last executing test programs: 3.147617456s ago: executing program 1 (id=8736): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x200) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvTH8gP0oXxB8gyioSG9GWFlQOXjSacDEx0YMea6kEWcDQmgghUo3Bo/EvUI8m/gWe9GLUk8ar3o0JMVxED2bN7M7Att2tbbfbBefzSab73vx6782b13kzb2cDKK1q9ieJ2BERv0TEaDO6eIVq8+PG9cszf12/PJNEvf7KH0ljvT+vX54pVt2Rf27P9zmWRqQfJrHQJt25i5fOTNdqsxfy+MT82bcn5i5eevL02elTs6dmz00dP37s6OQzT089tSHlHMnyuu+98/v3nnj9k5dmYuGN77/M8j+QL28tR1Ol6zSrUY16vV5PF80dbvw91PXeby8jLeFksI8ZYU2y8z+rrqFG+x+NgbhVeaPx4gd9zRzQU9n1adeyuc2rYnooaSwH/q+0cSir4oqf3f8W0+b2QPrr2nPNG6Cs3DfyqblkMLL79qTSvGMf6FH6OyLitYW/P82maPscAgBgY32d9X+eaNf/S+PelvV25mNDlYg4HBG7I+LuiNgTEfdENNa9LyLuX2P61SXx5f2fn7auq2CrlPX/ns3Hthb3/26O2lQG8thIo/xDyZuna7NH8mMyFkNbsvjkCml888LPH3daVm3p/2VTln7RF8zz8fvglsXbnJyen+6mzK2uvR+xb7Bd+ZObIwFJROyNiH3r2H92zE4//sX+LLxz+/Ll/13+FWzAOFP984jHmvW/EEvKX0iaKXUan5y4K2qzRyaKs2K5H368+nJrfKgl3FX5N0BW/9vanv95+YtmUIzXzq09jau/ftTxnma95/9w8mojPJzPe3d6fv7CZMRwPmPR/Klb2xbxYv2s/GMH27f/3RH/fJZv90BEZCfxgxHxUEQcyPP+cEQ8EhEHVyj/d88/+tbKR6i/9X+yQ/3nZ0AlaR2vX0dg4My3X3VKf3X1f6wRGsvnrOb/32oz2N3RAwAAgDtD2hiDTtLxm+E0HR9vfod/T2xLa+fn5g9X451zJ5tj1ZUYSosnXaMtz0Mn82fDRXxqSfxoROxqfNNoayM+PnO+NtLvwkPJbe/Q/jO/9epLL8DtY03jaEnv8gFsPu9rQnlp/1Be2j+Ul/YP5dWu/V+JuNGHrACbzPUfykv7h/LS/qG8tH8opeWvxBc/t7KeN/1vBXaf6GrzEgUGutt8IiLaLorWH+3oQSDSPh66+pV6vZv9pP2v9wtzB/LAlohY7VZXelqnS8+fFXk7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCP8GwAA///IPOO2") r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0/file0\x00', 0x13) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001d80)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001e00)={'vxcan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001f40)={'sit0\x00', &(0x7f0000001e40)={'erspan0\x00', 0x0, 0x1, 0x10, 0x4, 0x76b1e34c, {{0x2d, 0x4, 0x1, 0x7, 0xb4, 0x66, 0x0, 0x9d, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4c, 0x36, 0x3, 0x0, [{@multicast1, 0x15}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x5}, {@remote, 0x4}, {@empty, 0x40}, {@rand_addr=0x64010101, 0xd53}]}, @timestamp_prespec={0x44, 0x4c, 0x2b, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast1, 0x1}, {@private=0xa010102, 0x1}, {@broadcast, 0x4}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x7ff}, {@multicast2, 0x200}, {@private=0xa010102, 0x6}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001fc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002080)={'ip6_vti0\x00', &(0x7f0000002000)={'ip6gre0\x00', 0x0, 0x4, 0xfd, 0x3, 0x0, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8, 0x80, 0x4, 0xc}}) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r11 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) 2.331579557s ago: executing program 1 (id=8750): socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x34, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "1e520b4c"}}}}}}}, 0x0) 1.37381396s ago: executing program 4 (id=8766): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.369186141s ago: executing program 1 (id=8767): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200117b0000000000000000000000850000002d00000095b24d20fc32d4c9b10954e05e90c36c87a49b2cc4d6ac261464fe0fd0a0a69eeb0b0f27eae4032ac6ec04f80d202fad825325c84304a483a933d041b14bb137797bd68c84c54a1d3b0968b750bb07c017f90a4c161b4afa9a08e2437e38a5d0d731cf0af90110a501a530843a0c2daf86"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) geteuid() r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000840)='devlink_health_reporter_state_update\x00', r2, 0x0, 0x3}, 0x18) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x18) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000100)=0xffff0080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001"], 0x54}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000140)={0x11, @local, 0x4e21, 0x1, 'wlc\x00', 0x14, 0x73, 0x75}, 0x2c) r8 = syz_open_dev$sg(&(0x7f0000000300), 0x8, 0xa0000) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000680)={0x0, 0xffffffffffffffff, 0x96, 0xb7, @scatter={0x1, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/156, 0x9c}]}, &(0x7f0000000480)="81d2b877dfc4a46641c902df10bde4e8e8e05357521c1c7c86901b4433268b9bb643dfec9ce91e1daa20a7b5f43533155a74b389560a1005818fa6eb3bb73729fb29bd82c184b8558696b3c99f398588ee771f2e520cafe715add12c94546500c8135f93cf2591970f040f836f97ae45e4d386a27ee0b32ff06f6bcafff3bc13800d2f982cb8fb37213040fc6b7db307278a92b86f3c", &(0x7f0000000540)=""/230, 0x4, 0x10002, 0x1, &(0x7f0000000640)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.056519835s ago: executing program 4 (id=8770): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) 1.033331086s ago: executing program 4 (id=8772): bpf$MAP_CREATE(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) name_to_handle_at(r4, 0x0, 0x0, 0x0, 0x1400) write$binfmt_script(r1, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x7, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x20714, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x110590, 0x0, 0x3, 0x6, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 968.797587ms ago: executing program 2 (id=8773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1a6d, &(0x7f0000000000)={0x0, 0x896c, 0x40, 0xfffffffe, 0x1f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000006c0)=[@ioring_restriction_sqe_op={0x1, 0x56}], 0x1) 947.798907ms ago: executing program 2 (id=8775): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40801, 0x0) r1 = epoll_create(0x804) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x5409, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000020c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @loopback, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, 0x0, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = socket(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x11, 0x0, 0x0) 723.44501ms ago: executing program 2 (id=8778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='tracefs\x00', 0x80000, &(0x7f0000000500)='\x00') r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e) accept(r4, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 684.48044ms ago: executing program 4 (id=8780): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x403, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000004a982594d32f612ddb00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="000040000000eeff00000000000000ff0000000088812d791cc8b4905cc711c393a8ba4988459d62d0673216e64929283a726cb2ae44006fee497c5cb6f27e1fc54eeabfd84ff0c3903f390f753580c086a050d1fc17c38f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 624.640491ms ago: executing program 1 (id=8783): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x200) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0/file0\x00', 0x13) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001d80)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001e00)={'vxcan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001f40)={'sit0\x00', &(0x7f0000001e40)={'erspan0\x00', 0x0, 0x1, 0x10, 0x4, 0x76b1e34c, {{0x2d, 0x4, 0x1, 0x7, 0xb4, 0x66, 0x0, 0x9d, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4c, 0x36, 0x3, 0x0, [{@multicast1, 0x15}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x5}, {@remote, 0x4}, {@empty, 0x40}, {@rand_addr=0x64010101, 0xd53}]}, @timestamp_prespec={0x44, 0x4c, 0x2b, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast1, 0x1}, {@private=0xa010102, 0x1}, {@broadcast, 0x4}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x7ff}, {@multicast2, 0x200}, {@private=0xa010102, 0x6}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001fc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002080)={'ip6_vti0\x00', &(0x7f0000002000)={'ip6gre0\x00', 0x0, 0x4, 0xfd, 0x3, 0x0, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8, 0x80, 0x4, 0xc}}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r11 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) 615.461581ms ago: executing program 3 (id=8784): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x0, &(0x7f00000000c0)) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='page_pool_release\x00', r5, 0x0, 0x5}, 0x2f) munlockall() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x44, r8, 0x509, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80c0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x1ff, 0x4, {{0x9, 0x4, 0x2, 0x2b, 0x24, 0x65, 0x0, 0x4, 0x0, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0xb, 0xa9, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={0x34, r8, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x0, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x0, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x0, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x0, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x0, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID, @MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e23}]}]}, 0x6b}, 0x1, 0x0, 0x0, 0x48011}, 0x4000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r6, 0x2f, 0x14, 0x4, @void, @value=r6}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 597.249682ms ago: executing program 2 (id=8785): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000000240)={0x10, 0x0, "2c97ae0a74a6abbbbb08207efd519bb9"}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRES16=0x0, @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002", @ANYRESOCT=r4, @ANYRES16=r2, @ANYRES64=r1], 0x44}}, 0x801) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x2002, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x96f0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000200)=0x1e) r7 = signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) r8 = dup(0xffffffffffffffff) inotify_rm_watch(r8, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000003a000000000000000300000018100000b96a9f9408f50fcc129fe72eb3c8a438f9df", @ANYRES32=r8, @ANYBLOB="000000000000000007280100000000009500000000000000b7080000000000007b8af8ff00000000b7080000400000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xd5, 0x87, &(0x7f0000000740)=""/135, 0x41100, 0x1c, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x1, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x4, 0x4, 0x4}, {0x0, 0x4, 0xa, 0x7}, {0x1, 0x4, 0x1, 0x8}], 0x10, 0x376a639a, @void, @value}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r10, 0x6, &(0x7f0000000000)={0x2, 0x0, 0xa}) fcntl$lock(r10, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r10, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r10, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401}) write$P9_RLOCK(r10, &(0x7f00000003c0)={0x8, 0x35, 0x82c, 0x3}, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x90140) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, @perf_config_ext={0x400000000000000, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000800020000000018001280080100"/32], 0x38}}, 0x0) 568.187662ms ago: executing program 0 (id=8786): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1], 0x1c8}}, 0x0) 485.691083ms ago: executing program 3 (id=8787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000009c0), &(0x7f0000000200)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x8441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 407.456024ms ago: executing program 0 (id=8788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) sched_setscheduler(0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x32, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) r3 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xfffffffffffffff0}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 406.846455ms ago: executing program 3 (id=8789): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000), 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000005c0)={r7, 0x11, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 332.089216ms ago: executing program 2 (id=8790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000009c0), &(0x7f0000000200)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x8441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 315.884576ms ago: executing program 3 (id=8791): bpf$MAP_CREATE(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) name_to_handle_at(r2, 0x0, 0x0, 0x0, 0x1400) write$binfmt_script(r1, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x7, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x20714, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x110590, 0x0, 0x3, 0x6, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 2) 270.323066ms ago: executing program 2 (id=8792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000017c0)='./file0\x00') memfd_create(0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x40000006) 269.545606ms ago: executing program 0 (id=8793): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) 268.510636ms ago: executing program 1 (id=8794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x1a6d, &(0x7f0000000000)={0x0, 0x896c, 0x40, 0xfffffffe, 0x1f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000006c0)=[@ioring_restriction_sqe_op={0x1, 0x56}], 0x1) 254.188326ms ago: executing program 4 (id=8795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='tracefs\x00', 0x80000, &(0x7f0000000500)='\x00') r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e) accept(r4, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 49.287489ms ago: executing program 0 (id=8796): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a872841640"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) 48.790449ms ago: executing program 3 (id=8797): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x0, &(0x7f00000000c0)) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='page_pool_release\x00', r5, 0x0, 0x5}, 0x2f) munlockall() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x44, r8, 0x509, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80c0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x1ff, 0x4, {{0x9, 0x4, 0x2, 0x2b, 0x24, 0x65, 0x0, 0x4, 0x0, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0xb, 0xa9, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={0x34, r8, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x0, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x0, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x0, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x0, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x0, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID, @MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e23}]}]}, 0x6b}, 0x1, 0x0, 0x0, 0x48011}, 0x4000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r6, 0x2f, 0x14, 0x4, @void, @value=r6}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 48.500309ms ago: executing program 0 (id=8798): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) socket$key(0xf, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 18.19822ms ago: executing program 1 (id=8799): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1], 0x1c8}}, 0x0) 17.48353ms ago: executing program 3 (id=8800): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000240)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendto$packet(r3, 0x0, 0x0, 0x4004, &(0x7f0000000200)={0x11, 0x9, 0x0, 0x1, 0xe0}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x4, 0x10001, 0x9, 0x20800, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000005000000e27f0000010000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000087db0000ef0400"/20, @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000200300"/28], 0x50) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 16.36506ms ago: executing program 0 (id=8801): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000240)={0x10, 0x0, "2c97ae0a74a6abbbbb08207efd519bb9"}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRES16=0x0, @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002", @ANYRESOCT=r5, @ANYRES16=r3, @ANYRES64=r1], 0x44}}, 0x801) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x2002, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x96f0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000200)=0x1e) r8 = signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) r9 = dup(0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000003a000000000000000300000018100000b96a9f9408f50fcc129fe72eb3c8a438f9df", @ANYRES32=r9, @ANYBLOB="000000000000000007280100000000009500000000000000b7080000000000007b8af8ff00000000b7080000400000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xd5, 0x87, &(0x7f0000000740)=""/135, 0x41100, 0x1c, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x1, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x4, 0x4, 0x4}, {0x0, 0x4, 0xa, 0x7}, {0x1, 0x4, 0x1, 0x8}], 0x10, 0x376a639a, @void, @value}, 0x94) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r12, 0x6, &(0x7f0000000000)={0x2, 0x0, 0xa}) fcntl$lock(r12, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r12, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r12, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401}) write$P9_RLOCK(r12, &(0x7f00000003c0)={0x8, 0x35, 0x82c, 0x3}, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x90140) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, @perf_config_ext={0x400000000000000, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000800020000000018001280080100"/32], 0x38}}, 0x0) 0s ago: executing program 4 (id=8802): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x200) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0/file0\x00', 0x13) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001d80)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001e00)={'vxcan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001f40)={'sit0\x00', &(0x7f0000001e40)={'erspan0\x00', 0x0, 0x1, 0x10, 0x4, 0x76b1e34c, {{0x2d, 0x4, 0x1, 0x7, 0xb4, 0x66, 0x0, 0x9d, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4c, 0x36, 0x3, 0x0, [{@multicast1, 0x15}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x5}, {@remote, 0x4}, {@empty, 0x40}, {@rand_addr=0x64010101, 0xd53}]}, @timestamp_prespec={0x44, 0x4c, 0x2b, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast1, 0x1}, {@private=0xa010102, 0x1}, {@broadcast, 0x4}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x7ff}, {@multicast2, 0x200}, {@private=0xa010102, 0x6}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001fc0)=0x14) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r12 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): ty change from 0 to 512 [ 482.507586][T24614] rdma_op ffff888115315980 conn xmit_rdma 0000000000000000 [ 482.530690][T24611] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 482.544696][T24611] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.7701: invalid indirect mapped block 2683928664 (level 1) [ 482.562184][T24611] EXT4-fs (loop3): Remounting filesystem read-only [ 482.569246][T24611] EXT4-fs (loop3): 1 truncate cleaned up [ 482.575395][T24611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.618255][T24619] ALSA: seq fatal error: cannot create timer (-22) [ 482.667299][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.694434][T24621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7705'. [ 482.731136][T24625] ALSA: seq fatal error: cannot create timer (-22) [ 482.741746][T24625] loop0: detected capacity change from 0 to 512 [ 482.763540][T24625] EXT4-fs: Ignoring removed orlov option [ 482.801077][T24625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 482.827734][T24625] EXT4-fs (loop0): orphan cleanup on readonly fs [ 482.859477][T24625] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7707: bg 0: block 248: padding at end of block bitmap is not set [ 482.874324][T24625] __quota_error: 82 callbacks suppressed [ 482.874338][T24625] Quota error (device loop0): write_blk: dquota write failed [ 482.887519][T24625] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 482.898164][T24625] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.7707: Failed to acquire dquot type 1 [ 482.913564][T24625] EXT4-fs (loop0): 1 truncate cleaned up [ 482.920938][T24625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 482.946526][T24625] EXT4-fs: Ignoring removed orlov option [ 482.953043][T24625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 482.968859][T24625] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 482.997154][T24625] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.7707: Abort forced by user [ 483.015945][T24625] EXT4-fs (loop0): Remounting filesystem read-only [ 483.022606][T24625] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 483.049919][T24625] ext4 filesystem being remounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 483.068630][ T29] audit: type=1326 audit(1746762765.946:9050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 483.103614][T24648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7717'. [ 483.133154][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.149911][ T29] audit: type=1326 audit(1746762765.976:9051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 483.174241][ T29] audit: type=1326 audit(1746762765.976:9052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 483.197837][ T29] audit: type=1326 audit(1746762765.976:9053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 483.222019][ T29] audit: type=1326 audit(1746762765.976:9054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 483.245606][ T29] audit: type=1326 audit(1746762765.976:9055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 483.269185][ T29] audit: type=1326 audit(1746762765.976:9056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 483.293517][ T29] audit: type=1326 audit(1746762765.976:9057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.4.7717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 483.424541][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7722'. [ 483.794715][T24658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7721'. [ 483.820251][T24687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7733'. [ 483.837554][T24693] ALSA: seq fatal error: cannot create timer (-22) [ 484.158076][T24722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7749'. [ 484.166997][T24722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7749'. [ 484.167047][T24723] loop0: detected capacity change from 0 to 512 [ 484.203373][T24723] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 484.217149][T24723] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.7750: invalid indirect mapped block 2683928664 (level 1) [ 484.233797][T24723] EXT4-fs (loop0): Remounting filesystem read-only [ 484.240748][T24723] EXT4-fs (loop0): 1 truncate cleaned up [ 484.246849][T24723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.293136][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.362660][T24743] loop1: detected capacity change from 0 to 512 [ 484.400400][T24711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7744'. [ 484.413741][T24741] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.429378][T24743] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 484.453160][T24743] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.7758: invalid indirect mapped block 2683928664 (level 1) [ 484.471346][T24743] EXT4-fs (loop1): Remounting filesystem read-only [ 484.478349][T24743] EXT4-fs (loop1): 1 truncate cleaned up [ 484.491821][T24741] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.530320][T24743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.590528][T24741] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.608073][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.651174][T24741] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.718180][T24773] loop1: detected capacity change from 0 to 512 [ 484.730708][T24773] EXT4-fs: Ignoring removed bh option [ 484.737520][T24773] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 484.757157][T24773] EXT4-fs (loop1): 1 truncate cleaned up [ 484.764341][T24773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.791128][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.877163][T24782] loop1: detected capacity change from 0 to 128 [ 484.962491][T24794] ALSA: seq fatal error: cannot create timer (-22) [ 484.973402][T24794] loop1: detected capacity change from 0 to 512 [ 484.984563][T24794] EXT4-fs: Ignoring removed orlov option [ 484.998893][T24794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 485.020660][T24794] EXT4-fs (loop1): orphan cleanup on readonly fs [ 485.027557][T24794] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7779: bg 0: block 248: padding at end of block bitmap is not set [ 485.051136][T24794] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7779: Failed to acquire dquot type 1 [ 485.064030][T24794] EXT4-fs (loop1): 1 truncate cleaned up [ 485.071161][T24794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 485.086279][T24794] EXT4-fs: Ignoring removed orlov option [ 485.092554][T24794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 485.102957][T24794] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 485.119957][T24794] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.7779: Abort forced by user [ 485.131183][T24794] EXT4-fs (loop1): Remounting filesystem read-only [ 485.137802][T24794] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 485.184913][T24794] ext4 filesystem being remounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 485.236298][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.285800][T24818] cgroup: Need name or subsystem set [ 485.356760][T24823] loop3: detected capacity change from 0 to 512 [ 485.428884][T24823] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 485.436961][T24823] EXT4-fs (loop3): orphan cleanup on readonly fs [ 485.574702][T24823] EXT4-fs (loop3): 1 orphan inode deleted [ 485.582117][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 485.654587][T24823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 485.783124][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.254145][T24848] ALSA: seq fatal error: cannot create timer (-22) [ 486.267039][T24848] loop0: detected capacity change from 0 to 512 [ 486.283003][T24848] EXT4-fs: Ignoring removed orlov option [ 486.440443][T24848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 486.487291][T24848] EXT4-fs (loop0): orphan cleanup on readonly fs [ 486.494667][T24848] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7798: bg 0: block 248: padding at end of block bitmap is not set [ 486.510410][T24848] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.7798: Failed to acquire dquot type 1 [ 486.522245][T24848] EXT4-fs (loop0): 1 truncate cleaned up [ 486.635604][T24848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 486.661609][T24848] EXT4-fs: Ignoring removed orlov option [ 486.685763][T24848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 486.722438][T24848] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 486.770471][T24848] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.7798: Abort forced by user [ 486.789291][T24848] EXT4-fs (loop0): Remounting filesystem read-only [ 486.795835][T24848] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 486.813008][T24848] ext4 filesystem being remounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 486.839654][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.886949][T24875] loop0: detected capacity change from 0 to 512 [ 486.921942][T24879] loop1: detected capacity change from 0 to 512 [ 486.931115][T24875] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 486.935565][T24879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 486.955419][T24875] EXT4-fs (loop0): orphan cleanup on readonly fs [ 486.967441][T24875] EXT4-fs (loop0): 1 orphan inode deleted [ 486.992868][T24883] cgroup: Need name or subsystem set [ 487.024469][T24879] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 487.029323][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 487.032417][T24879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 487.067533][T24879] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 487.072681][T24875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 487.077864][T24879] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 487.100793][T24879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 487.148209][T24888] __nla_validate_parse: 7 callbacks suppressed [ 487.148227][T24888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7816'. [ 487.151942][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.154554][T24879] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.7812: dx entry: limit 65535 != root limit 120 [ 487.185969][T24879] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.7812: Corrupt directory, running e2fsck is recommended [ 487.207835][T24879] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.256331][T24898] ALSA: seq fatal error: cannot create timer (-22) [ 487.270583][T24879] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.281417][T24898] loop3: detected capacity change from 0 to 512 [ 487.288027][T24898] EXT4-fs: Ignoring removed orlov option [ 487.297189][T24898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.311169][T24898] EXT4-fs (loop3): orphan cleanup on readonly fs [ 487.324156][T24898] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7819: bg 0: block 248: padding at end of block bitmap is not set [ 487.340088][T24898] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7819: Failed to acquire dquot type 1 [ 487.351990][T24898] EXT4-fs (loop3): 1 truncate cleaned up [ 487.362282][T24910] loop0: detected capacity change from 0 to 512 [ 487.371083][T24898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 487.371530][T24879] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.403881][T24910] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 487.405619][T24741] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.412410][T24910] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.7824: invalid indirect mapped block 2683928664 (level 1) [ 487.412857][T24898] EXT4-fs: Ignoring removed orlov option [ 487.421902][T24910] EXT4-fs (loop0): Remounting filesystem read-only [ 487.434826][T24898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.445765][T24741] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.447128][T24910] EXT4-fs (loop0): 1 truncate cleaned up [ 487.458995][T24741] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.464132][T24910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.490440][T24898] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 487.501188][T24879] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.505610][T24916] cgroup: Need name or subsystem set [ 487.520455][T24741] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.530634][T24898] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.7819: Abort forced by user [ 487.540879][T24898] EXT4-fs (loop3): Remounting filesystem read-only [ 487.547403][T24898] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 487.561854][T24898] ext4 filesystem being remounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.599452][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.599918][T24879] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.650623][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7827'. [ 487.651468][T24879] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.673427][T24879] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.694206][T24879] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.703055][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.764995][T24927] 9pnet_fd: Insufficient options for proto=fd [ 487.849235][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.895622][T24948] loop1: detected capacity change from 0 to 512 [ 487.909113][T24948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 487.938243][T24948] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 487.946229][T24948] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 487.990774][T24948] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 488.000420][T24948] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 488.059013][T24948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 488.077410][T24948] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.7838: dx entry: limit 65535 != root limit 120 [ 488.089580][T24948] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.7838: Corrupt directory, running e2fsck is recommended [ 488.118108][T24948] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.130949][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 488.130994][ T29] audit: type=1326 audit(1746762771.016:9328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.2.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd02de969 code=0x7ffc0000 [ 488.161710][ T29] audit: type=1326 audit(1746762771.016:9329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.2.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f4bd02de969 code=0x7ffc0000 [ 488.185344][ T29] audit: type=1326 audit(1746762771.016:9330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.2.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd02de969 code=0x7ffc0000 [ 488.209433][ T29] audit: type=1326 audit(1746762771.016:9331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.2.7848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd02de969 code=0x7ffc0000 [ 488.250477][T24948] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.290839][T24948] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.340340][T24948] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.341932][T24976] loop0: detected capacity change from 0 to 512 [ 488.380285][T24976] EXT4-fs (loop0): too many log groups per flexible block group [ 488.388128][T24976] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 488.395986][T24976] EXT4-fs (loop0): mount failed [ 488.515715][T24984] random: crng reseeded on system resumption [ 488.639311][ T29] audit: type=1400 audit(1746762771.526:9332): avc: denied { unmount } for pid=19863 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 488.702139][T24987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7855'. [ 488.740660][T24995] ALSA: seq fatal error: cannot create timer (-22) [ 488.783100][ T29] audit: type=1326 audit(1746762771.666:9333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd02de969 code=0x7ffc0000 [ 488.806679][ T29] audit: type=1326 audit(1746762771.666:9334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd02de969 code=0x7ffc0000 [ 488.847055][ T29] audit: type=1326 audit(1746762771.666:9335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f4bd02de969 code=0x7ffc0000 [ 488.871422][ T29] audit: type=1326 audit(1746762771.666:9336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd02de969 code=0x7ffc0000 [ 488.894992][ T29] audit: type=1326 audit(1746762771.666:9337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.2.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd02de969 code=0x7ffc0000 [ 488.952886][T25010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7865'. [ 488.975297][T25009] 9pnet_fd: Insufficient options for proto=fd [ 488.984731][T25016] loop3: detected capacity change from 0 to 512 [ 489.021306][T25016] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 489.029642][T25016] EXT4-fs (loop3): orphan cleanup on readonly fs [ 489.037558][T25016] EXT4-fs (loop3): 1 orphan inode deleted [ 489.047661][ T3416] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 489.061083][T25016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 489.106530][T25030] ALSA: seq fatal error: cannot create timer (-22) [ 489.114458][T25032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7874'. [ 489.487096][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7881'. [ 489.564867][T25059] ALSA: seq fatal error: cannot create timer (-22) [ 489.584568][T25061] ALSA: seq fatal error: cannot create timer (-22) [ 489.593934][T25061] loop3: detected capacity change from 0 to 512 [ 489.603669][T25061] EXT4-fs: Ignoring removed orlov option [ 489.612013][T25061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 489.632294][T25061] EXT4-fs (loop3): orphan cleanup on readonly fs [ 489.646924][T25061] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7887: bg 0: block 248: padding at end of block bitmap is not set [ 489.662304][T25061] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7887: Failed to acquire dquot type 1 [ 489.674132][T25061] EXT4-fs (loop3): 1 truncate cleaned up [ 489.701708][T25061] EXT4-fs: Ignoring removed orlov option [ 489.716168][T25050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7883'. [ 489.717953][T25061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 489.733789][T25061] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 489.769881][T25061] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.7887: Abort forced by user [ 489.780183][T25061] EXT4-fs (loop3): Remounting filesystem read-only [ 489.786771][T25061] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 489.795389][T25061] ext4 filesystem being remounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.941365][T25084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7896'. [ 490.058370][T25108] loop3: detected capacity change from 0 to 512 [ 490.086105][T25108] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 490.102621][T25108] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.7907: invalid indirect mapped block 2683928664 (level 1) [ 490.128042][T25114] netlink: 'syz.0.7908': attribute type 16 has an invalid length. [ 490.135906][T25114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7908'. [ 490.153584][T25108] EXT4-fs (loop3): Remounting filesystem read-only [ 490.160994][T25108] EXT4-fs (loop3): 1 truncate cleaned up [ 490.202261][T25122] loop0: detected capacity change from 0 to 512 [ 490.262157][T25122] EXT4-fs (loop0): too many log groups per flexible block group [ 490.269891][T25122] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 490.302474][T25122] EXT4-fs (loop0): mount failed [ 490.383303][T25140] loop3: detected capacity change from 0 to 512 [ 490.420775][T25140] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 490.424485][T25147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7923'. [ 490.433712][T25140] EXT4-fs (loop3): orphan cleanup on readonly fs [ 490.446034][T25140] EXT4-fs (loop3): 1 orphan inode deleted [ 490.452696][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 490.645157][T25172] loop3: detected capacity change from 0 to 512 [ 490.713934][T25168] netlink: 'syz.0.7931': attribute type 1 has an invalid length. [ 490.733400][T25172] EXT4-fs (loop3): too many log groups per flexible block group [ 490.741270][T25172] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 490.749727][T25172] EXT4-fs (loop3): mount failed [ 491.722324][T25235] wg1: entered promiscuous mode [ 491.727253][T25235] wg1: entered allmulticast mode [ 492.443710][T24948] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.455571][T24948] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.501153][T24948] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.531746][T24948] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.584228][T19157] EXT4-fs unmount: 7 callbacks suppressed [ 492.584269][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.860744][T25250] __nla_validate_parse: 7 callbacks suppressed [ 492.860788][T25250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7961'. [ 492.897833][T25265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7968'. [ 493.025916][T25269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7970'. [ 493.141864][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 493.141881][ T29] audit: type=1326 audit(1746762776.026:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25275 comm="syz.1.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 493.181230][ T29] audit: type=1326 audit(1746762776.056:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25275 comm="syz.1.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 493.204901][ T29] audit: type=1326 audit(1746762776.056:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25275 comm="syz.1.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 493.228656][ T29] audit: type=1326 audit(1746762776.056:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25275 comm="syz.1.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 493.252160][ T29] audit: type=1326 audit(1746762776.056:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25275 comm="syz.1.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 493.275705][ T29] audit: type=1326 audit(1746762776.056:9409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25275 comm="syz.1.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 493.290825][T25290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7973'. [ 493.299338][ T29] audit: type=1326 audit(1746762776.056:9410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25275 comm="syz.1.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 493.311760][ T29] audit: type=1326 audit(1746762776.186:9411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25275 comm="syz.1.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 493.355840][ T29] audit: type=1326 audit(1746762776.186:9412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25275 comm="syz.1.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 493.379428][ T29] audit: type=1326 audit(1746762776.186:9413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25275 comm="syz.1.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 493.462976][T25295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7981'. [ 493.705301][T25312] loop3: detected capacity change from 0 to 512 [ 493.714218][T25311] ALSA: seq fatal error: cannot create timer (-22) [ 493.727206][T25312] EXT4-fs: Ignoring removed bh option [ 493.742630][T25311] loop1: detected capacity change from 0 to 512 [ 493.754944][T25312] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 493.772485][T25309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7985'. [ 493.782030][T25311] EXT4-fs: Ignoring removed orlov option [ 493.804522][T25312] EXT4-fs (loop3): 1 truncate cleaned up [ 493.811585][T25311] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 493.832585][T25312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.915954][T25311] EXT4-fs (loop1): orphan cleanup on readonly fs [ 493.929344][T25311] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7986: bg 0: block 248: padding at end of block bitmap is not set [ 493.949820][T25311] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7986: Failed to acquire dquot type 1 [ 493.964547][T25311] EXT4-fs (loop1): 1 truncate cleaned up [ 493.973968][T25311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 493.993045][T25311] EXT4-fs: Ignoring removed orlov option [ 493.998908][T25311] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 494.007468][T25311] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 494.036564][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.069908][T25311] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.7986: Abort forced by user [ 494.095747][T25311] EXT4-fs (loop1): Remounting filesystem read-only [ 494.102333][T25311] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 494.121084][T25311] ext4 filesystem being remounted at /412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 494.162842][T25327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7991'. [ 494.186089][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.321694][T25349] loop0: detected capacity change from 0 to 512 [ 494.371815][T25349] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 494.403432][T25349] EXT4-fs (loop0): orphan cleanup on readonly fs [ 494.468530][T25349] EXT4-fs (loop0): 1 orphan inode deleted [ 494.475360][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 494.530415][T25349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 494.597249][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.626956][T25362] loop3: detected capacity change from 0 to 512 [ 494.650267][T25362] EXT4-fs (loop3): too many log groups per flexible block group [ 494.658155][T25362] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 494.683937][T25362] EXT4-fs (loop3): mount failed [ 494.725282][T25366] loop0: detected capacity change from 0 to 512 [ 494.753550][T25366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 494.782944][T25366] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 494.790957][T25366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 494.816614][T25378] ALSA: seq fatal error: cannot create timer (-22) [ 494.828333][T25366] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 494.838002][T25366] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 494.847256][T25366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 494.880486][T25366] EXT4-fs warning (device loop0): dx_probe:863: inode #2: comm syz.0.8005: dx entry: limit 65535 != root limit 120 [ 494.893293][T25366] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.8005: Corrupt directory, running e2fsck is recommended [ 494.983631][T25391] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.034767][T25395] geneve0: entered allmulticast mode [ 495.055562][T25391] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.150468][T25405] cgroup: Need name or subsystem set [ 495.150673][T25391] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.210515][T25391] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.275648][T25391] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.287743][T25391] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.300660][T25391] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.311363][T25411] 9pnet_fd: Insufficient options for proto=fd [ 495.340801][T25391] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.369974][T25419] FAULT_INJECTION: forcing a failure. [ 495.369974][T25419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.383081][T25419] CPU: 0 UID: 0 PID: 25419 Comm: syz.1.8028 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 495.383140][T25419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 495.383154][T25419] Call Trace: [ 495.383160][T25419] [ 495.383169][T25419] __dump_stack+0x1d/0x30 [ 495.383193][T25419] dump_stack_lvl+0xe8/0x140 [ 495.383215][T25419] dump_stack+0x15/0x1b [ 495.383235][T25419] should_fail_ex+0x265/0x280 [ 495.383337][T25419] should_fail+0xb/0x20 [ 495.383376][T25419] should_fail_usercopy+0x1a/0x20 [ 495.383397][T25419] strncpy_from_user+0x25/0x230 [ 495.383425][T25419] ? kmem_cache_alloc_noprof+0x186/0x310 [ 495.383541][T25419] ? getname_flags+0x80/0x3b0 [ 495.383581][T25419] getname_flags+0xae/0x3b0 [ 495.383614][T25419] do_sys_openat2+0x60/0x110 [ 495.383657][T25419] __x64_sys_openat+0xf2/0x120 [ 495.383681][T25419] x64_sys_call+0x1af/0x2fb0 [ 495.383705][T25419] do_syscall_64+0xd0/0x1a0 [ 495.383755][T25419] ? clear_bhb_loop+0x25/0x80 [ 495.383780][T25419] ? clear_bhb_loop+0x25/0x80 [ 495.383804][T25419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.383828][T25419] RIP: 0033:0x7fcd9d26e969 [ 495.383845][T25419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.383946][T25419] RSP: 002b:00007fcd9b8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.383967][T25419] RAX: ffffffffffffffda RBX: 00007fcd9d495fa0 RCX: 00007fcd9d26e969 [ 495.383982][T25419] RDX: 000000000000275a RSI: 0000200000000440 RDI: ffffffffffffff9c [ 495.383997][T25419] RBP: 00007fcd9b8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 495.384011][T25419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.384025][T25419] R13: 0000000000000000 R14: 00007fcd9d495fa0 R15: 00007ffdb9ff28c8 [ 495.384053][T25419] [ 495.590635][T25421] ALSA: seq fatal error: cannot create timer (-22) [ 495.620602][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.655867][T25428] loop0: detected capacity change from 0 to 512 [ 495.702987][T25428] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 495.723341][T25435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=25435 comm=syz.4.8030 [ 495.769949][T25428] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.8031: invalid indirect mapped block 2683928664 (level 1) [ 495.785534][T25428] EXT4-fs (loop0): Remounting filesystem read-only [ 495.798273][T25428] EXT4-fs (loop0): 1 truncate cleaned up [ 495.811549][T25428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.856358][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.265130][T25464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8046'. [ 496.312238][T25455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8043'. [ 496.365392][T25460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8045'. [ 496.530498][T25490] loop0: detected capacity change from 0 to 512 [ 496.569385][T25490] EXT4-fs (loop0): too many log groups per flexible block group [ 496.577153][T25490] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 496.617296][T25490] EXT4-fs (loop0): mount failed [ 496.824027][T25526] ALSA: seq fatal error: cannot create timer (-22) [ 496.864320][T25526] loop0: detected capacity change from 0 to 512 [ 496.872024][T25526] EXT4-fs: Ignoring removed orlov option [ 496.884488][T25526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 496.896106][T25526] EXT4-fs (loop0): orphan cleanup on readonly fs [ 496.908686][T25526] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.8070: bg 0: block 248: padding at end of block bitmap is not set [ 496.944187][T25526] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.8070: Failed to acquire dquot type 1 [ 496.976073][T25526] EXT4-fs (loop0): 1 truncate cleaned up [ 496.985413][T25533] 9pnet_fd: Insufficient options for proto=fd [ 497.000044][T25526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 497.015675][T25526] EXT4-fs: Ignoring removed orlov option [ 497.021525][T25526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 497.030366][T25526] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 497.050595][T25526] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.8070: Abort forced by user [ 497.073100][T25538] loop1: detected capacity change from 0 to 512 [ 497.073933][T25526] EXT4-fs (loop0): Remounting filesystem read-only [ 497.085998][T25526] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 497.087242][T25538] EXT4-fs: Ignoring removed bh option [ 497.104661][T25526] ext4 filesystem being remounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 497.132387][T25538] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 497.145148][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.155902][T25538] EXT4-fs (loop1): 1 truncate cleaned up [ 497.162458][T25538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.223126][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.285478][T25551] cgroup: Need name or subsystem set [ 497.365105][T25553] loop1: detected capacity change from 0 to 512 [ 497.450257][T25553] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 497.459456][T25553] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 497.514425][T25558] loop3: detected capacity change from 0 to 512 [ 497.541235][T25558] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 497.623777][T25558] EXT4-fs (loop3): orphan cleanup on readonly fs [ 497.651509][T25558] EXT4-fs (loop3): 1 orphan inode deleted [ 497.657501][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 497.686159][T25558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 497.756194][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.830615][T25586] cgroup: Need name or subsystem set [ 497.988448][T25610] __nla_validate_parse: 4 callbacks suppressed [ 497.988466][T25610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8102'. [ 498.014375][T25607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8103'. [ 498.027175][T25616] 9pnet_fd: Insufficient options for proto=fd [ 498.155489][T25632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.177351][T25632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.192183][T25636] lo speed is unknown, defaulting to 1000 [ 498.198902][T25636] lo speed is unknown, defaulting to 1000 [ 498.204965][T25636] lo speed is unknown, defaulting to 1000 [ 498.243575][T25636] infiniband syz0: set active [ 498.248297][T25636] infiniband syz0: added lo [ 498.252882][ T23] lo speed is unknown, defaulting to 1000 [ 498.319238][T25636] RDS/IB: syz0: added [ 498.325431][T25636] smc: adding ib device syz0 with port count 1 [ 498.338812][T25636] smc: ib device syz0 port 1 has pnetid [ 498.344810][ T9] lo speed is unknown, defaulting to 1000 [ 498.359660][T25636] lo speed is unknown, defaulting to 1000 [ 498.428340][T25636] lo speed is unknown, defaulting to 1000 [ 498.483440][T25636] lo speed is unknown, defaulting to 1000 [ 498.528849][T25636] lo speed is unknown, defaulting to 1000 [ 498.574940][T25644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8116'. [ 498.599915][T25636] lo speed is unknown, defaulting to 1000 [ 498.712106][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 498.712175][ T29] audit: type=1326 audit(1746762781.596:9580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25654 comm="syz.4.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 498.807470][ T29] audit: type=1326 audit(1746762781.646:9581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25654 comm="syz.4.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 498.820167][T25655] capability: warning: `syz.4.8121' uses deprecated v2 capabilities in a way that may be insecure [ 498.830923][ T29] audit: type=1326 audit(1746762781.646:9582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25654 comm="syz.4.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 498.865171][ T29] audit: type=1326 audit(1746762781.646:9583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25654 comm="syz.4.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 498.888794][ T29] audit: type=1326 audit(1746762781.646:9584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25663 comm="syz.4.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c19a51225 code=0x7ffc0000 [ 498.916260][ T29] audit: type=1326 audit(1746762781.686:9585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25654 comm="syz.4.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 498.939914][ T29] audit: type=1326 audit(1746762781.686:9586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25654 comm="syz.4.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 498.945448][T25672] loop0: detected capacity change from 0 to 256 [ 498.963463][ T29] audit: type=1326 audit(1746762781.696:9587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25654 comm="syz.4.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 498.963575][ T29] audit: type=1326 audit(1746762781.696:9588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25654 comm="syz.4.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 498.963651][ T29] audit: type=1326 audit(1746762781.706:9589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25654 comm="syz.4.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4c19a1e969 code=0x7ffc0000 [ 499.022804][T25674] loop3: detected capacity change from 0 to 512 [ 499.129848][T25674] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 499.137952][T25674] EXT4-fs (loop3): orphan cleanup on readonly fs [ 499.147819][T25674] EXT4-fs (loop3): 1 orphan inode deleted [ 499.153887][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 499.166923][T25674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 499.262675][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.277523][T25687] loop0: detected capacity change from 0 to 512 [ 499.285992][T25687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 499.305419][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8134'. [ 499.314822][T25687] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 499.322762][T25687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 499.353098][T25687] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 499.362620][T25687] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 499.381132][T25687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 499.395190][T25687] EXT4-fs warning (device loop0): dx_probe:863: inode #2: comm syz.0.8132: dx entry: limit 65535 != root limit 120 [ 499.408044][T25687] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.8132: Corrupt directory, running e2fsck is recommended [ 499.434987][T25687] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.493469][T25687] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.550938][T25687] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.596331][T25711] ip6gre1: entered allmulticast mode [ 499.624389][T25687] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.651756][T25714] loop3: detected capacity change from 0 to 2048 [ 499.683500][T25714] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 499.697845][T25687] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.710840][T25687] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.725230][T25687] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.737213][T25687] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.775746][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.806837][T25714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25714 comm=syz.3.8145 [ 500.089974][T25745] loop3: detected capacity change from 0 to 512 [ 500.129629][T25745] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 500.143309][T25745] EXT4-fs (loop3): orphan cleanup on readonly fs [ 500.201603][T25745] EXT4-fs (loop3): 1 orphan inode deleted [ 500.228883][ T288] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 500.280611][T25745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 500.333977][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.406458][T25762] ip6gre1: entered allmulticast mode [ 500.420516][T25749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8160'. [ 500.521718][T25767] loop3: detected capacity change from 0 to 512 [ 500.650394][T25767] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 500.674614][T25767] EXT4-fs (loop3): orphan cleanup on readonly fs [ 500.686196][T25767] EXT4-fs (loop3): 1 orphan inode deleted [ 500.698297][T25775] ALSA: seq fatal error: cannot create timer (-22) [ 500.707856][T25775] loop1: detected capacity change from 0 to 512 [ 500.717561][T25775] EXT4-fs: Ignoring removed orlov option [ 500.729952][T25775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 500.754211][T25777] sctp: [Deprecated]: syz.4.8171 (pid 25777) Use of int in max_burst socket option. [ 500.754211][T25777] Use struct sctp_assoc_value instead [ 500.802524][T25775] EXT4-fs (loop1): orphan cleanup on readonly fs [ 500.810819][ T58] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 500.823111][T25775] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8170: bg 0: block 248: padding at end of block bitmap is not set [ 500.838274][T25767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 500.858091][T25775] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.8170: Failed to acquire dquot type 1 [ 500.886362][T25775] EXT4-fs (loop1): 1 truncate cleaned up [ 500.907988][T25775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 500.925139][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.993559][T25775] EXT4-fs: Ignoring removed orlov option [ 501.000238][T25775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 501.011586][T25791] ALSA: seq fatal error: cannot create timer (-22) [ 501.021522][T25775] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 501.031520][T25791] loop3: detected capacity change from 0 to 512 [ 501.038361][T25791] EXT4-fs: Ignoring removed orlov option [ 501.049713][T25791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 501.058320][T25793] cgroup: Need name or subsystem set [ 501.064372][T25791] EXT4-fs (loop3): orphan cleanup on readonly fs [ 501.101488][T25791] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8176: bg 0: block 248: padding at end of block bitmap is not set [ 501.116822][T25775] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.8170: Abort forced by user [ 501.149999][T25775] EXT4-fs (loop1): Remounting filesystem read-only [ 501.156583][T25775] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 501.168994][T25791] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.8176: Failed to acquire dquot type 1 [ 501.188931][T25775] ext4 filesystem being remounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 501.208843][T25791] EXT4-fs (loop3): 1 truncate cleaned up [ 501.215062][T25791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 501.252815][T25791] EXT4-fs: Ignoring removed orlov option [ 501.258699][T25791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 501.267427][T25791] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 501.278643][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.299211][T25791] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.8176: Abort forced by user [ 501.319887][T25791] EXT4-fs (loop3): Remounting filesystem read-only [ 501.326477][T25791] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 501.351205][T25791] ext4 filesystem being remounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 501.380154][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.520611][T25799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8179'. [ 501.624792][T25834] ALSA: seq fatal error: cannot create timer (-22) [ 501.660810][T25834] loop3: detected capacity change from 0 to 512 [ 501.675851][T25834] EXT4-fs: Ignoring removed orlov option [ 501.691993][T25834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 501.709496][T25834] EXT4-fs (loop3): orphan cleanup on readonly fs [ 501.718654][T25834] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8193: bg 0: block 248: padding at end of block bitmap is not set [ 501.807122][T25834] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.8193: Failed to acquire dquot type 1 [ 501.840370][T25834] EXT4-fs (loop3): 1 truncate cleaned up [ 501.851260][T25834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 501.896119][T25834] EXT4-fs: Ignoring removed orlov option [ 501.911102][T25834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 501.929856][T25834] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 501.959743][T25834] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.8193: Abort forced by user [ 501.972196][T25834] EXT4-fs (loop3): Remounting filesystem read-only [ 501.978726][T25834] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 502.026535][T25834] ext4 filesystem being remounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 502.065105][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.171538][T25861] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.217417][T25862] 9pnet_fd: Insufficient options for proto=fd [ 502.230539][T25861] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.290557][T25861] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.350726][T25861] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.425124][T25869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8206'. [ 502.440273][T25861] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.452095][T25861] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.463759][T25861] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.475254][T25861] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.576208][T25879] ALSA: seq fatal error: cannot create timer (-22) [ 502.594424][T25879] loop0: detected capacity change from 0 to 512 [ 502.617307][T25879] EXT4-fs: Ignoring removed orlov option [ 502.623549][T25879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 502.639375][T25881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8211'. [ 502.649155][T25879] EXT4-fs (loop0): orphan cleanup on readonly fs [ 502.662033][T25879] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.8210: bg 0: block 248: padding at end of block bitmap is not set [ 502.685155][T25879] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.8210: Failed to acquire dquot type 1 [ 502.691602][T25865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8204'. [ 502.707626][T25879] EXT4-fs (loop0): 1 truncate cleaned up [ 502.717804][T25879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 502.739185][T25879] EXT4-fs: Ignoring removed orlov option [ 502.749430][T25879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 502.766310][T25879] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 502.789717][T25879] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.8210: Abort forced by user [ 502.806167][T25879] EXT4-fs (loop0): Remounting filesystem read-only [ 502.813381][T25879] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 502.823010][T25879] ext4 filesystem being remounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 502.860314][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.886119][T25906] loop0: detected capacity change from 0 to 512 [ 502.900743][T25906] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 502.910179][T25906] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.8221: invalid indirect mapped block 2683928664 (level 1) [ 502.925991][T25906] EXT4-fs (loop0): Remounting filesystem read-only [ 502.939766][T25906] EXT4-fs (loop0): 1 truncate cleaned up [ 502.946244][T25906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.970391][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.014706][T25912] ALSA: seq fatal error: cannot create timer (-22) [ 503.063815][T25915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8224'. [ 503.164595][T25927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.192224][T25927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.242100][T25931] ALSA: seq fatal error: cannot create timer (-22) [ 503.350857][T25941] ip6gre2: entered allmulticast mode [ 503.423774][T25946] ALSA: seq fatal error: cannot create timer (-22) [ 503.433244][T25943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8237'. [ 503.610151][T25957] ALSA: seq fatal error: cannot create timer (-22) [ 503.621828][T25957] loop3: detected capacity change from 0 to 512 [ 503.634340][T25957] EXT4-fs: Ignoring removed orlov option [ 503.656448][T25957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 503.681122][T25957] EXT4-fs (loop3): orphan cleanup on readonly fs [ 503.693968][T25957] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8242: bg 0: block 248: padding at end of block bitmap is not set [ 503.718217][T25957] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.8242: Failed to acquire dquot type 1 [ 503.754608][T25957] EXT4-fs (loop3): 1 truncate cleaned up [ 503.777814][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 503.777830][ T29] audit: type=1326 audit(1746762786.656:10081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25965 comm="syz.1.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 503.807930][T25957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 503.825250][T25967] ip6gre1: entered allmulticast mode [ 503.829809][ T29] audit: type=1326 audit(1746762786.706:10082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25965 comm="syz.1.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 503.854139][ T29] audit: type=1326 audit(1746762786.706:10083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25965 comm="syz.1.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 503.878533][ T29] audit: type=1326 audit(1746762786.706:10084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25965 comm="syz.1.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 503.882873][T25973] EXT4-fs: Ignoring removed orlov option [ 503.902898][ T29] audit: type=1326 audit(1746762786.706:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25965 comm="syz.1.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 503.932119][ T29] audit: type=1326 audit(1746762786.706:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25965 comm="syz.1.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 503.955755][ T29] audit: type=1326 audit(1746762786.706:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25965 comm="syz.1.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 503.979365][T25973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 503.988503][ T29] audit: type=1326 audit(1746762786.706:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25965 comm="syz.1.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 504.012714][ T29] audit: type=1326 audit(1746762786.706:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25965 comm="syz.1.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 504.026525][T25976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8251'. [ 504.036321][ T29] audit: type=1326 audit(1746762786.706:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25965 comm="syz.1.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 504.069862][T25973] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 504.090407][T25973] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.8242: Abort forced by user [ 504.111331][T25973] EXT4-fs (loop3): Remounting filesystem read-only [ 504.117956][T25973] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 504.126658][T25973] ext4 filesystem being remounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 504.160841][T25985] loop0: detected capacity change from 0 to 512 [ 504.199522][T25990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8255'. [ 504.209587][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.230076][T25985] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 504.261204][T25999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.269909][T25999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.278562][T25985] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.8254: invalid indirect mapped block 2683928664 (level 1) [ 504.299265][T25985] EXT4-fs (loop0): Remounting filesystem read-only [ 504.307290][T25985] EXT4-fs (loop0): 1 truncate cleaned up [ 504.328445][T25985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.378514][T25985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8254'. [ 504.420882][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.467145][T26012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8265'. [ 504.491578][T26017] ALSA: seq fatal error: cannot create timer (-22) [ 504.547603][T26021] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.630237][T26021] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.722169][T26021] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.880365][T26021] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.990376][T26021] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.051087][T26021] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.162118][T26021] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.179391][T26021] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.246326][T26042] loop0: detected capacity change from 0 to 512 [ 505.262680][T26042] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 505.284220][T26042] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.8276: invalid indirect mapped block 2683928664 (level 1) [ 505.298728][T26042] EXT4-fs (loop0): Remounting filesystem read-only [ 505.306183][T26042] EXT4-fs (loop0): 1 truncate cleaned up [ 505.313435][T26042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.331184][T26042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8276'. [ 505.579867][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.589280][T26053] ALSA: seq fatal error: cannot create timer (-22) [ 505.599090][T26053] loop1: detected capacity change from 0 to 512 [ 505.607108][T26053] EXT4-fs: Ignoring removed orlov option [ 505.607804][T26048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8278'. [ 505.622281][T26053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 505.648431][T26053] EXT4-fs (loop1): orphan cleanup on readonly fs [ 505.681617][T26053] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8279: bg 0: block 248: padding at end of block bitmap is not set [ 505.698614][T26053] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.8279: Failed to acquire dquot type 1 [ 505.710491][T26053] EXT4-fs (loop1): 1 truncate cleaned up [ 505.733258][T26061] loop0: detected capacity change from 0 to 512 [ 505.758480][T26053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 505.776315][T26067] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.790409][T26061] EXT4-fs (loop0): too many log groups per flexible block group [ 505.798182][T26061] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 505.807819][T26053] EXT4-fs: Ignoring removed orlov option [ 505.814749][T26053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 505.825127][T26067] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.838534][T26053] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 505.848383][T26061] EXT4-fs (loop0): mount failed [ 505.862687][T26053] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.8279: Abort forced by user [ 505.874185][T26053] EXT4-fs (loop1): Remounting filesystem read-only [ 505.880783][T26053] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 505.891332][T26067] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.898916][T26053] ext4 filesystem being remounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.989446][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.999705][T26067] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.096314][T26085] cgroup: Need name or subsystem set [ 506.162090][T26089] ALSA: seq fatal error: cannot create timer (-22) [ 506.211917][T26091] loop3: detected capacity change from 0 to 512 [ 506.325738][T26091] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 506.344567][T26091] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8295: invalid indirect mapped block 2683928664 (level 1) [ 506.383982][T26091] EXT4-fs (loop3): Remounting filesystem read-only [ 506.391646][T26091] EXT4-fs (loop3): 1 truncate cleaned up [ 506.397649][T26091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.412211][T26095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8296'. [ 506.517925][T26091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8295'. [ 506.552830][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.783424][T26115] loop0: detected capacity change from 0 to 128 [ 506.847329][T26115] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 506.880865][T26115] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.981410][T20455] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 507.776486][T26181] ALSA: seq fatal error: cannot create timer (-22) [ 508.045761][T26201] loop1: detected capacity change from 0 to 512 [ 508.063520][T26201] EXT4-fs: Ignoring removed bh option [ 508.080330][T26201] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 508.110763][T26201] EXT4-fs (loop1): 1 truncate cleaned up [ 508.131342][T26201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.201061][T26208] ALSA: seq fatal error: cannot create timer (-22) [ 508.205050][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.269370][T26212] loop1: detected capacity change from 0 to 512 [ 508.320984][T26212] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 508.339014][T26212] EXT4-fs (loop1): orphan cleanup on readonly fs [ 508.357030][T26212] EXT4-fs (loop1): 1 orphan inode deleted [ 508.362873][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 508.382555][T26212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 508.412515][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.428085][T26230] netlink: 'syz.4.8351': attribute type 1 has an invalid length. [ 508.435910][T26230] __nla_validate_parse: 4 callbacks suppressed [ 508.435920][T26230] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8351'. [ 508.952860][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 508.952880][ T29] audit: type=1326 audit(1746762791.836:10316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26258 comm="syz.1.8362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 509.021748][ T29] audit: type=1326 audit(1746762791.886:10317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26258 comm="syz.1.8362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 509.045352][ T29] audit: type=1326 audit(1746762791.886:10318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26258 comm="syz.1.8362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 509.069016][ T29] audit: type=1326 audit(1746762791.886:10319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26258 comm="syz.1.8362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 509.079710][T26263] cgroup: Need name or subsystem set [ 509.170582][ T29] audit: type=1326 audit(1746762792.036:10320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26262 comm="syz.3.8365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 509.194435][ T29] audit: type=1326 audit(1746762792.036:10321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26262 comm="syz.3.8365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 509.218769][ T29] audit: type=1326 audit(1746762792.036:10322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26262 comm="syz.3.8365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 509.243048][ T29] audit: type=1326 audit(1746762792.046:10323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26262 comm="syz.3.8365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f308e41d2d0 code=0x7ffc0000 [ 509.266651][ T29] audit: type=1326 audit(1746762792.046:10324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26262 comm="syz.3.8365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 509.290863][ T29] audit: type=1326 audit(1746762792.046:10325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26262 comm="syz.3.8365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 509.412191][T26274] netlink: 'syz.1.8367': attribute type 1 has an invalid length. [ 509.420117][T26274] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8367'. [ 509.503513][T26285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.526949][T26285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.689855][T26289] loop1: detected capacity change from 0 to 512 [ 509.710836][T26289] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 509.729351][T26289] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8374: invalid indirect mapped block 2683928664 (level 1) [ 509.752567][T26289] EXT4-fs (loop1): Remounting filesystem read-only [ 509.759410][T26289] EXT4-fs (loop1): 1 truncate cleaned up [ 509.765508][T26289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.780187][T26289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8374'. [ 509.800167][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.805515][T26296] loop0: detected capacity change from 0 to 512 [ 509.836282][T26296] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 509.850052][T26296] EXT4-fs (loop0): orphan cleanup on readonly fs [ 509.857545][T26296] EXT4-fs (loop0): 1 orphan inode deleted [ 509.864255][ T288] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 509.877271][T26296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 509.934439][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.963699][T26306] ALSA: seq fatal error: cannot create timer (-22) [ 510.002120][T26309] cgroup: Need name or subsystem set [ 510.168598][T26326] loop3: detected capacity change from 0 to 512 [ 510.216710][T26326] EXT4-fs: Ignoring removed bh option [ 510.249734][T26326] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 510.283576][T26326] EXT4-fs (loop3): 1 truncate cleaned up [ 510.289705][T26326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.321719][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.388002][T26332] ALSA: seq fatal error: cannot create timer (-22) [ 510.574342][T26067] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.591932][T26067] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.615014][T26067] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.653240][T26067] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.716510][T26350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8398'. [ 510.790821][T26362] ALSA: seq fatal error: cannot create timer (-22) [ 510.836791][T26367] netlink: 'syz.1.8406': attribute type 1 has an invalid length. [ 510.844589][T26367] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8406'. [ 510.927034][T26344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8393'. [ 511.063530][T26389] loop1: detected capacity change from 0 to 512 [ 511.100657][T26392] ALSA: seq fatal error: cannot create timer (-22) [ 511.147995][T26389] EXT4-fs (loop1): too many log groups per flexible block group [ 511.155709][T26389] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 511.174795][T26389] EXT4-fs (loop1): mount failed [ 511.512889][T26430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8429'. [ 511.591385][T26434] netlink: 'syz.0.8433': attribute type 1 has an invalid length. [ 511.599344][T26434] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8433'. [ 511.837754][T26442] loop3: detected capacity change from 0 to 512 [ 511.885703][T26442] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 511.914676][T26442] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8437: invalid indirect mapped block 2683928664 (level 1) [ 511.934471][T26442] EXT4-fs (loop3): Remounting filesystem read-only [ 511.942043][T26442] EXT4-fs (loop3): 1 truncate cleaned up [ 511.948341][T26442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.998916][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.019992][T26458] cgroup: Need name or subsystem set [ 512.038001][T26461] netlink: 'syz.3.8443': attribute type 1 has an invalid length. [ 512.045895][T26461] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8443'. [ 512.113999][T26462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8445'. [ 512.492396][T26497] ALSA: seq fatal error: cannot create timer (-22) [ 512.509175][T26497] loop0: detected capacity change from 0 to 512 [ 512.515853][T26497] EXT4-fs: Ignoring removed orlov option [ 512.523523][T26497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 512.533771][T26497] EXT4-fs (loop0): orphan cleanup on readonly fs [ 512.547936][T26497] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.8458: bg 0: block 248: padding at end of block bitmap is not set [ 512.564021][T26497] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.8458: Failed to acquire dquot type 1 [ 512.594560][T26497] EXT4-fs (loop0): 1 truncate cleaned up [ 512.602823][T26500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.620806][T26497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 512.633351][T26500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.645503][T26497] EXT4-fs: Ignoring removed orlov option [ 512.651878][T26497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 512.668873][T26497] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 512.680625][T26497] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.8458: Abort forced by user [ 512.696823][T26497] EXT4-fs (loop0): Remounting filesystem read-only [ 512.703418][T26497] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 512.718789][T26497] ext4 filesystem being remounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 512.749609][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.766045][T26513] loop3: detected capacity change from 0 to 512 [ 512.790631][T26513] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 512.805282][T26513] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8464: invalid indirect mapped block 2683928664 (level 1) [ 512.825630][T26518] loop0: detected capacity change from 0 to 512 [ 512.828881][T26513] EXT4-fs (loop3): Remounting filesystem read-only [ 512.834762][T26518] EXT4-fs: Ignoring removed bh option [ 512.845112][T26513] EXT4-fs (loop3): 1 truncate cleaned up [ 512.851884][T26518] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 512.859522][T26513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.890677][T26518] EXT4-fs (loop0): 1 truncate cleaned up [ 512.896696][T26518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.909187][T19553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.964249][T26526] cgroup: Need name or subsystem set [ 513.021987][T26531] loop0: detected capacity change from 0 to 512 [ 513.033700][T26527] 9pnet_fd: Insufficient options for proto=fd [ 513.038434][T26531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.077489][T26531] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 513.085475][T26531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 513.095843][T26531] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 513.106010][T26531] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 513.118598][T26531] EXT4-fs warning (device loop0): dx_probe:863: inode #2: comm syz.0.8470: dx entry: limit 65535 != root limit 120 [ 513.131441][T26531] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.8470: Corrupt directory, running e2fsck is recommended [ 513.147860][T26531] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.210361][T26531] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.231826][T26548] loop1: detected capacity change from 0 to 512 [ 513.259193][T26548] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 513.270340][T26531] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.288161][T26548] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8477: invalid indirect mapped block 2683928664 (level 1) [ 513.320812][T26548] EXT4-fs (loop1): Remounting filesystem read-only [ 513.330527][T26531] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.331916][T26548] EXT4-fs (loop1): 1 truncate cleaned up [ 513.404838][T26531] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.416629][T26531] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.428600][T26531] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.441009][T26531] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.496019][T26568] __nla_validate_parse: 2 callbacks suppressed [ 513.496034][T26568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8486'. [ 513.652923][T26580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8491'. [ 513.914744][T26591] netlink: 'syz.3.8494': attribute type 1 has an invalid length. [ 513.922622][T26591] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8494'. [ 513.976885][T26585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8492'. [ 514.176596][T26608] netlink: 'syz.1.8501': attribute type 1 has an invalid length. [ 514.185082][T26608] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8501'. [ 514.207306][T26610] loop0: detected capacity change from 0 to 512 [ 514.258127][T26610] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 514.266905][T26615] netlink: 'syz.2.8503': attribute type 1 has an invalid length. [ 514.267487][T26610] EXT4-fs (loop0): orphan cleanup on readonly fs [ 514.275371][T26615] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8503'. [ 514.286378][T26610] EXT4-fs (loop0): 1 orphan inode deleted [ 514.296191][ T31] __quota_error: 164 callbacks suppressed [ 514.296206][ T31] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 514.312444][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 514.499657][T26648] loop3: detected capacity change from 0 to 512 [ 514.516646][T26648] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 514.535879][T26648] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8514: invalid indirect mapped block 2683928664 (level 1) [ 514.555899][T26649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8516'. [ 514.574333][T26654] ALSA: seq fatal error: cannot create timer (-22) [ 514.582402][T26648] EXT4-fs (loop3): Remounting filesystem read-only [ 514.590915][T26648] EXT4-fs (loop3): 1 truncate cleaned up [ 514.601065][T26654] loop0: detected capacity change from 0 to 512 [ 514.639179][T26654] EXT4-fs: Ignoring removed orlov option [ 514.649592][T26654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 514.654569][T26656] loop3: detected capacity change from 0 to 512 [ 514.675239][T26654] EXT4-fs (loop0): orphan cleanup on readonly fs [ 514.698501][T26654] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.8518: bg 0: block 248: padding at end of block bitmap is not set [ 514.715881][ T29] audit: type=1326 audit(1746762797.596:10487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26658 comm="syz.1.8520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 514.722591][T26661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8520'. [ 514.752724][T26656] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 514.765844][ T29] audit: type=1326 audit(1746762797.596:10488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26658 comm="syz.1.8520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 514.790148][ T29] audit: type=1326 audit(1746762797.596:10489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26658 comm="syz.1.8520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 514.802384][T26654] Quota error (device loop0): write_blk: dquota write failed [ 514.813719][ T29] audit: type=1326 audit(1746762797.596:10490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26658 comm="syz.1.8520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 514.821118][T26654] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 514.821161][T26654] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.8518: Failed to acquire dquot type 1 [ 514.823039][T26656] EXT4-fs (loop3): orphan cleanup on readonly fs [ 514.845278][ T29] audit: type=1326 audit(1746762797.596:10491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26658 comm="syz.1.8520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 514.858910][T26656] EXT4-fs (loop3): 1 orphan inode deleted [ 514.866986][ T29] audit: type=1326 audit(1746762797.596:10492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26658 comm="syz.1.8520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 514.875213][T26654] EXT4-fs (loop0): 1 truncate cleaned up [ 514.897597][ T29] audit: type=1326 audit(1746762797.596:10493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26658 comm="syz.1.8520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 514.957134][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 515.024440][T26654] EXT4-fs: Ignoring removed orlov option [ 515.040118][T26654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 515.048164][T26672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8526'. [ 515.065746][T26654] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 515.084418][T26680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8527'. [ 515.100111][T26654] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.8518: Abort forced by user [ 515.117439][T26654] EXT4-fs (loop0): Remounting filesystem read-only [ 515.124025][T26654] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 515.134860][T26654] ext4 filesystem being remounted at /435/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 515.315831][T26710] 9pnet_fd: Insufficient options for proto=fd [ 515.470585][T26723] netlink: 'syz.0.8545': attribute type 1 has an invalid length. [ 515.820433][T26755] loop0: detected capacity change from 0 to 512 [ 515.846423][T26755] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 515.857129][T26755] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.8557: invalid indirect mapped block 2683928664 (level 1) [ 515.880561][T26755] EXT4-fs (loop0): Remounting filesystem read-only [ 515.887590][T26755] EXT4-fs (loop0): 1 truncate cleaned up [ 516.082582][T26777] loop3: detected capacity change from 0 to 512 [ 516.102650][T26777] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 516.132678][T26777] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8567: invalid indirect mapped block 2683928664 (level 1) [ 516.149627][T26777] EXT4-fs (loop3): Remounting filesystem read-only [ 516.177710][T26777] EXT4-fs (loop3): 1 truncate cleaned up [ 516.273024][T26795] loop3: detected capacity change from 0 to 512 [ 516.284079][T26795] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 516.292693][T26795] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8573: invalid indirect mapped block 2683928664 (level 1) [ 516.309138][T26795] EXT4-fs (loop3): Remounting filesystem read-only [ 516.315849][T26795] EXT4-fs (loop3): 1 truncate cleaned up [ 516.380763][T26804] cgroup: Need name or subsystem set [ 516.451874][T26817] ALSA: seq fatal error: cannot create timer (-22) [ 516.461205][T26811] 9pnet_fd: Insufficient options for proto=fd [ 516.478008][T26817] loop1: detected capacity change from 0 to 512 [ 516.495500][T26817] EXT4-fs: Ignoring removed orlov option [ 516.514728][T26817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 516.536633][T26819] loop0: detected capacity change from 0 to 512 [ 516.549109][T26817] EXT4-fs (loop1): orphan cleanup on readonly fs [ 516.569833][T26817] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8583: bg 0: block 248: padding at end of block bitmap is not set [ 516.589160][T26819] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 516.606739][T26819] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.8584: invalid indirect mapped block 2683928664 (level 1) [ 516.620816][T26817] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.8583: Failed to acquire dquot type 1 [ 516.638189][T26817] EXT4-fs (loop1): 1 truncate cleaned up [ 516.644239][T26819] EXT4-fs (loop0): Remounting filesystem read-only [ 516.652493][T26819] EXT4-fs (loop0): 1 truncate cleaned up [ 516.664285][T26817] EXT4-fs: Ignoring removed orlov option [ 516.670303][T26817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 516.699918][T26817] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 516.740581][T26817] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.8583: Abort forced by user [ 516.753013][T26836] loop0: detected capacity change from 0 to 512 [ 516.765808][T26817] EXT4-fs (loop1): Remounting filesystem read-only [ 516.772380][T26817] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 516.792928][T26817] ext4 filesystem being remounted at /522/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.800939][T26836] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 516.816132][T26836] EXT4-fs (loop0): orphan cleanup on readonly fs [ 516.826282][T26836] EXT4-fs (loop0): 1 orphan inode deleted [ 516.842140][ T288] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 516.900193][T26851] loop0: detected capacity change from 0 to 512 [ 516.910227][T26851] EXT4-fs: Ignoring removed bh option [ 516.928091][T26851] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 516.951483][T26851] EXT4-fs (loop0): 1 truncate cleaned up [ 516.979893][T26860] loop3: detected capacity change from 0 to 512 [ 517.001718][T26860] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 517.015246][T26860] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8601: invalid indirect mapped block 2683928664 (level 1) [ 517.033552][T26858] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.043934][T26860] EXT4-fs (loop3): Remounting filesystem read-only [ 517.051075][T26860] EXT4-fs (loop3): 1 truncate cleaned up [ 517.091118][T26870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.110930][T26858] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.122096][T26870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.134045][T26874] ALSA: seq fatal error: cannot create timer (-22) [ 517.143578][T26874] loop1: detected capacity change from 0 to 512 [ 517.150370][T26874] EXT4-fs: Ignoring removed orlov option [ 517.156969][T26874] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 517.166188][T26874] EXT4-fs (loop1): orphan cleanup on readonly fs [ 517.173830][T26874] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8607: bg 0: block 248: padding at end of block bitmap is not set [ 517.189475][T26858] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.200838][T26874] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.8607: Failed to acquire dquot type 1 [ 517.213493][T26874] EXT4-fs (loop1): 1 truncate cleaned up [ 517.246577][T26874] EXT4-fs: Ignoring removed orlov option [ 517.252634][T26874] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 517.262548][T26858] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.267431][T26884] netlink: 'syz.4.8611': attribute type 1 has an invalid length. [ 517.280868][T26874] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 517.300889][T26874] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.8607: Abort forced by user [ 517.326311][T26858] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.328526][T26874] EXT4-fs (loop1): Remounting filesystem read-only [ 517.338167][T26858] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.341113][T26874] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 517.358049][T26874] ext4 filesystem being remounted at /527/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 517.372533][T26858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.388413][T26858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.963016][ T58] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.991517][T26899] lo speed is unknown, defaulting to 1000 [ 518.001276][T26929] loop3: detected capacity change from 0 to 512 [ 518.042931][ T58] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.080089][T26929] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 518.098499][T26929] EXT4-fs (loop3): orphan cleanup on readonly fs [ 518.112653][T26929] EXT4-fs (loop3): 1 orphan inode deleted [ 518.118504][ T288] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 518.206393][ T58] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.230325][T26899] chnl_net:caif_netlink_parms(): no params data found [ 518.261063][ T58] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.392275][T26899] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.399520][T26899] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.410574][T26899] bridge_slave_0: entered allmulticast mode [ 518.417104][T26899] bridge_slave_0: entered promiscuous mode [ 518.424732][T26899] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.432698][T26899] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.442183][T26899] bridge_slave_1: entered allmulticast mode [ 518.449035][T26899] bridge_slave_1: entered promiscuous mode [ 518.476675][ T58] team0: left allmulticast mode [ 518.481572][ T58] team_slave_0: left allmulticast mode [ 518.487033][ T58] team_slave_1: left allmulticast mode [ 518.492867][ T58] bridge0: port 3(team0) entered disabled state [ 518.539119][T26955] __nla_validate_parse: 14 callbacks suppressed [ 518.539132][T26955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8635'. [ 518.571070][ T58] bridge_slave_1: left allmulticast mode [ 518.576795][ T58] bridge_slave_1: left promiscuous mode [ 518.583178][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.640130][ T58] bridge_slave_0: left allmulticast mode [ 518.645873][ T58] bridge_slave_0: left promiscuous mode [ 518.651610][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.770103][T26968] 9pnet_fd: Insufficient options for proto=fd [ 518.781773][ T58] bond0 (unregistering): left allmulticast mode [ 518.788049][ T58] bond_slave_0: left allmulticast mode [ 518.794441][ T58] bond0 (unregistering): left promiscuous mode [ 518.800742][ T58] bond_slave_0: left promiscuous mode [ 518.815345][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.826884][ T58] bond0 (unregistering): Released all slaves [ 518.864594][T26899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.875528][T26899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.908692][T26899] team0: Port device team_slave_0 added [ 518.916916][T26899] team0: Port device team_slave_1 added [ 518.943282][T26899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.950293][T26899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.976900][T26899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.990209][T26899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.997175][T26899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.023797][T26899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.066456][T26899] hsr_slave_0: entered promiscuous mode [ 519.074058][T26899] hsr_slave_1: entered promiscuous mode [ 519.081426][T26899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.090507][T26899] Cannot create hsr debugfs directory [ 519.210283][T26962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8637'. [ 519.219216][T26930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8625'. [ 519.295351][ T58] hsr_slave_0: left promiscuous mode [ 519.307437][ T58] hsr_slave_1: left promiscuous mode [ 519.316469][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.323934][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.357392][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.364917][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.395969][ T58] veth1_macvtap: left promiscuous mode [ 519.409181][ T58] veth0_macvtap: left promiscuous mode [ 519.422285][ T58] veth1_vlan: left promiscuous mode [ 519.435313][ T58] veth0_vlan: left promiscuous mode [ 519.512959][T27004] loop0: detected capacity change from 0 to 512 [ 519.519559][T27004] EXT4-fs: Ignoring removed bh option [ 519.525270][T27004] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 519.560943][T27004] EXT4-fs (loop0): 1 truncate cleaned up [ 519.571952][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 519.572042][ T29] audit: type=1326 audit(1746762802.456:10596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.3.8649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 519.614860][T27005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8649'. [ 519.646819][ T29] audit: type=1326 audit(1746762802.456:10597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.3.8649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 519.671121][ T29] audit: type=1326 audit(1746762802.456:10598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.3.8649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 519.694688][ T29] audit: type=1326 audit(1746762802.456:10599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.3.8649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 519.699342][ T58] team_slave_1 (unregistering): left promiscuous mode [ 519.718978][ T29] audit: type=1326 audit(1746762802.486:10600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.3.8649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 519.748584][ T29] audit: type=1326 audit(1746762802.486:10601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.3.8649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 519.772933][ T29] audit: type=1326 audit(1746762802.486:10602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.3.8649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 519.797281][ T29] audit: type=1326 audit(1746762802.486:10603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.3.8649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 519.820939][ T29] audit: type=1326 audit(1746762802.486:10604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.3.8649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 519.845048][ T29] audit: type=1326 audit(1746762802.486:10605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.3.8649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f308e41e969 code=0x7ffc0000 [ 519.879299][ T58] team0 (unregistering): Port device team_slave_1 removed [ 519.895246][T27015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8653'. [ 519.908812][ T58] team_slave_0 (unregistering): left promiscuous mode [ 519.929678][ T58] team0 (unregistering): Port device team_slave_0 removed [ 519.948041][T27024] netlink: 'syz.0.8656': attribute type 1 has an invalid length. [ 519.955947][T27024] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8656'. [ 520.208081][T26899] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 520.219497][T26899] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 520.233579][T27052] cgroup: Need name or subsystem set [ 520.318690][T27054] 9pnet_fd: Insufficient options for proto=fd [ 520.391748][T26899] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 520.449394][T26899] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 520.575351][T26899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.589942][T26899] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.602356][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.609504][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.625084][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.632177][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.722259][T26899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.790888][T27084] cgroup: Need name or subsystem set [ 520.930967][T26899] veth0_vlan: entered promiscuous mode [ 520.938653][T26899] veth1_vlan: entered promiscuous mode [ 520.943994][T27094] cgroup: Need name or subsystem set [ 520.961759][T26899] veth0_macvtap: entered promiscuous mode [ 520.975779][T26899] veth1_macvtap: entered promiscuous mode [ 520.993785][T26899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.004302][T26899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.014228][T26899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.025399][T26899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.035233][T26899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.045670][T26899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.056206][T26899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.066680][T26899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.081912][T26899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.090276][T26899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.100789][T26899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.111223][T26899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.121736][T26899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.131608][T26899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.142092][T26899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.152589][T26899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.163036][T26899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.178050][T26899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.186814][T26899] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.195585][T26899] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.204316][T26899] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.213710][T26899] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.353978][T27124] ALSA: seq fatal error: cannot create timer (-22) [ 521.381382][T27126] netlink: 'syz.3.8684': attribute type 1 has an invalid length. [ 521.389236][T27126] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8684'. [ 521.457681][T27130] netlink: 'syz.4.8685': attribute type 1 has an invalid length. [ 521.465543][T27130] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8685'. [ 521.963033][T27150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.979460][T27150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.071541][T27161] loop1: detected capacity change from 0 to 512 [ 522.075397][T27159] loop0: detected capacity change from 0 to 512 [ 522.080766][T27161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 522.111781][T27161] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 522.119944][T27161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 522.127920][T27159] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 522.136291][T27159] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.8695: invalid indirect mapped block 2683928664 (level 1) [ 522.141609][T27161] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 522.154108][T27159] EXT4-fs (loop0): Remounting filesystem read-only [ 522.159766][T27161] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 522.185540][T27159] EXT4-fs (loop0): 1 truncate cleaned up [ 522.227867][T27161] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.8696: dx entry: limit 65535 != root limit 120 [ 522.240198][T27161] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.8696: Corrupt directory, running e2fsck is recommended [ 522.544742][T27202] netlink: 'syz.4.8713': attribute type 1 has an invalid length. [ 522.552558][T27202] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8713'. [ 522.635786][T27211] cgroup: Need name or subsystem set [ 522.883471][T27226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8722'. [ 522.975474][T27234] cgroup: Need name or subsystem set [ 523.010699][T27236] loop0: detected capacity change from 0 to 512 [ 523.053569][T27236] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 523.079637][T27236] EXT4-fs (loop0): orphan cleanup on readonly fs [ 523.103275][T27236] EXT4-fs (loop0): 1 orphan inode deleted [ 523.124970][ T58] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 523.139847][T27236] EXT4-fs mount: 39 callbacks suppressed [ 523.139866][T27236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 523.159982][T27250] netlink: 'syz.4.8734': attribute type 1 has an invalid length. [ 523.253176][T27259] loop1: detected capacity change from 0 to 512 [ 523.256858][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.262278][T27259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 523.279897][T27263] cgroup: Need name or subsystem set [ 523.286060][T27259] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 523.294037][T27259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 523.302091][T27259] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 523.311581][T27259] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 523.320858][T27259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 523.352620][T27259] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.8736: dx entry: limit 65535 != root limit 120 [ 523.364808][T27259] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.8736: Corrupt directory, running e2fsck is recommended [ 523.483158][T27259] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.525400][T27277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.538605][T27277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.593143][T27259] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.781305][T27259] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.832058][T27259] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.885310][T27259] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.888700][T27292] __nla_validate_parse: 2 callbacks suppressed [ 523.888714][T27292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8748'. [ 523.896628][T27259] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.921102][T27259] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.943101][T27259] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.039734][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.091578][T27297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8751'. [ 524.617854][T27318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8757'. [ 524.633694][T27323] netlink: 'syz.3.8759': attribute type 1 has an invalid length. [ 524.641555][T27323] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8759'. [ 524.682328][T27329] loop0: detected capacity change from 0 to 128 [ 524.693000][T27329] FAULT_INJECTION: forcing a failure. [ 524.693000][T27329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.706212][T27329] CPU: 1 UID: 0 PID: 27329 Comm: syz.0.8761 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 524.706243][T27329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 524.706257][T27329] Call Trace: [ 524.706264][T27329] [ 524.706272][T27329] __dump_stack+0x1d/0x30 [ 524.706296][T27329] dump_stack_lvl+0xe8/0x140 [ 524.706363][T27329] dump_stack+0x15/0x1b [ 524.706441][T27329] should_fail_ex+0x265/0x280 [ 524.706471][T27329] should_fail+0xb/0x20 [ 524.706502][T27329] should_fail_usercopy+0x1a/0x20 [ 524.706594][T27329] strncpy_from_user+0x25/0x230 [ 524.706616][T27329] ? kmem_cache_alloc_noprof+0x186/0x310 [ 524.706645][T27329] ? getname_flags+0x80/0x3b0 [ 524.706752][T27329] getname_flags+0xae/0x3b0 [ 524.706923][T27329] __x64_sys_renameat2+0x5f/0x90 [ 524.706955][T27329] x64_sys_call+0x2bf6/0x2fb0 [ 524.707078][T27329] do_syscall_64+0xd0/0x1a0 [ 524.707105][T27329] ? clear_bhb_loop+0x25/0x80 [ 524.707130][T27329] ? clear_bhb_loop+0x25/0x80 [ 524.707157][T27329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.707243][T27329] RIP: 0033:0x7fd37aa6e969 [ 524.707262][T27329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.707284][T27329] RSP: 002b:00007fd3790d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 524.707307][T27329] RAX: ffffffffffffffda RBX: 00007fd37ac95fa0 RCX: 00007fd37aa6e969 [ 524.707324][T27329] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000007 [ 524.707427][T27329] RBP: 00007fd3790d7090 R08: 0000000000000001 R09: 0000000000000000 [ 524.707443][T27329] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 524.707458][T27329] R13: 0000000000000000 R14: 00007fd37ac95fa0 R15: 00007ffcee5e7ec8 [ 524.707482][T27329] [ 524.982373][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 524.982392][ T29] audit: type=1326 audit(1746762807.866:10978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27339 comm="syz.1.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 525.013755][T27338] netlink: 'syz.4.8766': attribute type 1 has an invalid length. [ 525.021546][T27338] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8766'. [ 525.042897][ T29] audit: type=1326 audit(1746762807.866:10979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27339 comm="syz.1.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 525.066697][ T29] audit: type=1326 audit(1746762807.866:10980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27339 comm="syz.1.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 525.091060][ T29] audit: type=1326 audit(1746762807.866:10981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27339 comm="syz.1.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 525.114823][ T29] audit: type=1326 audit(1746762807.866:10982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27339 comm="syz.1.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 525.139144][ T29] audit: type=1326 audit(1746762807.866:10983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27339 comm="syz.1.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 525.162838][ T29] audit: type=1326 audit(1746762807.866:10984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27339 comm="syz.1.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 525.187069][ T29] audit: type=1326 audit(1746762807.866:10985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27339 comm="syz.1.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 525.211299][ T29] audit: type=1326 audit(1746762807.866:10986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27339 comm="syz.1.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 525.234886][ T29] audit: type=1326 audit(1746762807.866:10987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27339 comm="syz.1.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd9d26e969 code=0x7ffc0000 [ 525.334818][T27355] SELinux: policydb version 0 does not match my version range 15-34 [ 525.359773][T27355] SELinux: failed to load policy [ 525.366837][T27359] FAULT_INJECTION: forcing a failure. [ 525.366837][T27359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.380613][T27359] CPU: 0 UID: 0 PID: 27359 Comm: syz.0.8771 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 525.380646][T27359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 525.380662][T27359] Call Trace: [ 525.380669][T27359] [ 525.380754][T27359] __dump_stack+0x1d/0x30 [ 525.380780][T27359] dump_stack_lvl+0xe8/0x140 [ 525.380802][T27359] dump_stack+0x15/0x1b [ 525.380817][T27359] should_fail_ex+0x265/0x280 [ 525.380849][T27359] should_fail+0xb/0x20 [ 525.380939][T27359] should_fail_usercopy+0x1a/0x20 [ 525.380956][T27359] _copy_from_iter+0xcf/0xdd0 [ 525.380975][T27359] ? alloc_pages_mpol+0x202/0x250 [ 525.381061][T27359] copy_page_from_iter+0x15a/0x290 [ 525.381126][T27359] tun_get_user+0x5c7/0x24d0 [ 525.381156][T27359] ? ref_tracker_alloc+0x1f2/0x2f0 [ 525.381217][T27359] tun_chr_write_iter+0x15e/0x210 [ 525.381264][T27359] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 525.381293][T27359] vfs_write+0x49d/0x8d0 [ 525.381407][T27359] ksys_write+0xda/0x1a0 [ 525.381468][T27359] __x64_sys_write+0x40/0x50 [ 525.381494][T27359] x64_sys_call+0x2cdd/0x2fb0 [ 525.381521][T27359] do_syscall_64+0xd0/0x1a0 [ 525.381547][T27359] ? clear_bhb_loop+0x25/0x80 [ 525.381573][T27359] ? clear_bhb_loop+0x25/0x80 [ 525.381628][T27359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.381648][T27359] RIP: 0033:0x7fd37aa6d41f [ 525.381662][T27359] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 525.381678][T27359] RSP: 002b:00007fd3790b6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 525.381695][T27359] RAX: ffffffffffffffda RBX: 00007fd37ac96080 RCX: 00007fd37aa6d41f [ 525.381761][T27359] RDX: 000000000000003e RSI: 0000200000001100 RDI: 00000000000000c8 [ 525.381776][T27359] RBP: 00007fd3790b6090 R08: 0000000000000000 R09: 0000000000000000 [ 525.381791][T27359] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 525.381805][T27359] R13: 0000000000000000 R14: 00007fd37ac96080 R15: 00007ffcee5e7ec8 [ 525.381828][T27359] [ 525.414098][T27363] sctp: [Deprecated]: syz.2.8775 (pid 27363) Use of int in max_burst socket option. [ 525.414098][T27363] Use struct sctp_assoc_value instead [ 525.735579][T27381] loop1: detected capacity change from 0 to 512 [ 525.746809][T27383] cgroup: Need name or subsystem set [ 525.750991][T27374] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.759382][T27374] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.766889][T27381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 525.790752][T27374] bridge0: entered allmulticast mode [ 525.797722][T27386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8785'. [ 525.806785][T27389] loop0: detected capacity change from 0 to 512 [ 525.824432][T27389] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 525.824436][T27381] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 525.831757][T27389] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.8786: invalid indirect mapped block 2683928664 (level 1) [ 525.832473][T27381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 525.840814][T27389] EXT4-fs (loop0): Remounting filesystem read-only [ 525.872273][T27389] EXT4-fs (loop0): 1 truncate cleaned up [ 525.878312][T27389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.891108][T27381] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 525.891127][T27381] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 525.891482][T27381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 525.937084][T20455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.956561][T27381] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.8783: dx entry: limit 65535 != root limit 120 [ 525.968909][T27381] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.8783: Corrupt directory, running e2fsck is recommended [ 525.999427][T27401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8789'. [ 526.036056][T27405] FAULT_INJECTION: forcing a failure. [ 526.036056][T27405] name failslab, interval 1, probability 0, space 0, times 0 [ 526.048841][T27405] CPU: 1 UID: 0 PID: 27405 Comm: syz.3.8791 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 526.048937][T27405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 526.048949][T27405] Call Trace: [ 526.048955][T27405] [ 526.048961][T27405] __dump_stack+0x1d/0x30 [ 526.048987][T27405] dump_stack_lvl+0xe8/0x140 [ 526.049006][T27405] dump_stack+0x15/0x1b [ 526.049064][T27405] should_fail_ex+0x265/0x280 [ 526.049100][T27405] should_failslab+0x8c/0xb0 [ 526.049127][T27405] kmem_cache_alloc_node_noprof+0x57/0x320 [ 526.049225][T27405] ? perf_event_alloc+0x152/0x15c0 [ 526.049255][T27405] perf_event_alloc+0x152/0x15c0 [ 526.049282][T27405] ? __fget_files+0x184/0x1c0 [ 526.049319][T27405] __se_sys_perf_event_open+0x4e1/0x1170 [ 526.049435][T27405] ? __rcu_read_unlock+0x4f/0x70 [ 526.049465][T27405] __x64_sys_perf_event_open+0x67/0x80 [ 526.049494][T27405] x64_sys_call+0x27ec/0x2fb0 [ 526.049521][T27405] do_syscall_64+0xd0/0x1a0 [ 526.049552][T27405] ? clear_bhb_loop+0x25/0x80 [ 526.049571][T27405] ? clear_bhb_loop+0x25/0x80 [ 526.049591][T27405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.049675][T27405] RIP: 0033:0x7f308e41e969 [ 526.049687][T27405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.049708][T27405] RSP: 002b:00007f308ca87038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 526.049730][T27405] RAX: ffffffffffffffda RBX: 00007f308e645fa0 RCX: 00007f308e41e969 [ 526.049742][T27405] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000004c0 [ 526.049753][T27405] RBP: 00007f308ca87090 R08: 0000000000000000 R09: 0000000000000000 [ 526.049820][T27405] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 526.049835][T27405] R13: 0000000000000000 R14: 00007f308e645fa0 R15: 00007ffd11e7eb68 [ 526.049866][T27405] [ 526.249402][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.288472][T27413] cgroup: Need name or subsystem set [ 526.353303][T27423] loop1: detected capacity change from 0 to 512 [ 526.371341][T27422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8801'. [ 526.371356][T27423] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 526.371502][T27422] ================================================================== [ 526.381897][T27423] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.8799: invalid indirect mapped block 2683928664 (level 1) [ 526.388297][T27422] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 526.396579][T27423] EXT4-fs (loop1): Remounting filesystem read-only [ 526.410180][T27422] [ 526.410189][T27422] write to 0xffffffff868792a8 of 8 bytes by task 27423 on cpu 0: [ 526.410209][T27422] data_alloc+0x271/0x2b0 [ 526.410244][T27422] prb_reserve+0x808/0xaf0 [ 526.410274][T27422] vprintk_store+0x56d/0x860 [ 526.410307][T27422] vprintk_emit+0x178/0x650 [ 526.410326][T27422] vprintk_default+0x26/0x30 [ 526.410342][T27422] vprintk+0x1d/0x30 [ 526.410367][T27422] _printk+0x79/0xa0 [ 526.410393][T27422] __ext4_msg+0x18f/0x1a0 [ 526.410417][T27422] ext4_orphan_cleanup+0x446/0xa00 [ 526.410447][T27422] ext4_fill_super+0x3171/0x34e0 [ 526.410475][T27422] get_tree_bdev_flags+0x28e/0x300 [ 526.410502][T27422] get_tree_bdev+0x1f/0x30 [ 526.410525][T27422] ext4_get_tree+0x1c/0x30 [ 526.410552][T27422] vfs_get_tree+0x54/0x1d0 [ 526.410573][T27422] do_new_mount+0x207/0x680 [ 526.410597][T27422] path_mount+0x4a4/0xb20 [ 526.410620][T27422] __se_sys_mount+0x28f/0x2e0 [ 526.410642][T27422] __x64_sys_mount+0x67/0x80 [ 526.410668][T27422] x64_sys_call+0xd36/0x2fb0 [ 526.410692][T27422] do_syscall_64+0xd0/0x1a0 [ 526.410712][T27422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.410735][T27422] [ 526.410741][T27422] read to 0xffffffff868792a8 of 16 bytes by task 27422 on cpu 1: [ 526.410758][T27422] _prb_read_valid+0x1bc/0x920 [ 526.410787][T27422] prb_final_commit+0x136/0x1e0 [ 526.410820][T27422] vprintk_store+0x741/0x860 [ 526.410854][T27422] vprintk_emit+0x178/0x650 [ 526.410868][T27422] vprintk_default+0x26/0x30 [ 526.410887][T27422] vprintk+0x1d/0x30 [ 526.410910][T27422] _printk+0x79/0xa0 [ 526.410938][T27422] __nla_validate_parse+0x1738/0x1d00 [ 526.420084][T27423] EXT4-fs (loop1): 1 truncate cleaned up [ 526.424347][T27422] __nla_parse+0x40/0x60 [ 526.427656][T27423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.434819][T27422] rtnl_newlink+0x285/0x12d0 [ 526.434847][T27422] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 526.434870][T27422] netlink_rcv_skb+0x120/0x220 [ 526.613589][T27422] rtnetlink_rcv+0x1c/0x30 [ 526.618018][T27422] netlink_unicast+0x59e/0x670 [ 526.622797][T27422] netlink_sendmsg+0x58b/0x6b0 [ 526.627576][T27422] __sock_sendmsg+0x142/0x180 [ 526.632262][T27422] ____sys_sendmsg+0x31e/0x4e0 [ 526.637025][T27422] ___sys_sendmsg+0x17b/0x1d0 [ 526.641698][T27422] __x64_sys_sendmsg+0xd4/0x160 [ 526.646545][T27422] x64_sys_call+0x2999/0x2fb0 [ 526.651226][T27422] do_syscall_64+0xd0/0x1a0 [ 526.655740][T27422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.661633][T27422] [ 526.664064][T27422] Reported by Kernel Concurrency Sanitizer on: [ 526.670220][T27422] CPU: 1 UID: 0 PID: 27422 Comm: syz.0.8801 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 526.682734][T27422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 526.692790][T27422] ================================================================== [ 526.739764][T19157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.744720][T27431] 9pnet_fd: Insufficient options for proto=fd [ 526.756079][T27428] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.802246][T27428] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.861786][T27428] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.921581][T27428] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.974268][T27428] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.985037][T27428] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.995820][T27428] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.007565][T27428] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0