last executing test programs: 12.356119769s ago: executing program 1 (id=2090): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4}, 0x18) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r4, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r9, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x804) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="180001d2a700010000040000000000000000010004000400"], 0x30}, 0x1, 0x0, 0x0, 0x40000050}, 0x800) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001800010029bd7000000000001d01000008000900", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="db164ee812f67ad1b5eab6c88911a5af43d96f1e458d30f09568180ddebf601fab369d32681dbc45a5a77d103cf72ab5c4cfc60928cdcf9bf8a50f194eda360411c32afe0035eb5ebd52ca592a6a7f1c4f32311a23eacb8db18bd01f21445a84ab2b4ddc1eafbfa48b4ba623c8e5c6719f99bcab7d5cbedd98efc47af5bfe3e9e7f2220065605f08f9db34f8c343ffc2796878e466181eb8d002a6e0a6afdf1e112e6feac10c1323f23202517fe2263aed64931db6913038fbf0d705d9a9beac9bd25903d5f1d91349f59011b98e4e2f7444415737dee763c13da4b0928e9eaefcbe028040fa740cf093c02ff0"], 0x24}}, 0x0) bind$inet(r12, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 12.251001921s ago: executing program 1 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240)={[{@delalloc}, {@jqfmt_vfsv0}]}, 0x3, 0x4d5, &(0x7f0000000680)="$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") 12.143576173s ago: executing program 1 (id=2097): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) 11.946973446s ago: executing program 1 (id=2099): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@numtail}, {@utf8no}, {@fat=@errors_remount}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_lower}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@rodir}]}, 0x1, 0x220, &(0x7f0000000b00)="$eJzs3T9rU18YB/Cnv/75lYIkg1AUwSsuTqGpOJsiFcSAomTQyWJTlCYWDAR0aN18E/oWdHQVHMTVNyCCVMHFbh2ESL2xaWtiI5hcMZ/P0od7zvfe59yGXDLk5NaJ+uryWmNla2szpqfHYqIUpdgei3z8F+ORehQAwL9ku9WKL61U1r0AAMPh+Q8Ao6fP5//VIbYEAAyYz/8AMHqu37h5eaFcXryWJNMR9cfNSrOS/k3HF1bibtSiGnORi68RrV1pffFSeXEu2fExH5X6Rju/0ayM788XIxf57vliktqfn4yZdv7dTFRjPnJxtHt+vmt+Ks6c3nP9QuTi7e1Yi1osx062k18vJsmFK+UD+f+/zwMAAAAAAAAAAAAAAAAAAAAAgEEoJLu67t9TKPQaT/P97w90cH+eiTg+ke3aAQAAAAAAAAAAAAAAAAAA4G/RePBwdalWq97/VXHvzbNXh835qZiKbkNj7ev2f55BFUdOfXjSa874792fP1u8PJnlbemzeL1559jZxuy5zNqYjIg9R86nR3q+tD7nIgbUz/NM/xc/Vn3o5NmnpaUX6+8/9Xvmob8VAQAAAAAAAAAAAAAAAADAyOt86TfrTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO53f/x9ckfUaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWwAAAP//lbacqw==") syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = accept4$packet(r0, 0x0, &(0x7f0000000080), 0xc00) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) io_setup(0xffff, &(0x7f0000001080)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) sendmsg$sock(r5, &(0x7f00000003c0)={&(0x7f0000000180)=@ll={0x11, 0xf7, r9, 0x1, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="dea07400196a9bb7a5fc94da6deeea21ca9879c812ca598d321914c1821319634dd28d842c8879d736364e21ac205441c864eb27dbea8c94f34e384986a114c555158a19678c3169b04958b9a2e360c44556aff3077c4bd32fe26af146b2097cb350bfa9c8073382508c7f1b46ae606a3ae1141f9365ac657330f68dfb61745c15f3d28128d829b8725143213d6d9874ac329f7dffa2ffe0fe0bf7d413ccc049947d33fb88f7e29a1d6fb12e8c158f37faec916e4e9ffcc0a08c8a780d155dd1108420f50406c5929ef6a203897fa8d1b4c9a6697903c8581cb51565576df67f35e60f961eceb50c69", 0xe9}], 0x1, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x48}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r4}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11.265321797s ago: executing program 1 (id=2102): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x4008000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 10.937256922s ago: executing program 1 (id=2110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000e000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000500000000000000000000000000f10000000000000000000000000000000000000000000000002000000000e902000000000000000000000000010000000000000011a54d8d20010000000000000000000000010000000000acf4131a00ddffffff00000000000000000000000400000005000000000000000000000100000000000000e7"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 10.908935063s ago: executing program 32 (id=2110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000e000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000500000000000000000000000000f10000000000000000000000000000000000000000000000002000000000e902000000000000000000000000010000000000000011a54d8d20010000000000000000000000010000000000acf4131a00ddffffff00000000000000000000000400000005000000000000000000000100000000000000e7"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.306603499s ago: executing program 0 (id=2281): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 1.260443499s ago: executing program 5 (id=2284): prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x4, @local, 0x3}]}, &(0x7f0000000440)=0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="4e3857443e71bf9f6119c7b2fad70959be30382d5b37f4ad818aa9da1517b38b63e91252a503f43fc33fce92bf8a6897f7cce32c9214097553e36493019c80639c788a0659d22a15145e8eecb79584b5dadc63a9ba32a7a09898cd03a71a627ad4e2f89417a5c20997717c0d9bb4319d8cbac8d4d937477df199e5d45b6d55619ceeb97876d9f840c851267911722424cb", 0x91}], 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="50001200000600000000007e377500e92dded189cdd1f7aa718a106e6cddb14c20df68299890e42e8e5254109199dab1ea89bf16e239703e440ac11c9e62f984f2", @ANYRESHEX=r3, @ANYBLOB="d34b9b1bf6ab75037573fc98f428001280090001007665746800000000184002801400010000000000", @ANYRES16=r3, @ANYBLOB="000000000000200010"], 0x50}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x40, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x2008040) pread64(r4, &(0x7f0000001440)=""/126, 0x7e, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000240)={0xe, 0x7, 0x2, {{0x1, '\x00'}, 0x6}}, 0xe) 1.255604619s ago: executing program 0 (id=2285): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) faccessat2(r1, &(0x7f0000000880)='\x00', 0x1, 0x1100) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x400) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) time(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 1.141301071s ago: executing program 0 (id=2286): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x2000000000000126, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) 1.099829712s ago: executing program 5 (id=2289): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="08000a00ffffffff140006000000000601f0ffff0000000000000000140001"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040084}, 0x8802) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.049820532s ago: executing program 0 (id=2290): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24001d00200001030000000000000000020000000000000000000000080018"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00'], 0x28}}, 0x0) 1.023466243s ago: executing program 5 (id=2292): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0) 940.353774ms ago: executing program 5 (id=2295): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) 940.122434ms ago: executing program 4 (id=2296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 939.424884ms ago: executing program 2 (id=2297): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) faccessat2(r1, &(0x7f0000000880)='\x00', 0x1, 0x1100) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x400) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) time(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) socket$igmp(0x2, 0x3, 0x2) 936.435784ms ago: executing program 0 (id=2298): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x9, 0x9}, {0x3, 0x7, 0x3, 0x10000400}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000015c0)=ANY=[@ANYRESDEC, @ANYRES8=r0, @ANYBLOB="0000000000000000b7020000000001008500000086000000952ebcdee5e5772dff73a03023877f71caf2b5430cd1776eb07f4d3a4a5f4b216b20ed41e5636a4c1872d3a0fa82b4ddb7d0525ca4ac29608a814a37b6d5c068da9c0407251cf3b0df69a940ffc18ac2b291460d85be7c5e783f1dbf3609badbf4c2747a8cc039bf2453778164c7bb6a6b054902515fac2eba1c4bff6b880bc7939c640a0597976f8e518529b5a59306c1f8ae49dcc0c599cf80b789ded78f1d1262f403ee6fdea29e07d4b0b265df173688cb54d91efa", @ANYRESOCT=r1, @ANYBLOB="29f9c89e8bfb27dd224e3687d0a094e1c459bd59262a049b4d269da7bdf573722cc9c25ca60046a7c1fb8680222e805ab831dd297fa58df39abc0ec4549a81372132a179f09c6d8f49d338fa24c426e414ebeb877fe78ecfc82cebda98d4bb862672aed0da2d6f3ad0c6abaa29e6fc1382bf01d053447b082030546d7a2c5411a33e19f620651cf2a41e9f39b57fb314adfa641eaf45689a8e3009539dd4f802a6be0c0c5408d09f"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r5], 0x50) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='tick_stop\x00', r2, 0x0, 0x9}, 0x18) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) 930.920145ms ago: executing program 5 (id=2299): syz_io_uring_setup(0x762f, &(0x7f0000000380)={0x0, 0x114dd, 0x10, 0xfffffffd, 0x320}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_read_part_table(0x5f4, &(0x7f0000000600)="$eJzs3E+IE1ccB/CXoFlWEOvNm8EcIlKIkFslgoY4SMAsoUUPrejNPeSynjzECAbEg9nLiq0XPSjCuuhBTyKCIGLSQyEn2aV76e6y7KEsLIVAWaaETkoP/cN2m0Lh84GE9978fu87wzDHmcD/Wjr8GMdxKoQQT+y8+4v5ypmz2alT9c9DSIWvQgg/5Ge+GR5JJRWjXY8k8+VkXny9p3FnPrrVmdt/6GX252/Tvy7vHf7dCCGs9e5f/LPUvTs/Ucbk6NVjbw8P+gdfVcPD7snuiX2NC1cW8uXWwndTL04/zj4Z3ffCmPKfl94fuNmeiTrXStMfo+ZKtJ7e2ozO3XtQyMy26vmN40ndpTHlN7bPZ54+eldur04WP1RrtblnS3dzzcqb9vV+L7c4uH05qfv+HzxdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8945ePfb28KB/8FU1POye7J7Y17hwZSFfTqVCeHH6cfbJkaSu8Pumr/+9/Oel9wdutmeizrXS9MeouRKtp7c2o3P3HhQys616fuN4Unfpj5rjOG7tMr+xfT7z9NG7cnt1svihWqulny3dzTUrb9rX+73c4uD25fBTapcRAAAAAAAAAAAAAAAAAAAA8LcqZ85mp07V08PxlyGET6c/mx2O44kQwichjF5+H30HYHm4ng6h+HpP4858dKszt//Qy+zkb/vdSH5rvfsX/yp3YnyXxA78EgAA//+zq4gb") bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x9, 0x2004, @fd_index=0x5, 0x2, 0x5, 0x4aef, 0x0, 0x0, {0x1}}) 877.641365ms ago: executing program 4 (id=2301): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x2000000000000126, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) 876.998995ms ago: executing program 2 (id=2302): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf252000000008000300", @ANYRES32=r3, @ANYBLOB="54002d8005000100000000000500040000000000080002"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) syz_open_pts(r9, 0x101) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12], 0x90}}, 0x0) 804.544096ms ago: executing program 4 (id=2304): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 639.551769ms ago: executing program 4 (id=2306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x74, 0x101301) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[], 0x31b00) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000002c0)) socket$packet(0x11, 0x2, 0x300) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0xfff) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x9}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0x0, 0x4}]}}}}}}}}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) 518.904861ms ago: executing program 3 (id=2308): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24001d00200001030000000000000000020000000000000000000000080018"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00'], 0x28}}, 0x0) 464.189472ms ago: executing program 2 (id=2309): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, 0x0, 0x0, 0x20044000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 443.501702ms ago: executing program 3 (id=2310): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 430.666973ms ago: executing program 2 (id=2311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 410.310583ms ago: executing program 3 (id=2312): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) faccessat2(r1, &(0x7f0000000880)='\x00', 0x1, 0x1100) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x400) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) time(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) socket$igmp(0x2, 0x3, 0x2) 352.149684ms ago: executing program 2 (id=2313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 348.562324ms ago: executing program 3 (id=2314): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x2000000000000126, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0) 335.886864ms ago: executing program 4 (id=2315): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000ec0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1c410, &(0x7f0000000e40), 0xde, 0x547, &(0x7f00000007c0)="$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") openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r1, 0xffffffffffffffff, 0x0) 276.321125ms ago: executing program 3 (id=2316): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="19517b", @ANYRES16=0x0, @ANYBLOB="000400000000000000000d0000000500190005000000050018004d0000000600"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x4008000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 275.773335ms ago: executing program 3 (id=2317): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0xfad9, 0x0, 0x0, 0x2}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x59fa, 0x400, 0x8, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='b 122'], 0xa) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r10}, 0x10) pause() sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x300, 0x2, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x7c, 0x17, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x7, 0x7e}, {0x8}, {0x0, 0x2}, {0x6, 0xfe}]}, @TCA_ACT_BPF_NAME={0xa, 0x6, './bus\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) fcntl$dupfd(r6, 0x406, 0xffffffffffffffff) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000e6320d79000200001b6e9b41c69461002c47ed6cc1be0f389cc4426f3d1775f4a2216333db00000000fbc4fff59212616efaf5a95d21fa", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7040000080000070000002ecdce21b29992f38c765f0785800263a9a2f03bcf1a15805c0cdc4873c6415e6a539b9f01f971243fba596c8236a46382ff697385804b8c925fe9049bcf0c4ca4696b6ed0dad0be29c9cabca6b56ff4f02f2f258a22fc7e0754aa3a1c68ec9538d84294706519e5f80360630d1e3bf79c81327d058f9b258277e99dcf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 116.206648ms ago: executing program 2 (id=2318): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf252000000008000300", @ANYRES32=r3, @ANYBLOB="54002d8005000100000000000500040000000000080002"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) syz_open_pts(r8, 0x101) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0) 40.756319ms ago: executing program 0 (id=2319): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x55) setsockopt(r0, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1) 26.819819ms ago: executing program 5 (id=2320): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x38, r2, 0xc4fc9e906872338b, 0x20, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x38}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x3b, "db7385cb3505636582b39080962d0816de7b0c1007d841965418b88e327c03274c1a265f89d1b40ba7b184da77ad20d27ed3c2f8b0244f85706939"}, &(0x7f0000000000)=0x43) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={r4, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x84) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) 0s ago: executing program 4 (id=2321): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) pipe(&(0x7f0000000000)) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) kernel console output (not intermixed with test programs): bility 0, space 0, times 0 [ 106.634182][ T7698] CPU: 1 UID: 0 PID: 7698 Comm: syz.4.1322 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 106.634212][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.634226][ T7698] Call Trace: [ 106.634238][ T7698] [ 106.634247][ T7698] dump_stack_lvl+0xf6/0x150 [ 106.634328][ T7698] dump_stack+0x15/0x1a [ 106.634349][ T7698] should_fail_ex+0x261/0x270 [ 106.634404][ T7698] should_failslab+0x8f/0xb0 [ 106.634432][ T7698] __kmalloc_cache_noprof+0x55/0x320 [ 106.634546][ T7698] ? prog_array_map_alloc+0x33/0x120 [ 106.634663][ T7698] prog_array_map_alloc+0x33/0x120 [ 106.634744][ T7698] map_create+0x881/0xba0 [ 106.634781][ T7698] __sys_bpf+0x6ac/0x800 [ 106.634824][ T7698] __x64_sys_bpf+0x43/0x50 [ 106.634863][ T7698] x64_sys_call+0x23da/0x2e10 [ 106.634896][ T7698] do_syscall_64+0xc9/0x1a0 [ 106.634926][ T7698] ? clear_bhb_loop+0x25/0x80 [ 106.634952][ T7698] ? clear_bhb_loop+0x25/0x80 [ 106.634978][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.635008][ T7698] RIP: 0033:0x7ff31f46e169 [ 106.635026][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.635048][ T7698] RSP: 002b:00007ff31dad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.635071][ T7698] RAX: ffffffffffffffda RBX: 00007ff31f695fa0 RCX: 00007ff31f46e169 [ 106.635137][ T7698] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 106.635231][ T7698] RBP: 00007ff31dad7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.635246][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.635260][ T7698] R13: 0000000000000000 R14: 00007ff31f695fa0 R15: 00007ffe68f6bd28 [ 106.635285][ T7698] [ 106.827552][ T7702] vlan2: entered allmulticast mode [ 106.832764][ T7702] batadv0: entered allmulticast mode [ 106.838581][ T29] audit: type=1326 audit(1745139028.057:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3829e169 code=0x7ffc0000 [ 106.862090][ T29] audit: type=1326 audit(1745139028.057:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3829e169 code=0x7ffc0000 [ 106.867741][ T7705] loop2: detected capacity change from 0 to 2048 [ 106.885611][ T29] audit: type=1326 audit(1745139028.057:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdd3829e169 code=0x7ffc0000 [ 106.885641][ T29] audit: type=1326 audit(1745139028.057:7701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3829e169 code=0x7ffc0000 [ 106.944533][ T29] audit: type=1400 audit(1745139028.167:7702): avc: denied { mount } for pid=7691 comm="syz.3.1320" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 106.969555][ T7705] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 106.990478][ T7708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1327'. [ 107.014631][ T29] audit: type=1400 audit(1745139028.237:7703): avc: denied { nlmsg_read } for pid=7706 comm="syz.1.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 107.024808][ T7709] loop1: detected capacity change from 0 to 2048 [ 107.078702][ T7709] Alternate GPT is invalid, using primary GPT. [ 107.085092][ T7709] loop1: p2 p3 p7 [ 107.115358][ T29] audit: type=1400 audit(1745139028.337:7704): avc: denied { ioctl } for pid=7718 comm="syz.3.1332" path="socket:[16667]" dev="sockfs" ino=16667 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.179017][ T7723] netlink: 'syz.2.1333': attribute type 4 has an invalid length. [ 107.189827][ T7723] vlan3: entered allmulticast mode [ 107.195183][ T7723] batadv0: entered allmulticast mode [ 107.207479][ T7725] loop3: detected capacity change from 0 to 512 [ 107.217545][ T7725] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.257077][ T6281] udevd[6281]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 107.276958][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 107.296172][ T7725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.359348][ T7725] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.385310][ T29] audit: type=1326 audit(1745139028.607:7705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3829e169 code=0x7ffc0000 [ 107.408960][ T29] audit: type=1326 audit(1745139028.607:7706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3829e169 code=0x7ffc0000 [ 107.432922][ T7725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.519955][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 107.656162][ T7746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1340'. [ 108.204804][ T7762] can0: slcan on ttyS3. [ 108.266738][ T7762] can0 (unregistered): slcan off ttyS3. [ 108.272380][ T7762] Falling back ldisc for ttyS3. [ 108.345273][ T7743] Cannot find add_set index 0 as target [ 108.404526][ T7779] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1349'. [ 108.449019][ T7785] siw: device registration error -23 [ 108.488843][ T7790] loop2: detected capacity change from 0 to 2048 [ 108.574985][ T7808] loop4: detected capacity change from 0 to 2048 [ 108.622745][ T7817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1359'. [ 109.225330][ T7828] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1364'. [ 109.419590][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 109.618559][ T7865] netlink: 'syz.1.1381': attribute type 10 has an invalid length. [ 109.736440][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1386'. [ 109.835639][ T7888] loop3: detected capacity change from 0 to 2048 [ 109.855604][ T7888] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 110.036910][ T7900] netlink: 'syz.4.1395': attribute type 10 has an invalid length. [ 110.279783][ T7918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7918 comm=wg1 [ 110.531555][ T7927] siw: device registration error -23 [ 110.605935][ T7922] loop2: detected capacity change from 0 to 512 [ 110.624267][ T7922] EXT4-fs: Ignoring removed nobh option [ 110.714431][ T7922] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1403: invalid indirect mapped block 256 (level 2) [ 110.729719][ T7922] EXT4-fs (loop2): 2 truncates cleaned up [ 110.745452][ T7936] loop0: detected capacity change from 0 to 512 [ 110.745557][ T7922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.806533][ T7920] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1403: bg 0: block 5: invalid block bitmap [ 110.825509][ T7936] EXT4-fs (loop0): orphan cleanup on readonly fs [ 110.838929][ T7936] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.1408: bad orphan inode 13 [ 110.844830][ T7920] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 110.861297][ T7920] EXT4-fs (loop2): This should not happen!! Data will be lost [ 110.861297][ T7920] [ 110.871034][ T7920] EXT4-fs (loop2): Total free blocks count 0 [ 110.872500][ T7936] ext4_test_bit(bit=12, block=18) = 1 [ 110.877044][ T7920] EXT4-fs (loop2): Free/Dirty block details [ 110.877061][ T7920] EXT4-fs (loop2): free_blocks=0 [ 110.877075][ T7920] EXT4-fs (loop2): dirty_blocks=66 [ 110.882461][ T7936] is_bad_inode(inode)=0 [ 110.888364][ T7920] EXT4-fs (loop2): Block reservation details [ 110.893276][ T7936] NEXT_ORPHAN(inode)=2130706432 [ 110.898398][ T7920] EXT4-fs (loop2): i_reserved_data_blocks=66 [ 110.902538][ T7936] max_ino=32 [ 110.902548][ T7936] i_nlink=1 [ 110.993121][ T7937] loop4: detected capacity change from 0 to 512 [ 111.045590][ T7936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.059201][ T7946] loop1: detected capacity change from 0 to 2048 [ 111.072543][ T7946] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 111.108309][ T7937] EXT4-fs: Ignoring removed nobh option [ 111.187133][ T7937] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #3: comm syz.4.1407: corrupted inode contents [ 111.218137][ T5354] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 42 with error 28 [ 111.246042][ T7937] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #3: comm syz.4.1407: mark_inode_dirty error [ 111.293129][ T7937] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #3: comm syz.4.1407: corrupted inode contents [ 111.342270][ T7956] loop1: detected capacity change from 0 to 512 [ 111.344537][ T7958] loop2: detected capacity change from 0 to 164 [ 111.359641][ T7956] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.371660][ T7937] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.1407: mark_inode_dirty error [ 111.403380][ T7956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.439322][ T7937] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1407: Failed to acquire dquot type 0 [ 111.460683][ T7956] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.478176][ T7956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.494832][ T7937] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.1407: corrupted inode contents [ 111.500800][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.519029][ T7937] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #16: comm syz.4.1407: mark_inode_dirty error [ 111.519682][ T7966] siw: device registration error -23 [ 111.582986][ T7937] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.1407: corrupted inode contents [ 111.604407][ T7937] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.1407: mark_inode_dirty error [ 111.624822][ T7971] loop3: detected capacity change from 0 to 2048 [ 111.654920][ T7971] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 111.673826][ T7937] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.1407: corrupted inode contents [ 111.725148][ T7937] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 111.738653][ T7937] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.1407: corrupted inode contents [ 111.766050][ T7982] loop1: detected capacity change from 0 to 2048 [ 111.772577][ T7937] EXT4-fs error (device loop4): ext4_truncate:4255: inode #16: comm syz.4.1407: mark_inode_dirty error [ 111.792868][ T7983] __nla_validate_parse: 6 callbacks suppressed [ 111.792889][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 111.802662][ T7976] can0: slcan on ttyS3. [ 111.808148][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 111.825193][ T7937] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 111.834448][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 111.834464][ T29] audit: type=1400 audit(1745139033.113:8083): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 111.846317][ T7985] loop2: detected capacity change from 0 to 164 [ 111.871534][ T7937] EXT4-fs (loop4): 1 truncate cleaned up [ 111.878165][ T7937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.905202][ T7981] can0 (unregistered): slcan off ttyS3. [ 111.918307][ T7937] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.918788][ T7981] Falling back ldisc for ttyS3. [ 111.979912][ T7937] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1407: corrupted xattr block 19: invalid ea_ino [ 112.001199][ T7993] loop2: detected capacity change from 0 to 164 [ 112.027348][ T7987] can0: slcan on ttyS3. [ 112.059919][ T7937] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 112.073579][ T7937] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1407: corrupted xattr block 19: invalid ea_ino [ 112.089842][ T7937] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 112.099512][ T7937] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1407: corrupted xattr block 19: invalid ea_ino [ 112.114045][ T7994] can0 (unregistered): slcan off ttyS3. [ 112.120706][ T7994] Falling back ldisc for ttyS3. [ 112.156265][ T29] audit: type=1326 audit(1745139033.433:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 112.179895][ T29] audit: type=1326 audit(1745139033.433:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 112.203667][ T29] audit: type=1326 audit(1745139033.433:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 112.227168][ T29] audit: type=1326 audit(1745139033.433:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 112.250749][ T29] audit: type=1326 audit(1745139033.433:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 112.274347][ T29] audit: type=1326 audit(1745139033.443:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 112.298075][ T29] audit: type=1326 audit(1745139033.443:8090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 112.321515][ T29] audit: type=1326 audit(1745139033.443:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 112.368294][ T8006] loop3: detected capacity change from 0 to 512 [ 112.392577][ T8006] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.404422][ T7937] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 112.435248][ T29] audit: type=1326 audit(1745139033.643:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7997 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 112.464612][ T8006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.482139][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1434'. [ 112.715243][ T8006] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.762935][ T8006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.005387][ T8032] can0: slcan on ttyS3. [ 113.065237][ T8032] can0 (unregistered): slcan off ttyS3. [ 113.070936][ T8032] Falling back ldisc for ttyS3. [ 113.287588][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 113.296557][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 113.357900][ T8070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8070 comm=syz.2.1452 [ 113.382169][ T8071] loop3: detected capacity change from 0 to 2048 [ 113.408299][ T8071] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 113.541056][ T8093] loop3: detected capacity change from 0 to 164 [ 113.715844][ T8110] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1467'. [ 113.738226][ T8112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8112 comm=syz.1.1468 [ 113.768807][ T8113] loop2: detected capacity change from 0 to 2048 [ 113.789384][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1467'. [ 113.798412][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1467'. [ 113.816045][ T8116] dummy0: entered promiscuous mode [ 113.822520][ T8116] batadv_slave_1: entered promiscuous mode [ 113.833215][ T8116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.846680][ T8116] Cannot create hsr debugfs directory [ 114.002544][ T8132] siw: device registration error -23 [ 114.102771][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 114.111765][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 114.227059][ T8152] loop1: detected capacity change from 0 to 2048 [ 114.233838][ T8152] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 114.748031][ T8184] loop1: detected capacity change from 0 to 512 [ 114.767117][ T8184] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.775943][ T8184] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.1497: bad orphan inode 13 [ 114.841178][ T8184] ext4_test_bit(bit=12, block=18) = 1 [ 114.846707][ T8184] is_bad_inode(inode)=0 [ 114.851071][ T8184] NEXT_ORPHAN(inode)=2130706432 [ 114.855999][ T8184] max_ino=32 [ 114.859193][ T8184] i_nlink=1 [ 114.909678][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.924154][ T8184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.959089][ T8201] can0: slcan on ttyS3. [ 114.995359][ T8201] can0 (unregistered): slcan off ttyS3. [ 115.001461][ T8201] Falling back ldisc for ttyS3. [ 115.120375][ T8213] loop0: detected capacity change from 0 to 2048 [ 115.168131][ T8213] loop0: p1 < > p4 [ 115.180734][ T8213] loop0: p4 size 8388608 extends beyond EOD, truncated [ 115.204428][ T8222] loop4: detected capacity change from 0 to 512 [ 115.229496][ T8222] EXT4-fs: Ignoring removed bh option [ 115.235014][ T8222] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.276625][ T8222] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 115.338648][ T8222] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 115.392172][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 115.402596][ T8222] EXT4-fs (loop4): orphan cleanup on readonly fs [ 115.402759][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 115.420631][ T8222] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1516: Failed to acquire dquot type 1 [ 115.456872][ T8246] siw: device registration error -23 [ 115.457181][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.477936][ T8222] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1516: Invalid block bitmap block 0 in block_group 0 [ 115.499163][ T8222] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1516: Invalid block bitmap block 0 in block_group 0 [ 115.546873][ T8222] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1516: Invalid block bitmap block 0 in block_group 0 [ 115.569934][ T8222] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1516: Failed to acquire dquot type 1 [ 115.596423][ T8258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8258 comm=syz.2.1531 [ 115.617148][ T8222] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1516: Failed to acquire dquot type 1 [ 115.630037][ T8222] EXT4-fs (loop4): 1 orphan inode deleted [ 115.647443][ T8222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.725774][ T8274] can0: slcan on ttyS3. [ 115.800063][ T8282] loop3: detected capacity change from 0 to 512 [ 115.806528][ T8274] can0 (unregistered): slcan off ttyS3. [ 115.812312][ T8274] Falling back ldisc for ttyS3. [ 115.832050][ T8282] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.868709][ T8282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.887803][ T8282] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.911416][ T8282] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.968777][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.014699][ T8314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8314 comm=syz.4.1549 [ 116.120821][ T8331] team0: entered promiscuous mode [ 116.126092][ T8331] team_slave_0: entered promiscuous mode [ 116.131911][ T8331] team_slave_1: entered promiscuous mode [ 116.159737][ T8331] batadv_slave_1: entered promiscuous mode [ 116.171076][ T8331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.180361][ T8331] Cannot create hsr debugfs directory [ 116.245389][ T8347] SELinux: Context system_u:object_r:agp_device_t:s0 is not valid (left unmapped). [ 116.263799][ T8354] loop4: detected capacity change from 0 to 2048 [ 116.270687][ T8355] loop3: detected capacity change from 0 to 512 [ 116.288963][ T8355] EXT4-fs: Ignoring removed bh option [ 116.294446][ T8355] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.319381][ T8355] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 116.332713][ T8355] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 116.341608][ T8355] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.341721][ T8359] loop4: detected capacity change from 0 to 512 [ 116.349880][ T8359] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.355788][ T8355] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1558: Failed to acquire dquot type 1 [ 116.378667][ T8355] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1558: Invalid block bitmap block 0 in block_group 0 [ 116.396627][ T8355] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1558: Invalid block bitmap block 0 in block_group 0 [ 116.410655][ T8355] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1558: Invalid block bitmap block 0 in block_group 0 [ 116.411465][ T8359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.424801][ T8355] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1558: Failed to acquire dquot type 1 [ 116.438401][ T8359] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.448235][ T8355] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1558: Failed to acquire dquot type 1 [ 116.469940][ T8355] EXT4-fs (loop3): 1 orphan inode deleted [ 116.470413][ T8359] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.478409][ T8355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.614163][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.877868][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 116.877882][ T29] audit: type=1326 audit(1745139038.222:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3829e169 code=0x7ffc0000 [ 116.909025][ T29] audit: type=1326 audit(1745139038.222:8346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8397 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdd3829e169 code=0x7ffc0000 [ 116.932419][ T29] audit: type=1326 audit(1745139038.252:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.1.1577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72b0ace169 code=0x0 [ 116.968766][ T29] audit: type=1400 audit(1745139038.312:8348): avc: denied { setopt } for pid=8402 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.006198][ T29] audit: type=1400 audit(1745139038.352:8349): avc: denied { create } for pid=8405 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 117.010979][ T8406] __nla_validate_parse: 12 callbacks suppressed [ 117.010996][ T8406] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 117.026236][ T29] audit: type=1400 audit(1745139038.352:8350): avc: denied { create } for pid=8405 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.059268][ T29] audit: type=1400 audit(1745139038.352:8351): avc: denied { setopt } for pid=8405 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.078767][ T29] audit: type=1326 audit(1745139038.412:8352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 117.102249][ T29] audit: type=1326 audit(1745139038.412:8353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 117.125767][ T29] audit: type=1326 audit(1745139038.412:8354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 117.223459][ T8416] 9pnet_fd: Insufficient options for proto=fd [ 117.233125][ T8418] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1586'. [ 117.242447][ T8418] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1586'. [ 117.348777][ T8428] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1591'. [ 117.375758][ T8430] loop0: detected capacity change from 0 to 2048 [ 117.382554][ T8430] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 117.400265][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1591'. [ 117.472770][ T8435] FAULT_INJECTION: forcing a failure. [ 117.472770][ T8435] name failslab, interval 1, probability 0, space 0, times 0 [ 117.485575][ T8435] CPU: 1 UID: 0 PID: 8435 Comm: +}[@ Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 117.485606][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.485621][ T8435] Call Trace: [ 117.485629][ T8435] [ 117.485638][ T8435] dump_stack_lvl+0xf6/0x150 [ 117.485779][ T8435] dump_stack+0x15/0x1a [ 117.485795][ T8435] should_fail_ex+0x261/0x270 [ 117.485821][ T8435] should_failslab+0x8f/0xb0 [ 117.485849][ T8435] __kmalloc_cache_noprof+0x55/0x320 [ 117.485882][ T8435] ? io_drain_req+0x1e6/0x500 [ 117.486013][ T8435] io_drain_req+0x1e6/0x500 [ 117.486041][ T8435] ? io_req_defer_failed+0x147/0x180 [ 117.486126][ T8435] io_queue_sqe_fallback+0xb8/0xc0 [ 117.486157][ T8435] io_submit_sqes+0xb9e/0x1050 [ 117.486248][ T8435] __se_sys_io_uring_enter+0x1e8/0x1b70 [ 117.486271][ T8435] ? 0xffffffff81000000 [ 117.486285][ T8435] ? get_pid_task+0x94/0xd0 [ 117.486305][ T8435] ? proc_fail_nth_write+0x12d/0x160 [ 117.486367][ T8435] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 117.486404][ T8435] ? vfs_write+0x669/0x950 [ 117.486424][ T8435] ? putname+0xe1/0x100 [ 117.486483][ T8435] ? __fget_files+0x186/0x1c0 [ 117.486512][ T8435] ? fput+0x99/0xd0 [ 117.486543][ T8435] ? ksys_write+0x180/0x1b0 [ 117.486568][ T8435] __x64_sys_io_uring_enter+0x78/0x90 [ 117.486596][ T8435] x64_sys_call+0x26cb/0x2e10 [ 117.486653][ T8435] do_syscall_64+0xc9/0x1a0 [ 117.486680][ T8435] ? clear_bhb_loop+0x25/0x80 [ 117.486707][ T8435] ? clear_bhb_loop+0x25/0x80 [ 117.486734][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.486760][ T8435] RIP: 0033:0x7f688f5be169 [ 117.486786][ T8435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.486807][ T8435] RSP: 002b:00007f688dc27038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 117.486830][ T8435] RAX: ffffffffffffffda RBX: 00007f688f7e5fa0 RCX: 00007f688f5be169 [ 117.486845][ T8435] RDX: 0000000000003900 RSI: 0000000000004ac9 RDI: 0000000000000005 [ 117.486860][ T8435] RBP: 00007f688dc27090 R08: 0000000000000000 R09: 0000000000000000 [ 117.486874][ T8435] R10: 1800000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.486888][ T8435] R13: 0000000000000000 R14: 00007f688f7e5fa0 R15: 00007ffc17697688 [ 117.486954][ T8435] [ 117.838235][ T8457] loop2: detected capacity change from 0 to 2048 [ 117.845300][ T8457] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 117.992809][ T8467] loop2: detected capacity change from 0 to 512 [ 118.000841][ T8467] EXT4-fs: Ignoring removed bh option [ 118.006342][ T8467] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.147444][ T8467] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 118.174919][ T8474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1610'. [ 118.231725][ T8467] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 118.333896][ T8477] loop1: detected capacity change from 0 to 2048 [ 118.414427][ T8467] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.421823][ T8467] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1606: Failed to acquire dquot type 1 [ 118.434773][ T8467] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1606: Invalid block bitmap block 0 in block_group 0 [ 118.457719][ T8467] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1606: Invalid block bitmap block 0 in block_group 0 [ 118.474135][ T8467] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1606: Invalid block bitmap block 0 in block_group 0 [ 118.488619][ T8467] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1606: Failed to acquire dquot type 1 [ 118.489617][ T3473] loop1: p1 < > p4 [ 118.501558][ T8467] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1606: Failed to acquire dquot type 1 [ 118.516989][ T8467] EXT4-fs (loop2): 1 orphan inode deleted [ 118.523578][ T3473] loop1: p4 size 8388608 extends beyond EOD, truncated [ 118.531745][ T8467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.608139][ T8477] loop1: p1 < > p4 [ 118.618610][ T8477] loop1: p4 size 8388608 extends beyond EOD, truncated [ 118.631764][ T8495] can0: slcan on ttyS3. [ 118.736949][ T8495] can0 (unregistered): slcan off ttyS3. [ 118.745266][ T8495] Falling back ldisc for ttyS3. [ 118.803905][ T8507] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1622'. [ 118.815332][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 118.826684][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 118.900252][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1622'. [ 118.909470][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1622'. [ 118.919301][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.941469][ T8514] team0: entered promiscuous mode [ 118.946641][ T8514] team_slave_0: entered promiscuous mode [ 118.952417][ T8514] team_slave_1: entered promiscuous mode [ 118.970173][ T8520] loop1: detected capacity change from 0 to 2048 [ 118.977727][ T8514] team0: left promiscuous mode [ 118.981223][ T8518] loop0: detected capacity change from 0 to 2048 [ 118.982601][ T8514] team_slave_0: left promiscuous mode [ 118.995330][ T8514] team_slave_1: left promiscuous mode [ 118.997801][ T8520] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 119.037485][ T8518] loop0: p1 < > p4 [ 119.049778][ T8518] loop0: p4 size 8388608 extends beyond EOD, truncated [ 119.125566][ T8533] siw: device registration error -23 [ 119.212778][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 119.217781][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 119.278363][ T8551] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1639'. [ 119.384930][ T8561] siw: device registration error -23 [ 119.401859][ T8559] loop0: detected capacity change from 0 to 2048 [ 119.466500][ T3473] loop0: p1 < > p4 [ 119.479296][ T3473] loop0: p4 size 8388608 extends beyond EOD, truncated [ 119.552224][ T8559] loop0: p1 < > p4 [ 119.558548][ T8559] loop0: p4 size 8388608 extends beyond EOD, truncated [ 119.631329][ T8586] loop1: detected capacity change from 0 to 2048 [ 119.665861][ T8586] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 119.717260][ T8597] siw: device registration error -23 [ 119.746606][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 119.764431][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 119.867644][ T8610] loop1: detected capacity change from 0 to 2048 [ 119.882803][ T8616] 9pnet_fd: Insufficient options for proto=fd [ 119.886785][ T8613] loop2: detected capacity change from 0 to 2048 [ 119.901513][ T8613] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 119.926581][ T3473] Alternate GPT is invalid, using primary GPT. [ 119.932983][ T3473] loop1: p2 p3 p7 [ 120.038681][ T8613] loop2: detected capacity change from 0 to 512 [ 120.058153][ T8610] Alternate GPT is invalid, using primary GPT. [ 120.064660][ T8610] loop1: p2 p3 p7 [ 120.078644][ T8613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.094206][ T8613] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.112031][ T8610] random: crng reseeded on system resumption [ 120.206043][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.217655][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 120.218364][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 120.256124][ T8653] 9pnet_fd: Insufficient options for proto=fd [ 120.410455][ T8670] loop4: detected capacity change from 0 to 2048 [ 120.418557][ T8670] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 120.460909][ T8677] netlink: 'syz.3.1685': attribute type 4 has an invalid length. [ 120.647003][ T8693] loop4: detected capacity change from 0 to 512 [ 120.654114][ T8693] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.677629][ T8693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.698199][ T8693] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.714820][ T8693] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.785143][ T8704] loop0: detected capacity change from 0 to 2048 [ 120.801463][ T8704] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 121.056526][ T8732] loop0: detected capacity change from 0 to 512 [ 121.066098][ T8732] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.122229][ T8732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.136972][ T8732] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.149309][ T8732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.490404][ T8748] netlink: 'syz.2.1716': attribute type 21 has an invalid length. [ 121.573681][ T8751] syz.2.1716 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 121.610764][ T8755] netlink: 'syz.0.1719': attribute type 6 has an invalid length. [ 121.799575][ T8776] can0: slcan on ttyS3. [ 121.837285][ T8776] can0 (unregistered): slcan off ttyS3. [ 121.842963][ T8776] Falling back ldisc for ttyS3. [ 121.851605][ T8780] loop0: detected capacity change from 0 to 1024 [ 121.866068][ T8780] EXT4-fs: Ignoring removed bh option [ 121.890897][ T8784] netlink: 'syz.4.1731': attribute type 6 has an invalid length. [ 121.934490][ T8780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.985384][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 121.985401][ T29] audit: type=1400 audit(1745139043.322:8645): avc: denied { read write open } for pid=8779 comm="syz.0.1730" path="/335/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 122.072957][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.088675][ T29] audit: type=1400 audit(1745139043.332:8646): avc: denied { ioctl } for pid=8779 comm="syz.0.1730" path="/335/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 122.134246][ T29] audit: type=1326 audit(1745139043.332:8647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 122.157844][ T29] audit: type=1326 audit(1745139043.332:8648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 122.181259][ T29] audit: type=1326 audit(1745139043.332:8649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 122.204904][ T29] audit: type=1326 audit(1745139043.332:8650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 122.228433][ T29] audit: type=1326 audit(1745139043.332:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 122.251884][ T29] audit: type=1326 audit(1745139043.332:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 122.275332][ T29] audit: type=1326 audit(1745139043.332:8653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 122.298831][ T29] audit: type=1326 audit(1745139043.332:8654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 122.407847][ T8825] __nla_validate_parse: 20 callbacks suppressed [ 122.407867][ T8825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1744'. [ 122.423346][ T8825] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1744'. [ 122.432391][ T8825] netlink: 'syz.0.1744': attribute type 6 has an invalid length. [ 122.440239][ T8825] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1744'. [ 122.461016][ T8833] loop2: detected capacity change from 0 to 2048 [ 122.643943][ T8860] can0: slcan on ttyS3. [ 122.675319][ T8860] can0 (unregistered): slcan off ttyS3. [ 122.681012][ T8860] Falling back ldisc for ttyS3. [ 122.710316][ T8864] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1756'. [ 122.715780][ T8866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1755'. [ 122.719502][ T8864] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1756'. [ 122.737364][ T8864] netlink: 'syz.1.1756': attribute type 6 has an invalid length. [ 122.745144][ T8864] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1756'. [ 122.906977][ T8882] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1764'. [ 122.928005][ T8884] rdma_op ffff888160b0a980 conn xmit_rdma 0000000000000000 [ 122.967012][ T8888] can0: slcan on ttyS3. [ 123.025346][ T8888] can0 (unregistered): slcan off ttyS3. [ 123.031196][ T8888] Falling back ldisc for ttyS3. [ 123.062584][ T8906] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1769'. [ 123.071675][ T8906] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1769'. [ 123.080690][ T8906] netlink: 'syz.0.1769': attribute type 6 has an invalid length. [ 123.187623][ T8927] siw: device registration error -23 [ 123.290542][ T8936] loop2: detected capacity change from 0 to 512 [ 123.317440][ T8936] EXT4-fs: Ignoring removed bh option [ 123.322924][ T8936] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.352370][ T8936] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 123.429895][ T8940] loop3: detected capacity change from 0 to 512 [ 123.462437][ T8940] EXT4-fs: Ignoring removed bh option [ 123.467977][ T8940] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.480508][ T8943] loop4: detected capacity change from 0 to 2048 [ 123.487851][ T8936] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 123.508124][ T8936] EXT4-fs (loop2): orphan cleanup on readonly fs [ 123.526310][ T8940] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 123.549878][ T8936] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1774: Failed to acquire dquot type 1 [ 123.566778][ T3473] loop4: p1 < > p4 [ 123.571604][ T3473] loop4: p4 size 8388608 extends beyond EOD, truncated [ 123.593793][ T8936] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1774: Invalid block bitmap block 0 in block_group 0 [ 123.623675][ T8940] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 123.632478][ T8936] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1774: Invalid block bitmap block 0 in block_group 0 [ 123.658345][ T8936] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1774: Invalid block bitmap block 0 in block_group 0 [ 123.673044][ T8940] EXT4-fs (loop3): orphan cleanup on readonly fs [ 123.680856][ T8936] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1774: Failed to acquire dquot type 1 [ 123.683097][ T8940] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1776: Failed to acquire dquot type 1 [ 123.705276][ T8943] loop4: p1 < > p4 [ 123.710641][ T8943] loop4: p4 size 8388608 extends beyond EOD, truncated [ 123.718010][ T8936] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1774: Failed to acquire dquot type 1 [ 123.720170][ T8940] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1776: Invalid block bitmap block 0 in block_group 0 [ 123.744535][ T8940] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1776: Invalid block bitmap block 0 in block_group 0 [ 123.764199][ T8936] EXT4-fs (loop2): 1 orphan inode deleted [ 123.780064][ T8940] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1776: Invalid block bitmap block 0 in block_group 0 [ 123.797157][ T8936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.831237][ T8940] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1776: Failed to acquire dquot type 1 [ 123.865024][ T8940] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1776: Failed to acquire dquot type 1 [ 123.888400][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 123.889974][ T8940] EXT4-fs (loop3): 1 orphan inode deleted [ 123.905422][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 123.918270][ T8961] raw_sendmsg: syz.4.1783 forgot to set AF_INET. Fix it! [ 123.932077][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 123.934695][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 123.943135][ T8940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.038903][ T8965] loop4: detected capacity change from 0 to 2048 [ 124.093662][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.203139][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 124.209889][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 124.234486][ T8982] bond0: entered promiscuous mode [ 124.239651][ T8982] bond_slave_0: entered promiscuous mode [ 124.245532][ T8982] bond_slave_1: entered promiscuous mode [ 124.253479][ T8982] bond0: left promiscuous mode [ 124.258391][ T8982] bond_slave_0: left promiscuous mode [ 124.264086][ T8982] bond_slave_1: left promiscuous mode [ 124.284038][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.374944][ T8991] loop0: detected capacity change from 0 to 2048 [ 124.463036][ T9004] can0: slcan on ttyS3. [ 124.505385][ T9004] can0 (unregistered): slcan off ttyS3. [ 124.511654][ T9004] Falling back ldisc for ttyS3. [ 125.114371][ T9045] loop1: detected capacity change from 0 to 512 [ 125.199620][ T9045] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.264280][ T9045] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.354549][ T9062] gretap0: entered promiscuous mode [ 125.371049][ T9062] batadv_slave_1: entered promiscuous mode [ 125.378848][ T9062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.387863][ T9062] Cannot create hsr debugfs directory [ 125.448083][ T9074] siw: device registration error -23 [ 125.572829][ T9087] loop1: detected capacity change from 0 to 512 [ 125.586916][ T9087] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.628186][ T9087] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.643790][ T9097] loop2: detected capacity change from 0 to 2048 [ 125.751611][ T9103] loop1: detected capacity change from 0 to 2048 [ 125.821428][ T3473] Alternate GPT is invalid, using primary GPT. [ 125.827928][ T3473] loop1: p2 p3 p7 [ 125.836664][ T9119] cgroup: Need name or subsystem set [ 125.842196][ T9119] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 125.937701][ T9103] Alternate GPT is invalid, using primary GPT. [ 125.944186][ T9103] loop1: p2 p3 p7 [ 125.956258][ T9126] loop0: detected capacity change from 0 to 2048 [ 126.006062][ T3472] loop0: p1 < > p4 [ 126.031529][ T9135] loop2: detected capacity change from 0 to 512 [ 126.032167][ T3472] loop0: p4 size 8388608 extends beyond EOD, truncated [ 126.073805][ T9135] EXT4-fs: Ignoring removed bh option [ 126.079697][ T9135] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.108727][ T9135] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 126.155050][ T6281] udevd[6281]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 126.155842][ T9126] loop0: p1 < > p4 [ 126.166324][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 126.169558][ T6287] udevd[6287]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 126.218519][ T9135] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 126.226928][ T9135] EXT4-fs (loop2): orphan cleanup on readonly fs [ 126.243697][ T9126] loop0: p4 size 8388608 extends beyond EOD, [ 126.243739][ T9135] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1860: Failed to acquire dquot type 1 [ 126.261402][ T9126] truncated [ 126.265214][ T9135] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1860: Invalid block bitmap block 0 in block_group 0 [ 126.287325][ T9135] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1860: Invalid block bitmap block 0 in block_group 0 [ 126.329391][ T9135] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1860: Invalid block bitmap block 0 in block_group 0 [ 126.389049][ T9135] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1860: Failed to acquire dquot type 1 [ 126.428991][ T9135] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1860: Failed to acquire dquot type 1 [ 126.449267][ T9135] EXT4-fs (loop2): 1 orphan inode deleted [ 126.459518][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 126.476415][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 126.505664][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 126.647049][ T9174] bond0: entered promiscuous mode [ 126.652144][ T9174] bond_slave_0: entered promiscuous mode [ 126.657998][ T9174] bond_slave_1: entered promiscuous mode [ 126.695005][ T9178] loop0: detected capacity change from 0 to 2048 [ 126.695780][ T9174] batadv_slave_1: entered promiscuous mode [ 126.722136][ T9174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.731420][ T9174] Cannot create hsr debugfs directory [ 126.765964][ T3473] loop0: p1 < > p4 [ 126.770618][ T3473] loop0: p4 size 8388608 extends beyond EOD, truncated [ 126.841969][ T9178] loop0: p1 < > p4 [ 126.849499][ T9178] loop0: p4 size 8388608 extends beyond EOD, truncated [ 126.853563][ T9186] loop2: detected capacity change from 0 to 512 [ 126.880241][ T9186] EXT4-fs: Ignoring removed bh option [ 126.885818][ T9186] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.928374][ T9186] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 126.933340][ T9170] Cannot find add_set index 0 as target [ 126.966759][ T9186] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 126.984809][ T9186] EXT4-fs (loop2): orphan cleanup on readonly fs [ 127.004446][ T9186] __quota_error: 226 callbacks suppressed [ 127.004461][ T9186] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 127.019927][ T9186] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 127.049727][ T9186] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1874: Failed to acquire dquot type 1 [ 127.067537][ T9186] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1874: Invalid block bitmap block 0 in block_group 0 [ 127.083860][ T9186] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1874: Invalid block bitmap block 0 in block_group 0 [ 127.098116][ T9186] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1874: Invalid block bitmap block 0 in block_group 0 [ 127.111922][ T9186] Quota error (device loop2): write_blk: dquota write failed [ 127.119389][ T9186] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 127.129267][ T9186] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1874: Failed to acquire dquot type 1 [ 127.141835][ T9186] Quota error (device loop2): write_blk: dquota write failed [ 127.149316][ T9186] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 127.159269][ T9186] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1874: Failed to acquire dquot type 1 [ 127.174073][ T9186] EXT4-fs (loop2): 1 orphan inode deleted [ 127.216759][ T9215] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.225645][ T9215] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.234403][ T9215] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.243253][ T9215] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.300350][ T9221] loop1: detected capacity change from 0 to 2048 [ 127.376865][ T3473] loop1: p1 < > p4 [ 127.385950][ T3473] loop1: p4 size 8388608 extends beyond EOD, truncated [ 127.404972][ T9230] loop0: detected capacity change from 0 to 512 [ 127.425499][ T9230] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.451284][ T9221] loop1: p1 < > p4 [ 127.455843][ T9221] loop1: p4 size 8388608 extends beyond EOD, truncated [ 127.457600][ T9230] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.527116][ T9244] can0: slcan on ttyS3. [ 127.585215][ T9244] can0 (unregistered): slcan off ttyS3. [ 127.595406][ T9244] Falling back ldisc for ttyS3. [ 127.642980][ T29] audit: type=1326 audit(1745139048.982:8863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 127.678731][ T9257] process 'syz.0.1901' launched '/dev/fd/4' with NULL argv: empty string added [ 127.689158][ T29] audit: type=1326 audit(1745139048.982:8864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 127.712632][ T29] audit: type=1326 audit(1745139048.982:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 127.736525][ T29] audit: type=1326 audit(1745139048.982:8866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.0.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 127.764949][ T9261] siw: device registration error -23 [ 127.801455][ T9265] loop0: detected capacity change from 0 to 2048 [ 127.845539][ T3473] loop0: p1 < > p4 [ 127.847887][ T9268] loop1: detected capacity change from 0 to 512 [ 127.857257][ T3473] loop0: p4 size 8388608 extends beyond EOD, truncated [ 127.857696][ T9268] EXT4-fs: Ignoring removed bh option [ 127.869824][ T9268] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.888509][ T9270] loop2: detected capacity change from 0 to 512 [ 127.914398][ T9270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.937591][ T9275] __nla_validate_parse: 30 callbacks suppressed [ 127.937608][ T9275] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1908'. [ 127.953779][ T9265] loop0: p1 < > p4 [ 127.958584][ T9265] loop0: p4 size 8388608 extends beyond EOD, truncated [ 127.966731][ T9268] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 127.978012][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1909'. [ 127.990911][ T9270] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.024521][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1910'. [ 128.024876][ T9268] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 128.033490][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1910'. [ 128.041539][ T9268] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.057181][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1910'. [ 128.066948][ T9268] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1903: Failed to acquire dquot type 1 [ 128.082962][ T9268] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1903: Invalid block bitmap block 0 in block_group 0 [ 128.098910][ T9268] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1903: Invalid block bitmap block 0 in block_group 0 [ 128.125496][ T3004] loop0: p1 < > p4 [ 128.130975][ T3004] loop0: p4 size 8388608 extends beyond EOD, truncated [ 128.168212][ T9268] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1903: Invalid block bitmap block 0 in block_group 0 [ 128.217217][ T9268] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1903: Failed to acquire dquot type 1 [ 128.236051][ T9268] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1903: Failed to acquire dquot type 1 [ 128.251510][ T9300] loop2: detected capacity change from 0 to 2048 [ 128.276367][ T9268] EXT4-fs (loop1): 1 orphan inode deleted [ 128.290172][ T9268] EXT4-fs mount: 12 callbacks suppressed [ 128.290222][ T9268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.328733][ T3004] Alternate GPT is invalid, using primary GPT. [ 128.335212][ T3004] loop2: p2 p3 p7 [ 128.351811][ T9315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1921'. [ 128.360937][ T9315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1921'. [ 128.392940][ T9300] Alternate GPT is invalid, using primary GPT. [ 128.399337][ T9300] loop2: p2 p3 p7 [ 128.640186][ T9300] random: crng reseeded on system resumption [ 128.710485][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.939443][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 128.960721][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 128.972362][ T6281] udevd[6281]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 128.999132][ T6281] udevd[6281]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 128.999942][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 129.012280][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 129.028594][ T9340] loop1: detected capacity change from 0 to 2048 [ 129.036702][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 129.038849][ T6281] udevd[6281]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 129.057921][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 129.098924][ T6287] Alternate GPT is invalid, using primary GPT. [ 129.105401][ T6287] loop1: p2 p3 p7 [ 129.127888][ T9344] loop2: detected capacity change from 0 to 512 [ 129.169960][ T9340] Alternate GPT is invalid, using primary GPT. [ 129.176465][ T9340] loop1: p2 p3 p7 [ 129.214881][ T9340] random: crng reseeded on system resumption [ 129.221603][ T9344] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.248028][ T9358] loop4: detected capacity change from 0 to 512 [ 129.297948][ T9358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.335563][ T9344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.349935][ T9344] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.351616][ T9358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.374133][ T9344] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.387406][ T9358] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.399676][ T9358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.473565][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 129.537148][ T9380] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1936'. [ 129.556875][ T9380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1936'. [ 129.565980][ T9380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1936'. [ 129.584392][ T9380] bond0: entered promiscuous mode [ 129.589548][ T9380] bond_slave_0: entered promiscuous mode [ 129.595457][ T9380] bond_slave_1: entered promiscuous mode [ 129.617074][ T9380] bond0: left promiscuous mode [ 129.621904][ T9380] bond_slave_0: left promiscuous mode [ 129.627550][ T9380] bond_slave_1: left promiscuous mode [ 129.647029][ T9382] bond0: entered promiscuous mode [ 129.652192][ T9382] bond_slave_0: entered promiscuous mode [ 129.657999][ T9382] bond_slave_1: entered promiscuous mode [ 129.668385][ T9382] bond0: left promiscuous mode [ 129.673270][ T9382] bond_slave_0: left promiscuous mode [ 129.678832][ T9382] bond_slave_1: left promiscuous mode [ 130.199840][ T9402] can0: slcan on ttyS3. [ 130.345269][ T9404] can0 (unregistered): slcan off ttyS3. [ 130.363904][ T9404] Falling back ldisc for ttyS3. [ 130.475805][ T9415] loop0: detected capacity change from 0 to 2048 [ 130.567980][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 130.574663][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 130.585359][ T9429] can0: slcan on ttyS3. [ 130.597931][ T9432] loop2: detected capacity change from 0 to 2048 [ 130.638723][ T3472] Alternate GPT is invalid, using primary GPT. [ 130.645220][ T3472] loop2: p2 p3 p7 [ 130.649120][ T9429] can0 (unregistered): slcan off ttyS3. [ 130.654890][ T9429] Falling back ldisc for ttyS3. [ 130.709269][ T9443] loop0: detected capacity change from 0 to 2048 [ 130.732269][ T9450] loop1: detected capacity change from 0 to 2048 [ 130.757346][ T9443] Alternate GPT is invalid, using primary GPT. [ 130.763701][ T9443] loop0: p2 p3 p7 [ 130.775736][ T6281] loop1: p1 < > p4 [ 130.802486][ T9432] Alternate GPT is invalid, using primary GPT. [ 130.808948][ T9432] loop2: p2 p3 p7 [ 130.814344][ T6281] loop1: p4 size 8388608 extends beyond EOD, truncated [ 130.929910][ T9450] loop1: p1 < > p4 [ 130.959016][ T9432] random: crng reseeded on system resumption [ 130.968528][ T9450] loop1: p4 size 8388608 extends beyond EOD, truncated [ 131.002623][ T9493] loop3: detected capacity change from 0 to 2048 [ 131.056413][ T3004] loop1: p1 < > p4 [ 131.060976][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated [ 131.250823][ T9525] Cannot find add_set index 0 as target [ 131.312898][ T9529] loop3: detected capacity change from 0 to 2048 [ 131.324347][ T9533] FAULT_INJECTION: forcing a failure. [ 131.324347][ T9533] name failslab, interval 1, probability 0, space 0, times 0 [ 131.337143][ T9533] CPU: 1 UID: 0 PID: 9533 Comm: syz.2.1979 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 131.337234][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.337250][ T9533] Call Trace: [ 131.337257][ T9533] [ 131.337266][ T9533] dump_stack_lvl+0xf6/0x150 [ 131.337297][ T9533] dump_stack+0x15/0x1a [ 131.337317][ T9533] should_fail_ex+0x261/0x270 [ 131.337347][ T9533] should_failslab+0x8f/0xb0 [ 131.337373][ T9533] __kmalloc_cache_noprof+0x55/0x320 [ 131.337516][ T9533] ? kobject_uevent_env+0x1a4/0x550 [ 131.337540][ T9533] ? __pfx_dev_uevent_name+0x10/0x10 [ 131.337623][ T9533] kobject_uevent_env+0x1a4/0x550 [ 131.337684][ T9533] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 131.337726][ T9533] ? device_pm_check_callbacks+0x632/0x650 [ 131.337755][ T9533] kobject_uevent+0x1c/0x30 [ 131.337772][ T9533] device_del+0x6fc/0x780 [ 131.337802][ T9533] ? mntput+0x49/0x70 [ 131.337864][ T9533] device_unregister+0x15/0x40 [ 131.337903][ T9533] bdi_unregister+0x309/0x3a0 [ 131.337944][ T9533] del_gendisk+0x2f6/0x5f0 [ 131.338035][ T9533] loop_control_ioctl+0x3c1/0x450 [ 131.338063][ T9533] ? __pfx_loop_control_ioctl+0x10/0x10 [ 131.338091][ T9533] __se_sys_ioctl+0xc9/0x140 [ 131.338127][ T9533] __x64_sys_ioctl+0x43/0x50 [ 131.338162][ T9533] x64_sys_call+0x168d/0x2e10 [ 131.338330][ T9533] do_syscall_64+0xc9/0x1a0 [ 131.338353][ T9533] ? clear_bhb_loop+0x25/0x80 [ 131.338402][ T9533] ? clear_bhb_loop+0x25/0x80 [ 131.338429][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.338454][ T9533] RIP: 0033:0x7fdd3829e169 [ 131.338471][ T9533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.338491][ T9533] RSP: 002b:00007fdd36907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.338513][ T9533] RAX: ffffffffffffffda RBX: 00007fdd384c5fa0 RCX: 00007fdd3829e169 [ 131.338560][ T9533] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 131.338571][ T9533] RBP: 00007fdd36907090 R08: 0000000000000000 R09: 0000000000000000 [ 131.338582][ T9533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.338602][ T9533] R13: 0000000000000000 R14: 00007fdd384c5fa0 R15: 00007ffe2c13b738 [ 131.338626][ T9533] [ 131.668835][ T9543] can0: slcan on ttyS3. [ 131.723527][ T9553] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 131.723527][ T9553] program syz.3.1986 not setting count and/or reply_len properly [ 131.740979][ T9543] can0 (unregistered): slcan off ttyS3. [ 131.746863][ T9543] Falling back ldisc for ttyS3. [ 132.055296][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 132.055317][ T29] audit: type=1326 audit(1745139053.322:9104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 132.085153][ T29] audit: type=1326 audit(1745139053.322:9105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 132.108846][ T29] audit: type=1326 audit(1745139053.322:9106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 132.343486][ T9602] loop4: detected capacity change from 0 to 512 [ 132.472605][ T9602] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.577623][ T9602] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.2003: bad orphan inode 13 [ 132.636956][ T29] audit: type=1326 audit(1745139053.412:9107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 132.660454][ T29] audit: type=1326 audit(1745139053.412:9108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 132.664750][ T9602] ext4_test_bit(bit=12, block=18) = 1 [ 132.684009][ T29] audit: type=1326 audit(1745139053.482:9109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 132.684043][ T29] audit: type=1326 audit(1745139053.482:9110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 132.684078][ T29] audit: type=1326 audit(1745139053.482:9111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 132.689474][ T9602] is_bad_inode(inode)=0 [ 132.712782][ T29] audit: type=1326 audit(1745139053.482:9112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 132.736260][ T9602] NEXT_ORPHAN(inode)=2130706432 [ 132.736271][ T9602] max_ino=32 [ 132.736284][ T9602] i_nlink=1 [ 132.773604][ T9614] loop3: detected capacity change from 0 to 512 [ 132.787935][ T29] audit: type=1326 audit(1745139053.622:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31f46e169 code=0x7ffc0000 [ 132.826953][ T9602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.842076][ T9614] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.907912][ T9614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.929564][ T9614] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.942024][ T9614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.011791][ T9636] __nla_validate_parse: 19 callbacks suppressed [ 133.011813][ T9636] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2009'. [ 133.028562][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.113849][ T9646] loop4: detected capacity change from 0 to 2048 [ 133.127090][ T9655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2014'. [ 133.146248][ T9651] can0: slcan on ttyS3. [ 133.152391][ T9649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2012'. [ 133.161499][ T9649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2012'. [ 133.190844][ T9649] bond0: entered promiscuous mode [ 133.196009][ T9649] bond_slave_0: entered promiscuous mode [ 133.203563][ T9649] bond_slave_1: entered promiscuous mode [ 133.211384][ T9646] loop4: p1 < > p4 [ 133.215619][ T9649] bond0: left promiscuous mode [ 133.217749][ T9646] loop4: p4 size 8388608 extends beyond EOD, [ 133.220467][ T9649] bond_slave_0: left promiscuous mode [ 133.220586][ T9649] bond_slave_1: left promiscuous mode [ 133.226602][ T9646] truncated [ 133.255166][ T9651] can0 (unregistered): slcan off ttyS3. [ 133.262909][ T9651] Falling back ldisc for ttyS3. [ 133.424254][ T9703] loop3: detected capacity change from 0 to 2048 [ 133.441350][ T9706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2021'. [ 133.450506][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2021'. [ 133.776866][ T9718] random: crng reseeded on system resumption [ 133.847907][ T3473] Alternate GPT is invalid, using primary GPT. [ 133.854380][ T3473] loop3: p2 p3 p7 [ 133.961848][ T6281] udevd[6281]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 133.991583][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 134.059784][ T9703] Alternate GPT is invalid, using primary GPT. [ 134.066296][ T9703] loop3: p2 p3 p7 [ 134.074086][ T3004] udevd[3004]: worker [3473] terminated by signal 33 (Unknown signal 33) [ 134.075642][ T9755] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2024'. [ 134.092348][ T3004] udevd[3004]: worker [3473] failed while handling '/devices/virtual/block/loop3' [ 134.274009][ T9763] loop1: detected capacity change from 0 to 2048 [ 134.288935][ T9769] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2031'. [ 134.298034][ T9769] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2031'. [ 134.337864][ T6281] Alternate GPT is invalid, using primary GPT. [ 134.344370][ T6281] loop1: p2 p3 p7 [ 134.358947][ T9772] loop2: detected capacity change from 0 to 512 [ 134.387858][ T9772] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2032: corrupted in-inode xattr: invalid ea_ino [ 134.406491][ T9772] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.2032: couldn't read orphan inode 15 (err -117) [ 134.419482][ T9772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.459218][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 134.459915][ T9791] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2036'. [ 134.499144][ T9794] random: crng reseeded on system resumption [ 134.532326][ T9795] hub 6-0:1.0: USB hub found [ 134.537312][ T9795] hub 6-0:1.0: 8 ports detected [ 134.578195][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 134.591043][ T6287] udevd[6287]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 134.610869][ T9763] Alternate GPT is invalid, using primary GPT. [ 134.617451][ T9763] loop1: p2 p3 p7 [ 134.660795][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.138892][ T9828] loop2: detected capacity change from 0 to 512 [ 135.166452][ T9828] EXT4-fs: Ignoring removed bh option [ 135.171914][ T9828] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.179346][ T9828] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 135.195523][ T9828] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 135.203557][ T9828] EXT4-fs (loop2): orphan cleanup on readonly fs [ 135.225596][ T9828] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2049: Failed to acquire dquot type 1 [ 135.277932][ T9828] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2049: Invalid block bitmap block 0 in block_group 0 [ 135.294352][ T9828] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2049: Invalid block bitmap block 0 in block_group 0 [ 135.326087][ T9836] binfmt_misc: register: failed to install interpreter file ./file2 [ 135.336946][ T9828] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2049: Invalid block bitmap block 0 in block_group 0 [ 135.356635][ T9828] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2049: Failed to acquire dquot type 1 [ 135.370340][ T9828] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2049: Failed to acquire dquot type 1 [ 135.387700][ T9828] EXT4-fs (loop2): 1 orphan inode deleted [ 135.394186][ T9828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.489811][ T9854] loop1: detected capacity change from 0 to 512 [ 135.533415][ T9854] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.538132][ T9860] loop3: detected capacity change from 0 to 512 [ 135.549032][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.558474][ T9860] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.569560][ T9854] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.2053: bad orphan inode 13 [ 135.584666][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.597619][ T9860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.612462][ T9854] ext4_test_bit(bit=12, block=18) = 1 [ 135.616930][ T9860] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.618000][ T9854] is_bad_inode(inode)=0 [ 135.632583][ T9854] NEXT_ORPHAN(inode)=2130706432 [ 135.637586][ T9854] max_ino=32 [ 135.640828][ T9854] i_nlink=1 [ 135.644506][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.645148][ T9854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.656101][ T9860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.703342][ T9871] can0: slcan on ttyS3. [ 135.745513][ T9871] can0 (unregistered): slcan off ttyS3. [ 135.751560][ T9871] Falling back ldisc for ttyS3. [ 135.969500][ T9912] hub 6-0:1.0: USB hub found [ 135.974274][ T9912] hub 6-0:1.0: 8 ports detected [ 136.228478][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.506544][ T9954] loop1: detected capacity change from 0 to 2048 [ 136.545529][ T3472] loop1: p1 < > p4 [ 136.550200][ T3472] loop1: p4 size 8388608 extends beyond EOD, truncated [ 136.585336][ T9954] loop1: p1 < > p4 [ 136.589888][ T9954] loop1: p4 size 8388608 extends beyond EOD, truncated [ 136.649319][ T9961] loop1: detected capacity change from 0 to 512 [ 136.657022][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 136.660894][ T6281] udevd[6281]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 136.676784][ T9961] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.690386][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 136.707919][ T9961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.724547][ T9961] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.736556][ T9961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.851389][ T9981] SELinux: policydb version 0 does not match my version range 15-34 [ 136.872311][ T9981] SELinux: failed to load policy [ 136.912777][ T9989] loop2: detected capacity change from 0 to 2048 [ 136.930285][ T9993] loop1: detected capacity change from 0 to 512 [ 136.937605][ T9993] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.957306][ T3472] loop2: p1 < > p4 [ 136.961836][ T9993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.974471][ T9993] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.999621][ T3472] loop2: p4 size 8388608 extends beyond EOD, truncated [ 137.016762][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.089405][ T9989] loop2: p1 < > p4 [ 137.094021][ T9989] loop2: p4 size 8388608 extends beyond EOD, truncated [ 137.266012][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 137.266027][ T29] audit: type=1326 audit(1745139058.602:9393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10006 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b0ace169 code=0x7ffc0000 [ 137.296023][ T29] audit: type=1326 audit(1745139058.602:9394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10006 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b0ace169 code=0x7ffc0000 [ 137.319602][ T29] audit: type=1326 audit(1745139058.612:9395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10006 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f72b0ace169 code=0x7ffc0000 [ 137.543619][T10009] loop1: detected capacity change from 0 to 256 [ 137.553831][T10009] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.592060][ T29] audit: type=1400 audit(1745139058.932:9396): avc: denied { mount } for pid=10006 comm="syz.1.2099" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 137.857601][ T29] audit: type=1326 audit(1745139059.182:9397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10006 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b0ace169 code=0x7ffc0000 [ 137.881227][ T29] audit: type=1326 audit(1745139059.182:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10006 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b0ace169 code=0x7ffc0000 [ 137.908032][ T29] audit: type=1400 audit(1745139059.252:9399): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 138.022812][T10028] __nla_validate_parse: 15 callbacks suppressed [ 138.022832][T10028] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2105'. [ 138.047804][T10026] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2098'. [ 138.066425][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2098'. [ 138.075462][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2098'. [ 138.086270][ T29] audit: type=1326 audit(1745139059.412:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.3.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 138.109976][ T29] audit: type=1326 audit(1745139059.412:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.3.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 138.133654][ T29] audit: type=1326 audit(1745139059.412:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.3.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 138.158354][T10026] dummy0: entered promiscuous mode [ 138.158451][T10028] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2105'. [ 138.175174][T10026] dummy0: left promiscuous mode [ 138.247703][T10038] can0: slcan on ttyS3. [ 138.283942][ T9738] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.294490][ T9738] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.301303][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2114'. [ 138.329943][T10038] can0 (unregistered): slcan off ttyS3. [ 138.338550][T10038] Falling back ldisc for ttyS3. [ 138.344609][T10043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2114'. [ 138.353974][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2114'. [ 138.380306][ T9738] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.390789][ T9738] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.479750][ T9738] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.490275][ T9738] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.537437][T10078] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2119'. [ 138.549275][ T9738] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.559708][ T9738] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.581691][T10081] can0: slcan on ttyS3. [ 138.640388][T10078] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2119'. [ 138.665497][T10081] can0 (unregistered): slcan off ttyS3. [ 138.674071][T10081] Falling back ldisc for ttyS3. [ 138.675345][ T9738] bridge_slave_1: left allmulticast mode [ 138.685282][ T9738] bridge_slave_1: left promiscuous mode [ 138.691018][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.747040][ T9738] bridge_slave_0: left promiscuous mode [ 138.752750][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.818399][T10104] loop2: detected capacity change from 0 to 512 [ 138.838338][T10104] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2126: corrupted in-inode xattr: invalid ea_ino [ 138.855086][T10104] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.2126: couldn't read orphan inode 15 (err -117) [ 138.867965][T10104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.898362][ T9738] bond0 (unregistering): left promiscuous mode [ 138.904691][ T9738] bond_slave_0: left promiscuous mode [ 138.910368][ T9738] bond_slave_1: left promiscuous mode [ 138.916747][ T9738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.927988][ T9738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.938850][ T9738] bond0 (unregistering): Released all slaves [ 138.955172][T10108] can0: slcan on ttyS3. [ 138.974230][T10104] hub 6-0:1.0: USB hub found [ 138.982282][T10104] hub 6-0:1.0: 8 ports detected [ 139.017627][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.045321][T10113] can0 (unregistered): slcan off ttyS3. [ 139.051041][ T9738] batadv_slave_1: left promiscuous mode [ 139.051184][T10113] Falling back ldisc for ttyS3. [ 139.064403][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.071911][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.088287][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.095811][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.113062][ T9738] veth1_macvtap: left promiscuous mode [ 139.119576][ T9738] veth0_macvtap: left promiscuous mode [ 139.125192][ T9738] veth1_vlan: left promiscuous mode [ 139.130607][ T9738] veth0_vlan: left promiscuous mode [ 139.232259][T10137] Cannot find add_set index 0 as target [ 139.243211][T10139] loop4: detected capacity change from 0 to 512 [ 139.249860][ T9738] team0 (unregistering): Port device team_slave_1 removed [ 139.259842][T10139] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.271131][ T9738] team0 (unregistering): Port device team_slave_0 removed [ 139.281716][T10139] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 139.298112][T10139] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 139.306485][T10139] System zones: 0-2, 18-18, 34-34 [ 139.315970][T10139] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 139.334562][T10139] EXT4-fs (loop4): 1 truncate cleaned up [ 139.341263][T10139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.356401][T10146] loop3: detected capacity change from 0 to 1024 [ 139.363638][T10139] random: crng reseeded on system resumption [ 139.370299][T10146] ext4: Unknown parameter 'nouser_xattr' [ 139.376097][T10047] chnl_net:caif_netlink_parms(): no params data found [ 139.456192][T10146] loop3: detected capacity change from 0 to 128 [ 139.538892][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.546153][T10047] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.553464][T10047] bridge_slave_0: entered allmulticast mode [ 139.560222][T10047] bridge_slave_0: entered promiscuous mode [ 139.567040][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.574190][T10047] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.581485][T10047] bridge_slave_1: entered allmulticast mode [ 139.587999][T10047] bridge_slave_1: entered promiscuous mode [ 139.606533][T10047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.616848][T10047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.637433][T10047] team0: Port device team_slave_0 added [ 139.644824][T10047] team0: Port device team_slave_1 added [ 139.656359][T10168] loop3: detected capacity change from 0 to 512 [ 139.664833][T10168] EXT4-fs (loop3): orphan cleanup on readonly fs [ 139.671919][T10168] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.2137: bad orphan inode 13 [ 139.689750][T10168] ext4_test_bit(bit=12, block=18) = 1 [ 139.692163][T10047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.695197][T10168] is_bad_inode(inode)=0 [ 139.695221][T10168] NEXT_ORPHAN(inode)=2130706432 [ 139.702278][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.706442][T10168] max_ino=32 [ 139.706451][T10168] i_nlink=1 [ 139.709350][T10168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.711288][T10047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.738657][T10047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.774035][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.800184][T10047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.821128][T10173] hub 6-0:1.0: USB hub found [ 139.827646][T10173] hub 6-0:1.0: 8 ports detected [ 139.844435][T10047] hsr_slave_0: entered promiscuous mode [ 139.855165][T10047] hsr_slave_1: entered promiscuous mode [ 139.861285][T10047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.870717][T10047] Cannot create hsr debugfs directory [ 139.878728][T10179] SELinux: policydb version 0 does not match my version range 15-34 [ 139.894187][T10179] SELinux: failed to load policy [ 139.978264][T10047] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.987492][T10047] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.996314][T10047] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.005941][T10047] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.022014][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.029284][T10047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.036625][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.043744][T10047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.063905][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.097073][T10047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.136110][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.151000][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.164395][T10047] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.177457][T10205] team0: entered promiscuous mode [ 140.182706][T10205] team_slave_0: entered promiscuous mode [ 140.188525][T10205] team_slave_1: entered promiscuous mode [ 140.197144][T10205] team0: left promiscuous mode [ 140.202036][T10205] team_slave_0: left promiscuous mode [ 140.207556][T10205] team_slave_1: left promiscuous mode [ 140.237417][T10047] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.248006][T10047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.317386][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.324624][ T9686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.341086][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.348338][ T9686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.381193][T10047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.398191][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.459264][T10240] can0: slcan on ttyS3. [ 140.515594][T10240] can0 (unregistered): slcan off ttyS3. [ 140.532978][T10240] Falling back ldisc for ttyS3. [ 140.602986][T10264] loop2: detected capacity change from 0 to 512 [ 140.618109][T10047] veth0_vlan: entered promiscuous mode [ 140.626906][T10047] veth1_vlan: entered promiscuous mode [ 140.644990][T10264] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.657828][T10047] veth0_macvtap: entered promiscuous mode [ 140.676137][T10264] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 140.687000][T10047] veth1_macvtap: entered promiscuous mode [ 140.696170][T10264] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 140.705255][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.715949][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.716265][T10264] System zones: 0-2, 18-18, 34-34 [ 140.726146][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.741464][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.751360][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.751376][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.752489][T10047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.780206][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.790752][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.800610][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.811079][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.820933][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.831417][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.839920][T10264] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 140.874016][T10264] EXT4-fs (loop2): 1 truncate cleaned up [ 140.887680][T10264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.938317][T10047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.940642][T10264] random: crng reseeded on system resumption [ 140.964346][T10047] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.973203][T10047] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.982101][T10047] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.990975][T10047] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.640862][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.935285][T10330] loop2: detected capacity change from 0 to 512 [ 141.976493][T10330] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2161: corrupted in-inode xattr: invalid ea_ino [ 142.035620][T10330] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.2161: couldn't read orphan inode 15 (err -117) [ 142.222103][T10330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.292796][T10343] team0: entered promiscuous mode [ 142.297909][T10343] team_slave_0: entered promiscuous mode [ 142.303653][T10343] team_slave_1: entered promiscuous mode [ 142.309488][T10343] hsr_slave_0: entered promiscuous mode [ 142.317907][T10344] hub 6-0:1.0: USB hub found [ 142.323194][T10344] hub 6-0:1.0: 8 ports detected [ 142.329754][T10343] team0: left promiscuous mode [ 142.334567][T10343] team_slave_0: left promiscuous mode [ 142.340111][T10343] team_slave_1: left promiscuous mode [ 142.345750][T10343] hsr_slave_0: left promiscuous mode [ 142.423671][T10346] loop3: detected capacity change from 0 to 512 [ 142.449304][T10346] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2166: corrupted in-inode xattr: invalid ea_ino [ 142.466455][T10346] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.2166: couldn't read orphan inode 15 (err -117) [ 142.503598][T10346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.509445][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.535981][T10351] loop4: detected capacity change from 0 to 1024 [ 142.578671][T10351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.634102][T10346] hub 6-0:1.0: USB hub found [ 142.638899][T10346] hub 6-0:1.0: 8 ports detected [ 142.712527][T10363] loop2: detected capacity change from 0 to 164 [ 142.732460][T10363] syz.2.2173: attempt to access beyond end of device [ 142.732460][T10363] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 142.746675][T10363] syz.2.2173: attempt to access beyond end of device [ 142.746675][T10363] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 142.766777][T10362] SELinux: policydb version 0 does not match my version range 15-34 [ 142.779193][T10362] SELinux: failed to load policy [ 142.798809][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.805169][T10276] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 88: padding at end of block bitmap is not set [ 142.835606][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 142.835623][ T29] audit: type=1326 audit(1745139064.182:9645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.3.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 142.873243][ T29] audit: type=1326 audit(1745139064.182:9646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.3.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 142.897173][ T29] audit: type=1326 audit(1745139064.182:9647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.3.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 142.920937][ T29] audit: type=1326 audit(1745139064.182:9648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.3.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 142.944590][ T29] audit: type=1326 audit(1745139064.182:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.3.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 142.968160][ T29] audit: type=1326 audit(1745139064.182:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.3.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 142.991766][ T29] audit: type=1326 audit(1745139064.182:9651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.3.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 143.015893][ T29] audit: type=1326 audit(1745139064.182:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.3.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 143.039839][ T29] audit: type=1326 audit(1745139064.182:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.3.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 143.063417][ T29] audit: type=1326 audit(1745139064.182:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.3.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0fcee169 code=0x7ffc0000 [ 143.088695][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.150605][T10381] loop4: detected capacity change from 0 to 512 [ 143.174198][T10383] siw: device registration error -23 [ 143.184765][T10375] loop5: detected capacity change from 0 to 512 [ 143.210425][T10381] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.2179: corrupted in-inode xattr: invalid ea_ino [ 143.241672][T10375] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.2177: corrupted in-inode xattr: invalid ea_ino [ 143.257016][T10381] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.2179: couldn't read orphan inode 15 (err -117) [ 143.272475][T10390] __nla_validate_parse: 21 callbacks suppressed [ 143.272495][T10390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2184'. [ 143.277394][T10392] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2183'. [ 143.278835][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2184'. [ 143.291758][T10375] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.2177: couldn't read orphan inode 15 (err -117) [ 143.298068][T10381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.331006][T10375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.369719][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2183'. [ 143.378980][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2183'. [ 143.399945][T10393] hub 6-0:1.0: USB hub found [ 143.408573][T10393] hub 6-0:1.0: 8 ports detected [ 143.421009][T10392] team0: entered promiscuous mode [ 143.426114][T10392] team_slave_0: entered promiscuous mode [ 143.431911][T10392] team_slave_1: entered promiscuous mode [ 143.433601][T10375] hub 6-0:1.0: USB hub found [ 143.444584][T10392] team0: left promiscuous mode [ 143.449626][T10392] team_slave_0: left promiscuous mode [ 143.451878][T10375] hub 6-0:1.0: 8 ports detected [ 143.455314][T10392] team_slave_1: left promiscuous mode [ 143.479643][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.492310][T10047] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.547208][T10402] can0: slcan on ttyS3. [ 143.557767][T10396] hub 6-0:1.0: USB hub found [ 143.562994][T10396] hub 6-0:1.0: 8 ports detected [ 143.605273][T10402] can0 (unregistered): slcan off ttyS3. [ 143.611071][T10402] Falling back ldisc for ttyS3. [ 143.799324][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.808280][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.230354][T10432] loop3: detected capacity change from 0 to 512 [ 144.246148][T10432] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2199: corrupted in-inode xattr: invalid ea_ino [ 144.260082][T10432] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.2199: couldn't read orphan inode 15 (err -117) [ 144.273996][T10432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.382741][T10434] hub 6-0:1.0: USB hub found [ 144.391516][T10434] hub 6-0:1.0: 8 ports detected [ 144.476678][T10439] loop5: detected capacity change from 0 to 2048 [ 144.480895][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.591809][T10446] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2203'. [ 144.632874][T10446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2203'. [ 144.642078][T10446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2203'. [ 144.648457][T10453] loop2: detected capacity change from 0 to 1024 [ 144.676891][T10446] team0: entered promiscuous mode [ 144.682057][T10446] team_slave_0: entered promiscuous mode [ 144.687853][T10446] team_slave_1: entered promiscuous mode [ 144.707404][T10453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.720220][T10446] team0: left promiscuous mode [ 144.720855][T10453] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2207'. [ 144.725009][T10446] team_slave_0: left promiscuous mode [ 144.725161][T10446] team_slave_1: left promiscuous mode [ 144.853951][T10456] loop4: detected capacity change from 0 to 512 [ 144.880784][T10456] EXT4-fs (loop4): orphan cleanup on readonly fs [ 144.888197][T10456] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.2205: bad orphan inode 13 [ 144.929806][T10456] ext4_test_bit(bit=12, block=18) = 1 [ 144.935270][T10456] is_bad_inode(inode)=0 [ 144.939465][T10456] NEXT_ORPHAN(inode)=2130706432 [ 144.944370][T10456] max_ino=32 [ 144.947645][T10456] i_nlink=1 [ 144.951430][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.957987][T10456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.015743][T10464] FAULT_INJECTION: forcing a failure. [ 145.015743][T10464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.029223][T10464] CPU: 0 UID: 0 PID: 10464 Comm: syz.2.2210 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 145.029325][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.029412][T10464] Call Trace: [ 145.029420][T10464] [ 145.029430][T10464] dump_stack_lvl+0xf6/0x150 [ 145.029459][T10464] dump_stack+0x15/0x1a [ 145.029476][T10464] should_fail_ex+0x261/0x270 [ 145.029499][T10464] should_fail+0xb/0x10 [ 145.029518][T10464] should_fail_usercopy+0x1a/0x20 [ 145.029546][T10464] strncpy_from_user+0x25/0x230 [ 145.029624][T10464] path_getxattrat+0xb8/0x2a0 [ 145.029675][T10464] __x64_sys_fgetxattr+0x5b/0x70 [ 145.029703][T10464] x64_sys_call+0x26e9/0x2e10 [ 145.029725][T10464] do_syscall_64+0xc9/0x1a0 [ 145.029751][T10464] ? clear_bhb_loop+0x25/0x80 [ 145.029822][T10464] ? clear_bhb_loop+0x25/0x80 [ 145.029848][T10464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.029932][T10464] RIP: 0033:0x7fdd3829e169 [ 145.029949][T10464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.029971][T10464] RSP: 002b:00007fdd36907038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 145.029990][T10464] RAX: ffffffffffffffda RBX: 00007fdd384c5fa0 RCX: 00007fdd3829e169 [ 145.030002][T10464] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 145.030013][T10464] RBP: 00007fdd36907090 R08: 0000000000000000 R09: 0000000000000000 [ 145.030071][T10464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.030081][T10464] R13: 0000000000000000 R14: 00007fdd384c5fa0 R15: 00007ffe2c13b738 [ 145.030104][T10464] [ 145.264631][T10468] loop2: detected capacity change from 0 to 512 [ 145.277088][T10466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.285726][T10468] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.293915][T10466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.320329][T10468] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 145.340143][T10476] SELinux: policydb version 0 does not match my version range 15-34 [ 145.348580][T10476] SELinux: failed to load policy [ 145.348905][T10468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 145.362979][T10468] System zones: 0-2, 18-18, 34-34 [ 145.368786][T10468] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 145.384546][T10468] EXT4-fs (loop2): 1 truncate cleaned up [ 145.391046][T10468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.405841][T10468] random: crng reseeded on system resumption [ 145.481296][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.613584][T10492] loop3: detected capacity change from 0 to 512 [ 145.614769][T10494] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.672754][T10492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 145.679476][T10504] can0: slcan on ttyS3. [ 145.695771][T10492] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.711519][T10506] SELinux: policydb version 0 does not match my version range 15-34 [ 145.720492][T10506] SELinux: failed to load policy [ 145.725659][T10492] xt_connbytes: Forcing CT accounting to be enabled [ 145.732389][T10492] Cannot find add_set index 0 as target [ 145.745250][T10504] can0 (unregistered): slcan off ttyS3. [ 145.750928][T10504] Falling back ldisc for ttyS3. [ 145.788357][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 145.803066][T10510] loop4: detected capacity change from 0 to 1024 [ 145.826875][T10510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.842276][T10510] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2230'. [ 146.017575][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.028700][T10517] loop3: detected capacity change from 0 to 512 [ 146.049591][T10517] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2231: corrupted in-inode xattr: invalid ea_ino [ 146.118997][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.148537][T10517] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.2231: couldn't read orphan inode 15 (err -117) [ 146.217830][T10529] loop2: detected capacity change from 0 to 512 [ 146.227534][T10517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.263167][T10529] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2236: corrupted in-inode xattr: invalid ea_ino [ 146.296390][T10529] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.2236: couldn't read orphan inode 15 (err -117) [ 146.325861][T10529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.346265][T10517] hub 6-0:1.0: USB hub found [ 146.354331][T10517] hub 6-0:1.0: 8 ports detected [ 146.419945][T10539] hub 6-0:1.0: USB hub found [ 146.424749][T10539] hub 6-0:1.0: 8 ports detected [ 146.465963][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.497489][T10541] SELinux: policydb version 0 does not match my version range 15-34 [ 146.515372][T10541] SELinux: failed to load policy [ 146.540376][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.572830][T10543] loop3: detected capacity change from 0 to 256 [ 146.582869][T10543] FAT-fs (loop3): invalid media value (0x00) [ 146.589151][T10543] FAT-fs (loop3): Can't find a valid FAT filesystem [ 146.606917][T10543] sch_tbf: burst 0 is lower than device lo mtu (851990) ! [ 146.792456][T10551] loop3: detected capacity change from 0 to 512 [ 146.815540][T10551] EXT4-fs: Ignoring removed bh option [ 146.821038][T10551] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.840342][T10551] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 146.867637][T10551] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 146.875737][T10551] EXT4-fs (loop3): orphan cleanup on readonly fs [ 146.882447][T10551] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2244: Failed to acquire dquot type 1 [ 146.899802][T10551] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2244: Invalid block bitmap block 0 in block_group 0 [ 146.913804][T10551] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2244: Invalid block bitmap block 0 in block_group 0 [ 146.928698][T10551] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2244: Invalid block bitmap block 0 in block_group 0 [ 146.942857][T10551] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2244: Failed to acquire dquot type 1 [ 146.955121][T10551] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2244: Failed to acquire dquot type 1 [ 146.966741][T10551] EXT4-fs (loop3): 1 orphan inode deleted [ 146.976183][T10551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.046961][T10564] loop2: detected capacity change from 0 to 1024 [ 147.047025][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.047147][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.066438][T10564] ext4: Unknown parameter 'nouser_xattr' [ 147.151467][T10569] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 147.210997][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.251753][T10580] loop4: detected capacity change from 0 to 2048 [ 147.335759][T10596] SELinux: policydb version 0 does not match my version range 15-34 [ 147.344347][T10596] SELinux: failed to load policy [ 147.352740][T10592] loop3: detected capacity change from 0 to 512 [ 147.361520][T10592] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2262: corrupted in-inode xattr: invalid ea_ino [ 147.395189][T10592] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.2262: couldn't read orphan inode 15 (err -117) [ 147.417422][T10592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.493011][T10607] Cannot find add_set index 0 as target [ 147.507187][T10608] hub 6-0:1.0: USB hub found [ 147.512003][T10608] hub 6-0:1.0: 8 ports detected [ 147.523208][T10609] loop2: detected capacity change from 0 to 512 [ 147.532296][T10609] EXT4-fs: Ignoring removed bh option [ 147.537852][T10609] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.553793][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.565175][T10609] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 147.588298][T10609] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 147.596939][T10609] EXT4-fs (loop2): orphan cleanup on readonly fs [ 147.603926][T10609] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2268: Failed to acquire dquot type 1 [ 147.643620][T10609] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2268: Invalid block bitmap block 0 in block_group 0 [ 147.663737][T10609] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2268: Invalid block bitmap block 0 in block_group 0 [ 147.678140][T10609] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2268: Invalid block bitmap block 0 in block_group 0 [ 147.708102][T10614] hub 6-0:1.0: USB hub found [ 147.713370][T10614] hub 6-0:1.0: 8 ports detected [ 147.721875][T10609] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2268: Failed to acquire dquot type 1 [ 147.734015][T10609] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2268: Failed to acquire dquot type 1 [ 147.747617][T10609] EXT4-fs (loop2): 1 orphan inode deleted [ 147.754284][T10609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.778955][T10624] can0: slcan on ttyS3. [ 147.835708][T10624] can0 (unregistered): slcan off ttyS3. [ 147.850917][T10628] xt_connbytes: Forcing CT accounting to be enabled [ 147.862017][T10624] Falling back ldisc for ttyS3. [ 147.875335][T10628] Cannot find add_set index 0 as target [ 147.884526][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.931640][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 147.931728][ T29] audit: type=1400 audit(1745139069.272:9949): avc: denied { shutdown } for pid=10635 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.936511][T10634] bond0: entered promiscuous mode [ 147.953469][ T29] audit: type=1400 audit(1745139069.292:9950): avc: denied { write } for pid=10635 comm="" path="socket:[25284]" dev="sockfs" ino=25284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.956944][T10634] bond_slave_0: entered promiscuous mode [ 147.984862][T10640] loop2: detected capacity change from 0 to 1024 [ 147.990277][T10634] bond_slave_1: entered promiscuous mode [ 147.999127][T10640] ext4: Unknown parameter 'nouser_xattr' [ 148.008075][T10634] bond0: left promiscuous mode [ 148.012899][T10634] bond_slave_0: left promiscuous mode [ 148.018513][T10634] bond_slave_1: left promiscuous mode [ 148.106715][T10640] loop2: detected capacity change from 0 to 128 [ 148.203111][T10663] Cannot find add_set index 0 as target [ 148.250594][ T29] audit: type=1326 audit(1745139069.592:9951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.0.2298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f688f5be169 code=0x0 [ 148.328214][T10674] __nla_validate_parse: 14 callbacks suppressed [ 148.328230][T10674] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2302'. [ 148.368516][T10677] loop5: detected capacity change from 0 to 2048 [ 148.382231][T10680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2304'. [ 148.391336][T10680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2304'. [ 148.401946][ T29] audit: type=1326 audit(1745139069.642:9952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 148.425625][ T29] audit: type=1326 audit(1745139069.642:9953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 148.447157][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2302'. [ 148.449418][ T29] audit: type=1326 audit(1745139069.642:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 148.458218][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2302'. [ 148.461292][T10674] bond0: entered promiscuous mode [ 148.481848][ T29] audit: type=1326 audit(1745139069.642:9955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 148.490758][T10674] bond_slave_0: entered promiscuous mode [ 148.490839][T10674] bond_slave_1: entered promiscuous mode [ 148.495964][ T29] audit: type=1326 audit(1745139069.642:9956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 148.555035][ T29] audit: type=1326 audit(1745139069.642:9957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 148.578844][ T29] audit: type=1326 audit(1745139069.642:9958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.0.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688f5be169 code=0x7ffc0000 [ 148.614513][T10674] bond0: left promiscuous mode [ 148.619386][T10674] bond_slave_0: left promiscuous mode [ 148.624957][T10674] bond_slave_1: left promiscuous mode [ 148.640061][T10686] loop4: detected capacity change from 0 to 512 [ 148.663059][T10686] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.2306: corrupted in-inode xattr: invalid ea_ino [ 148.677218][T10686] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.2306: couldn't read orphan inode 15 (err -117) [ 148.690547][T10686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.777352][T10701] hub 6-0:1.0: USB hub found [ 148.792378][T10701] hub 6-0:1.0: 8 ports detected [ 148.812158][T10704] loop2: detected capacity change from 0 to 2048 [ 148.836907][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.865518][ T3472] loop2: p1 < > p4 [ 148.871144][ T3472] loop2: p4 size 8388608 extends beyond EOD, truncated [ 148.883445][T10711] loop4: detected capacity change from 0 to 512 [ 148.896219][T10711] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.916091][T10711] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 148.926479][T10711] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 148.935081][T10711] System zones: 0-2, 18-18, 34-34 [ 148.940997][T10711] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 148.953995][T10704] loop2: p1 < > p4 [ 148.957368][T10711] EXT4-fs (loop4): 1 truncate cleaned up [ 148.960811][T10704] loop2: p4 size 8388608 extends beyond EOD, truncated [ 148.966971][T10711] random: crng reseeded on system resumption [ 148.999068][T10719] loop3: detected capacity change from 0 to 512 [ 149.014164][T10719] EXT4-fs (loop3): orphan cleanup on readonly fs [ 149.038449][T10719] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.2317: bad orphan inode 13 [ 149.059825][T10719] ext4_test_bit(bit=12, block=18) = 1 [ 149.065306][T10719] is_bad_inode(inode)=0 [ 149.069520][T10719] NEXT_ORPHAN(inode)=2130706432 [ 149.074432][T10719] max_ino=32 [ 149.077697][T10719] i_nlink=1 [ 149.089813][T10724] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2318'. [ 149.101103][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2318'. [ 149.110189][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2318'. [ 149.148135][T10724] team0: entered promiscuous mode [ 149.153319][T10724] team_slave_0: entered promiscuous mode [ 149.159193][T10724] team_slave_1: entered promiscuous mode [ 149.191275][T10724] team0: left promiscuous mode [ 149.196263][T10724] team_slave_0: left promiscuous mode [ 149.201817][T10724] team_slave_1: left promiscuous mode [ 149.216716][ T6281] ================================================================== [ 149.218531][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 149.224828][ T6281] BUG: KCSAN: data-race in touch_atime / touch_atime [ 149.224861][ T6281] [ 149.224866][ T6281] write to 0xffff88812a97c6c0 of 4 bytes by task 3472 on cpu 0: [ 149.224882][ T6281] touch_atime+0x1f3/0x350 [ 149.255659][ T6281] shmem_file_read_iter+0x474/0x540 [ 149.260879][ T6281] vfs_read+0x5e6/0x710 [ 149.265035][ T6281] ksys_read+0xeb/0x1b0 [ 149.269225][ T6281] __x64_sys_read+0x42/0x50 [ 149.273736][ T6281] x64_sys_call+0x2a3b/0x2e10 [ 149.278426][ T6281] do_syscall_64+0xc9/0x1a0 [ 149.282938][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.288836][ T6281] [ 149.291158][ T6281] read to 0xffff88812a97c6c0 of 4 bytes by task 6281 on cpu 1: [ 149.298700][ T6281] touch_atime+0x1a0/0x350 [ 149.303121][ T6281] shmem_file_read_iter+0x474/0x540 [ 149.308337][ T6281] vfs_read+0x5e6/0x710 [ 149.312505][ T6281] ksys_read+0xeb/0x1b0 [ 149.316658][ T6281] __x64_sys_read+0x42/0x50 [ 149.321157][ T6281] x64_sys_call+0x2a3b/0x2e10 [ 149.326030][ T6281] do_syscall_64+0xc9/0x1a0 [ 149.330542][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.336449][ T6281] [ 149.338832][ T6281] value changed: 0x21f33afd -> 0x222aef2f [ 149.344558][ T6281] [ 149.346883][ T6281] Reported by Kernel Concurrency Sanitizer on: [ 149.353031][ T6281] CPU: 1 UID: 0 PID: 6281 Comm: udevd Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 149.365021][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.375106][ T6281] ================================================================== [ 149.384695][ T6281] udevd[6281]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 149.387105][T10737] sd 0:0:1:0: device reset [ 149.410195][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 149.411389][ T6281] udevd[6281]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory