last executing test programs: 2.918543876s ago: executing program 4 (id=6662): socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782da02b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a001f4004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040", 0xa2}], 0x1}, 0x48084) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file3\x00', 0x11e) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") listxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000900"], 0x184}}, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x88) semop(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x15249cda8521b178}, {0x2, 0xfffe, 0x1000}], 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x4}, 0x18) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x1) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xbf, 0x9}, 0x11, 0x8}) r7 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3e8}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x200484, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3, @ANYRES64=0x0, @ANYRES64=r1, @ANYRESHEX, @ANYRESHEX=r7], 0x41, 0x2bf, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) link(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file1/file0\x00') 1.988418578s ago: executing program 4 (id=6680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="04002bbd7000fbdbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x2c008051}, 0x4050) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80400) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000880), 0x2) ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)=0x400) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c9d1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) 1.264995451s ago: executing program 3 (id=6701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.206158514s ago: executing program 3 (id=6702): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) timer_create(0x3, 0x0, &(0x7f0000000500)=0x0) timer_settime(r6, 0x0, &(0x7f0000000540)={{0x0, 0x989680}}, &(0x7f0000000580)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x256581, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1000000000000b, 0x6f76, 0x3, 0x0, 0x1, 0x8, 0x7b, 0x3}) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080), 0x0) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) 1.201561195s ago: executing program 3 (id=6704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r3 = dup(r2) socket(0x11, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendfile(r3, r1, 0x0, 0x8000fffffffc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.113876779s ago: executing program 4 (id=6707): r0 = syz_io_uring_setup(0x497, &(0x7f0000000940)={0x0, 0x2421, 0x8, 0x8000, 0x400250}, 0x0, 0x0) io_uring_enter(r0, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) mount$9p_fd(0x0, &(0x7f0000001fc0)='./file0\x00', 0x0, 0x102000, &(0x7f0000002100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@noxattr}, {@access_user}, {@noxattr}, {@cache_fscache}], [{@measure}, {@uid_gt}, {@obj_user={'obj_user', 0x3d, '#$^%^\x93},.%^]{('}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001e80)) r5 = io_uring_setup(0x63c7, &(0x7f0000001ec0)={0x0, 0xc8bd, 0x4000, 0x0, 0x2e2}) io_uring_enter(r5, 0x83b, 0xaebc, 0x54, &(0x7f0000001f80), 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmsg$unix(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000084}, 0x40880) sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001800000000000000010000000100000045cbc780"], 0x30, 0x800}}], 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002240), r6) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002580)={&(0x7f0000002280)={0x2dc, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63c}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xeb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xaf0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd4adc8fc}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x71bc2be1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ac0a120}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4000}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xac6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x44}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x10, 0x80, 0x8, 0x7, {{0x47, 0x4, 0x3, 0x1, 0x11c, 0x67, 0x0, 0xbd, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0x63, 0x1, 0x7, [{@empty}, {@loopback, 0x12d3200}, {@loopback, 0x3}, {@private=0xa010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4b}, {@broadcast}, {@private=0xa010102, 0x4}]}, @timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x9, [{@loopback, 0x3}]}, @rr={0x7, 0x13, 0x37, [@remote, @multicast2, @rand_addr=0x64010100, @loopback]}, @rr={0x7, 0xf, 0xf6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x25}]}, @cipso={0x86, 0x37, 0x3, [{0x7, 0x3, '\n'}, {0x6, 0x3, 'c'}, {0x1, 0x10, "2a55554f8441aded4fe4bbdc0273"}, {0x1, 0x8, "602fac8956bc"}, {0x5, 0x3, 'X'}, {0x6, 0x10, "4527af1ed4f3403e5c9d0c476325"}]}, @end, @rr={0x7, 0xf, 0xf7, [@empty, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0xc}]}, @timestamp_addr={0x44, 0x54, 0x2a, 0x1, 0xd, [{@loopback, 0x4}, {@empty, 0xaad}, {@rand_addr=0x64010101, 0x1}, {@remote, 0x7ff}, {@multicast2, 0x3}, {@remote, 0x193c}, {@multicast1, 0x84b}, {@local, 0x5}, {@private=0xa010100, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1a4}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000600)=""/112, 0x70, 0x0, &(0x7f0000000780)=""/143, 0x8f}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_ext={0x1c, 0x2c, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @generic={0xb2, 0x0, 0x6, 0xc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0xe3, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0xf, 0xc0c, 0x8001}, 0x10, 0xe77, 0xffffffffffffffff, 0x5, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001a40)=[{0x4, 0x1, 0x8, 0x4}, {0x5, 0x5, 0xe, 0x2}, {0x5, 0x1, 0xe, 0x2}, {0x2, 0x4, 0x3, 0x1}, {0x4, 0x3, 0x3, 0x6}], 0x10, 0x9}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noauto_da_alloc}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{0x1}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) syz_open_dev$vcsa(&(0x7f0000001c40), 0x2, 0x4080) 899.017018ms ago: executing program 0 (id=6712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7f5ffffff00"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040040) 877.485909ms ago: executing program 3 (id=6713): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="1800010000000000000000000000000018000000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 810.623472ms ago: executing program 0 (id=6714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080), 0x0) 788.603713ms ago: executing program 4 (id=6715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 769.339764ms ago: executing program 0 (id=6716): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) timer_create(0x3, 0x0, &(0x7f0000000500)=0x0) timer_settime(r6, 0x0, &(0x7f0000000540)={{0x0, 0x989680}}, &(0x7f0000000580)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x256581, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1000000000000b, 0x6f76, 0x3, 0x0, 0x1, 0x8, 0x7b, 0x3}) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080), 0x0) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) 767.485914ms ago: executing program 2 (id=6717): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYRES16=r0], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000600000008000000ae"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "081000", 0x40, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0xffff, {0x5, 0x6, "5436ea", 0x400, 0x88, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@dstopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x29}, @remote}, 0xc) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockname$inet(r4, 0x0, &(0x7f0000000040)) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xf9d1, @private1={0xfc, 0x1, '\x00', 0x1}}, {0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, r5, 0x1}}, 0x48) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000280)=""/172, &(0x7f0000000200)=0xac) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r7}, 0x10) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 641.08897ms ago: executing program 4 (id=6718): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000002c0)=@buf={0xa8, &(0x7f0000000200)="908f89b7c41ed22ac99ac3191f48e87700e35ce2edd46788520b6adbad0f69a1064ed8b41cc943fe34a7d4469da8e5ffb1ab3a20bedfee85cbcec9b8a1c5546467293f43ea4ff66d40f5cbae71d0d36dee8e4d16b6ecb053fd503dfb2e57f1e1a7c463838bc10705467097acd3771726ea8ed085fddbd49b046d30ba744e241df75a991671fe7c4fb2691d9b5c25af88760fd0d5bd2aee6003d23c89f73c6d75cd52ea0aad9fbf77"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x17, 0x7ffc1ffd}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) gettid() gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000600)={0x0, 0x7a120, 0x60, {0x3, 0x103}, 0x0, 0x9}) 640.40419ms ago: executing program 4 (id=6719): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="04002bbd7000fbdbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x2c008051}, 0x4050) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80400) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000880), 0x2) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x400) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c9d1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) socket$kcm(0x29, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x16, 0x2, 0x4, 0x7fff7fff}]}) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 639.58543ms ago: executing program 0 (id=6720): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x4c, r3, 0x1, 0x4070bd28, 0x8000001, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x1b, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x0, 0x30, 0x1}]}, 0x4c}}, 0x18) 638.244851ms ago: executing program 0 (id=6721): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) 637.666ms ago: executing program 0 (id=6722): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a080, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) unshare(0x2040400) inotify_rm_watch(0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd5000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00316244645dd146dc99a2d25e156faa55bbee0683683be8068b742248329780fb469487191c6ce2afbc9f16", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r4 = socket$inet6(0xa, 0x800, 0x40004) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x3, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x81}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r5) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003040000", @ANYRES32=0x0, @ANYBLOB="60bc010004a702002400128009000100626f6e640000000014000280080007000e00000008000300e42e0080"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b70300000000edff8400000083000000bf090000000000005509010000000000950000b7020000000000008500000084000000b72f0d6344cd632a2600000000000000000000000000edb8e44b8234e574cddec83c6d035f9b3793e6aaf13ad10dd7f68d3fda13c85d1269ad2631c55747aab7a6e80e6e87302df15401826b9aeff826aa071853d161e712200ad2b84a533d5c49d96fba86b886f01a613b54fd50dfafe3c1a94ea215d7a815428e8f028480761fe594c65730243ecf85dd9b2381a58a9f5ce408a9e450896a828e3f5c6fbdac0629f6a2977d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffff0c, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x4000000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kfree\x00', r10, 0x0, 0xfffffffffffffffc}, 0xc) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)) 636.63402ms ago: executing program 2 (id=6723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 620.187061ms ago: executing program 2 (id=6724): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) membarrier(0x40, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6, 0x10, 0x0, 0x5}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]}) set_tid_address(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffefffe}, 0x18) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0xd9, 0x80, &(0x7f0000000500)="020c0c20d4d0be99d4cbc379d93830450eb4cf47a0280aa0d3ebee4ba0b436db8822ea25785777b8a89db89166b2b03471e5525edd99665a144b4cd1ce7c7b622d2953c665a0185a363ee93748497eebca14f1cf302d97b8ad6dd52aa3709968d51098211eb34abbbd09c5024c418dd1ebf10b89c7aef4318087f2f0adad370ec3753b65bc925e962d43e6b59e93dd424f2008ea3dab43b72a05172ec14b6dcd6bd0adc1f31ef3835038dd8f5c4e759efd7eee081b0aaba8d0b94334e683a219f2dafa7eab734c91b2b0746e513a7e3fff1c7af2b0dcaa7a2e", &(0x7f00000002c0)=""/128, 0x1, 0x0, 0x89, 0xc8, &(0x7f0000000600)="e4a18046bd8ad1373af7e238f1c4c945fba302c30c9e9c9845e98ffa6f44e0c91dc358b85e313708433c60587a85dc694cf0f32f689be827bf69cfbfde47487e97d56aa1dcb22fb76f86b24ca27d1382fd306a52146c6c8058c3b37bb4638d76bae3af2af01999627fcf13aae0ae74c155c173cb97f9aa797ec2fc0eaec7a04d07a7ba7fe34932649d", &(0x7f00000006c0)="17df2a73114abbe621f48b648fd75ac665c4bd50ee45f0be10747473c8d226d1e9a0ff6a8d6b73c1854bed65ece145814438cefd02e6bbd5512c0ea056c1cf9c75b8966e403180a0df983a7a9798ad3b6e5d5d88dd19dc87325c21db73df6058d3d43c9819d5e2007f65e53348aca907e10debf5b2ecb0a09e9eb9208385193c8ed3e3a90a6e79ed910772426ddc589c1045214acc0e36d962a9cc599662604ea8bd9b271c77684d9fa30b84458a6accd0b945f765cff99e9c6d109665394b981d363fa10c6e0fa2", 0x4, 0x0, 0x1}, 0x50) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0000000303010300000000000000000300000308000340000000040c000200fffffffc00000006f206fe616bace50007b608000340000000070c000200fffffffe000000060c000200fffffffb000000080c000200fffffffb000000f3080003400000040008000340000010000000000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2100, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xfffffffe, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x19, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xf05, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x5, 0x1, 0x9, 0x2, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @generic={0x6, 0x1, 0xd, 0x0, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}]}, &(0x7f0000000040)='GPL\x00', 0xfffffff6, 0xbd, &(0x7f0000000300)=""/189, 0x40f00, 0x50, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x2, 0x60, 0x400}, 0x10, r6, 0xffffffffffffffff, 0x7, &(0x7f00000003c0)=[0xffffffffffffffff], &(0x7f0000000400)=[{0x1, 0x3, 0xa, 0x9}, {0x64, 0x3, 0xb, 0xb}, {0x0, 0x1, 0x3, 0xa}, {0x5, 0x4, 0x1, 0x7}, {0x2, 0x5, 0xd, 0xc}, {0x4, 0x1, 0x9, 0x2}, {0x2, 0x4, 0xf, 0x2}], 0x10, 0x7}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006008035"], 0x24}}, 0x10) 581.486003ms ago: executing program 2 (id=6725): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYRES16=r0], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000600000008000000ae"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "081000", 0x40, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0xffff, {0x5, 0x6, "5436ea", 0x400, 0x88, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@dstopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x29}, @remote}, 0xc) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockname$inet(r4, 0x0, &(0x7f0000000040)) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xf9d1, @private1={0xfc, 0x1, '\x00', 0x1}}, {0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, r5, 0x1}}, 0x48) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000280)=""/172, &(0x7f0000000200)=0xac) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r7}, 0x10) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 514.227476ms ago: executing program 2 (id=6726): r0 = syz_io_uring_setup(0x497, &(0x7f0000000940)={0x0, 0x2421, 0x8, 0x8000, 0x400250}, 0x0, 0x0) io_uring_enter(r0, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) mount$9p_fd(0x0, &(0x7f0000001fc0)='./file0\x00', 0x0, 0x102000, &(0x7f0000002100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@noxattr}, {@access_user}, {@noxattr}, {@cache_fscache}], [{@measure}, {@uid_gt}, {@obj_user={'obj_user', 0x3d, '#$^%^\x93},.%^]{('}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001e80)) r5 = io_uring_setup(0x63c7, &(0x7f0000001ec0)={0x0, 0xc8bd, 0x4000, 0x0, 0x2e2}) io_uring_enter(r5, 0x83b, 0xaebc, 0x54, &(0x7f0000001f80), 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmsg$unix(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000084}, 0x40880) sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001800000000000000010000000100000045cbc780"], 0x30, 0x800}}], 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002240), r6) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002580)={&(0x7f0000002280)={0x2dc, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63c}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xeb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xaf0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd4adc8fc}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x71bc2be1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ac0a120}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4000}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xac6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x44}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x10, 0x80, 0x8, 0x7, {{0x47, 0x4, 0x3, 0x1, 0x11c, 0x67, 0x0, 0xbd, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0x63, 0x1, 0x7, [{@empty}, {@loopback, 0x12d3200}, {@loopback, 0x3}, {@private=0xa010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4b}, {@broadcast}, {@private=0xa010102, 0x4}]}, @timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x9, [{@loopback, 0x3}]}, @rr={0x7, 0x13, 0x37, [@remote, @multicast2, @rand_addr=0x64010100, @loopback]}, @rr={0x7, 0xf, 0xf6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x25}]}, @cipso={0x86, 0x37, 0x3, [{0x7, 0x3, '\n'}, {0x6, 0x3, 'c'}, {0x1, 0x10, "2a55554f8441aded4fe4bbdc0273"}, {0x1, 0x8, "602fac8956bc"}, {0x5, 0x3, 'X'}, {0x6, 0x10, "4527af1ed4f3403e5c9d0c476325"}]}, @end, @rr={0x7, 0xf, 0xf7, [@empty, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0xc}]}, @timestamp_addr={0x44, 0x54, 0x2a, 0x1, 0xd, [{@loopback, 0x4}, {@empty, 0xaad}, {@rand_addr=0x64010101, 0x1}, {@remote, 0x7ff}, {@multicast2, 0x3}, {@remote, 0x193c}, {@multicast1, 0x84b}, {@local, 0x5}, {@private=0xa010100, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1a4}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000600)=""/112, 0x70, 0x0, &(0x7f0000000780)=""/143, 0x8f}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_ext={0x1c, 0x2c, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @generic={0xb2, 0x0, 0x6, 0xc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0xe3, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0xf, 0xc0c, 0x8001}, 0x10, 0xe77, 0xffffffffffffffff, 0x5, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001a40)=[{0x4, 0x1, 0x8, 0x4}, {0x5, 0x5, 0xe, 0x2}, {0x5, 0x1, 0xe, 0x2}, {0x2, 0x4, 0x3, 0x1}, {0x4, 0x3, 0x3, 0x6}], 0x10, 0x9}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noauto_da_alloc}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==") r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{0x1}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) syz_open_dev$vcsa(&(0x7f0000001c40), 0x2, 0x4080) 427.28269ms ago: executing program 1 (id=6729): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000002c0)=@buf={0xa8, &(0x7f0000000200)="908f89b7c41ed22ac99ac3191f48e87700e35ce2edd46788520b6adbad0f69a1064ed8b41cc943fe34a7d4469da8e5ffb1ab3a20bedfee85cbcec9b8a1c5546467293f43ea4ff66d40f5cbae71d0d36dee8e4d16b6ecb053fd503dfb2e57f1e1a7c463838bc10705467097acd3771726ea8ed085fddbd49b046d30ba744e241df75a991671fe7c4fb2691d9b5c25af88760fd0d5bd2aee6003d23c89f73c6d75cd52ea0aad9fbf77"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x17, 0x7ffc1ffd}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) gettid() gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000600)={0x0, 0x7a120, 0x60, {0x3, 0x103}, 0x0, 0x9}) 390.111952ms ago: executing program 1 (id=6730): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1100000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000010000001000000", @ANYRES32=r1], 0x48) unshare(0x28000600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f00000002c0), &(0x7f0000000400)=r2}, 0x20) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0xd, 0x2d, 0x4, 0x1e, 0x2, 0xed7, 0x3, 0x6, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010025bd7000000000000a80a0000003000800000100140002"], 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0xc17a) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 265.146487ms ago: executing program 1 (id=6731): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) 261.822667ms ago: executing program 2 (id=6732): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) alarm(0x38) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/28, 0x1c}], 0x1, 0x6, 0xa) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000001b704000000008900850000008200000c95"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r1 = gettid() r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) 204.54913ms ago: executing program 1 (id=6733): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x8002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x8080, 0x0) epoll_create(0x5) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0xa) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000ebffffefffffffff40000006a0d41e6c2c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x3c1}) 76.699236ms ago: executing program 1 (id=6734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x50}}, 0x0) 61.925067ms ago: executing program 1 (id=6735): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff01000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d90000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="04002bbd7000fbdbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x2c008051}, 0x4050) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80400) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000880), 0x2) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x400) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c9d1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) socket$kcm(0x29, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x16, 0x2, 0x4, 0x7fff7fff}]}) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 17.113129ms ago: executing program 3 (id=6736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040040) 0s ago: executing program 3 (id=6737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="04002bbd7000fbdbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x2c008051}, 0x4050) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80400) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000880), 0x2) ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)=0x400) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c9d1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) socket$kcm(0x29, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x16, 0x2, 0x4, 0x7fff7fff}]}) kernel console output (not intermixed with test programs): attr_block_get:597: inode #12: comm syz.0.6001: corrupted xattr block 6: invalid header [ 382.662452][T21067] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 382.668849][T21080] loop4: detected capacity change from 0 to 128 [ 382.671597][T21067] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.6001: corrupted xattr block 6: invalid header [ 382.691234][T21080] vfat: Unknown parameter 'GPL' [ 382.692390][T21067] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 382.697219][T21078] lo speed is unknown, defaulting to 1000 [ 382.712673][T21067] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.6001: corrupted xattr block 6: invalid header [ 382.716705][T21078] lo speed is unknown, defaulting to 1000 [ 382.743571][T21078] lo speed is unknown, defaulting to 1000 [ 382.749865][T21078] lo speed is unknown, defaulting to 1000 [ 382.756346][T21078] lo speed is unknown, defaulting to 1000 [ 382.766923][T12039] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.805399][T21086] netlink: 'syz.1.6006': attribute type 47 has an invalid length. [ 382.813262][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6006'. [ 382.977510][T21101] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 383.010108][T21105] IPVS: Error connecting to the multicast addr [ 383.034406][T21107] IPVS: Error connecting to the multicast addr [ 383.622599][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6033'. [ 383.645480][T21149] siw: device registration error -23 [ 383.718803][T21157] IPVS: Error connecting to the multicast addr [ 383.795610][T21165] loop1: detected capacity change from 0 to 512 [ 383.802834][T21165] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 383.814254][T21165] EXT4-fs (loop1): 1 truncate cleaned up [ 383.820366][T21165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.827057][T21167] siw: device registration error -23 [ 383.861240][T20824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.921624][T21171] loop1: detected capacity change from 0 to 512 [ 383.929526][T21171] EXT4-fs (loop1): orphan cleanup on readonly fs [ 383.936637][T21171] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.6044: ea_inode file size=4 entry size=6 [ 383.949645][T21171] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 383.962950][T21171] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6044: corrupted inode contents [ 383.976021][T21171] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.6044: mark_inode_dirty error [ 383.987855][T21171] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6044: corrupted inode contents [ 384.000082][T21171] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.6044: mark_inode_dirty error [ 384.012283][T21171] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.6044: mark inode dirty (error -117) [ 384.025497][T21171] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 384.034757][T21171] EXT4-fs (loop1): 1 orphan inode deleted [ 384.041206][T21171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 384.075987][T21178] siw: device registration error -23 [ 384.109012][T21181] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6044'. [ 384.186508][T20824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.260670][T21186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.269823][T21186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.293043][T21198] loop1: detected capacity change from 0 to 512 [ 384.305782][T21198] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 384.314140][T21198] EXT4-fs (loop1): orphan cleanup on readonly fs [ 384.323215][T21198] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.6054: corrupted inode contents [ 384.335734][T21198] EXT4-fs (loop1): Remounting filesystem read-only [ 384.342596][T21198] EXT4-fs (loop1): 1 truncate cleaned up [ 384.348536][ T2730] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 384.359229][ T2730] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 384.369892][ T2730] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 384.381024][T21198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.394555][T21198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.493957][T21213] loop1: detected capacity change from 0 to 512 [ 384.501998][T21213] EXT4-fs (loop1): orphan cleanup on readonly fs [ 384.508903][T21213] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.6060: ea_inode file size=4 entry size=6 [ 384.522248][T21213] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6060: corrupted inode contents [ 384.535179][T21213] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.6060: mark_inode_dirty error [ 384.547016][T21213] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6060: corrupted inode contents [ 384.559433][T21213] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.6060: mark_inode_dirty error [ 384.571784][T21213] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.6060: mark inode dirty (error -117) [ 384.584821][T21213] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 384.594172][T21213] EXT4-fs (loop1): 1 orphan inode deleted [ 384.600458][T21213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 384.621848][T21218] IPVS: Error connecting to the multicast addr [ 384.645729][T21220] loop0: detected capacity change from 0 to 512 [ 384.654483][T21220] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 384.662583][T21220] EXT4-fs (loop0): orphan cleanup on readonly fs [ 384.668349][T21223] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6060'. [ 384.679938][T21220] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.6062: corrupted inode contents [ 384.692448][T21220] EXT4-fs (loop0): Remounting filesystem read-only [ 384.699211][T21220] EXT4-fs (loop0): 1 truncate cleaned up [ 384.705139][ T4410] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 384.715834][ T4410] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 384.726567][ T4410] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 384.737347][T21220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.760422][T12039] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.796773][T20824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.824932][T21227] loop0: detected capacity change from 0 to 512 [ 384.832778][T21227] EXT4-fs (loop0): orphan cleanup on readonly fs [ 384.839695][T21227] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.6064: ea_inode file size=4 entry size=6 [ 384.852724][T21227] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.6064: corrupted inode contents [ 384.865538][T21227] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.6064: mark_inode_dirty error [ 384.877268][T21227] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.6064: corrupted inode contents [ 384.889394][T21227] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.6064: mark_inode_dirty error [ 384.901661][T21227] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.6064: mark inode dirty (error -117) [ 384.914965][T21227] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 384.924173][T21227] EXT4-fs (loop0): 1 orphan inode deleted [ 384.930326][T21227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 384.997356][T21236] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6064'. [ 385.040553][T21237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6066'. [ 385.260850][T21248] lo speed is unknown, defaulting to 1000 [ 385.393842][T21254] IPVS: Error connecting to the multicast addr [ 385.674478][T12039] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.816202][T21288] IPVS: Error connecting to the multicast addr [ 385.874673][T21295] loop1: detected capacity change from 0 to 512 [ 385.881421][T21295] /dev/loop1: Can't open blockdev [ 386.065470][T21326] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 386.086379][T21326] EXT4-fs (loop1): orphan cleanup on readonly fs [ 386.092935][T21334] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 386.097053][T21326] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.6100: corrupted inode contents [ 386.116061][T21326] EXT4-fs (loop1): Remounting filesystem read-only [ 386.124025][T21326] EXT4-fs (loop1): 1 truncate cleaned up [ 386.130085][ T4413] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 386.140660][ T4413] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 386.151615][ T4413] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 386.151672][T21334] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 386.154715][T21326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.163731][T21334] EXT4-fs (loop0): 1 truncate cleaned up [ 386.176488][T21326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.188035][T21334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.270532][T12039] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.328863][T21340] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.340609][T21340] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6104: corrupted xattr block 6: invalid header [ 386.367740][T21340] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 386.379003][T21340] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6104: corrupted xattr block 6: invalid header [ 386.392912][T21340] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 386.405963][T21340] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6104: corrupted xattr block 6: invalid header [ 386.420302][T21340] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 386.436171][T21362] IPVS: Error connecting to the multicast addr [ 386.442859][T21340] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6104: corrupted xattr block 6: invalid header [ 386.463957][T21340] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 386.499769][T21340] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6104: corrupted xattr block 6: invalid header [ 386.514605][T21340] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 386.524792][T21340] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6104: corrupted xattr block 6: invalid header [ 386.611749][T21381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6122'. [ 386.622562][T21381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21381 comm=syz.3.6122 [ 386.638580][T21381] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6122'. [ 386.653089][T21381] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6122'. [ 386.742432][T21400] netlink: 'syz.1.6128': attribute type 47 has an invalid length. [ 386.750511][T21400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6128'. [ 386.840060][T21418] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6129'. [ 386.925573][T21421] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.937606][T21421] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6132: corrupted xattr block 6: invalid header [ 386.951372][T21421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 386.960697][T21421] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6132: corrupted xattr block 6: invalid header [ 386.974985][T21421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 386.984742][T21421] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6132: corrupted xattr block 6: invalid header [ 386.998651][T21421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 387.007706][T21421] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6132: corrupted xattr block 6: invalid header [ 387.021087][T21421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 387.030236][T21421] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6132: corrupted xattr block 6: invalid header [ 387.043659][T21421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 387.053643][T21421] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6132: corrupted xattr block 6: invalid header [ 387.116729][T21444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6139'. [ 387.126668][T21444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21444 comm=syz.0.6139 [ 387.160112][T21444] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6139'. [ 387.173417][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 387.173434][ T29] audit: type=1400 audit(1765036790.193:73173): avc: denied { load_policy } for pid=21443 comm="syz.0.6139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 387.175522][T21444] SELinux: ebitmap: truncated map [ 387.232739][T21444] SELinux: failed to load policy [ 387.238161][ T29] audit: type=1326 audit(1765036790.263:73174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f89baf749 code=0x7ffc0000 [ 387.261878][ T29] audit: type=1326 audit(1765036790.263:73175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f89baf749 code=0x7ffc0000 [ 387.285795][ T29] audit: type=1326 audit(1765036790.283:73176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f89baf749 code=0x7ffc0000 [ 387.309506][ T29] audit: type=1326 audit(1765036790.283:73177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f7f89baf749 code=0x7ffc0000 [ 387.333282][ T29] audit: type=1326 audit(1765036790.283:73178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f89baf749 code=0x7ffc0000 [ 387.357035][ T29] audit: type=1326 audit(1765036790.283:73179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f7f89baf749 code=0x7ffc0000 [ 387.380731][ T29] audit: type=1326 audit(1765036790.283:73180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f89baf749 code=0x7ffc0000 [ 387.404364][ T29] audit: type=1326 audit(1765036790.283:73181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f7f89baf749 code=0x7ffc0000 [ 387.428005][ T29] audit: type=1326 audit(1765036790.283:73182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21453 comm="syz.1.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f89baf749 code=0x7ffc0000 [ 387.491393][T21461] siw: device registration error -23 [ 387.557315][T21468] netlink: 'syz.2.6150': attribute type 47 has an invalid length. [ 387.672078][T21481] set_capacity_and_notify: 4 callbacks suppressed [ 387.672098][T21481] loop1: detected capacity change from 0 to 8192 [ 387.690319][T21488] bridge0: entered promiscuous mode [ 387.696845][T21488] macsec1: entered promiscuous mode [ 387.705377][T21497] siw: device registration error -23 [ 387.714194][T21488] bridge0: port 1(macsec1) entered blocking state [ 387.720757][T21488] bridge0: port 1(macsec1) entered disabled state [ 387.748179][T21488] macsec1: entered allmulticast mode [ 387.753699][T21488] bridge0: entered allmulticast mode [ 387.761085][T21488] macsec1: left allmulticast mode [ 387.766258][T21488] bridge0: left allmulticast mode [ 387.784190][T21488] bridge0: left promiscuous mode [ 387.945041][T21528] loop2: detected capacity change from 0 to 512 [ 387.965919][T21528] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.992883][T21518] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6166: corrupted xattr block 6: invalid header [ 388.009153][T21529] loop4: detected capacity change from 0 to 512 [ 388.020101][T21518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 388.029519][T21518] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6166: corrupted xattr block 6: invalid header [ 388.034579][T21529] EXT4-fs (loop4): orphan cleanup on readonly fs [ 388.050542][T21518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 388.060067][T21518] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6166: corrupted xattr block 6: invalid header [ 388.073392][T21529] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.6168: ea_inode file size=4 entry size=6 [ 388.086567][T21529] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 388.093581][T21518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 388.100140][T21529] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.6168: corrupted inode contents [ 388.116413][T21518] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6166: corrupted xattr block 6: invalid header [ 388.120732][T21529] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.6168: mark_inode_dirty error [ 388.145271][T21529] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.6168: corrupted inode contents [ 388.157654][T21529] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.6168: mark_inode_dirty error [ 388.169805][T21529] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.6168: mark inode dirty (error -117) [ 388.182546][T21529] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 388.182844][T21518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 388.191672][T21529] EXT4-fs (loop4): 1 orphan inode deleted [ 388.211292][T21518] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6166: corrupted xattr block 6: invalid header [ 388.230919][T21518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 388.241035][T21518] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6166: corrupted xattr block 6: invalid header [ 388.317053][T21547] loop2: detected capacity change from 0 to 512 [ 388.324384][T21547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 388.336517][T21547] ext4 filesystem being mounted at /549/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.375810][T21552] siw: device registration error -23 [ 388.532198][T21574] IPVS: Error connecting to the multicast addr [ 388.589360][T21582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21582 comm=syz.3.6188 [ 388.630888][T21584] loop1: detected capacity change from 0 to 8192 [ 388.894101][T21614] loop4: detected capacity change from 0 to 128 [ 388.900758][T21614] vfat: Unknown parameter 'GPL' [ 389.086386][ T4413] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.123282][T21636] loop0: detected capacity change from 0 to 512 [ 389.136084][ T4413] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.142692][T21636] EXT4-fs: Ignoring removed oldalloc option [ 389.173518][T21613] lo speed is unknown, defaulting to 1000 [ 389.210449][ T4413] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.235352][T21643] netlink: 'syz.0.6201': attribute type 47 has an invalid length. [ 389.276634][ T4413] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.301539][T21646] loop0: detected capacity change from 0 to 512 [ 389.313217][T21646] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.327746][T21646] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.379596][T21613] chnl_net:caif_netlink_parms(): no params data found [ 389.381053][T21655] loop2: detected capacity change from 0 to 512 [ 389.394372][T21655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 389.407631][T21655] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 389.426314][T21655] EXT4-fs (loop2): 1 truncate cleaned up [ 389.435356][T21659] loop1: detected capacity change from 0 to 512 [ 389.455484][T21659] EXT4-fs (loop1): orphan cleanup on readonly fs [ 389.466169][T21659] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.6203: ea_inode file size=4 entry size=6 [ 389.490976][T21659] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 389.504858][T21659] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6203: corrupted inode contents [ 389.517509][T21659] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.6203: mark_inode_dirty error [ 389.529990][T21659] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6203: corrupted inode contents [ 389.542553][T21659] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.6203: mark_inode_dirty error [ 389.555056][T21659] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.6203: mark inode dirty (error -117) [ 389.568581][T21659] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 389.577850][T21659] EXT4-fs (loop1): 1 orphan inode deleted [ 389.685986][ T4413] bond0 (unregistering): Released all slaves [ 389.687229][T21664] __nla_validate_parse: 9 callbacks suppressed [ 389.687251][T21664] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6203'. [ 389.695863][ T4413] bond1 (unregistering): Released all slaves [ 389.717174][ T4413] bond2 (unregistering): Released all slaves [ 389.729706][T21663] IPVS: Error connecting to the multicast addr [ 389.773327][T21613] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.780604][T21613] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.790397][T21613] bridge_slave_0: entered allmulticast mode [ 389.797301][T21613] bridge_slave_0: entered promiscuous mode [ 389.804669][T21613] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.811817][T21613] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.819167][T21613] bridge_slave_1: entered allmulticast mode [ 389.833956][T21613] bridge_slave_1: entered promiscuous mode [ 389.881877][T21613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.903314][T21613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.926058][ T4413] veth1_macvtap: left promiscuous mode [ 389.934264][ T4413] veth0_macvtap: left promiscuous mode [ 389.940063][ T4413] veth1_vlan: left promiscuous mode [ 389.951832][ T4413] veth0_vlan: left promiscuous mode [ 389.991348][ T4413] pim6reg (unregistering): left allmulticast mode [ 390.041846][ T8203] smc: removing ib device syz! [ 390.086137][T21682] bridge0: entered promiscuous mode [ 390.091470][T21682] macsec1: entered promiscuous mode [ 390.101879][T21682] bridge0: port 1(macsec1) entered blocking state [ 390.108517][T21682] bridge0: port 1(macsec1) entered disabled state [ 390.115675][T21682] macsec1: entered allmulticast mode [ 390.120989][T21682] bridge0: entered allmulticast mode [ 390.126965][T21682] macsec1: left allmulticast mode [ 390.132101][T21682] bridge0: left allmulticast mode [ 390.137962][T21682] bridge0: left promiscuous mode [ 390.158560][T21613] team0: Port device team_slave_0 added [ 390.165702][T21613] team0: Port device team_slave_1 added [ 390.241560][T21613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.248711][T21613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.274644][T21613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.295708][T21688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.371127][T21688] ext4 filesystem being mounted at /591/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 390.384253][T21613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.391231][T21613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.417171][T21613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.476517][T21699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 390.507645][T21699] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 390.527450][T21699] EXT4-fs (loop1): 1 truncate cleaned up [ 390.554685][T21613] hsr_slave_0: entered promiscuous mode [ 390.566379][T21613] hsr_slave_1: entered promiscuous mode [ 390.579657][T21613] debugfs: 'hsr0' already exists in 'hsr' [ 390.585504][T21613] Cannot create hsr debugfs directory [ 390.637173][T21697] syzkaller0: entered promiscuous mode [ 390.642787][T21697] syzkaller0: entered allmulticast mode [ 390.721209][T21724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.748781][T21724] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 390.783075][T21724] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6223'. [ 390.792264][T21724] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6223'. [ 390.943078][T21759] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.956150][T21759] ext4 filesystem being mounted at /593/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 390.995356][T21764] syzkaller0: entered promiscuous mode [ 391.000915][T21764] syzkaller0: entered allmulticast mode [ 391.083356][T21613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 391.092812][T21613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 391.117110][T21613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.136903][T21613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.205205][T21769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.209216][T21613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.220777][T21769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.228774][T21613] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.240016][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.247102][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.258655][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.265838][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.351974][T21613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.426404][T21805] bond2 (unregistering): Released all slaves [ 391.441232][T21613] veth0_vlan: entered promiscuous mode [ 391.449840][T21613] veth1_vlan: entered promiscuous mode [ 391.467533][T21613] veth0_macvtap: entered promiscuous mode [ 391.476101][T21613] veth1_macvtap: entered promiscuous mode [ 391.487943][T21613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.499668][T21613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.511215][ T4410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.520489][ T4410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.529701][ T4410] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.540544][ T4410] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.607321][T21812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 391.625915][T21812] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.675964][T21817] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 391.685145][T21817] EXT4-fs (loop4): orphan cleanup on readonly fs [ 391.694637][T21817] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.6247: corrupted inode contents [ 391.707761][T21817] EXT4-fs (loop4): Remounting filesystem read-only [ 391.715292][T21817] EXT4-fs (loop4): 1 truncate cleaned up [ 391.721500][ T4413] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 391.732124][ T4413] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 391.740182][T21823] siw: device registration error -23 [ 391.743300][ T4413] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 391.841296][T21829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 391.853330][T21829] EXT4-fs (loop4): 1 truncate cleaned up [ 391.977303][T21838] bridge0: entered promiscuous mode [ 391.982646][T21838] macsec1: entered promiscuous mode [ 391.988035][T21844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 391.988968][T21838] bridge0: port 3(macsec1) entered blocking state [ 392.003227][T21838] bridge0: port 3(macsec1) entered disabled state [ 392.009958][T21838] macsec1: entered allmulticast mode [ 392.015329][T21838] bridge0: entered allmulticast mode [ 392.021244][T21838] macsec1: left allmulticast mode [ 392.026399][T21838] bridge0: left allmulticast mode [ 392.032687][T21838] bridge0: left promiscuous mode [ 392.036269][T21844] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 392.179534][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 392.179552][ T29] audit: type=1326 audit(1765036795.203:73509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.4.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd82f749 code=0x7ffc0000 [ 392.232335][ T29] audit: type=1326 audit(1765036795.213:73510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.4.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd82f749 code=0x7ffc0000 [ 392.256443][ T29] audit: type=1326 audit(1765036795.213:73511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.4.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafd82f749 code=0x7ffc0000 [ 392.280136][ T29] audit: type=1326 audit(1765036795.213:73512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.4.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd82f749 code=0x7ffc0000 [ 392.280751][T21864] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 392.303726][ T29] audit: type=1326 audit(1765036795.213:73513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.4.6261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafd82f749 code=0x7ffc0000 [ 392.340812][T21864] EXT4-fs (loop1): 1 truncate cleaned up [ 392.414410][T21875] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 392.435521][T21875] EXT4-fs (loop3): 1 truncate cleaned up [ 392.445418][T21881] IPVS: Error connecting to the multicast addr [ 392.567707][T21896] bridge0: entered promiscuous mode [ 392.573146][T21896] macsec1: entered promiscuous mode [ 392.579647][T21896] bridge0: port 3(macsec1) entered blocking state [ 392.580870][T21892] EXT4-fs (loop1): orphan cleanup on readonly fs [ 392.586215][T21896] bridge0: port 3(macsec1) entered disabled state [ 392.599262][T21892] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.6273: ea_inode file size=4 entry size=6 [ 392.609936][T21896] macsec1: entered allmulticast mode [ 392.612478][T21892] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 392.617465][T21896] bridge0: entered allmulticast mode [ 392.630756][T21892] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6273: corrupted inode contents [ 392.648186][T21892] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.6273: mark_inode_dirty error [ 392.660121][T21892] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6273: corrupted inode contents [ 392.672222][T21896] macsec1: left allmulticast mode [ 392.677408][T21896] bridge0: left allmulticast mode [ 392.683465][T21892] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.6273: mark_inode_dirty error [ 392.695955][T21896] bridge0: left promiscuous mode [ 392.701084][ T29] audit: type=1326 audit(1765036795.723:73514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21904 comm="syz.4.6275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcafd82f749 code=0x0 [ 392.703165][T21892] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.6273: mark inode dirty (error -117) [ 392.738063][T21892] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 392.747741][T21892] EXT4-fs (loop1): 1 orphan inode deleted [ 392.762767][T21906] bond3 (unregistering): Released all slaves [ 392.807454][T21909] netlink: 'syz.1.6276': attribute type 47 has an invalid length. [ 392.815356][T21909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6276'. [ 392.871306][ T29] audit: type=1326 audit(1765036795.893:73515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21918 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf05f749 code=0x7ffc0000 [ 392.902448][T21920] set_capacity_and_notify: 12 callbacks suppressed [ 392.902504][T21920] loop1: detected capacity change from 0 to 512 [ 392.905612][ T29] audit: type=1326 audit(1765036795.893:73516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21918 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf05f749 code=0x7ffc0000 [ 392.938980][ T29] audit: type=1326 audit(1765036795.893:73517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21918 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ebf05f749 code=0x7ffc0000 [ 392.962602][ T29] audit: type=1326 audit(1765036795.923:73518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21918 comm="syz.3.6280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf05f749 code=0x7ffc0000 [ 392.996865][T21920] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.012008][T21925] loop2: detected capacity change from 0 to 512 [ 393.013172][T21915] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6278: corrupted xattr block 6: invalid header [ 393.024382][T21925] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 393.042771][T21915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 393.045750][T21925] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 393.052373][T21915] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6278: corrupted xattr block 6: invalid header [ 393.065122][T21925] EXT4-fs (loop2): 1 truncate cleaned up [ 393.084214][T21915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 393.084387][T21915] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6278: corrupted xattr block 6: invalid header [ 393.084659][T21915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 393.084682][T21915] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6278: corrupted xattr block 6: invalid header [ 393.084802][T21915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 393.084824][T21915] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6278: corrupted xattr block 6: invalid header [ 393.085061][T21915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 393.085616][T21915] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6278: corrupted xattr block 6: invalid header [ 393.382900][T21966] IPVS: Error connecting to the multicast addr [ 393.405440][T21968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6294'. [ 393.415824][T21968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21968 comm=syz.1.6294 [ 393.451481][T21968] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6294'. [ 393.460702][T21968] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6294'. [ 393.471973][T21968] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 393.482394][T21968] SELinux: failed to load policy [ 393.490164][T21970] loop2: detected capacity change from 0 to 512 [ 393.505463][T21970] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.517049][T21970] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6295: corrupted xattr block 6: invalid header [ 393.530431][T21970] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 393.539486][T21970] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6295: corrupted xattr block 6: invalid header [ 393.553109][T21970] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 393.562563][T21970] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6295: corrupted xattr block 6: invalid header [ 393.585459][T21970] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 393.603209][T21970] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6295: corrupted xattr block 6: invalid header [ 393.619009][T21977] siw: device registration error -23 [ 393.623884][T21970] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 393.633301][T21970] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6295: corrupted xattr block 6: invalid header [ 393.651568][T21970] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 393.661684][T21970] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6295: corrupted xattr block 6: invalid header [ 393.744016][T21979] loop4: detected capacity change from 0 to 8192 [ 393.831525][T21987] loop2: detected capacity change from 0 to 8192 [ 394.228161][T22014] loop3: detected capacity change from 0 to 512 [ 394.274286][T22014] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.345793][T22014] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.6313: corrupted xattr block 6: invalid header [ 394.389981][T22014] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 394.399197][T22014] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.6313: corrupted xattr block 6: invalid header [ 394.399861][T22014] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 394.403563][T22014] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.6313: corrupted xattr block 6: invalid header [ 394.403798][T22014] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 394.403892][T22014] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.6313: corrupted xattr block 6: invalid header [ 394.404234][T22014] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 394.404259][T22014] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.6313: corrupted xattr block 6: invalid header [ 394.404478][T22014] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 394.405172][T22014] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.6313: corrupted xattr block 6: invalid header [ 394.628352][T22027] lo speed is unknown, defaulting to 1000 [ 394.715231][T22027] chnl_net:caif_netlink_parms(): no params data found [ 394.768546][T22041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.768639][T22041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.840517][T22052] loop4: detected capacity change from 0 to 128 [ 394.840822][T22052] vfat: Unknown parameter 'GPL' [ 394.867457][T22027] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.874623][T22027] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.882187][T22027] bridge_slave_0: entered allmulticast mode [ 394.889386][T22027] bridge_slave_0: entered promiscuous mode [ 394.896313][T22027] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.903411][T22027] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.910928][T22027] bridge_slave_1: entered allmulticast mode [ 394.917610][T22027] bridge_slave_1: entered promiscuous mode [ 394.938407][T22027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.953349][T22027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.974047][T22027] team0: Port device team_slave_0 added [ 394.980776][T22027] team0: Port device team_slave_1 added [ 395.004395][T22027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.011457][T22027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.037545][T22027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.051669][T22027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.058673][T22027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.084832][T22027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.120255][T22027] hsr_slave_0: entered promiscuous mode [ 395.126572][T22027] hsr_slave_1: entered promiscuous mode [ 395.132521][T22027] debugfs: 'hsr0' already exists in 'hsr' [ 395.138320][T22027] Cannot create hsr debugfs directory [ 395.147299][ T4413] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.199220][ T4413] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.236886][ T4413] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.328491][ T4413] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.347808][T22073] loop2: detected capacity change from 0 to 512 [ 395.354886][T22073] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 395.366516][T22073] EXT4-fs (loop2): 1 truncate cleaned up [ 395.465507][ T4413] bond0 (unregistering): Released all slaves [ 395.475456][ T4413] bond1 (unregistering): Released all slaves [ 395.482040][T22076] loop2: detected capacity change from 0 to 512 [ 395.485570][ T4413] bond2 (unregistering): Released all slaves [ 395.505577][T22076] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.517881][T22076] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6331: corrupted xattr block 6: invalid header [ 395.531681][T22076] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 395.541087][ T4413] tipc: Left network mode [ 395.541110][T22076] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6331: corrupted xattr block 6: invalid header [ 395.559000][T22076] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 395.569293][T22076] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6331: corrupted xattr block 6: invalid header [ 395.583390][T22076] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 395.592526][T22076] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6331: corrupted xattr block 6: invalid header [ 395.607190][T22076] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 395.616257][T22076] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6331: corrupted xattr block 6: invalid header [ 395.629681][T22076] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 395.640563][T22076] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6331: corrupted xattr block 6: invalid header [ 395.653890][ T4413] hsr_slave_0: left promiscuous mode [ 395.659798][ T4413] hsr_slave_1: left promiscuous mode [ 395.674793][ T4413] veth1_macvtap: left promiscuous mode [ 395.687944][ T4413] veth0_macvtap: left promiscuous mode [ 395.694341][ T4413] veth1_vlan: left promiscuous mode [ 395.700912][ T4413] veth0_vlan: left promiscuous mode [ 395.757308][T22081] loop2: detected capacity change from 0 to 512 [ 395.792630][T22088] EXT4-fs (loop3): orphan cleanup on readonly fs [ 395.795966][T22081] ext4 filesystem being mounted at /592/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.811725][T22088] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.6335: ea_inode file size=4 entry size=6 [ 395.815840][T22081] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6332: corrupted xattr block 6: invalid header [ 395.825560][T22088] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 395.851362][T22088] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6335: corrupted inode contents [ 395.856609][T22081] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 395.863762][T22088] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.6335: mark_inode_dirty error [ 395.872304][T22081] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6332: corrupted xattr block 6: invalid header [ 395.883984][T22088] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6335: corrupted inode contents [ 395.909370][T22088] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.6335: mark_inode_dirty error [ 395.917468][T22081] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 395.921671][T22088] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.6335: mark inode dirty (error -117) [ 395.931039][T22081] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6332: corrupted xattr block 6: invalid header [ 395.943614][T22088] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 395.957421][T22081] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 395.974614][T22088] EXT4-fs (loop3): 1 orphan inode deleted [ 395.979070][T22081] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6332: corrupted xattr block 6: invalid header [ 395.993807][T22081] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 396.003012][T22081] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6332: corrupted xattr block 6: invalid header [ 396.018335][T22081] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 396.028598][T22081] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6332: corrupted xattr block 6: invalid header [ 396.138937][T22027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 396.151505][T22027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 396.162088][T22027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 396.172183][T22027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.205525][T22107] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.235715][T22102] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6339: corrupted xattr block 6: invalid header [ 396.265259][T22027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.272340][T22102] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 396.289294][T22102] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6339: corrupted xattr block 6: invalid header [ 396.307223][T22027] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.317541][T22102] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 396.317970][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.333761][ T8971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.349648][T22102] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6339: corrupted xattr block 6: invalid header [ 396.384087][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.391260][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.399268][T22102] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 396.409682][T22102] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6339: corrupted xattr block 6: invalid header [ 396.424065][T22102] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 396.433175][T22102] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6339: corrupted xattr block 6: invalid header [ 396.453463][T22102] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 396.467533][T22102] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6339: corrupted xattr block 6: invalid header [ 396.543926][T22137] netlink: 'syz.4.6341': attribute type 47 has an invalid length. [ 396.551904][T22137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6341'. [ 396.563268][T22027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.624458][T22146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6345'. [ 396.637925][T22146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=22146 comm=syz.4.6345 [ 396.681238][T22146] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6345'. [ 396.690359][T22146] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6345'. [ 396.702039][T22146] SELinux: ebitmap: truncated map [ 396.716674][T22146] SELinux: failed to load policy [ 396.724612][T22153] bond1 (unregistering): Released all slaves [ 396.747613][T22027] veth0_vlan: entered promiscuous mode [ 396.757940][T22027] veth1_vlan: entered promiscuous mode [ 396.778694][T22027] veth0_macvtap: entered promiscuous mode [ 396.787948][T22027] veth1_macvtap: entered promiscuous mode [ 396.799326][T22027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.811036][T22027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.824086][ T2730] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.842173][ T2730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.865405][T22158] EXT4-fs (loop4): orphan cleanup on readonly fs [ 396.870519][ T2730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.872348][T22158] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.6347: ea_inode file size=4 entry size=6 [ 396.891742][ T2730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.893860][T22158] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.6347: corrupted inode contents [ 396.914597][T22158] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.6347: mark_inode_dirty error [ 396.926351][T22158] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.6347: corrupted inode contents [ 396.938599][T22158] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.6347: mark_inode_dirty error [ 396.951097][T22158] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.6347: mark inode dirty (error -117) [ 396.966127][T22158] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 396.975467][T22158] EXT4-fs (loop4): 1 orphan inode deleted [ 397.037511][T22171] netlink: 'syz.3.6350': attribute type 47 has an invalid length. [ 397.045520][T22171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6350'. [ 397.058932][T22173] siw: device registration error -23 [ 397.084656][T22175] siw: device registration error -23 [ 397.197245][T22185] netlink: 'syz.4.6356': attribute type 47 has an invalid length. [ 397.205244][T22185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6356'. [ 397.282456][T22198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 397.286825][T22200] netlink: 'syz.3.6363': attribute type 47 has an invalid length. [ 397.295779][T22198] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 397.300345][T22200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6363'. [ 397.313754][T22198] EXT4-fs (loop4): 1 truncate cleaned up [ 397.397005][T22206] syzkaller0: entered promiscuous mode [ 397.402592][T22206] syzkaller0: entered allmulticast mode [ 397.514070][T22211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 397.540125][T22211] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 397.671777][T22229] netlink: 'syz.3.6375': attribute type 47 has an invalid length. [ 397.679809][T22229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6375'. [ 397.721225][T22239] IPVS: Error connecting to the multicast addr [ 397.770029][T22240] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 397.783009][T22240] EXT4-fs (loop1): orphan cleanup on readonly fs [ 397.795120][T22240] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.6377: corrupted inode contents [ 397.821545][T22240] EXT4-fs (loop1): Remounting filesystem read-only [ 397.831330][ T8203] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.831607][T22240] EXT4-fs (loop1): 1 truncate cleaned up [ 397.859411][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 397.859433][ T29] audit: type=1326 audit(1765036800.883:73851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 397.859713][ T4410] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 397.866256][ T29] audit: type=1326 audit(1765036800.893:73852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 397.889671][ T4410] Quota error (device loop1): write_blk: dquota write failed [ 397.931016][ T4410] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 397.941078][ T4410] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 397.949100][T22227] lo speed is unknown, defaulting to 1000 [ 397.951703][ T4410] Quota error (device loop1): write_blk: dquota write failed [ 397.965007][ T4410] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 397.975352][ T29] audit: type=1326 audit(1765036801.003:73853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 397.999019][ T29] audit: type=1326 audit(1765036801.003:73854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 398.035404][ T29] audit: type=1326 audit(1765036801.003:73855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 398.059082][ T29] audit: type=1326 audit(1765036801.003:73856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22252 comm="syz.0.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 398.061541][ T4410] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 398.098199][ T8203] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.151516][ T8203] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.176753][T22260] set_capacity_and_notify: 7 callbacks suppressed [ 398.176838][T22260] loop1: detected capacity change from 0 to 512 [ 398.212130][T22227] chnl_net:caif_netlink_parms(): no params data found [ 398.236718][T22260] EXT4-fs (loop1): orphan cleanup on readonly fs [ 398.246538][ T8203] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.257900][T22260] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.6383: ea_inode file size=4 entry size=6 [ 398.271040][T22260] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 398.284782][T22260] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6383: corrupted inode contents [ 398.301504][T22260] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.6383: mark_inode_dirty error [ 398.317575][T22260] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6383: corrupted inode contents [ 398.329959][T22260] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.6383: mark_inode_dirty error [ 398.342676][T22260] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.6383: mark inode dirty (error -117) [ 398.358308][T22260] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 398.367685][T22260] EXT4-fs (loop1): 1 orphan inode deleted [ 398.412639][T22280] loop3: detected capacity change from 0 to 8192 [ 398.427568][T22273] syzkaller0: entered promiscuous mode [ 398.433186][T22273] syzkaller0: entered allmulticast mode [ 398.442635][T22227] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.449779][T22227] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.459235][T22227] bridge_slave_0: entered allmulticast mode [ 398.465990][T22227] bridge_slave_0: entered promiscuous mode [ 398.472843][T22227] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.479947][T22227] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.487713][T22227] bridge_slave_1: entered allmulticast mode [ 398.494565][T22227] bridge_slave_1: entered promiscuous mode [ 398.543909][T22227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.561964][T22227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.885372][ T8203] bond0 (unregistering): Released all slaves [ 398.894614][T22227] team0: Port device team_slave_0 added [ 398.901558][T22227] team0: Port device team_slave_1 added [ 398.925133][T22227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.932149][T22227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.958221][T22227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.970527][T22227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.977572][T22227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.003637][T22227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.084695][T22312] siw: device registration error -23 [ 399.098158][T22310] IPVS: Error connecting to the multicast addr [ 399.113922][ T8203] hsr_slave_0: left promiscuous mode [ 399.124161][ T8203] hsr_slave_1: left promiscuous mode [ 399.131932][ T8203] veth1_macvtap: left promiscuous mode [ 399.139522][ T8203] veth0_macvtap: left promiscuous mode [ 399.154166][ T8203] veth1_vlan: left promiscuous mode [ 399.159482][ T8203] veth0_vlan: left promiscuous mode [ 399.261251][ T4422] smc: removing ib device syz0 [ 399.291016][T22227] hsr_slave_0: entered promiscuous mode [ 399.298665][T22227] hsr_slave_1: entered promiscuous mode [ 399.306848][T22227] debugfs: 'hsr0' already exists in 'hsr' [ 399.312623][T22227] Cannot create hsr debugfs directory [ 399.361356][T22340] netlink: 'syz.0.6413': attribute type 47 has an invalid length. [ 399.369443][T22340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6413'. [ 399.394140][T22337] loop4: detected capacity change from 0 to 8192 [ 399.413635][T22342] IPVS: Error connecting to the multicast addr [ 399.444830][T22344] loop3: detected capacity change from 0 to 512 [ 399.482444][T22344] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 399.492343][T22348] loop0: detected capacity change from 0 to 512 [ 399.499915][T22344] EXT4-fs (loop3): orphan cleanup on readonly fs [ 399.507234][T22348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 399.519264][T22344] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.6415: corrupted inode contents [ 399.532301][T22344] EXT4-fs (loop3): Remounting filesystem read-only [ 399.539388][T22344] EXT4-fs (loop3): 1 truncate cleaned up [ 399.545930][ T2730] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 399.556652][ T2730] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 399.587195][T22348] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 399.602308][T22355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6418'. [ 399.630383][ T2730] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 399.644015][T22355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=22355 comm=syz.1.6418 [ 399.675983][T22355] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 399.686710][T22355] SELinux: failed to load policy [ 399.781688][T22361] loop3: detected capacity change from 0 to 512 [ 399.789174][T22361] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 399.805527][T22361] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 399.815924][T22364] loop0: detected capacity change from 0 to 512 [ 399.833666][T22361] EXT4-fs (loop3): 1 truncate cleaned up [ 399.846421][T22365] loop1: detected capacity change from 0 to 512 [ 399.863457][T22365] EXT4-fs (loop1): orphan cleanup on readonly fs [ 399.872374][T22364] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 399.882464][T22227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 399.890704][T22365] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.6422: ea_inode file size=4 entry size=6 [ 399.904301][T22364] EXT4-fs (loop0): orphan cleanup on readonly fs [ 399.913966][T22227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 399.933655][T22365] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 399.947423][T22364] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.6421: corrupted inode contents [ 399.966841][T22227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 399.973584][T22364] EXT4-fs (loop0): Remounting filesystem read-only [ 399.973872][T22364] EXT4-fs (loop0): 1 truncate cleaned up [ 399.986316][ T8971] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 399.986647][T22365] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6422: corrupted inode contents [ 399.996936][ T8971] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 400.017134][T22365] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.6422: mark_inode_dirty error [ 400.030964][T22365] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6422: corrupted inode contents [ 400.043870][T22365] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.6422: mark_inode_dirty error [ 400.046333][T22227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 400.063590][ T8971] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 400.074134][T22365] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.6422: mark inode dirty (error -117) [ 400.086955][T22376] loop3: detected capacity change from 0 to 512 [ 400.089635][T22365] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 400.104242][T22365] EXT4-fs (loop1): 1 orphan inode deleted [ 400.108944][T22376] EXT4-fs (loop3): orphan cleanup on readonly fs [ 400.123459][T22376] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.6423: ea_inode file size=4 entry size=6 [ 400.137169][T22376] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6423: corrupted inode contents [ 400.149768][T22376] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.6423: mark_inode_dirty error [ 400.162014][T22376] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6423: corrupted inode contents [ 400.174634][T22376] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.6423: mark_inode_dirty error [ 400.187427][T22376] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.6423: mark inode dirty (error -117) [ 400.194258][T22385] netlink: 'syz.0.6424': attribute type 47 has an invalid length. [ 400.208175][T22376] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 400.218308][T22376] EXT4-fs (loop3): 1 orphan inode deleted [ 400.262989][T22227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.276275][T22227] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.298318][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.305464][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.339866][T22390] IPVS: Error connecting to the multicast addr [ 400.351497][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.358636][ T8203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.474959][T22227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.493812][T22407] loop1: detected capacity change from 0 to 512 [ 400.515236][T22407] EXT4-fs (loop1): orphan cleanup on readonly fs [ 400.526627][T22407] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.6433: ea_inode file size=4 entry size=6 [ 400.539833][T22407] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6433: corrupted inode contents [ 400.552272][T22407] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.6433: mark_inode_dirty error [ 400.565220][T22407] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6433: corrupted inode contents [ 400.585410][T22407] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.6433: mark_inode_dirty error [ 400.601273][T22407] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.6433: mark inode dirty (error -117) [ 400.614267][T22407] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 400.624825][T22425] siw: device registration error -23 [ 400.630457][T22407] EXT4-fs (loop1): 1 orphan inode deleted [ 400.641228][T22407] EXT4-fs mount: 79 callbacks suppressed [ 400.641244][T22407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 400.679298][T22227] veth0_vlan: entered promiscuous mode [ 400.685999][T22432] IPVS: Error connecting to the multicast addr [ 400.697347][T22227] veth1_vlan: entered promiscuous mode [ 400.723133][T22227] veth0_macvtap: entered promiscuous mode [ 400.736797][T22227] veth1_macvtap: entered promiscuous mode [ 400.753420][T22227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.762902][T22227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.775781][ T4422] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.797326][ T4422] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.818369][ T4422] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.830208][ T4413] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.843875][T22444] siw: device registration error -23 [ 400.858822][T22448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=22448 comm=syz.2.6372 [ 400.875434][T20824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.899826][T21613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.914836][T22448] SELinux: ebitmap: truncated map [ 400.922103][T22448] SELinux: failed to load policy [ 400.930730][T22450] vfat: Unknown parameter 'GPL' [ 400.996598][T22454] syzkaller0: entered promiscuous mode [ 401.002144][T22454] syzkaller0: entered allmulticast mode [ 401.149337][T22474] EXT4-fs (loop3): orphan cleanup on readonly fs [ 401.156924][T22474] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.6456: ea_inode file size=4 entry size=6 [ 401.170108][T22474] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6456: corrupted inode contents [ 401.182278][T22474] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.6456: mark_inode_dirty error [ 401.194169][T22474] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6456: corrupted inode contents [ 401.206319][T22474] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.6456: mark_inode_dirty error [ 401.218590][T22474] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.6456: mark inode dirty (error -117) [ 401.231290][T22474] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 401.240809][T22474] EXT4-fs (loop3): 1 orphan inode deleted [ 401.247140][T22474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 401.319701][T22485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.331895][T22485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.384379][T21613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.429318][T22491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.455645][T22491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.468433][T22491] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 401.502660][T21613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.628868][T22512] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 401.640861][T22512] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 401.654181][T22512] EXT4-fs (loop4): 1 truncate cleaned up [ 401.660504][T22512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.711628][T20212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.739127][T22521] siw: device registration error -23 [ 401.783844][T22527] netlink: 'syz.3.6476': attribute type 47 has an invalid length. [ 401.791718][T22527] __nla_validate_parse: 5 callbacks suppressed [ 401.791737][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6476'. [ 401.839050][T22533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6479'. [ 401.887640][T22540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.900974][T22540] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.914275][T22540] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.6482: corrupted xattr block 33: e_value out of bounds [ 401.916156][T22542] EXT4-fs (loop3): orphan cleanup on readonly fs [ 401.930197][T22540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 401.943649][T22540] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.6482: corrupted xattr block 33: e_value out of bounds [ 401.958260][T22540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 401.959407][T22542] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.6483: ea_inode file size=4 entry size=6 [ 401.967446][T22540] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.6482: corrupted xattr block 33: e_value out of bounds [ 401.994193][T22540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 402.003331][T22542] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 402.018032][T22538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.027398][T22542] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6483: corrupted inode contents [ 402.038233][T22538] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.049712][T22542] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.6483: mark_inode_dirty error [ 402.064648][T22540] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.6482: corrupted xattr block 33: e_value out of bounds [ 402.068579][T22542] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6483: corrupted inode contents [ 402.088876][T22540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 402.090769][T22538] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6481: corrupted xattr block 6: invalid header [ 402.112950][T22542] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.6483: mark_inode_dirty error [ 402.125697][T22538] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 402.134742][T22542] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.6483: mark inode dirty (error -117) [ 402.147817][T22538] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6481: corrupted xattr block 6: invalid header [ 402.153568][T22542] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 402.171789][T22538] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 402.176161][T22542] EXT4-fs (loop3): 1 orphan inode deleted [ 402.186717][T22538] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6481: corrupted xattr block 6: invalid header [ 402.200484][T22027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.211062][T22538] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 402.216200][T22542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 402.220446][T22538] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6481: corrupted xattr block 6: invalid header [ 402.257705][T22538] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 402.268651][T22538] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6481: corrupted xattr block 6: invalid header [ 402.282266][T22538] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 402.283142][T22559] FAULT_INJECTION: forcing a failure. [ 402.283142][T22559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.305789][T22559] CPU: 0 UID: 0 PID: 22559 Comm: syz.0.6486 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 402.305833][T22559] Tainted: [W]=WARN [ 402.305843][T22559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.305914][T22559] Call Trace: [ 402.305923][T22559] [ 402.305933][T22559] __dump_stack+0x1d/0x30 [ 402.305966][T22559] dump_stack_lvl+0xe8/0x140 [ 402.306008][T22559] dump_stack+0x15/0x1b [ 402.306033][T22559] should_fail_ex+0x265/0x280 [ 402.306110][T22559] should_fail+0xb/0x20 [ 402.306128][T22559] should_fail_usercopy+0x1a/0x20 [ 402.306220][T22559] _copy_to_user+0x20/0xa0 [ 402.306269][T22559] simple_read_from_buffer+0xb5/0x130 [ 402.306315][T22559] proc_fail_nth_read+0x10e/0x150 [ 402.306357][T22559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 402.306385][T22559] vfs_read+0x1a8/0x770 [ 402.306489][T22559] ? __cond_resched+0x4e/0x90 [ 402.306516][T22559] ? mutex_lock+0x58/0x90 [ 402.306542][T22559] ksys_read+0xda/0x1a0 [ 402.306611][T22559] __x64_sys_read+0x40/0x50 [ 402.306644][T22559] x64_sys_call+0x2889/0x3000 [ 402.306675][T22559] do_syscall_64+0xd8/0x2a0 [ 402.306714][T22559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.306779][T22559] RIP: 0033:0x7f04d82be15c [ 402.306799][T22559] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 402.306823][T22559] RSP: 002b:00007f04d6d1f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 402.306854][T22559] RAX: ffffffffffffffda RBX: 00007f04d8515fa0 RCX: 00007f04d82be15c [ 402.306871][T22559] RDX: 000000000000000f RSI: 00007f04d6d1f0a0 RDI: 0000000000000004 [ 402.306886][T22559] RBP: 00007f04d6d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 402.306902][T22559] R10: 0000000040010200 R11: 0000000000000246 R12: 0000000000000001 [ 402.306915][T22559] R13: 00007f04d8516038 R14: 00007f04d8515fa0 R15: 00007ffcbc9a3888 [ 402.306934][T22559] [ 402.309034][T22538] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6481: corrupted xattr block 6: invalid header [ 402.536052][T21613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.588414][T20212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.655622][T22570] EXT4-fs (loop3): orphan cleanup on readonly fs [ 402.675234][T22587] netlink: 'syz.0.6496': attribute type 47 has an invalid length. [ 402.683122][T22587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6496'. [ 402.693897][T22570] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.6489: ea_inode file size=4 entry size=6 [ 402.713371][T22570] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6489: corrupted inode contents [ 402.725803][T22570] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.6489: mark_inode_dirty error [ 402.739711][T22570] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.6489: corrupted inode contents [ 402.752016][T22570] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.6489: mark_inode_dirty error [ 402.765532][T22570] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.6489: mark inode dirty (error -117) [ 402.788838][T22570] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 402.798082][T22570] EXT4-fs (loop3): 1 orphan inode deleted [ 402.804742][T22570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 402.818940][T22595] EXT4-fs (loop2): orphan cleanup on readonly fs [ 402.826157][T22595] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.6500: ea_inode file size=4 entry size=6 [ 402.839701][T22595] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.6500: corrupted inode contents [ 402.852441][T22595] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.6500: mark_inode_dirty error [ 402.864553][T22595] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.6500: corrupted inode contents [ 402.876807][T22595] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.6500: mark_inode_dirty error [ 402.890760][T22595] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.6500: mark inode dirty (error -117) [ 402.892429][T22580] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6489'. [ 402.904765][T22595] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 402.922759][T22595] EXT4-fs (loop2): 1 orphan inode deleted [ 402.929362][T22595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 402.948743][T22605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.971958][T22227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.976113][T22605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.993893][T22605] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 403.032379][T22611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 403.042656][T22027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.045576][T22611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.064801][T22611] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 403.082839][T21613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.131447][T22227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.149210][T22621] IPVS: Error connecting to the multicast addr [ 403.176192][T22624] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 403.181823][T22629] netlink: 'syz.0.6512': attribute type 10 has an invalid length. [ 403.184965][T22624] EXT4-fs (loop3): orphan cleanup on readonly fs [ 403.201583][T22624] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.6511: corrupted inode contents [ 403.214014][T22624] EXT4-fs (loop3): Remounting filesystem read-only [ 403.220813][T22624] EXT4-fs (loop3): 1 truncate cleaned up [ 403.226872][ T8203] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 403.237501][ T8203] __quota_error: 267 callbacks suppressed [ 403.237521][ T8203] Quota error (device loop3): write_blk: dquota write failed [ 403.250705][ T8203] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 403.260890][ T8203] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 403.271501][ T8203] Quota error (device loop3): write_blk: dquota write failed [ 403.278931][ T8203] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 403.301195][ T8203] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 403.311441][ T8203] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 403.327405][ T8203] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 403.338403][T22624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.345489][T22641] siw: device registration error -23 [ 403.363861][T22624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.409573][T22643] SELinux: ebitmap: truncated map [ 403.416292][T22643] SELinux: failed to load policy [ 403.427142][T22649] set_capacity_and_notify: 12 callbacks suppressed [ 403.427159][T22649] loop3: detected capacity change from 0 to 512 [ 403.441020][T22649] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 403.452724][T22649] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 403.466319][T22649] EXT4-fs (loop3): 1 truncate cleaned up [ 403.472882][T22649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.494881][T22656] IPVS: Error connecting to the multicast addr [ 403.530406][T22659] loop2: detected capacity change from 0 to 512 [ 403.539166][T22661] loop0: detected capacity change from 0 to 128 [ 403.546622][T22659] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 403.548984][T22661] vfat: Unknown parameter 'GPL' [ 403.563062][T21613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.574691][T22659] EXT4-fs (loop2): 1 truncate cleaned up [ 403.580820][T22659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.592996][ T29] audit: type=1326 audit(1765036806.603:74110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 403.616739][ T29] audit: type=1326 audit(1765036806.603:74111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 403.669954][ T29] audit: type=1326 audit(1765036806.623:74112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04d82bf783 code=0x7ffc0000 [ 403.693448][ T29] audit: type=1326 audit(1765036806.623:74113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04d82bf783 code=0x7ffc0000 [ 403.726295][T22669] loop4: detected capacity change from 0 to 128 [ 403.742981][T22227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.756455][T22669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6527'. [ 403.778834][T22674] siw: device registration error -23 [ 403.822582][T22678] loop4: detected capacity change from 0 to 512 [ 403.846428][T22678] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 403.854899][T22678] EXT4-fs (loop4): orphan cleanup on readonly fs [ 403.871495][T22678] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.6530: corrupted inode contents [ 403.885074][T22678] EXT4-fs (loop4): Remounting filesystem read-only [ 403.894857][T22678] EXT4-fs (loop4): 1 truncate cleaned up [ 403.900874][ T4422] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 403.911517][ T4422] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 403.922508][ T4422] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 403.934241][T22678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.947900][T22678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.982536][T22696] netlink: 'syz.3.6536': attribute type 47 has an invalid length. [ 403.990532][T22696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6536'. [ 404.092971][T22707] siw: device registration error -23 [ 404.132399][T22713] loop4: detected capacity change from 0 to 512 [ 404.140050][T22713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 404.155714][T22713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.168918][T22713] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.227337][T22725] netlink: 'syz.3.6550': attribute type 47 has an invalid length. [ 404.235391][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6550'. [ 404.250103][T20212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.297954][T22730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22730 comm=syz.3.6552 [ 404.342003][T22732] siw: device registration error -23 [ 404.539299][T22741] siw: device registration error -23 [ 404.653413][T22754] FAULT_INJECTION: forcing a failure. [ 404.653413][T22754] name failslab, interval 1, probability 0, space 0, times 0 [ 404.666254][T22754] CPU: 1 UID: 0 PID: 22754 Comm: syz.1.6560 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 404.666300][T22754] Tainted: [W]=WARN [ 404.666310][T22754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.666327][T22754] Call Trace: [ 404.666337][T22754] [ 404.666348][T22754] __dump_stack+0x1d/0x30 [ 404.666420][T22754] dump_stack_lvl+0xe8/0x140 [ 404.666450][T22754] dump_stack+0x15/0x1b [ 404.666476][T22754] should_fail_ex+0x265/0x280 [ 404.666610][T22754] should_failslab+0x8c/0xb0 [ 404.666641][T22754] __kmalloc_node_noprof+0xbe/0x5c0 [ 404.666721][T22754] ? qdisc_alloc+0x65/0x410 [ 404.666755][T22754] ? taprio_dev_notifier+0xdb/0x700 [ 404.666784][T22754] qdisc_alloc+0x65/0x410 [ 404.666842][T22754] ? mutex_unlock+0x4f/0x90 [ 404.666879][T22754] qdisc_create_dflt+0x7f/0x2d0 [ 404.666909][T22754] ? dev_activate+0xbb/0x9e0 [ 404.666936][T22754] dev_activate+0xde/0x9e0 [ 404.667009][T22754] ? _raw_spin_unlock_bh+0x36/0x40 [ 404.667033][T22754] __dev_open+0x4b4/0x560 [ 404.667145][T22754] __dev_change_flags+0x147/0x3c0 [ 404.667179][T22754] netif_change_flags+0x5a/0xd0 [ 404.667221][T22754] dev_change_flags+0xce/0x180 [ 404.667250][T22754] dev_ifsioc+0x44b/0xaa0 [ 404.667324][T22754] ? mutex_lock+0x58/0x90 [ 404.667426][T22754] dev_ioctl+0x70a/0x960 [ 404.667520][T22754] sock_do_ioctl+0x197/0x220 [ 404.667562][T22754] sock_ioctl+0x41b/0x610 [ 404.667601][T22754] ? __pfx_sock_ioctl+0x10/0x10 [ 404.667676][T22754] __se_sys_ioctl+0xce/0x140 [ 404.667767][T22754] __x64_sys_ioctl+0x43/0x50 [ 404.667872][T22754] x64_sys_call+0x14b0/0x3000 [ 404.667907][T22754] do_syscall_64+0xd8/0x2a0 [ 404.667982][T22754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.668013][T22754] RIP: 0033:0x7f7f89baf749 [ 404.668034][T22754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.668061][T22754] RSP: 002b:00007f7f8860f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.668114][T22754] RAX: ffffffffffffffda RBX: 00007f7f89e05fa0 RCX: 00007f7f89baf749 [ 404.668132][T22754] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 404.668149][T22754] RBP: 00007f7f8860f090 R08: 0000000000000000 R09: 0000000000000000 [ 404.668168][T22754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.668185][T22754] R13: 00007f7f89e06038 R14: 00007f7f89e05fa0 R15: 00007fffb1389128 [ 404.668289][T22754] [ 404.668308][T22754] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 404.785775][T22736] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6552'. [ 405.031709][T22757] loop2: detected capacity change from 0 to 512 [ 405.052498][T22757] EXT4-fs (loop2): orphan cleanup on readonly fs [ 405.070972][T22736] 0ªX¹¦À: renamed from caif0 [ 405.074247][T22757] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.6561: ea_inode file size=4 entry size=6 [ 405.091865][T22736] 0ªX¹¦À: entered allmulticast mode [ 405.092881][T22757] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 405.097170][T22736] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 405.126846][T22757] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.6561: corrupted inode contents [ 405.137680][T22761] loop1: detected capacity change from 0 to 512 [ 405.145314][T22757] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.6561: mark_inode_dirty error [ 405.169478][T22757] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.6561: corrupted inode contents [ 405.194826][T22757] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.6561: mark_inode_dirty error [ 405.219399][T22757] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.6561: mark inode dirty (error -117) [ 405.219526][T22761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.247976][T22757] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 405.257192][T22757] EXT4-fs (loop2): 1 orphan inode deleted [ 405.271705][T22730] lo speed is unknown, defaulting to 1000 [ 405.278691][T22757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 405.298979][T22761] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.353743][T22761] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6562: corrupted xattr block 6: invalid header [ 405.407962][T22761] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 405.432556][T22776] loop0: detected capacity change from 0 to 128 [ 405.435117][T22761] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6562: corrupted xattr block 6: invalid header [ 405.449551][T22776] vfat: Unknown parameter 'GPL' [ 405.452384][T22227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.491739][T22761] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 405.510895][T22761] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6562: corrupted xattr block 6: invalid header [ 405.543195][T22761] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 405.576739][T22761] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6562: corrupted xattr block 6: invalid header [ 405.628752][T22761] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 405.660946][T22761] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6562: corrupted xattr block 6: invalid header [ 405.699272][T22761] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 405.719687][T22761] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.6562: corrupted xattr block 6: invalid header [ 405.785440][T20824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.799726][T22788] siw: device registration error -23 [ 405.806291][T22786] loop2: detected capacity change from 0 to 8192 [ 405.910299][T22790] SELinux: ebitmap: truncated map [ 405.934601][T22790] SELinux: failed to load policy [ 405.958855][T22796] netlink: 'syz.4.6576': attribute type 47 has an invalid length. [ 405.966946][T22796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6576'. [ 406.088844][T22800] EXT4-fs (loop1): orphan cleanup on readonly fs [ 406.098316][T22800] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.6578: ea_inode file size=4 entry size=6 [ 406.111453][T22800] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6578: corrupted inode contents [ 406.135174][T22800] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.6578: mark_inode_dirty error [ 406.147259][T22800] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6578: corrupted inode contents [ 406.159904][T22800] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.6578: mark_inode_dirty error [ 406.172304][T22800] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.6578: mark inode dirty (error -117) [ 406.185596][T22800] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 406.197511][T22800] EXT4-fs (loop1): 1 orphan inode deleted [ 406.204410][T22800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 406.218068][T22808] siw: device registration error -23 [ 406.352313][T20824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.476803][T22821] siw: device registration error -23 [ 406.548696][T22826] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 406.571010][T22826] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 406.584396][T22826] EXT4-fs (loop1): 1 truncate cleaned up [ 406.590463][T22826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.651079][T22832] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 406.668411][T20824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.697958][T22832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.719307][T22832] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.765195][T22227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.766167][T22841] siw: device registration error -23 [ 406.995345][T22863] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 407.003974][T22863] EXT4-fs (loop2): orphan cleanup on readonly fs [ 407.012871][T22863] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.6599: corrupted inode contents [ 407.025545][T22863] EXT4-fs (loop2): Remounting filesystem read-only [ 407.032872][T22863] EXT4-fs (loop2): 1 truncate cleaned up [ 407.034626][T22866] siw: device registration error -23 [ 407.044027][ T8203] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 407.054702][ T8203] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 407.065365][ T8203] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 407.076600][T22863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 407.089761][T22863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.509177][T22907] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 407.536515][T22907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.548750][T22907] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.564312][T22907] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6610: bg 0: block 345: padding at end of block bitmap is not set [ 407.580753][T22907] EXT4-fs (loop0): Remounting filesystem read-only [ 407.600647][T22027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.651297][T22923] IPVS: Error connecting to the multicast addr [ 407.800446][T22946] siw: device registration error -23 [ 407.808312][T22945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6625'. [ 407.818662][T22941] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 407.858590][T22948] FAULT_INJECTION: forcing a failure. [ 407.858590][T22948] name failslab, interval 1, probability 0, space 0, times 0 [ 407.871412][T22948] CPU: 0 UID: 0 PID: 22948 Comm: syz.4.6626 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 407.871489][T22948] Tainted: [W]=WARN [ 407.871496][T22948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.871511][T22948] Call Trace: [ 407.871518][T22948] [ 407.871527][T22948] __dump_stack+0x1d/0x30 [ 407.871569][T22948] dump_stack_lvl+0xe8/0x140 [ 407.871595][T22948] dump_stack+0x15/0x1b [ 407.871673][T22948] should_fail_ex+0x265/0x280 [ 407.871788][T22948] should_failslab+0x8c/0xb0 [ 407.871815][T22948] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 407.871839][T22948] ? __alloc_skb+0x324/0x4d0 [ 407.871920][T22948] __alloc_skb+0x324/0x4d0 [ 407.871947][T22948] ? __alloc_skb+0x24d/0x4d0 [ 407.872009][T22948] netlink_alloc_large_skb+0xbf/0xf0 [ 407.872044][T22948] netlink_sendmsg+0x3cf/0x6b0 [ 407.872084][T22948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.872150][T22948] __sock_sendmsg+0x145/0x180 [ 407.872192][T22948] ____sys_sendmsg+0x31e/0x4a0 [ 407.872308][T22948] ___sys_sendmsg+0x17b/0x1d0 [ 407.872361][T22948] __x64_sys_sendmsg+0xd4/0x160 [ 407.872446][T22948] x64_sys_call+0x17ba/0x3000 [ 407.872529][T22948] do_syscall_64+0xd8/0x2a0 [ 407.872579][T22948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.872600][T22948] RIP: 0033:0x7fcafd82f749 [ 407.872642][T22948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.872662][T22948] RSP: 002b:00007fcafc297038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.872687][T22948] RAX: ffffffffffffffda RBX: 00007fcafda85fa0 RCX: 00007fcafd82f749 [ 407.872701][T22948] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 407.872715][T22948] RBP: 00007fcafc297090 R08: 0000000000000000 R09: 0000000000000000 [ 407.872810][T22948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.872824][T22948] R13: 00007fcafda86038 R14: 00007fcafda85fa0 R15: 00007ffd7edc1368 [ 407.872847][T22948] [ 408.086802][T22951] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.100501][T22941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.113103][T22941] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.128689][T22941] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6624: bg 0: block 345: padding at end of block bitmap is not set [ 408.138658][T22957] siw: device registration error -23 [ 408.143625][T22941] EXT4-fs (loop2): Remounting filesystem read-only [ 408.157854][T22951] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.183851][T22227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.221872][T22965] FAULT_INJECTION: forcing a failure. [ 408.221872][T22965] name failslab, interval 1, probability 0, space 0, times 0 [ 408.234706][T22965] CPU: 1 UID: 0 PID: 22965 Comm: syz.0.6632 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 408.234750][T22965] Tainted: [W]=WARN [ 408.234761][T22965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.234858][T22965] Call Trace: [ 408.234868][T22965] [ 408.234879][T22965] __dump_stack+0x1d/0x30 [ 408.234912][T22965] dump_stack_lvl+0xe8/0x140 [ 408.234972][T22965] dump_stack+0x15/0x1b [ 408.234999][T22965] should_fail_ex+0x265/0x280 [ 408.235029][T22965] should_failslab+0x8c/0xb0 [ 408.235133][T22965] __kmalloc_noprof+0xb9/0x5a0 [ 408.235163][T22965] ? bpf_test_init+0x86/0x140 [ 408.235272][T22965] ? _parse_integer_limit+0x170/0x190 [ 408.235382][T22965] bpf_test_init+0x86/0x140 [ 408.235413][T22965] bpf_prog_test_run_xdp+0x305/0x970 [ 408.235449][T22965] ? kstrtouint+0x51/0xc0 [ 408.235467][T22965] ? __rcu_read_unlock+0x4f/0x70 [ 408.235493][T22965] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 408.235598][T22965] bpf_prog_test_run+0x22a/0x390 [ 408.235622][T22965] __sys_bpf+0x4c0/0x7c0 [ 408.235694][T22965] __x64_sys_bpf+0x41/0x50 [ 408.235736][T22965] x64_sys_call+0x28e1/0x3000 [ 408.235767][T22965] do_syscall_64+0xd8/0x2a0 [ 408.235832][T22965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.235852][T22965] RIP: 0033:0x7f04d82bf749 [ 408.235866][T22965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.235883][T22965] RSP: 002b:00007f04d6d1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.235948][T22965] RAX: ffffffffffffffda RBX: 00007f04d8515fa0 RCX: 00007f04d82bf749 [ 408.235966][T22965] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 408.235978][T22965] RBP: 00007f04d6d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 408.235990][T22965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.236136][T22965] R13: 00007f04d8516038 R14: 00007f04d8515fa0 R15: 00007ffcbc9a3888 [ 408.236154][T22965] [ 408.441991][T22951] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.473186][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 408.473242][ T29] audit: type=1400 audit(1765036811.493:74678): avc: denied { write } for pid=22970 comm="syz.0.6636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 408.499968][T22971] rdma_op ffff88811b018980 conn xmit_rdma 0000000000000000 [ 408.509883][ T29] audit: type=1400 audit(1765036811.533:74679): avc: denied { mount } for pid=22970 comm="syz.0.6636" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 408.532418][ T29] audit: type=1400 audit(1765036811.533:74680): avc: denied { unmount } for pid=22970 comm="syz.0.6636" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 408.568220][T22951] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.596718][T22975] set_capacity_and_notify: 6 callbacks suppressed [ 408.596775][T22975] loop0: detected capacity change from 0 to 128 [ 408.611567][T22975] vfat: Unknown parameter 'GPL' [ 408.633626][ T29] audit: type=1326 audit(1765036811.653:74681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22974 comm="syz.0.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 408.657418][ T29] audit: type=1326 audit(1765036811.653:74682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22974 comm="syz.0.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 408.681161][ T29] audit: type=1326 audit(1765036811.653:74683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22974 comm="syz.0.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04d82bf783 code=0x7ffc0000 [ 408.708474][T22984] netlink: 'syz.3.6642': attribute type 47 has an invalid length. [ 408.716477][T22984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6642'. [ 408.739216][ T8203] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.756376][ T8203] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.777421][ T29] audit: type=1326 audit(1765036811.653:74684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22974 comm="syz.0.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04d82bf783 code=0x7ffc0000 [ 408.791639][ T8203] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.800900][ T29] audit: type=1326 audit(1765036811.663:74685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22974 comm="syz.0.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 408.812582][ T8203] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.832861][ T29] audit: type=1326 audit(1765036811.663:74686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22974 comm="syz.0.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 408.864654][ T29] audit: type=1326 audit(1765036811.663:74687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22974 comm="syz.0.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d82bf749 code=0x7ffc0000 [ 408.955576][T22998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6645'. [ 408.967599][T23000] loop3: detected capacity change from 0 to 512 [ 408.977587][T23000] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 408.995764][T23000] EXT4-fs (loop3): 1 truncate cleaned up [ 409.002537][T23000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.077314][T23007] siw: device registration error -23 [ 409.098745][T21613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.285690][T23014] loop1: detected capacity change from 0 to 512 [ 409.305315][T23014] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 409.313782][T23014] EXT4-fs (loop1): orphan cleanup on readonly fs [ 409.330840][T23014] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.6649: corrupted inode contents [ 409.343903][T23014] EXT4-fs (loop1): Remounting filesystem read-only [ 409.350672][T23014] EXT4-fs (loop1): 1 truncate cleaned up [ 409.360481][ T8203] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 409.371167][ T8203] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 409.396931][ T8203] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 409.408050][T23014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 409.421128][T23014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.437469][T23036] loop4: detected capacity change from 0 to 512 [ 409.449023][T23036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 409.470128][T23036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.484364][T23036] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.493015][T23038] syzkaller0: entered promiscuous mode [ 409.498525][T23036] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6662'. [ 409.500254][T23038] syzkaller0: entered allmulticast mode [ 409.509347][T23036] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6662'. [ 409.657800][T23053] netlink: 'syz.1.6667': attribute type 47 has an invalid length. [ 409.665936][T23053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6667'. [ 409.734371][T23058] siw: device registration error -23 [ 409.955851][T23075] loop2: detected capacity change from 0 to 512 [ 409.965108][T23075] EXT4-fs (loop2): orphan cleanup on readonly fs [ 409.971999][T23075] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.6676: ea_inode file size=4 entry size=6 [ 409.985125][T23075] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 409.998356][T23075] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.6676: corrupted inode contents [ 410.010640][T23075] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.6676: mark_inode_dirty error [ 410.022424][T23075] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.6676: corrupted inode contents [ 410.035684][T23075] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.6676: mark_inode_dirty error [ 410.048061][T23075] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.6676: mark inode dirty (error -117) [ 410.060841][T23075] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 410.069972][T23075] EXT4-fs (loop2): 1 orphan inode deleted [ 410.076507][T23075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 410.162700][T22227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.217761][T23089] loop2: detected capacity change from 0 to 512 [ 410.225976][T23089] EXT4-fs (loop2): orphan cleanup on readonly fs [ 410.232965][T23089] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.6679: ea_inode file size=4 entry size=6 [ 410.246097][T23089] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.6679: corrupted inode contents [ 410.258296][T23089] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.6679: mark_inode_dirty error [ 410.270393][T23089] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.6679: corrupted inode contents [ 410.282599][T23089] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.6679: mark_inode_dirty error [ 410.294970][T23089] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.6679: mark inode dirty (error -117) [ 410.307797][T23089] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 410.317112][T23089] EXT4-fs (loop2): 1 orphan inode deleted [ 410.323411][T23089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 410.337324][T20212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.421331][T22227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.441143][T23098] loop2: detected capacity change from 0 to 512 [ 410.448864][T23098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 410.465765][T23098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.478547][T23098] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.563832][T22227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.596523][T23114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6683'. [ 410.609899][T23109] loop1: detected capacity change from 0 to 512 [ 410.618060][T23109] EXT4-fs (loop1): orphan cleanup on readonly fs [ 410.625310][T23109] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.6686: ea_inode file size=4 entry size=6 [ 410.638247][T23109] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6686: corrupted inode contents [ 410.650540][T23109] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.6686: mark_inode_dirty error [ 410.662263][T23109] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.6686: corrupted inode contents [ 410.675247][T23109] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.6686: mark_inode_dirty error [ 410.688936][T23109] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.6686: mark inode dirty (error -117) [ 410.701856][T23109] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 410.710998][T23109] EXT4-fs (loop1): 1 orphan inode deleted [ 410.717300][T23109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 410.734098][T23109] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6686'. [ 410.795452][T23119] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 410.815935][T20824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.945722][T23145] netlink: 'syz.1.6697': attribute type 47 has an invalid length. [ 410.953620][T23145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6697'. [ 411.149460][T23167] SELinux: ebitmap: truncated map [ 411.157003][T23167] SELinux: failed to load policy [ 411.230432][T23187] netlink: 'syz.2.6708': attribute type 47 has an invalid length. [ 411.238432][T23187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6708'. [ 411.282595][T23184] loop4: detected capacity change from 0 to 512 [ 411.311316][T23184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.328312][T23184] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.340122][T23184] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6707: corrupted xattr block 6: invalid header [ 411.353766][T23184] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 411.362872][T23184] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6707: corrupted xattr block 6: invalid header [ 411.376531][T23184] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 411.386195][T23184] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6707: corrupted xattr block 6: invalid header [ 411.388196][T23202] lo speed is unknown, defaulting to 1000 [ 411.405860][T23184] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 411.428368][T23184] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6707: corrupted xattr block 6: invalid header [ 411.452181][T23184] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 411.461454][T23184] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6707: corrupted xattr block 6: invalid header [ 411.464027][T23210] loop3: detected capacity change from 0 to 128 [ 411.474834][T23184] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 411.490461][T23210] vfat: Unknown parameter 'GPL' [ 411.495960][T23184] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.6707: corrupted xattr block 6: invalid header [ 411.565179][T23220] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 411.584963][T23220] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 411.602285][T23220] EXT4-fs (loop2): 1 truncate cleaned up [ 411.627084][T23228] netlink: 'syz.0.6720': attribute type 47 has an invalid length. [ 411.655808][T23231] siw: device registration error -23 [ 411.722833][T23237] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 411.750828][T23240] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 411.763267][T23240] EXT4-fs (loop2): 1 truncate cleaned up [ 411.885657][T23243] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.898453][T23243] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6726: corrupted xattr block 6: invalid header [ 411.912303][T23243] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 411.921594][T23243] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6726: corrupted xattr block 6: invalid header [ 411.935741][T23243] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 411.945170][T23243] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6726: corrupted xattr block 6: invalid header [ 411.959184][T23257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 411.959501][T23243] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 411.976978][T23243] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6726: corrupted xattr block 6: invalid header [ 411.990629][T23243] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 411.992599][T23257] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 412.000186][T23243] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6726: corrupted xattr block 6: invalid header [ 412.023389][T23243] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 412.033287][T23243] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.6726: corrupted xattr block 6: invalid header [ 412.098286][T23263] SELinux: ebitmap: truncated map [ 412.104917][T23263] SELinux: failed to load policy [ 412.146097][T23265] lo speed is unknown, defaulting to 1000 [ 412.386811][T23276] siw: device registration error -23 [ 412.420918][T23225] ================================================================== [ 412.429035][T23225] BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async [ 412.436769][T23225] [ 412.439101][T23225] write to 0xffff8881005b7798 of 8 bytes by task 23226 on cpu 1: [ 412.446829][T23225] fasync_remove_entry+0xcc/0x120 [ 412.451867][T23225] fasync_helper+0x97/0xc0 [ 412.456300][T23225] sock_fasync+0x58/0xc0 [ 412.460571][T23225] __fput+0x5e6/0x650 [ 412.464561][T23225] ____fput+0x1c/0x30 [ 412.468582][T23225] task_work_run+0x131/0x1a0 [ 412.473169][T23225] exit_to_user_mode_loop+0x1fe/0x740 [ 412.478545][T23225] do_syscall_64+0x202/0x2a0 [ 412.483156][T23225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.489060][T23225] [ 412.491381][T23225] read to 0xffff8881005b7798 of 8 bytes by task 23225 on cpu 0: [ 412.499012][T23225] sock_wake_async+0x29/0x110 [ 412.503695][T23225] unix_release_sock+0x49d/0x750 [ 412.508696][T23225] unix_release+0x58/0x80 [ 412.513035][T23225] sock_close+0x6b/0x150 [ 412.517296][T23225] __fput+0x29b/0x650 [ 412.521300][T23225] ____fput+0x1c/0x30 [ 412.525297][T23225] task_work_run+0x131/0x1a0 [ 412.529894][T23225] exit_to_user_mode_loop+0x1fe/0x740 [ 412.535275][T23225] do_syscall_64+0x202/0x2a0 [ 412.539887][T23225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.545792][T23225] [ 412.548116][T23225] value changed: 0xffff8881048fdf90 -> 0x0000000000000000 [ 412.555221][T23225] [ 412.557544][T23225] Reported by Kernel Concurrency Sanitizer on: [ 412.563698][T23225] CPU: 0 UID: 0 PID: 23225 Comm: syz.4.6719 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 412.575083][T23225] Tainted: [W]=WARN [ 412.578890][T23225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.588957][T23225] ==================================================================