] netem: change failed [ 82.199235][ T29] audit: type=1400 audit(1767588214.936:3586): avc: denied { execute } for pid=5635 comm="syz.1.673" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 82.269375][ T5642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.676'. [ 82.279405][ T4251] usb usb8-port1: attempt power cycle [ 82.316514][ T5646] FAULT_INJECTION: forcing a failure. [ 82.316514][ T5646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.329825][ T5646] CPU: 0 UID: 0 PID: 5646 Comm: syz.0.678 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.329853][ T5646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.329869][ T5646] Call Trace: [ 82.329875][ T5646] [ 82.329897][ T5646] __dump_stack+0x1d/0x30 [ 82.329928][ T5646] dump_stack_lvl+0x95/0xd0 [ 82.330002][ T5646] dump_stack+0x15/0x1b [ 82.330030][ T5646] should_fail_ex+0x265/0x280 [ 82.330055][ T5646] should_fail+0xb/0x20 [ 82.330073][ T5646] should_fail_usercopy+0x1a/0x20 [ 82.330179][ T5646] strncpy_from_user+0x27/0x260 [ 82.330259][ T5646] ? __rcu_read_unlock+0x4f/0x70 [ 82.330289][ T5646] path_removexattrat+0x82/0x570 [ 82.330342][ T5646] __x64_sys_fremovexattr+0x35/0x40 [ 82.330441][ T5646] x64_sys_call+0x4da/0x3000 [ 82.330574][ T5646] do_syscall_64+0xca/0x2b0 [ 82.330620][ T5646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.330649][ T5646] RIP: 0033:0x7fd36fe2f749 [ 82.330665][ T5646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.330701][ T5646] RSP: 002b:00007fd36e897038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 82.330744][ T5646] RAX: ffffffffffffffda RBX: 00007fd370085fa0 RCX: 00007fd36fe2f749 [ 82.330759][ T5646] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 82.330770][ T5646] RBP: 00007fd36e897090 R08: 0000000000000000 R09: 0000000000000000 [ 82.330798][ T5646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.330813][ T5646] R13: 00007fd370086038 R14: 00007fd370085fa0 R15: 00007ffeb909a598 [ 82.330837][ T5646] [ 82.529002][ T5650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.680'. [ 82.603665][ T5654] set_capacity_and_notify: 3 callbacks suppressed [ 82.603725][ T5654] loop4: detected capacity change from 0 to 512 [ 82.642352][ T5658] bond1: (slave veth1): Releasing active interface [ 82.653981][ T5654] EXT4-fs (loop4): filesystem is read-only [ 82.662635][ T29] audit: type=1400 audit(1767588215.396:3587): avc: denied { watch } for pid=5659 comm="syz.1.684" path="/104/file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.685323][ T5654] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 82.706619][ T5654] EXT4-fs (loop4): filesystem is read-only [ 82.717017][ T5659] Process accounting resumed [ 82.755276][ T29] audit: type=1326 audit(1767588215.486:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 82.764127][ T5654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.778733][ T29] audit: type=1326 audit(1767588215.496:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 82.814183][ T29] audit: type=1326 audit(1767588215.536:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 82.837640][ T29] audit: type=1326 audit(1767588215.536:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 82.861152][ T29] audit: type=1326 audit(1767588215.536:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 82.884553][ T29] audit: type=1326 audit(1767588215.536:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5667 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 82.887955][ T5662] lo speed is unknown, defaulting to 1000 [ 82.922140][ T5663] lo speed is unknown, defaulting to 1000 [ 82.977020][ T5670] loop1: detected capacity change from 0 to 8192 [ 83.117967][ T5654] SELinux: failed to load policy [ 83.143794][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.495060][ T5696] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 83.567926][ T5696] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 83.590148][ T5696] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 83.632679][ T5702] bond1: (slave gretap1): making interface the new active one [ 83.653208][ T5702] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 83.825721][ T5704] dvmrp0: entered allmulticast mode [ 84.017134][ T5718] tmpfs: Bad value for 'nr_inodes' [ 84.034810][ T5720] loop4: detected capacity change from 0 to 164 [ 84.061243][ T5722] loop3: detected capacity change from 0 to 2048 [ 84.079960][ T5726] loop4: detected capacity change from 0 to 512 [ 84.087104][ T5722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.108434][ T5722] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 84.135248][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.145203][ T5726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.201534][ T5726] ext4 filesystem being mounted at /159/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.252025][ T5737] FAULT_INJECTION: forcing a failure. [ 84.252025][ T5737] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.265387][ T5737] CPU: 0 UID: 0 PID: 5737 Comm: syz.3.710 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.265428][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.265446][ T5737] Call Trace: [ 84.265455][ T5737] [ 84.265477][ T5737] __dump_stack+0x1d/0x30 [ 84.265515][ T5737] dump_stack_lvl+0x95/0xd0 [ 84.265543][ T5737] dump_stack+0x15/0x1b [ 84.265601][ T5737] should_fail_ex+0x265/0x280 [ 84.265685][ T5737] should_fail_alloc_page+0xf2/0x100 [ 84.265716][ T5737] __alloc_frozen_pages_noprof+0x109/0x360 [ 84.265788][ T5737] alloc_pages_mpol+0xb3/0x260 [ 84.265832][ T5737] vma_alloc_folio_noprof+0x1aa/0x300 [ 84.265875][ T5737] handle_mm_fault+0xef5/0x2c60 [ 84.266001][ T5737] do_user_addr_fault+0x630/0x1080 [ 84.266045][ T5737] exc_page_fault+0x62/0xa0 [ 84.266159][ T5737] asm_exc_page_fault+0x26/0x30 [ 84.266186][ T5737] RIP: 0033:0x7ff30a2ccc5b [ 84.266207][ T5737] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 84.266231][ T5737] RSP: 002b:00007ff308d84e10 EFLAGS: 00010246 [ 84.266251][ T5737] RAX: 00007ff308d86f30 RBX: 00007ff30a54a640 RCX: 0000000000000000 [ 84.266270][ T5737] RDX: 00007ff308d86f78 RSI: 00007ff30a380df8 RDI: 00007ff308d84e30 [ 84.266283][ T5737] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 84.266295][ T5737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.266310][ T5737] R13: 00007ff30a576038 R14: 00007ff30a575fa0 R15: 00007fff67735c28 [ 84.266342][ T5737] [ 84.423855][ T5737] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 84.431890][ T4251] usb usb8-port1: unable to enumerate USB device [ 84.439968][ T5740] __nla_validate_parse: 7 callbacks suppressed [ 84.439982][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'. [ 84.516040][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.655244][ T5746] loop1: detected capacity change from 0 to 1024 [ 84.668551][ T5749] loop4: detected capacity change from 0 to 512 [ 84.676395][ T5746] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.687486][ T5747] FAULT_INJECTION: forcing a failure. [ 84.687486][ T5747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.700683][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: syz.3.713 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.700783][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.700797][ T5747] Call Trace: [ 84.700805][ T5747] [ 84.700817][ T5747] __dump_stack+0x1d/0x30 [ 84.700891][ T5747] dump_stack_lvl+0x95/0xd0 [ 84.700916][ T5747] dump_stack+0x15/0x1b [ 84.700941][ T5747] should_fail_ex+0x265/0x280 [ 84.700971][ T5747] should_fail+0xb/0x20 [ 84.701076][ T5747] should_fail_usercopy+0x1a/0x20 [ 84.701100][ T5747] strncpy_from_user+0x27/0x260 [ 84.701208][ T5747] getname_flags+0xae/0x3b0 [ 84.701250][ T5747] __x64_sys_renameat+0x50/0x80 [ 84.701325][ T5747] x64_sys_call+0x1dbf/0x3000 [ 84.701350][ T5747] do_syscall_64+0xca/0x2b0 [ 84.701392][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.701456][ T5747] RIP: 0033:0x7ff30a31f749 [ 84.701476][ T5747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.701494][ T5747] RSP: 002b:00007ff308d87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 84.701517][ T5747] RAX: ffffffffffffffda RBX: 00007ff30a575fa0 RCX: 00007ff30a31f749 [ 84.701533][ T5747] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 84.701550][ T5747] RBP: 00007ff308d87090 R08: 0000000000000000 R09: 0000000000000000 [ 84.701566][ T5747] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 84.701583][ T5747] R13: 00007ff30a576038 R14: 00007ff30a575fa0 R15: 00007fff67735c28 [ 84.701626][ T5747] [ 84.702726][ T5746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.897380][ T5749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.913107][ T5746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 84.938528][ T5749] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.949002][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 84.958228][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.990934][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.330297][ T5772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.481157][ T5772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.565488][ T5772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.629769][ T5772] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.708008][ T2207] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.721162][ T2207] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.760745][ T2207] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.773765][ T2207] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.815178][ T5780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 85.849294][ T5780] loop3: detected capacity change from 0 to 512 [ 85.856196][ T5780] EXT4-fs: inline encryption not supported [ 85.862134][ T5780] EXT4-fs: inline encryption not supported [ 85.868087][ T5780] EXT4-fs: Ignoring removed bh option [ 85.874580][ T5780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.895677][ T5780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.955368][ T5780] ext4 filesystem being mounted at /159/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.975873][ T5782] lo speed is unknown, defaulting to 1000 [ 85.997854][ T5780] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.725: corrupted inode contents [ 86.036706][ T5780] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #4: comm syz.3.725: mark_inode_dirty error [ 86.084543][ T5780] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.725: corrupted inode contents [ 86.115934][ T5780] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.725: mark_inode_dirty error [ 86.137728][ T5780] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.725: Failed to acquire dquot type 1 [ 86.224946][ T5798] netlink: 87 bytes leftover after parsing attributes in process `syz.4.732'. [ 86.252408][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.282734][ T5800] loop1: detected capacity change from 0 to 512 [ 86.293626][ T5802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.312608][ T5800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.332207][ T5800] ext4 filesystem being mounted at /118/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.394823][ T2207] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.435304][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.476609][ T5812] netlink: 660 bytes leftover after parsing attributes in process `syz.4.737'. [ 86.512737][ T5813] lo speed is unknown, defaulting to 1000 [ 86.535640][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 86.535658][ T29] audit: type=1400 audit(1767588219.266:4086): avc: denied { associate } for pid=5814 comm="syz.4.739" name="current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.567492][ T5816] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 86.585202][ T5816] netlink: 14 bytes leftover after parsing attributes in process `syz.1.738'. [ 86.599070][ T29] audit: type=1400 audit(1767588219.306:4087): avc: denied { append } for pid=5811 comm="syz.1.738" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 86.623302][ T29] audit: type=1400 audit(1767588219.306:4088): avc: denied { open } for pid=5811 comm="syz.1.738" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 86.647841][ T29] audit: type=1326 audit(1767588219.316:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5811 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35011f749 code=0x7ffc0000 [ 86.671272][ T29] audit: type=1326 audit(1767588219.316:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5811 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fe35011f749 code=0x7ffc0000 [ 86.694672][ T29] audit: type=1326 audit(1767588219.316:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5811 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35011f749 code=0x7ffc0000 [ 86.718010][ T29] audit: type=1326 audit(1767588219.316:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5811 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35011f749 code=0x7ffc0000 [ 86.741381][ T29] audit: type=1326 audit(1767588219.316:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5811 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35011f749 code=0x7ffc0000 [ 86.764797][ T29] audit: type=1326 audit(1767588219.316:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5811 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35011f749 code=0x7ffc0000 [ 86.788173][ T29] audit: type=1326 audit(1767588219.316:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5811 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe35011f749 code=0x7ffc0000 [ 86.811702][ T5816] hsr_slave_0: left promiscuous mode [ 86.818068][ T5816] hsr_slave_1: left promiscuous mode [ 88.005829][ T5829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 88.057599][ T5829] loop1: detected capacity change from 0 to 512 [ 88.074465][ T5829] EXT4-fs: inline encryption not supported [ 88.090877][ T5829] EXT4-fs: inline encryption not supported [ 88.096855][ T5829] EXT4-fs: Ignoring removed bh option [ 88.113165][ T5829] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.150288][ T5829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.165627][ T5829] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.178235][ T5829] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.743: corrupted inode contents [ 88.190126][ T5829] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #4: comm syz.1.743: mark_inode_dirty error [ 88.201860][ T5829] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.743: corrupted inode contents [ 88.213824][ T5829] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.743: mark_inode_dirty error [ 88.375995][ T5829] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.743: Failed to acquire dquot type 1 [ 88.435586][ T4678] Bluetooth: hci0: command 0x1003 tx timeout [ 88.441789][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.585408][ T5837] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 88.611643][ T5837] loop3: detected capacity change from 0 to 512 [ 88.628112][ T5837] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.628972][ T5837] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.746: bad orphan inode 13 [ 88.629174][ T5837] ext4_test_bit(bit=12, block=18) = 1 [ 88.629223][ T5837] is_bad_inode(inode)=0 [ 88.629233][ T5837] NEXT_ORPHAN(inode)=2130706432 [ 88.629243][ T5837] max_ino=32 [ 88.629252][ T5837] i_nlink=1 [ 88.647036][ T5837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.694526][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.738789][ T5842] loop1: detected capacity change from 0 to 128 [ 88.747983][ T5837] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 88.750913][ T5842] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 88.770708][ T5842] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.798284][ T5837] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 88.819498][ T3323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.828994][ T5836] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 88.853571][ T5850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 88.874167][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.884833][ T5850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.750'. [ 88.966509][ T5857] ipvlan2: entered promiscuous mode [ 88.973649][ T5854] lo speed is unknown, defaulting to 1000 [ 89.010330][ T5868] ipvlan3: entered promiscuous mode [ 89.028732][ T5869] loop3: detected capacity change from 0 to 256 [ 89.285304][ T2969] IPVS: starting estimator thread 0... [ 89.337743][ T5899] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 89.347750][ T5897] siw: device registration error -23 [ 89.376154][ T5894] IPVS: using max 2208 ests per chain, 110400 per kthread [ 89.416078][ T5900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.456518][ T5900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.518560][ T5911] lo speed is unknown, defaulting to 1000 [ 89.531379][ T5910] lo speed is unknown, defaulting to 1000 [ 89.648338][ T5917] __nla_validate_parse: 7 callbacks suppressed [ 89.648354][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 89.691401][ T5917] loop3: detected capacity change from 0 to 512 [ 89.698725][ T5917] EXT4-fs: inline encryption not supported [ 89.704823][ T5917] EXT4-fs: inline encryption not supported [ 89.710727][ T5917] EXT4-fs: Ignoring removed bh option [ 89.717285][ T5917] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.738035][ T5917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.750791][ T5917] ext4 filesystem being mounted at /168/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.763742][ T5917] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.770: corrupted inode contents [ 89.776298][ T5917] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #4: comm syz.3.770: mark_inode_dirty error [ 89.788254][ T5917] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.770: corrupted inode contents [ 89.801362][ T5917] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.770: mark_inode_dirty error [ 89.815059][ T5917] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.770: Failed to acquire dquot type 1 [ 89.899076][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.921008][ T5921] loop3: detected capacity change from 0 to 512 [ 89.928425][ T5921] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 90.393427][ T5934] siw: device registration error -23 [ 90.419939][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'. [ 90.454175][ T5939] Process accounting resumed [ 90.475491][ T5943] loop4: detected capacity change from 0 to 512 [ 90.485185][ T5943] EXT4-fs (loop4): filesystem is read-only [ 90.491728][ T5943] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 90.506709][ T5943] EXT4-fs (loop4): filesystem is read-only [ 90.513433][ T5943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.595322][ T5943] SELinux: failed to load policy [ 90.626995][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.646875][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'. [ 90.666194][ T5949] loop4: detected capacity change from 0 to 512 [ 90.672961][ T5949] EXT4-fs: inline encryption not supported [ 90.680267][ T5949] EXT4-fs: inline encryption not supported [ 90.686190][ T5949] EXT4-fs: Ignoring removed bh option [ 90.693650][ T5949] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.700607][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 90.718763][ T5949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.735385][ T5949] ext4 filesystem being mounted at /183/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.749956][ T5949] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.781: corrupted inode contents [ 90.767234][ T3404] hid_parser_main: 19 callbacks suppressed [ 90.767275][ T3404] hid-generic 0005:0004:0000.0005: unknown main item tag 0x0 [ 90.780595][ T3404] hid-generic 0005:0004:0000.0005: unknown main item tag 0x0 [ 90.788217][ T3404] hid-generic 0005:0004:0000.0005: unknown main item tag 0x0 [ 90.795854][ T3404] hid-generic 0005:0004:0000.0005: unknown main item tag 0x0 [ 90.803450][ T3404] hid-generic 0005:0004:0000.0005: unknown main item tag 0x0 [ 90.806082][ T5949] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #4: comm syz.4.781: mark_inode_dirty error [ 90.810947][ T3404] hid-generic 0005:0004:0000.0005: unknown main item tag 0x0 [ 90.825177][ T5949] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.781: corrupted inode contents [ 90.829543][ T3404] hid-generic 0005:0004:0000.0005: unknown main item tag 0x0 [ 90.848644][ T3404] hid-generic 0005:0004:0000.0005: unknown main item tag 0x0 [ 90.856098][ T3404] hid-generic 0005:0004:0000.0005: unknown main item tag 0x0 [ 90.863578][ T3404] hid-generic 0005:0004:0000.0005: unknown main item tag 0x0 [ 90.866174][ T5949] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.781: mark_inode_dirty error [ 90.882500][ T5949] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.781: Failed to acquire dquot type 1 [ 90.902251][ T3404] hid-generic 0005:0004:0000.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 90.942992][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.963560][ T5959] netlink: 3260 bytes leftover after parsing attributes in process `syz.1.783'. [ 91.107206][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 91.128538][ T5973] loop4: detected capacity change from 0 to 512 [ 91.137715][ T5973] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 91.146954][ T5973] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.154115][ T5973] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 91.169649][ T5973] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 91.177593][ T5973] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.787: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 91.196533][ T5973] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.787: couldn't read orphan inode 13 (err -117) [ 91.212076][ T5973] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 91.222666][ T5973] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 91.236844][ T5973] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 91.413876][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 91.476357][ T5993] netlink: 64 bytes leftover after parsing attributes in process `syz.3.791'. [ 91.543766][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.794'. [ 91.563540][ T6000] loop3: detected capacity change from 0 to 512 [ 91.574074][ T5999] EXT4-fs: inline encryption not supported [ 91.580899][ T6000] EXT4-fs: Mount option(s) incompatible with ext3 [ 91.587555][ T5999] EXT4-fs: inline encryption not supported [ 91.593424][ T5999] EXT4-fs: Ignoring removed bh option [ 91.601104][ T5999] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.611046][ T29] kauditd_printk_skb: 838 callbacks suppressed [ 91.611063][ T29] audit: type=1400 audit(1767588224.346:4928): avc: denied { read } for pid=5994 comm="syz.3.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.641466][ T5999] ext4 filesystem being mounted at /189/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.653238][ T5999] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.794: corrupted inode contents [ 91.669915][ T5999] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #4: comm syz.4.794: mark_inode_dirty error [ 91.682971][ T6004] ------------[ cut here ]------------ [ 91.688544][ T6004] EA inode 11 i_nlink=2 [ 91.688563][ T6004] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.3.792/6004 [ 91.703566][ T6004] Modules linked in: [ 91.707541][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: syz.3.792 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.717317][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.718678][ T5999] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.794: corrupted inode contents [ 91.727448][ T6004] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 91.745814][ T6004] Code: d1 e2 9c ff 4c 8d 2d 6a f0 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 ac ac ba 03 66 66 66 2e 0f 1f 84 [ 91.762252][ T5999] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.794: mark_inode_dirty error [ 91.765661][ T6004] RSP: 0018:ffffc90013b635a0 EFLAGS: 00010246 [ 91.782852][ T6004] RAX: ffff88810381dd10 RBX: ffff888119c93220 RCX: ffffffff81bb1d5b [ 91.790890][ T6004] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0db0 [ 91.794264][ T5999] Quota error (device loop4): write_blk: dquota write failed [ 91.798953][ T6004] RBP: 000000000000000b R08: 0001888119c931d3 R09: 0000000000000000 [ 91.806414][ T5999] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 91.814345][ T6004] R10: ffffc90013b634d0 R11: 0001c90013b634d0 R12: ffff888119c931d0 [ 91.824286][ T5999] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.794: Failed to acquire dquot type 1 [ 91.832376][ T6004] R13: ffffffff86dc0db0 R14: ffff888119c93188 R15: 0000000000000001 [ 91.851549][ T6004] FS: 00007ff308d456c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 91.860551][ T6004] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.867228][ T6004] CR2: 00007ff300964000 CR3: 0000000105428000 CR4: 00000000003506f0 [ 91.875279][ T6004] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 91.883332][ T6004] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 91.891386][ T6004] Call Trace: [ 91.894693][ T6004] [ 91.897681][ T6004] ext4_xattr_set_entry+0x77f/0x1020 [ 91.903099][ T6004] ext4_xattr_ibody_set+0x184/0x3c0 [ 91.908446][ T6004] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 91.914418][ T6004] __ext4_expand_extra_isize+0x246/0x280 [ 91.920152][ T6004] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 91.925886][ T6004] ext4_evict_inode+0x7c4/0xd40 [ 91.930786][ T6004] ? __pfx_ext4_evict_inode+0x10/0x10 [ 91.936245][ T6004] evict+0x2af/0x510 [ 91.940256][ T6004] ? __dquot_initialize+0x146/0x7c0 [ 91.945629][ T6004] iput+0x4bd/0x650 [ 91.949486][ T6004] ext4_process_orphan+0x1a9/0x1c0 [ 91.954732][ T6004] ext4_orphan_cleanup+0x6a8/0xa00 [ 91.959928][ T6004] ext4_fill_super+0x3411/0x37a0 [ 91.964973][ T6004] ? set_blocksize+0x1a8/0x310 [ 91.969858][ T6004] ? sb_set_blocksize+0xfc/0x170 [ 91.974844][ T6004] ? setup_bdev_super+0x30e/0x370 [ 91.979978][ T6004] ? __pfx_ext4_fill_super+0x10/0x10 [ 91.985306][ T6004] get_tree_bdev_flags+0x291/0x300 [ 91.990657][ T6004] ? __pfx_ext4_fill_super+0x10/0x10 [ 91.996011][ T6004] get_tree_bdev+0x1f/0x30 [ 92.000537][ T6004] ext4_get_tree+0x1c/0x30 [ 92.004993][ T6004] vfs_get_tree+0x57/0x1d0 [ 92.009497][ T6004] do_new_mount+0x24d/0x6a0 [ 92.014113][ T6004] path_mount+0x4ab/0xb80 [ 92.018591][ T6004] ? user_path_at+0xbf/0x130 [ 92.023340][ T6004] __se_sys_mount+0x28c/0x2e0 [ 92.028088][ T6004] __x64_sys_mount+0x67/0x80 [ 92.032729][ T6004] x64_sys_call+0x2cca/0x3000 [ 92.037716][ T6004] do_syscall_64+0xca/0x2b0 [ 92.042350][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.048320][ T6004] RIP: 0033:0x7ff30a320eea [ 92.052772][ T6004] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.072510][ T6004] RSP: 002b:00007ff308d44e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.081002][ T6004] RAX: ffffffffffffffda RBX: 00007ff308d44ef0 RCX: 00007ff30a320eea [ 92.089031][ T6004] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ff308d44eb0 [ 92.097064][ T6004] RBP: 0000200000000180 R08: 00007ff308d44ef0 R09: 0000000000800700 [ 92.105144][ T6004] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 92.113209][ T6004] R13: 00007ff308d44eb0 R14: 000000000000046f R15: 000000000000002c [ 92.121301][ T6004] [ 92.124352][ T6004] ---[ end trace 0000000000000000 ]--- [ 92.130399][ T6004] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.792: iget: bad extra_isize 90 (inode size 256) [ 92.143929][ T6004] EXT4-fs (loop3): Remounting filesystem read-only [ 92.150636][ T6004] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 92.159749][ T6004] EXT4-fs (loop3): 1 orphan inode deleted [ 92.226540][ T6008] netlink: 87 bytes leftover after parsing attributes in process `syz.4.795'. [ 92.239060][ T29] audit: type=1400 audit(1767588224.976:4929): avc: denied { mount } for pid=6006 comm="syz.1.796" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 92.309996][ T3323] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 92.317992][ T3323] FAT-fs (loop1): Filesystem has been set read-only [ 92.340003][ T29] audit: type=1400 audit(1767588224.996:4930): avc: denied { create } for pid=6006 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 92.359950][ T29] audit: type=1400 audit(1767588225.026:4931): avc: denied { mounton } for pid=6006 comm="syz.1.796" path="/133/file2/file0" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 92.382916][ T29] audit: type=1400 audit(1767588225.026:4932): avc: denied { mount } for pid=6006 comm="syz.1.796" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 92.404866][ T29] audit: type=1400 audit(1767588225.046:4933): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 92.424892][ T29] audit: type=1400 audit(1767588225.046:4934): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 92.460686][ T29] audit: type=1400 audit(1767588225.196:4935): avc: denied { create } for pid=6013 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.552179][ T6021] FAULT_INJECTION: forcing a failure. [ 92.552179][ T6021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.565458][ T6021] CPU: 0 UID: 0 PID: 6021 Comm: syz.4.800 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.565537][ T6021] Tainted: [W]=WARN [ 92.565546][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.565561][ T6021] Call Trace: [ 92.565570][ T6021] [ 92.565580][ T6021] __dump_stack+0x1d/0x30 [ 92.565607][ T6021] dump_stack_lvl+0x95/0xd0 [ 92.565634][ T6021] dump_stack+0x15/0x1b [ 92.565655][ T6021] should_fail_ex+0x265/0x280 [ 92.565761][ T6021] should_fail+0xb/0x20 [ 92.565786][ T6021] should_fail_usercopy+0x1a/0x20 [ 92.565856][ T6021] _copy_from_user+0x1c/0xb0 [ 92.565893][ T6021] core_sys_select+0x1d3/0x6e0 [ 92.565928][ T6021] ? set_user_sigmask+0x84/0x190 [ 92.565964][ T6021] __se_sys_pselect6+0x213/0x280 [ 92.566051][ T6021] ? mutex_unlock+0x4f/0x90 [ 92.566089][ T6021] __x64_sys_pselect6+0x78/0x90 [ 92.566116][ T6021] x64_sys_call+0x2e98/0x3000 [ 92.566144][ T6021] do_syscall_64+0xca/0x2b0 [ 92.566205][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.566235][ T6021] RIP: 0033:0x7f81b244f749 [ 92.566254][ T6021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.566278][ T6021] RSP: 002b:00007f81b0eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 92.566327][ T6021] RAX: ffffffffffffffda RBX: 00007f81b26a5fa0 RCX: 00007f81b244f749 [ 92.566339][ T6021] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040 [ 92.566351][ T6021] RBP: 00007f81b0eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.566364][ T6021] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 92.566376][ T6021] R13: 00007f81b26a6038 R14: 00007f81b26a5fa0 R15: 00007ffce6f5e578 [ 92.566395][ T6021] [ 92.762458][ T6025] siw: device registration error -23 [ 92.947903][ T6033] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.066379][ T6037] nfs: Unknown parameter 'sysfs' [ 93.637960][ T6049] lo speed is unknown, defaulting to 1000 [ 94.198729][ T6057] siw: device registration error -23 [ 94.214408][ T6059] veth4: entered promiscuous mode [ 94.219746][ T6059] veth4: entered allmulticast mode [ 94.343083][ T6065] set_capacity_and_notify: 3 callbacks suppressed [ 94.343103][ T6065] loop4: detected capacity change from 0 to 512 [ 94.377521][ T6065] EXT4-fs: inline encryption not supported [ 94.392024][ T6065] EXT4-fs: inline encryption not supported [ 94.397978][ T6065] EXT4-fs: Ignoring removed bh option [ 94.413987][ T6069] lo speed is unknown, defaulting to 1000 [ 94.428022][ T6065] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.444145][ T6070] loop3: detected capacity change from 0 to 512 [ 94.483240][ T6070] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.495833][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.504566][ T6065] ext4 filesystem being mounted at /197/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.515483][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.594404][ T6065] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.817: corrupted inode contents [ 94.606810][ T6065] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #4: comm syz.4.817: mark_inode_dirty error [ 94.619324][ T6065] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.817: corrupted inode contents [ 94.632847][ T6065] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.817: mark_inode_dirty error [ 94.644862][ T6065] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.817: Failed to acquire dquot type 1 [ 94.746276][ T6080] __nla_validate_parse: 3 callbacks suppressed [ 94.746295][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'. [ 94.922222][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.823'. [ 95.284070][ T6095] lo speed is unknown, defaulting to 1000 [ 95.342423][ T2400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.356752][ T6107] netlink: 87 bytes leftover after parsing attributes in process `syz.1.827'. [ 95.468810][ T2400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.526259][ T6095] chnl_net:caif_netlink_parms(): no params data found [ 95.547110][ T2400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.577814][ T6120] tipc: Can't bind to reserved service type 2 [ 95.580614][ T6114] lo speed is unknown, defaulting to 1000 [ 95.611452][ T6120] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 95.632353][ T2400] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.655055][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.662405][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.669788][ T6095] bridge_slave_0: entered allmulticast mode [ 95.676484][ T6095] bridge_slave_0: entered promiscuous mode [ 95.686178][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.693436][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.702860][ T6095] bridge_slave_1: entered allmulticast mode [ 95.710687][ T6095] bridge_slave_1: entered promiscuous mode [ 95.733639][ T6095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.748529][ T6095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.807301][ T6095] team0: Port device team_slave_0 added [ 95.823202][ T6095] team0: Port device team_slave_1 added [ 95.829934][ T2400] bridge_slave_1: left allmulticast mode [ 95.835700][ T2400] bridge_slave_1: left promiscuous mode [ 95.841455][ T2400] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.856266][ T2400] bridge_slave_0: left allmulticast mode [ 95.862130][ T2400] bridge_slave_0: left promiscuous mode [ 95.867956][ T2400] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.962041][ T6139] netlink: 36 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 96.067767][ T6146] loop4: detected capacity change from 0 to 512 [ 96.074809][ T6146] EXT4-fs: Mount option(s) incompatible with ext3 [ 96.087192][ T6146] loop4: detected capacity change from 0 to 512 [ 96.096692][ T6146] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.840: iget: bad extra_isize 90 (inode size 256) [ 96.110238][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 96.117169][ T6146] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 96.126350][ T6146] EXT4-fs (loop4): 1 orphan inode deleted [ 96.157854][ T2400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.168347][ T2400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.178028][ T2400] bond0 (unregistering): Released all slaves [ 96.191839][ T6141] tipc: Started in network mode [ 96.196959][ T6141] tipc: Node identity , cluster identity 4711 [ 96.203134][ T6141] tipc: Failed to set node id, please configure manually [ 96.210314][ T6141] tipc: Enabling of bearer rejected, failed to enable media [ 96.237977][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.245098][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.271259][ T6095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.282910][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.290078][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.316124][ T6095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.332935][ T6155] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 96.371301][ T2400] hsr_slave_0: left promiscuous mode [ 96.406473][ T2400] hsr_slave_1: left promiscuous mode [ 96.414387][ T2400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.421868][ T2400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.434121][ T2400] team_slave_0: left promiscuous mode [ 96.439678][ T2400] team_slave_1: left promiscuous mode [ 96.456056][ T2400] veth1_macvtap: left promiscuous mode [ 96.471142][ T2400] veth0_macvtap: left promiscuous mode [ 96.476931][ T2400] veth1_vlan: left promiscuous mode [ 96.482255][ T2400] veth0_vlan: left promiscuous mode [ 96.608240][ T2400] team0 (unregistering): Port device team_slave_1 removed [ 96.619468][ T2400] team0 (unregistering): Port device team_slave_0 removed [ 96.698609][ T6095] hsr_slave_0: entered promiscuous mode [ 96.705387][ T6095] hsr_slave_1: entered promiscuous mode [ 96.712230][ T6095] debugfs: 'hsr0' already exists in 'hsr' [ 96.718032][ T6095] Cannot create hsr debugfs directory [ 96.761486][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 96.761502][ T29] audit: type=1400 audit(1767588229.496:5132): avc: denied { read } for pid=6182 comm="syz.3.851" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.790371][ T29] audit: type=1400 audit(1767588229.496:5133): avc: denied { open } for pid=6182 comm="syz.3.851" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.849089][ T6188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.852'. [ 96.859731][ T6188] openvswitch: netlink: Missing key (keys=40, expected=100) [ 96.913195][ T6193] FAULT_INJECTION: forcing a failure. [ 96.913195][ T6193] name failslab, interval 1, probability 0, space 0, times 0 [ 96.925910][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.1.854 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.925949][ T6193] Tainted: [W]=WARN [ 96.925957][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.926019][ T6193] Call Trace: [ 96.926025][ T6193] [ 96.926034][ T6193] __dump_stack+0x1d/0x30 [ 96.926065][ T6193] dump_stack_lvl+0x95/0xd0 [ 96.926094][ T6193] dump_stack+0x15/0x1b [ 96.926114][ T6193] should_fail_ex+0x265/0x280 [ 96.926140][ T6193] should_failslab+0x8c/0xb0 [ 96.926168][ T6193] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 96.926200][ T6193] ? sidtab_sid2str_get+0xa0/0x130 [ 96.926235][ T6193] kmemdup_noprof+0x2b/0x70 [ 96.926346][ T6193] sidtab_sid2str_get+0xa0/0x130 [ 96.926387][ T6193] security_sid_to_context_core+0x1eb/0x2e0 [ 96.926462][ T6193] security_sid_to_context+0x27/0x40 [ 96.926548][ T6193] avc_audit_post_callback+0x10f/0x520 [ 96.926595][ T6193] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 96.926639][ T6193] common_lsm_audit+0x1bb/0x230 [ 96.926704][ T6193] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 96.926752][ T6193] slow_avc_audit+0x104/0x140 [ 96.926796][ T6193] avc_has_perm+0x13a/0x180 [ 96.926839][ T6193] sel_write_avc_cache_threshold+0xae/0x1c0 [ 96.926891][ T6193] ? __pfx_sel_write_avc_cache_threshold+0x10/0x10 [ 96.926922][ T6193] vfs_write+0x269/0x960 [ 96.926941][ T6193] ? __rcu_read_unlock+0x4f/0x70 [ 96.926961][ T6193] ? __fget_files+0x184/0x1c0 [ 96.926984][ T6193] ? mutex_lock+0x58/0x90 [ 96.927062][ T6193] ksys_write+0xda/0x1a0 [ 96.927131][ T6193] __x64_sys_write+0x40/0x50 [ 96.927149][ T6193] x64_sys_call+0x2847/0x3000 [ 96.927176][ T6193] do_syscall_64+0xca/0x2b0 [ 96.927210][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.927325][ T6193] RIP: 0033:0x7fe35011f749 [ 96.927342][ T6193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.927434][ T6193] RSP: 002b:00007fe34eb7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.927458][ T6193] RAX: ffffffffffffffda RBX: 00007fe350375fa0 RCX: 00007fe35011f749 [ 96.927472][ T6193] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 96.927484][ T6193] RBP: 00007fe34eb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.927497][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.927512][ T6193] R13: 00007fe350376038 R14: 00007fe350375fa0 R15: 00007ffd1c419b88 [ 96.927536][ T6193] [ 96.927843][ T29] audit: type=1400 audit(1767588229.646:5134): avc: granted { setsecparam } for pid=6192 comm="syz.1.854" scontext=root:sysadm_r:sysadm_t tsid=2 tclass=security [ 97.028128][ T6095] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.202722][ T6095] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.206190][ T6196] loop3: detected capacity change from 0 to 164 [ 97.220478][ T6196] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 97.231061][ T6095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.231148][ T29] audit: type=1400 audit(1767588229.966:5135): avc: denied { mount } for pid=6194 comm="syz.3.856" name="/" dev="loop3" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 97.263060][ T6095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.332806][ T6095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.344964][ T6205] loop3: detected capacity change from 0 to 128 [ 97.352065][ T6205] EXT4-fs: inline encryption not supported [ 97.359849][ T6095] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.370452][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.377652][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.387508][ T6205] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.409459][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.416601][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.425714][ T6205] syzkaller0: entered promiscuous mode [ 97.431262][ T6205] syzkaller0: entered allmulticast mode [ 97.464823][ T29] audit: type=1400 audit(1767588230.196:5136): avc: denied { read } for pid=6207 comm="syz.0.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.492917][ T6095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.534352][ T29] audit: type=1400 audit(1767588230.256:5137): avc: denied { connect } for pid=6207 comm="syz.0.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.601218][ T6095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.679798][ T29] audit: type=1400 audit(1767588230.386:5138): avc: denied { read } for pid=6218 comm="syz.3.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 97.699951][ T29] audit: type=1326 audit(1767588230.396:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36fe2f749 code=0x7ffc0000 [ 97.723725][ T29] audit: type=1326 audit(1767588230.396:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36fe2f749 code=0x7ffc0000 [ 97.747461][ T29] audit: type=1326 audit(1767588230.396:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36fe2f749 code=0x7ffc0000 [ 97.778044][ T6228] random: crng reseeded on system resumption [ 97.793094][ T6228] Restarting kernel threads ... [ 97.804354][ T6228] Done restarting kernel threads. [ 97.842306][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.862'. [ 97.936069][ T6243] vcan0: tx drop: invalid sa for name 0x0000001000000000 [ 97.950493][ T6095] veth0_vlan: entered promiscuous mode [ 97.959792][ T6095] veth1_vlan: entered promiscuous mode [ 97.989388][ T6095] veth0_macvtap: entered promiscuous mode [ 98.001014][ T6095] veth1_macvtap: entered promiscuous mode [ 98.018714][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.045252][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.056811][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.070045][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.090091][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.144903][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.870'. [ 98.147446][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.178455][ T6260] loop1: detected capacity change from 0 to 512 [ 98.186686][ T6260] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.212129][ T6263] siw: device registration error -23 [ 98.221977][ T6260] EXT4-fs (loop1): 1 truncate cleaned up [ 98.372565][ T6276] sctp: [Deprecated]: syz.0.874 (pid 6276) Use of int in max_burst socket option. [ 98.372565][ T6276] Use struct sctp_assoc_value instead [ 98.432303][ T6281] netlink: 87 bytes leftover after parsing attributes in process `syz.0.875'. [ 98.767832][ T6294] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 98.774667][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 98.794531][ T6294] hsr_slave_0: left promiscuous mode [ 99.061300][ T6304] loop1: detected capacity change from 0 to 164 [ 99.061326][ T6302] loop5: detected capacity change from 0 to 1024 [ 99.063228][ T6302] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.088507][ T6302] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #3: block 1: comm syz.5.884: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.103143][ T6302] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.884: Failed to acquire dquot type 0 [ 99.115418][ T6302] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.884: Freeing blocks not in datazone - block = 0, count = 4096 [ 99.129465][ T6302] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.884: Invalid inode bitmap blk 0 in block_group 0 [ 99.142729][ T6302] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 99.146086][ T6304] FAULT_INJECTION: forcing a failure. [ 99.146086][ T6304] name failslab, interval 1, probability 0, space 0, times 0 [ 99.152821][ T2400] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.164028][ T6304] CPU: 1 UID: 0 PID: 6304 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.164156][ T6304] Tainted: [W]=WARN [ 99.164177][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.164218][ T6304] Call Trace: [ 99.164308][ T6304] [ 99.164333][ T6304] __dump_stack+0x1d/0x30 [ 99.164474][ T6304] dump_stack_lvl+0x95/0xd0 [ 99.164541][ T6304] dump_stack+0x15/0x1b [ 99.164605][ T6304] should_fail_ex+0x265/0x280 [ 99.164687][ T6304] should_failslab+0x8c/0xb0 [ 99.164764][ T6304] kmem_cache_alloc_noprof+0x69/0x4b0 [ 99.164965][ T6304] ? audit_log_start+0x342/0x720 [ 99.165118][ T6304] audit_log_start+0x342/0x720 [ 99.165183][ T6304] ? kstrtouint+0x76/0xc0 [ 99.165272][ T6304] audit_seccomp+0x48/0x100 [ 99.165317][ T6304] ? __seccomp_filter+0x832/0x1260 [ 99.165515][ T6304] __seccomp_filter+0x843/0x1260 [ 99.165717][ T6304] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 99.165854][ T6304] ? vfs_write+0x7e8/0x960 [ 99.165916][ T6304] ? __rcu_read_unlock+0x4f/0x70 [ 99.165979][ T6304] ? __fget_files+0x184/0x1c0 [ 99.166069][ T6304] __secure_computing+0x82/0x150 [ 99.166184][ T6304] syscall_trace_enter+0xcf/0x1e0 [ 99.166268][ T6304] do_syscall_64+0xa4/0x2b0 [ 99.166404][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.166476][ T6304] RIP: 0033:0x7fe35011f749 [ 99.166528][ T6304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.166593][ T6304] RSP: 002b:00007fe34eb7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.166694][ T6304] RAX: ffffffffffffffda RBX: 00007fe350375fa0 RCX: 00007fe35011f749 [ 99.166735][ T6304] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000003 [ 99.166848][ T6304] RBP: 00007fe34eb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.166891][ T6304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.166949][ T6304] R13: 00007fe350376038 R14: 00007fe350375fa0 R15: 00007ffd1c419b88 [ 99.167018][ T6304] [ 99.170468][ T6302] EXT4-fs (loop5): 1 orphan inode deleted [ 99.187470][ T2400] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 99.374498][ T6309] netlink: 87 bytes leftover after parsing attributes in process `syz.1.887'. [ 99.421566][ T311] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.438617][ T311] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 99.461725][ T6313] loop4: detected capacity change from 0 to 512 [ 99.468503][ T6313] EXT4-fs: inline encryption not supported [ 99.474517][ T6313] EXT4-fs: inline encryption not supported [ 99.480491][ T6313] EXT4-fs: Ignoring removed bh option [ 99.487027][ T6313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.503580][ T6318] autofs4:pid:6318:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 99.517340][ T6313] ext4 filesystem being mounted at /212/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.538253][ T6313] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.889: corrupted inode contents [ 99.551624][ T6313] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #4: comm syz.4.889: mark_inode_dirty error [ 99.564277][ T6313] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.889: corrupted inode contents [ 99.577071][ T6313] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.889: mark_inode_dirty error [ 99.589030][ T6313] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.889: Failed to acquire dquot type 1 [ 99.611108][ T6320] loop5: detected capacity change from 0 to 764 [ 99.789987][ T6343] loop5: detected capacity change from 0 to 512 [ 99.812910][ T6343] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.828218][ T6343] EXT4-fs (loop5): mount failed [ 99.904813][ T6351] FAULT_INJECTION: forcing a failure. [ 99.904813][ T6351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.918052][ T6351] CPU: 1 UID: 0 PID: 6351 Comm: syz.3.899 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.918096][ T6351] Tainted: [W]=WARN [ 99.918115][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.918132][ T6351] Call Trace: [ 99.918142][ T6351] [ 99.918154][ T6351] __dump_stack+0x1d/0x30 [ 99.918187][ T6351] dump_stack_lvl+0x95/0xd0 [ 99.918214][ T6351] dump_stack+0x15/0x1b [ 99.918239][ T6351] should_fail_ex+0x265/0x280 [ 99.918278][ T6351] should_fail+0xb/0x20 [ 99.918304][ T6351] should_fail_usercopy+0x1a/0x20 [ 99.918335][ T6351] _copy_from_user+0x1c/0xb0 [ 99.918427][ T6351] memdup_user+0x5e/0xd0 [ 99.918472][ T6351] strndup_user+0x68/0xb0 [ 99.918497][ T6351] keyctl_restrict_keyring+0x15a/0x1b0 [ 99.918526][ T6351] __se_sys_keyctl+0x1ed/0xb80 [ 99.918552][ T6351] ? __rcu_read_unlock+0x4f/0x70 [ 99.918613][ T6351] ? __fget_files+0x184/0x1c0 [ 99.918645][ T6351] ? mutex_unlock+0x4f/0x90 [ 99.918678][ T6351] ? fput+0x8f/0xc0 [ 99.918797][ T6351] __x64_sys_keyctl+0x67/0x80 [ 99.918823][ T6351] x64_sys_call+0x27b8/0x3000 [ 99.918936][ T6351] do_syscall_64+0xca/0x2b0 [ 99.918994][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.919021][ T6351] RIP: 0033:0x7ff30a31f749 [ 99.919037][ T6351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.919066][ T6351] RSP: 002b:00007ff308d87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 99.919089][ T6351] RAX: ffffffffffffffda RBX: 00007ff30a575fa0 RCX: 00007ff30a31f749 [ 99.919178][ T6351] RDX: 0000200000000200 RSI: 0000000028aeb3e6 RDI: 000000000000001d [ 99.919195][ T6351] RBP: 00007ff308d87090 R08: 0000000000000000 R09: 0000000000000000 [ 99.919212][ T6351] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 99.919286][ T6351] R13: 00007ff30a576038 R14: 00007ff30a575fa0 R15: 00007fff67735c28 [ 99.919312][ T6351] [ 100.149176][ T6355] __nla_validate_parse: 4 callbacks suppressed [ 100.149194][ T6355] netlink: 87 bytes leftover after parsing attributes in process `syz.3.900'. [ 100.252579][ T6359] loop3: detected capacity change from 0 to 8192 [ 100.262704][ T6359] forcing mempool usage for bio_alloc_bioset+0x449/0xa50 [ 100.312534][ T3322] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 100.320563][ T3322] FAT-fs (loop3): Filesystem has been set read-only [ 100.439120][ T6368] loop3: detected capacity change from 0 to 8192 [ 100.456376][ T6368] capability: warning: `syz.3.905' uses deprecated v2 capabilities in a way that may be insecure [ 100.469531][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.905'. [ 100.513977][ T6370] siw: device registration error -23 [ 100.720253][ T6388] netlink: 304 bytes leftover after parsing attributes in process `syz.0.913'. [ 100.733744][ T6400] loop3: detected capacity change from 0 to 512 [ 100.766218][ T6400] EXT4-fs: Mount option(s) incompatible with ext3 [ 100.828399][ T6411] loop3: detected capacity change from 0 to 512 [ 100.837400][ T6411] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.917: iget: bad extra_isize 90 (inode size 256) [ 100.852992][ T6411] EXT4-fs (loop3): Remounting filesystem read-only [ 100.859828][ T6411] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 100.869663][ T6411] EXT4-fs (loop3): 1 orphan inode deleted [ 100.993843][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.928'. [ 101.023052][ T6429] loop5: detected capacity change from 0 to 512 [ 101.030183][ T6429] EXT4-fs: inline encryption not supported [ 101.041127][ T6429] EXT4-fs: inline encryption not supported [ 101.047110][ T6429] EXT4-fs: Ignoring removed bh option [ 101.054264][ T6429] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.068473][ T6429] ext4 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.083604][ T6429] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.928: corrupted inode contents [ 101.084243][ T6436] loop1: detected capacity change from 0 to 512 [ 101.101622][ T6433] lo speed is unknown, defaulting to 1000 [ 101.102760][ T6429] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.928: mark_inode_dirty error [ 101.121002][ T6429] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.928: corrupted inode contents [ 101.133734][ T6436] EXT4-fs: Mount option(s) incompatible with ext3 [ 101.143152][ T6429] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.928: mark_inode_dirty error [ 101.154975][ T6429] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.928: Failed to acquire dquot type 1 [ 101.187488][ T6440] loop4: detected capacity change from 0 to 512 [ 101.200075][ T6443] siw: device registration error -23 [ 101.202090][ T6442] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.929: iget: bad extra_isize 90 (inode size 256) [ 101.219275][ T6442] EXT4-fs (loop1): Remounting filesystem read-only [ 101.220284][ T6440] EXT4-fs (loop4): filesystem is read-only [ 101.228215][ T6442] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 101.241340][ T6442] EXT4-fs (loop1): 1 orphan inode deleted [ 101.243164][ T6440] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 101.263273][ T6440] EXT4-fs (loop4): filesystem is read-only [ 101.300794][ T6451] 9p: Bad value for 'wfdno' [ 101.347233][ T6454] bridge: RTM_NEWNEIGH with invalid ether address [ 101.373586][ T6456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.937'. [ 101.396584][ T6456] lo speed is unknown, defaulting to 1000 [ 101.600429][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.939'. [ 101.640433][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.942'. [ 101.679888][ T6471] siw: device registration error -23 [ 101.687753][ T6472] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 101.957531][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'. [ 102.159609][ T6491] EXT4-fs: Mount option(s) incompatible with ext3 [ 102.224190][ T6492] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.949: iget: bad extra_isize 90 (inode size 256) [ 102.237991][ T6492] EXT4-fs (loop1): Remounting filesystem read-only [ 102.244672][ T6492] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 102.253842][ T6492] EXT4-fs (loop1): 1 orphan inode deleted [ 102.260127][ T6492] EXT4-fs mount: 28 callbacks suppressed [ 102.260140][ T6492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.390344][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 102.390363][ T29] audit: type=1326 audit(1767588235.126:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6494 comm="syz.3.950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff30a31f749 code=0x0 [ 102.662936][ T29] audit: type=1400 audit(1767588235.396:5454): avc: denied { create } for pid=6501 comm="syz.4.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.683863][ T29] audit: type=1326 audit(1767588235.426:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.4.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b244f749 code=0x7ffc0000 [ 102.708372][ T29] audit: type=1326 audit(1767588235.426:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.4.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f81b244f749 code=0x7ffc0000 [ 102.731927][ T29] audit: type=1326 audit(1767588235.426:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.4.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b244f749 code=0x7ffc0000 [ 102.755334][ T29] audit: type=1326 audit(1767588235.426:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.4.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81b244f749 code=0x7ffc0000 [ 102.778906][ T29] audit: type=1326 audit(1767588235.426:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.4.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b244f749 code=0x7ffc0000 [ 102.802450][ T29] audit: type=1326 audit(1767588235.426:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.4.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f81b244f749 code=0x7ffc0000 [ 102.825923][ T29] audit: type=1326 audit(1767588235.426:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.4.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b244f749 code=0x7ffc0000 [ 102.849573][ T29] audit: type=1326 audit(1767588235.426:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.4.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f81b244f749 code=0x7ffc0000 [ 102.886723][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'. [ 102.961439][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.965483][ T6509] siw: device registration error -23 [ 103.010798][ T6513] lo speed is unknown, defaulting to 1000 [ 103.147055][ T6519] -1: renamed from syzkaller0 [ 103.161754][ T6519] netlink: 96 bytes leftover after parsing attributes in process `syz.4.959'. [ 103.361622][ T6513] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.391634][ T6513] vhci_hcd vhci_hcd.2: invalid port number 96 [ 103.397971][ T6513] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 104.045601][ T6547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.053128][ T6547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.061699][ T6547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.069206][ T6547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.443234][ T6563] syz.1.973: attempt to access beyond end of device [ 104.443234][ T6563] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 104.457635][ T6563] syz.1.973: attempt to access beyond end of device [ 104.457635][ T6563] loop1: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 104.472724][ T6563] syz.1.973: attempt to access beyond end of device [ 104.472724][ T6563] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 104.492558][ T6563] syz.1.973: attempt to access beyond end of device [ 104.492558][ T6563] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 104.506240][ T6563] syz.1.973: attempt to access beyond end of device [ 104.506240][ T6563] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 104.519932][ T6563] syz.1.973: attempt to access beyond end of device [ 104.519932][ T6563] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 104.533687][ T6563] syz.1.973: attempt to access beyond end of device [ 104.533687][ T6563] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 104.547434][ T6563] syz.1.973: attempt to access beyond end of device [ 104.547434][ T6563] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 104.561178][ T6563] syz.1.973: attempt to access beyond end of device [ 104.561178][ T6563] loop1: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 104.574934][ T6563] syz.1.973: attempt to access beyond end of device [ 104.574934][ T6563] loop1: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 104.804070][ T6580] set_capacity_and_notify: 4 callbacks suppressed [ 104.804093][ T6580] loop1: detected capacity change from 0 to 512 [ 104.817861][ T6580] EXT4-fs: inline encryption not supported [ 104.823863][ T6580] EXT4-fs: inline encryption not supported [ 104.829841][ T6580] EXT4-fs: Ignoring removed bh option [ 104.837374][ T6580] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.018273][ T6580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.033931][ T6580] ext4 filesystem being mounted at /166/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.077776][ T6580] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.978: corrupted inode contents [ 105.170686][ T6580] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #4: comm syz.1.978: mark_inode_dirty error [ 105.240634][ T6580] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.978: corrupted inode contents [ 105.311878][ T6580] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.978: mark_inode_dirty error [ 105.377616][ T6580] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.978: Failed to acquire dquot type 1 [ 105.507284][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.681165][ T6602] Cannot find add_set index 0 as target [ 105.695865][ T6602] loop1: detected capacity change from 0 to 1024 [ 105.706022][ T6602] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.717057][ T6602] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 105.729239][ T6602] EXT4-fs (loop1): invalid journal inode [ 105.735224][ T6602] EXT4-fs (loop1): can't get journal size [ 105.743582][ T6602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.766923][ T6602] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.985: path /169/file0: bad entry in directory: inode out of bounds - offset=0, inode=511, rec_len=1024, size=1024 fake=0 [ 105.804932][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.954673][ T6621] __nla_validate_parse: 8 callbacks suppressed [ 105.954693][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.989'. [ 106.065349][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.990'. [ 106.085812][ T6631] loop1: detected capacity change from 0 to 512 [ 106.092526][ T6631] EXT4-fs: inline encryption not supported [ 106.098670][ T6631] EXT4-fs: inline encryption not supported [ 106.104616][ T6631] EXT4-fs: Ignoring removed bh option [ 106.118684][ T6631] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.137752][ T6631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.150466][ T6631] ext4 filesystem being mounted at /171/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.162244][ T6631] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.990: corrupted inode contents [ 106.174346][ T6631] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #4: comm syz.1.990: mark_inode_dirty error [ 106.186166][ T6631] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.990: corrupted inode contents [ 106.198243][ T6631] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.990: mark_inode_dirty error [ 106.209773][ T6631] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.990: Failed to acquire dquot type 1 [ 106.268904][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.307189][ T6635] loop1: detected capacity change from 0 to 2048 [ 106.317357][ T6635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.330392][ T6635] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.605088][ T6642] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.991: bg 0: block 345: padding at end of block bitmap is not set [ 106.620599][ T6642] EXT4-fs (loop1): Remounting filesystem read-only [ 106.627566][ T52] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 106.811613][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.932267][ T6651] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 107.044077][ T6657] loop1: detected capacity change from 0 to 512 [ 107.100644][ T6657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.195987][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.301119][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1001'. [ 107.332818][ T6649] Process accounting resumed [ 107.341468][ T6666] loop5: detected capacity change from 0 to 512 [ 107.359682][ T6666] EXT4-fs: inline encryption not supported [ 107.376958][ T6666] EXT4-fs: inline encryption not supported [ 107.382865][ T6666] EXT4-fs: Ignoring removed bh option [ 107.410647][ T6666] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.436471][ T6666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.468325][ T6666] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.533002][ T6666] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.1001: corrupted inode contents [ 107.547790][ T6666] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.1001: mark_inode_dirty error [ 107.562945][ T6666] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.1001: corrupted inode contents [ 107.575186][ T6666] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.1001: mark_inode_dirty error [ 107.586867][ T6666] __quota_error: 652 callbacks suppressed [ 107.586917][ T6666] Quota error (device loop5): write_blk: dquota write failed [ 107.600120][ T6666] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 107.610108][ T6666] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1001: Failed to acquire dquot type 1 [ 107.694603][ T29] audit: type=1326 audit(1767588240.426:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.1.1004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe35011f749 code=0x0 [ 107.779647][ T6095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.988939][ T6683] lo speed is unknown, defaulting to 1000 [ 108.203909][ T29] audit: type=1326 audit(1767588240.936:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.5.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c855f749 code=0x7ffc0000 [ 108.229176][ T29] audit: type=1326 audit(1767588240.936:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.5.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c855f749 code=0x7ffc0000 [ 108.252800][ T29] audit: type=1326 audit(1767588240.966:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.5.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05c855f749 code=0x7ffc0000 [ 108.276611][ T29] audit: type=1326 audit(1767588240.966:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.5.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c855f749 code=0x7ffc0000 [ 108.300181][ T29] audit: type=1326 audit(1767588240.966:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.5.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c855f749 code=0x7ffc0000 [ 108.324978][ T29] audit: type=1326 audit(1767588240.966:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.5.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f05c855f749 code=0x7ffc0000 [ 108.348357][ T29] audit: type=1326 audit(1767588240.966:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.5.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c855f749 code=0x7ffc0000 [ 108.522800][ T6700] loop5: detected capacity change from 0 to 512 [ 108.530047][ T6700] EXT4-fs: Mount option(s) incompatible with ext3 [ 108.558322][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 108.599536][ T6705] loop5: detected capacity change from 0 to 512 [ 108.623434][ T36] kernel read not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 108.636640][ T6705] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1012: iget: bad extra_isize 90 (inode size 256) [ 108.650328][ T6705] EXT4-fs (loop5): Remounting filesystem read-only [ 108.657079][ T6705] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 108.666134][ T6705] EXT4-fs (loop5): 1 orphan inode deleted [ 108.672385][ T6705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.691421][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 108.800050][ T6645] loop3: detected capacity change from 0 to 512 [ 108.806679][ T6645] EXT4-fs: Ignoring removed i_version option [ 108.816749][ T6645] EXT4-fs (loop3): orphan cleanup on readonly fs [ 108.834606][ T6710] xt_hashlimit: max too large, truncated to 1048576 [ 108.843064][ T6645] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.995: EA inode hash validation failed [ 108.856626][ T6645] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.871120][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1015'. [ 108.882742][ T6645] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.995: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 108.901549][ T6645] EXT4-fs (loop3): Remounting filesystem read-only [ 108.908207][ T6645] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.3.995: ea_inode dec ref err=-117 [ 108.927018][ T6712] loop4: detected capacity change from 0 to 512 [ 108.933671][ T6712] EXT4-fs: inline encryption not supported [ 108.939846][ T6712] EXT4-fs: inline encryption not supported [ 108.945729][ T6712] EXT4-fs: Ignoring removed bh option [ 108.965893][ T6645] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 108.978776][ T6712] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.987762][ T6645] EXT4-fs (loop3): 1 orphan inode deleted [ 108.994150][ T6645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 109.018729][ T6712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.031514][ T6712] ext4 filesystem being mounted at /242/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.060003][ T6712] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.1015: corrupted inode contents [ 109.074013][ T6712] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #4: comm syz.4.1015: mark_inode_dirty error [ 109.086625][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.096847][ T6712] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.1015: corrupted inode contents [ 109.109445][ T6712] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1015: mark_inode_dirty error [ 109.122798][ T6712] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1015: Failed to acquire dquot type 1 [ 109.158161][ T6720] netlink: 87 bytes leftover after parsing attributes in process `syz.3.1018'. [ 109.193275][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.248202][ T6722] lo speed is unknown, defaulting to 1000 [ 109.273149][ T6724] siw: device registration error -23 [ 109.315640][ T6095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.337202][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1021'. [ 109.460612][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1025'. [ 109.487337][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1025'. [ 109.666902][ T6747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.765867][ T6747] ext4 filesystem being mounted at /222/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.808376][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.834849][ T6758] set_capacity_and_notify: 1 callbacks suppressed [ 109.834870][ T6758] loop1: detected capacity change from 0 to 1024 [ 109.878730][ T6758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.894366][ T6758] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 109.909515][ T6758] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1032: missing EA_INODE flag [ 109.921625][ T6758] EXT4-fs (loop1): Remounting filesystem read-only [ 109.928775][ T6767] loop3: detected capacity change from 0 to 512 [ 109.935363][ T6767] EXT4-fs: inline encryption not supported [ 109.945699][ T6767] EXT4-fs: inline encryption not supported [ 109.948618][ T6758] lo speed is unknown, defaulting to 1000 [ 109.951627][ T6767] EXT4-fs: Ignoring removed bh option [ 110.072119][ T6767] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.153329][ T6767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.197691][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.262324][ T6767] ext4 filesystem being mounted at /225/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.470791][ T6767] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.1034: corrupted inode contents [ 110.550097][ T6767] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #4: comm syz.3.1034: mark_inode_dirty error [ 110.577121][ T6767] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.1034: corrupted inode contents [ 110.591460][ T6767] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1034: mark_inode_dirty error [ 110.603460][ T6767] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1034: Failed to acquire dquot type 1 [ 110.657525][ T6783] loop4: detected capacity change from 0 to 512 [ 110.665025][ T6783] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.687679][ T6783] EXT4-fs (loop4): 1 truncate cleaned up [ 110.694669][ T6783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.710912][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.727701][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.854937][ T6800] siw: device registration error -23 [ 110.923416][ T6802] loop3: detected capacity change from 0 to 1024 [ 110.941073][ T6802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.959767][ T6802] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1047: missing EA_INODE flag [ 110.972272][ T6802] EXT4-fs (loop3): Remounting filesystem read-only [ 110.981997][ T6810] loop4: detected capacity change from 0 to 512 [ 110.991842][ T6810] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.1048: iget: bad extra_isize 90 (inode size 256) [ 111.007928][ T6810] EXT4-fs (loop4): Remounting filesystem read-only [ 111.014695][ T6810] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 111.025576][ T6810] EXT4-fs (loop4): 1 orphan inode deleted [ 111.033111][ T6810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.096479][ T6802] lo speed is unknown, defaulting to 1000 [ 111.248722][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.368263][ T6818] __nla_validate_parse: 2 callbacks suppressed [ 111.368294][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1051'. [ 111.368739][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 111.428392][ T6818] loop3: detected capacity change from 0 to 512 [ 111.443823][ T6818] EXT4-fs: inline encryption not supported [ 111.461982][ T6818] EXT4-fs: inline encryption not supported [ 111.470224][ T6818] EXT4-fs: Ignoring removed bh option [ 111.477117][ T6818] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.514803][ T6827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1053'. [ 111.525932][ T6818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.539857][ T6818] ext4 filesystem being mounted at /230/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.551930][ T6818] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.1051: corrupted inode contents [ 111.567966][ T6818] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #4: comm syz.3.1051: mark_inode_dirty error [ 111.580518][ T6818] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.1051: corrupted inode contents [ 111.592793][ T6818] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1051: mark_inode_dirty error [ 111.604574][ T6818] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1051: Failed to acquire dquot type 1 [ 111.681061][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.693435][ T6837] siw: device registration error -23 [ 111.770540][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.813168][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1060'. [ 111.849007][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1060'. [ 111.885733][ T6853] netlink: 87 bytes leftover after parsing attributes in process `syz.5.1062'. [ 111.937334][ T6858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1064'. [ 112.020654][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1067'. [ 112.055017][ T6864] loop1: detected capacity change from 0 to 512 [ 112.063105][ T6864] EXT4-fs: inline encryption not supported [ 112.069646][ T6864] EXT4-fs: inline encryption not supported [ 112.075673][ T6864] EXT4-fs: Ignoring removed bh option [ 112.081951][ T6868] siw: device registration error -23 [ 112.088246][ T6864] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.120369][ T6864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.133505][ T6864] ext4 filesystem being mounted at /192/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.148109][ T6864] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.1067: corrupted inode contents [ 112.160348][ T6864] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #4: comm syz.1.1067: mark_inode_dirty error [ 112.172225][ T6864] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.1067: corrupted inode contents [ 112.184354][ T6864] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1067: mark_inode_dirty error [ 112.196060][ T6864] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1067: Failed to acquire dquot type 1 [ 112.267296][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.290422][ T6874] loop1: detected capacity change from 0 to 1024 [ 112.318302][ T6874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.333310][ T6874] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1071: missing EA_INODE flag [ 112.345275][ T6874] EXT4-fs (loop1): Remounting filesystem read-only [ 112.364620][ T6874] lo speed is unknown, defaulting to 1000 [ 112.411866][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.436840][ T6878] loop1: detected capacity change from 0 to 256 [ 112.474117][ T6878] bio_check_eod: 80 callbacks suppressed [ 112.474148][ T6878] syz.1.1072: attempt to access beyond end of device [ 112.474148][ T6878] loop1: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 112.493644][ T6878] syz.1.1072: attempt to access beyond end of device [ 112.493644][ T6878] loop1: rw=2049, sector=352, nr_sectors = 36 limit=256 [ 112.619849][ T6886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1076'. [ 112.661656][ T6890] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1078'. [ 112.700218][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 112.700235][ T29] audit: type=1326 audit(1767588245.436:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35011f749 code=0x7ffc0000 [ 112.730894][ T6892] loop1: detected capacity change from 0 to 256 [ 112.751647][ T6892] syz.1.1079: attempt to access beyond end of device [ 112.751647][ T6892] loop1: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 112.763652][ T29] audit: type=1326 audit(1767588245.446:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35011f749 code=0x7ffc0000 [ 112.780227][ T6892] syz.1.1079: attempt to access beyond end of device [ 112.780227][ T6892] loop1: rw=2049, sector=352, nr_sectors = 36 limit=256 [ 112.788650][ T29] audit: type=1326 audit(1767588245.446:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe35011f749 code=0x7ffc0000 [ 112.825990][ T29] audit: type=1326 audit(1767588245.446:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe35011f783 code=0x7ffc0000 [ 112.849362][ T29] audit: type=1326 audit(1767588245.446:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe35011e1ff code=0x7ffc0000 [ 112.857754][ T6894] siw: device registration error -23 [ 112.872744][ T29] audit: type=1326 audit(1767588245.446:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe35011f7d7 code=0x7ffc0000 [ 112.901481][ T29] audit: type=1326 audit(1767588245.466:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe35011df90 code=0x7ffc0000 [ 112.924970][ T29] audit: type=1326 audit(1767588245.466:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe35011f34b code=0x7ffc0000 [ 112.948352][ T29] audit: type=1326 audit(1767588245.476:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe35011e3aa code=0x7ffc0000 [ 112.971654][ T29] audit: type=1326 audit(1767588245.476:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.1.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe35011e3aa code=0x7ffc0000 [ 113.021409][ T6897] EXT4-fs: inline encryption not supported [ 113.029493][ T6897] EXT4-fs: inline encryption not supported [ 113.035484][ T6897] EXT4-fs: Ignoring removed bh option [ 113.065844][ T6897] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.075440][ T6900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.092017][ T6900] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1082: missing EA_INODE flag [ 113.103921][ T6900] EXT4-fs (loop1): Remounting filesystem read-only [ 113.123247][ T6900] lo speed is unknown, defaulting to 1000 [ 113.133420][ T6897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.170487][ T6913] lo speed is unknown, defaulting to 1000 [ 113.173776][ T6897] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.187485][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.199989][ T6897] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.1081: corrupted inode contents [ 113.226205][ T6897] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.1081: mark_inode_dirty error [ 113.241580][ T6897] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.1081: corrupted inode contents [ 113.253745][ T6897] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.1081: mark_inode_dirty error [ 113.265994][ T6897] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1081: Failed to acquire dquot type 1 [ 113.366832][ T6095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.442989][ T6930] syz.3.1092: attempt to access beyond end of device [ 113.442989][ T6930] loop3: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 113.457462][ T6930] syz.3.1092: attempt to access beyond end of device [ 113.457462][ T6930] loop3: rw=2049, sector=352, nr_sectors = 36 limit=256 [ 113.500489][ T6934] siw: device registration error -23 [ 113.563120][ T6940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.580108][ T6940] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1097: missing EA_INODE flag [ 113.592243][ T6940] EXT4-fs (loop3): Remounting filesystem read-only [ 113.612194][ T6940] lo speed is unknown, defaulting to 1000 [ 113.662441][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.117408][ T6962] siw: device registration error -23 [ 114.126586][ T6960] SELinux: failed to load policy [ 114.176070][ T6966] lo speed is unknown, defaulting to 1000 [ 114.289620][ T6979] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 114.314241][ T6979] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.330195][ T6988] siw: device registration error -23 [ 114.341057][ T6982] syz.4.1115: attempt to access beyond end of device [ 114.341057][ T6982] loop4: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 114.380743][ T6982] syz.4.1115: attempt to access beyond end of device [ 114.380743][ T6982] loop4: rw=2049, sector=352, nr_sectors = 36 limit=256 [ 114.388657][ T6095] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.414320][ T6991] EXT4-fs (loop1): filesystem is read-only [ 114.424574][ T6991] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 114.436997][ T6991] EXT4-fs (loop1): filesystem is read-only [ 114.443499][ T6991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 114.565833][ T6991] SELinux: failed to load policy [ 114.599421][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.758342][ T7037] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.1132: iget: bad extra_isize 90 (inode size 256) [ 114.782584][ T7037] EXT4-fs (loop3): Remounting filesystem read-only [ 114.799472][ T7040] EXT4-fs: inline encryption not supported [ 114.805677][ T7040] EXT4-fs: inline encryption not supported [ 114.811572][ T7040] EXT4-fs: Ignoring removed bh option [ 114.822207][ T7037] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 114.831455][ T7040] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.834643][ T7037] EXT4-fs (loop3): 1 orphan inode deleted [ 114.846820][ T7037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.862218][ T7040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.875096][ T7040] ext4 filesystem being mounted at /215/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.885693][ T7042] SELinux: failed to load policy [ 114.889215][ T7040] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.1139: corrupted inode contents [ 114.902759][ T7040] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #4: comm syz.1.1139: mark_inode_dirty error [ 114.914605][ T7040] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.1139: corrupted inode contents [ 114.926721][ T7040] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.1139: mark_inode_dirty error [ 114.938278][ T7040] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1139: Failed to acquire dquot type 1 [ 114.998764][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.016923][ T7052] siw: device registration error -23 [ 115.224439][ T7061] set_capacity_and_notify: 9 callbacks suppressed [ 115.224455][ T7061] loop1: detected capacity change from 0 to 256 [ 115.301220][ T7072] loop1: detected capacity change from 0 to 512 [ 115.312786][ T7072] EXT4-fs (loop1): filesystem is read-only [ 115.323730][ T7072] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 115.335905][ T7072] EXT4-fs (loop1): filesystem is read-only [ 115.342144][ T7072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 115.358179][ T7074] loop4: detected capacity change from 0 to 512 [ 115.364942][ T7074] EXT4-fs: inline encryption not supported [ 115.371022][ T7074] EXT4-fs: inline encryption not supported [ 115.376904][ T7074] EXT4-fs: Ignoring removed bh option [ 115.382883][ T7074] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.405363][ T7072] SELinux: failed to load policy [ 115.410380][ T7074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.423569][ T7074] ext4 filesystem being mounted at /264/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.443406][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.446061][ T7074] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.1153: corrupted inode contents [ 115.476466][ T7074] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #4: comm syz.4.1153: mark_inode_dirty error [ 115.494903][ T7074] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #4: comm syz.4.1153: corrupted inode contents [ 115.507620][ T7074] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1153: mark_inode_dirty error [ 115.519375][ T7074] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1153: Failed to acquire dquot type 1 [ 115.547512][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.609857][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.815957][ T7108] loop3: detected capacity change from 0 to 512 [ 115.823550][ T7108] EXT4-fs (loop3): filesystem is read-only [ 115.830016][ T7108] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 115.842448][ T7108] EXT4-fs (loop3): filesystem is read-only [ 115.848831][ T7108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 115.910856][ T7108] SELinux: failed to load policy [ 115.929824][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.000936][ T7116] loop3: detected capacity change from 0 to 256 [ 116.048313][ T7118] nfs: Unknown parameter 'sysfs' [ 116.126030][ T7121] loop3: detected capacity change from 0 to 512 [ 116.136326][ T7121] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.1168: iget: bad extra_isize 90 (inode size 256) [ 116.150249][ T7121] EXT4-fs (loop3): Remounting filesystem read-only [ 116.156950][ T7121] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 116.166164][ T7121] EXT4-fs (loop3): 1 orphan inode deleted [ 116.172586][ T7121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.408077][ T7138] loop1: detected capacity change from 0 to 128 [ 116.418564][ T7138] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 116.431733][ T7138] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.481170][ T3323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.541096][ T7143] __nla_validate_parse: 17 callbacks suppressed [ 116.541117][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1178'. [ 116.572156][ T7143] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1178'. [ 116.654214][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1183'. [ 116.677103][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'. [ 116.691161][ T7161] loop5: detected capacity change from 0 to 512 [ 116.699295][ T7161] EXT4-fs: inline encryption not supported [ 116.705305][ T7164] loop1: detected capacity change from 0 to 512 [ 116.706708][ T7161] EXT4-fs: inline encryption not supported [ 116.717575][ T7161] EXT4-fs: Ignoring removed bh option [ 116.725953][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 116.735468][ T7161] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.745728][ T7164] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1182: inode has both inline data and extents flags [ 116.760122][ T7164] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1182: couldn't read orphan inode 15 (err -117) [ 116.772960][ T7164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.787744][ T7161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.800493][ T7161] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.812392][ T7161] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.1183: corrupted inode contents [ 116.824717][ T7161] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.1183: mark_inode_dirty error [ 116.836663][ T7161] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.1183: corrupted inode contents [ 116.848894][ T7161] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.1183: mark_inode_dirty error [ 116.860533][ T7161] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1183: Failed to acquire dquot type 1 [ 116.916920][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.976681][ T7164] loop1: detected capacity change from 512 to 64 [ 116.985695][ T7155] syz.1.1182: attempt to access beyond end of device [ 116.985695][ T7155] loop1: rw=8402945, sector=74, nr_sectors = 2 limit=64 [ 116.999388][ T7155] Buffer I/O error on dev loop1, logical block 37, lost sync page write [ 117.011783][ T7155] EXT4-fs error (device loop1): ext4_splice_branch:472: inode #18: block 37: comm syz.1.1182: IO error syncing itable block [ 117.025398][ T7155] EXT4-fs error (device loop1): ext4_check_bdev_write_error:227: comm syz.1.1182: Error while async write back metadata [ 117.038639][ T7155] syz.1.1182: attempt to access beyond end of device [ 117.038639][ T7155] loop1: rw=8390659, sector=482, nr_sectors = 2 limit=64 [ 117.054464][ T7155] EXT4-fs (loop1): discard request in group:0 block:240 count:1 failed with -5 [ 117.057363][ T7181] lo speed is unknown, defaulting to 1000 [ 117.068015][ T7155] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: IO failure [ 117.080186][ T7155] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 240); block bitmap corrupt. [ 117.094945][ T7155] EXT4-fs (loop1): pa ffff888107a79700: logic 33, phys. 225, len 31 [ 117.103031][ T7155] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 30, pa_free 29 [ 117.113652][ T7155] Buffer I/O error on dev loop1, logical block 37, lost sync page write [ 117.122598][ T7155] EXT4-fs error (device loop1): ext4_free_data:978: inode #18: block 37: comm syz.1.1182: IO error syncing itable block [ 117.135464][ T7155] EXT4-fs error (device loop1): ext4_check_bdev_write_error:227: comm syz.1.1182: Error while async write back metadata [ 117.148879][ T7155] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 117.160130][ T7155] Buffer I/O error on device loop1, logical block 41 [ 117.166843][ T7155] Buffer I/O error on device loop1, logical block 42 [ 117.173563][ T7155] Buffer I/O error on device loop1, logical block 43 [ 117.180263][ T7155] Buffer I/O error on device loop1, logical block 44 [ 117.187513][ T7155] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 117.198720][ T7155] Buffer I/O error on device loop1, logical block 49 [ 117.205442][ T7155] Buffer I/O error on device loop1, logical block 50 [ 117.212164][ T7155] Buffer I/O error on device loop1, logical block 51 [ 117.218936][ T7155] Buffer I/O error on device loop1, logical block 52 [ 117.241963][ T7155] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 117.253277][ T7155] Buffer I/O error on device loop1, logical block 57 [ 117.260008][ T7155] Buffer I/O error on device loop1, logical block 58 [ 117.267862][ T7155] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 117.279173][ T7155] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 117.290471][ T7155] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 117.301839][ T7155] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 117.313193][ T7155] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 121) [ 117.423958][ T7155] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 221) [ 117.435511][ T7155] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 117.490307][ T3323] bio_check_eod: 14 callbacks suppressed [ 117.490343][ T3323] syz-executor: attempt to access beyond end of device [ 117.490343][ T3323] loop1: rw=8402945, sector=72, nr_sectors = 2 limit=64 [ 117.509886][ T3323] Buffer I/O error on dev loop1, logical block 36, lost sync page write [ 117.519098][ T3323] EXT4-fs error (device loop1): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz-executor: IO error syncing itable block [ 117.549714][ T3323] EXT4-fs error (device loop1) in ext4_delete_entry:2737: IO failure [ 117.680954][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1199'. [ 117.701265][ T7197] EXT4-fs: inline encryption not supported [ 117.707419][ T7197] EXT4-fs: inline encryption not supported [ 117.713290][ T7197] EXT4-fs: Ignoring removed bh option [ 117.720141][ T7197] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.738153][ T7197] ext4 filesystem being mounted at /249/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.765646][ T7197] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.1199: corrupted inode contents [ 117.806998][ T7197] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #4: comm syz.3.1199: mark_inode_dirty error [ 117.820670][ T874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.848830][ T7197] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.1199: corrupted inode contents [ 117.861140][ T7197] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1199: mark_inode_dirty error [ 117.872653][ T7197] __quota_error: 680 callbacks suppressed [ 117.872671][ T7197] Quota error (device loop3): write_blk: dquota write failed [ 117.885942][ T7197] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 117.895942][ T7197] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1199: Failed to acquire dquot type 1 [ 117.965062][ T7208] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1204'. [ 118.008977][ T874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.057148][ T7208] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1204'. [ 118.114649][ T7204] lo speed is unknown, defaulting to 1000 [ 118.192731][ T874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.310308][ T874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.401750][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1205'. [ 118.456922][ T874] bridge_slave_1: left allmulticast mode [ 118.462736][ T874] bridge_slave_1: left promiscuous mode [ 118.468608][ T874] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.482593][ T874] bridge_slave_0: left allmulticast mode [ 118.488361][ T874] bridge_slave_0: left promiscuous mode [ 118.494227][ T874] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.528021][ T29] audit: type=1400 audit(1767588251.266:7193): avc: denied { accept } for pid=7228 comm="syz.5.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.638451][ T29] audit: type=1326 audit(1767588251.376:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 118.745704][ T29] audit: type=1326 audit(1767588251.406:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 118.769203][ T29] audit: type=1326 audit(1767588251.406:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 118.792934][ T29] audit: type=1326 audit(1767588251.406:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 118.816432][ T29] audit: type=1326 audit(1767588251.406:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 118.840048][ T29] audit: type=1326 audit(1767588251.406:7199): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 118.864099][ T29] audit: type=1326 audit(1767588251.406:7200): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30a31f749 code=0x7ffc0000 [ 118.942326][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'. [ 118.999345][ T7247] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.1215: iget: bad extra_isize 90 (inode size 256) [ 119.013581][ T7247] EXT4-fs (loop4): Remounting filesystem read-only [ 119.020376][ T7247] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 119.029496][ T7247] EXT4-fs (loop4): 1 orphan inode deleted [ 119.218403][ T874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.228996][ T874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.240804][ T874] bond0 (unregistering): Released all slaves [ 119.287092][ T7211] lo speed is unknown, defaulting to 1000 [ 119.322441][ T874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.329967][ T874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.343239][ T874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.350731][ T874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.384905][ T874] veth1_macvtap: left promiscuous mode [ 119.390672][ T874] veth0_macvtap: left promiscuous mode [ 119.396755][ T874] veth1_vlan: left promiscuous mode [ 119.402276][ T874] veth0_vlan: left promiscuous mode [ 119.504955][ T874] team0 (unregistering): Port device team_slave_1 removed [ 119.515453][ T874] team0 (unregistering): Port device team_slave_0 removed [ 119.599117][ T3425] lo speed is unknown, defaulting to 1000 [ 119.604906][ T3425] infiniband syz2: ib_query_port failed (-19) [ 119.695277][ T7211] chnl_net:caif_netlink_parms(): no params data found [ 119.776947][ T7276] EXT4-fs (loop3): filesystem is read-only [ 119.801298][ T7276] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 119.844500][ T7276] EXT4-fs (loop3): filesystem is read-only [ 119.858928][ T7284] lo speed is unknown, defaulting to 1000 [ 119.864980][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.872248][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.900465][ T7211] bridge_slave_0: entered allmulticast mode [ 119.916262][ T7211] bridge_slave_0: entered promiscuous mode [ 119.935548][ T7284] lo speed is unknown, defaulting to 1000 [ 119.941723][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.948969][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.963256][ T7211] bridge_slave_1: entered allmulticast mode [ 119.985342][ T7211] bridge_slave_1: entered promiscuous mode [ 120.002772][ T7284] lo speed is unknown, defaulting to 1000 [ 120.023199][ T7211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.035079][ T7284] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 120.055960][ T7301] Cannot find add_set index 0 as target [ 120.064527][ T7284] lo speed is unknown, defaulting to 1000 [ 120.072153][ T7211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.091468][ T7301] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 120.102476][ T7301] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 120.130201][ T7301] EXT4-fs (loop3): invalid journal inode [ 120.136206][ T7301] EXT4-fs (loop3): can't get journal size [ 120.145781][ T7284] lo speed is unknown, defaulting to 1000 [ 120.147949][ T7211] team0: Port device team_slave_0 added [ 120.180471][ T7211] team0: Port device team_slave_1 added [ 120.186839][ T7284] lo speed is unknown, defaulting to 1000 [ 120.205919][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.212979][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.238956][ T7211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.249769][ T7284] lo speed is unknown, defaulting to 1000 [ 120.251344][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.262527][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.288547][ T7211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.302469][ T7284] lo speed is unknown, defaulting to 1000 [ 120.327209][ T7315] set_capacity_and_notify: 4 callbacks suppressed [ 120.327230][ T7315] loop3: detected capacity change from 0 to 512 [ 120.353720][ T7211] hsr_slave_0: entered promiscuous mode [ 120.360412][ T7211] hsr_slave_1: entered promiscuous mode [ 120.366953][ T7211] debugfs: 'hsr0' already exists in 'hsr' [ 120.372754][ T7211] Cannot create hsr debugfs directory [ 120.394267][ T7315] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.1238: iget: bad extra_isize 90 (inode size 256) [ 120.425893][ T7315] EXT4-fs (loop3): Remounting filesystem read-only [ 120.441679][ T7315] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 120.473314][ T7315] EXT4-fs (loop3): 1 orphan inode deleted [ 120.488542][ T7324] loop5: detected capacity change from 0 to 512 [ 120.496994][ T7324] EXT4-fs (loop5): filesystem is read-only [ 120.512288][ T7324] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 120.524637][ T7324] EXT4-fs (loop5): filesystem is read-only [ 120.547275][ T7312] Process accounting paused [ 120.604916][ T7211] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.615882][ T7211] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.625192][ T7211] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.634805][ T7211] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 120.698557][ T7343] nfs: Unknown parameter 'sysfs' [ 120.711681][ T7211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.735744][ T7211] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.746784][ T874] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.753977][ T874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.770922][ T7346] loop5: detected capacity change from 0 to 1024 [ 120.778006][ T2207] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.785188][ T2207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.804108][ T7346] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1246: missing EA_INODE flag [ 120.816330][ T7346] EXT4-fs (loop5): Remounting filesystem read-only [ 120.867489][ T7346] lo speed is unknown, defaulting to 1000 [ 120.913385][ T7211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.006227][ T5082] ================================================================== [ 121.014538][ T5082] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 121.021586][ T5082] [ 121.023919][ T5082] read-write to 0xffff888237d2a524 of 4 bytes by task 3425 on cpu 1: [ 121.031989][ T5082] wq_worker_running+0x95/0x120 [ 121.036853][ T5082] schedule_timeout+0xb7/0x170 [ 121.041621][ T5082] msleep+0x50/0x90 [ 121.045434][ T5082] nsim_fib_event_work+0x413c/0x45e0 [ 121.050775][ T5082] process_scheduled_works+0x4ce/0x9d0 [ 121.056242][ T5082] worker_thread+0x582/0x770 [ 121.060856][ T5082] kthread+0x489/0x510 [ 121.064946][ T5082] ret_from_fork+0x149/0x290 [ 121.069631][ T5082] ret_from_fork_asm+0x1a/0x30 [ 121.074409][ T5082] [ 121.076738][ T5082] read to 0xffff888237d2a524 of 4 bytes by task 5082 on cpu 0: [ 121.084284][ T5082] kick_pool+0x49/0x2d0 [ 121.088452][ T5082] __queue_work+0x897/0xae0 [ 121.092966][ T5082] queue_work_on+0xa9/0x130 [ 121.097479][ T5082] wg_packet_encrypt_worker+0xc0a/0xe10 [ 121.103033][ T5082] process_scheduled_works+0x4ce/0x9d0 [ 121.108502][ T5082] worker_thread+0x582/0x770 [ 121.113103][ T5082] kthread+0x489/0x510 [ 121.117194][ T5082] ret_from_fork+0x149/0x290 [ 121.121792][ T5082] ret_from_fork_asm+0x1a/0x30 [ 121.126566][ T5082] [ 121.128886][ T5082] value changed: 0x00000000 -> 0x00000001 [ 121.134608][ T5082] [ 121.136928][ T5082] Reported by Kernel Concurrency Sanitizer on: [ 121.143088][ T5082] CPU: 0 UID: 0 PID: 5082 Comm: kworker/0:9 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 121.154468][ T5082] Tainted: [W]=WARN [ 121.158281][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.168348][ T5082] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 121.174866][ T5082] ================================================================== [ 121.274208][ T7211] veth0_vlan: entered promiscuous mode [ 121.283791][ T7211] veth1_vlan: entered promiscuous mode [ 121.304592][ T7211] veth0_macvtap: entered promiscuous mode [ 121.312862][ T7211] veth1_macvtap: entered promiscuous mode [ 121.329501][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.340694][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.353053][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.362705][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.372378][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.382933][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0