last executing test programs: 1.954665567s ago: executing program 4 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 1.901115787s ago: executing program 1 (id=308): socket$unix(0x1, 0x1, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = timerfd_create(0x8, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = timerfd_create(0x8, 0x0) timerfd_settime(r7, 0x2, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, 0x0) timerfd_gettime(r6, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.787746018s ago: executing program 4 (id=309): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x55, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="f80000001600080000000000000000000a01010000000000000000000000000000000000000000000000ffff"], 0xf8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x120}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x202, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu~\t\t') 1.767606198s ago: executing program 1 (id=310): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x40) socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.722120908s ago: executing program 4 (id=312): r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v1={0x2, "05e55da0eb220cc0cbdffe40c26d"}, 0xf, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='9', 0x1}], 0x1}, 0x0) 1.639963729s ago: executing program 1 (id=313): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0x4}, 0x100203, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x60040, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20008010) 1.587228419s ago: executing program 4 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x0) 1.586737419s ago: executing program 4 (id=315): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000700)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYBLOB="0300"]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r3], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000380)) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/150) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r5) syz_io_uring_setup(0x403e, &(0x7f00000000c0)={0x0, 0x5e98, 0x1000, 0x2, 0x2e6, 0x0, r1}, &(0x7f0000000280), &(0x7f00000002c0)) 1.55909979s ago: executing program 2 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fc0600250200000008"], 0x1c}}, 0x40) 1.55444287s ago: executing program 1 (id=317): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 1.51162484s ago: executing program 2 (id=319): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r2 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) writev(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)="4277ae35e3a4ada63259c08475f653d79bb279aa63e8d12fd93be1663eda8854c00f3c4a3aea0fb33520465723b95d9c083357381ea4f6bc211a663b7224eeab5086cad217fe080a99a4905242562ea5962fa0eef77056c6c725e2c5ec4b41568b00d2ce2dbeb3551e9040a58b8ca84c009df4152f68e9425cdb6518ab0c850039cad50897e29db185343403b8d1a3e2619ca10b5c45cd26ab4cfb996c5988c4d1c8f1532a3f08858c66eb27be8d7cd3d4a483fa3a7cb2c0d1eaadded89f13312b7a7a25bcefdebff94cc15da007d3a5e661660283fb7d225d25f6abfa", 0xdd}, {&(0x7f0000000140)="5992234603a66a135ea6d5e3eb624135fd8667e1b3b8", 0x16}, {&(0x7f00000002c0)="5b5f64d4f4091bbc35d5b1b223ea3207ea3fe3baab077a0f6986c969d03fd0d7211d85f94a921d0bb5cf2533fed2280d6f6a338eff4085e79ccef35c218fa251f8d2b1abb934892277179746568d5aaaf6bd6242518d4b7e", 0x58}, {&(0x7f0000000340)="052afc595b47e578e2d305ed4d862a1f8f5ad438597db056e78d0208a438e9793b2da0961f1caebbeb3e741b4247b9e3e0bca912201a1dfe0e3e3d50a96da53251590816da25e65889c61e5ad6b77121313c2bb561285cbf705ef9c8300b137fbcfa56fcc00707f1450d", 0x6a}, {&(0x7f0000000400)="d50fb075cbd2fbaedb3679261b0a524375df3be0f5b1509d6f8722d8f7f987c2cfbf440932c108ef705244c8c9561ec1d676e61a79f9078620f05335453fbc824eef4cadaf19d483b6d6fd627c7797394fc8f0f584138aefed5a64198d9833c4dcf75acb80e21178a97be1bc93773dcd6477f5adb75b978a2c7b732590bc1e250e7fe8e9ee76be7e8619e3dc5e0511e269397b6544114a18bca5c55bdc2fcfc32df90e0fb2d12eb31ccb5b6e36aba09fc7318d076189ae733be4ee3070e2c317e18224634ae1d6b66674d27548db7c4e9980d787", 0xd4}, {&(0x7f0000000500)="2c86568f23fde98dd77340bc305963a1ba6b7828aeb76bb58a76a569918803f3da43ee480ab1b585c903da413e6f4f748c00ac937eee5a7f41c8eb3f195e0d2fd614f4e186ac1c441c197d771d7ea73784d27340f47cda5b2464db1c89d6586d54eb09bf9e508d28e6b229a02522fe856d7147afe1b218136105482ac8606febbf3194ae9c75ada312b37585dfd4440cd6b14bfa6cec327f952bdf7a5549a340376f54769812aad0d0f0ab7b9c18cbba3d601067d666c6baa48df033a04647cf1addeaeed8e579c147b7", 0xca}], 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000780)={0xffffffffffffffff, 0x6, "96850c", 0x6, 0xfb}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e4b41534337810c96470a2b973e8be79b4442438f6d37aedfa135550f4660fae45f74a7d7aaca3f6cc82613555376fe1d3993fcec9e63e4d4901e636789ecf1b0388303b8f05d6eda4cf3137d88d8fa08974170a2e94e271797b06ec65ddc14acbde299692802305e7b4e41c0db762d8912fee52d14954d1e08840f5513a74f1bad32615d2f4a6667a5cabd1e4ca0b89218c9d1106ed630d2a1153b4ab6ae66b7a5fe0974501294a09cc445c7b2fae8c699f5acf31d642449538c59998a3b8", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="f1effb4ac31537803bf24296e1f6bd35b58af92e0114104a254b3f2b9105dc38cf8bbcd10e6313567494b8a83c2a80bce27600019f54b4ee15158e33581e6fadf35ab44d4d9460a768b2b0a4260990b6fd72bc29fecb5fea47e7ddf5b58e366834db93d3", @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000139200000000008040d90000851100002300000085a2cfb7d0c6e20000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x14, 0xc, &(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="280100001700010029bd7000fcdbdf25e000e5ef93bc0453663bfa703e81785c5416000100000000000000000000000000ffffd5", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="e00000020000000000000000000000007f0000010000f4ffffffffffffff00004a2000004e220034d6000080040000005b15cf53a48e6f1c2e42731dc3548a4d5c922133b163c4c31b10", @ANYBLOB="b5db2a01b7aec4af4387b750aea3319f7299bc2ea5844e272e23b8e902006468d0c063dc219f8fcefcb848133be65fed892ec46394b26f1a83c08beb86eafd4a458f6fae4ba5dc3ed9408dbb5426cf51af9e09bdd5a7f4326a800a45cdce287808026cf5892c5d75d211c639736e316e7c1f0d847404dba78ef4f5f8b4e0903c6d3627fb58ec3f4346e45e14828e62f609c42e477eb22b329292d47efec860e9c6cc31bbb06a549b5e12375f2dcb2777e8b7d077257206807e3c5c0eff84c6fc43352088dba337cc71dd77fd33b8f6f5975508c6ad4f9105b4b557bd35657cbb44b704d8adcad09d", @ANYRES32=0x0, @ANYBLOB="03000000000000000500000000000000327a00000000000000000000000010008000000000000000070000000000000005000000000000002f144e250000000003000000000000003a06000000000000040000000000000004000000000000000d0000000000000002010200000000000a00000001000000050000002abd7000"], 0x128}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a84352fc7886fe18246e61a3acbfad82d00140600fead8b1efd31a974dd91991c492a38a4ef2a998957a9d700004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078fffd"], 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000b80)=ANY=[@ANYBLOB="28000000c60ecab610b61d5e91b9faa48f4468946747706cbdb4c7938ca527ad010b2782ae9a254763cd27ac00c4", @ANYRES16=0x0, @ANYBLOB="02002dbd7000ffdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099006e0f000042000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r8, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) 1.47632113s ago: executing program 1 (id=320): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r2 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) writev(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)="4277ae35e3a4ada63259c08475f653d79bb279aa63e8d12fd93be1663eda8854c00f3c4a3aea0fb33520465723b95d9c083357381ea4f6bc211a663b7224eeab5086cad217fe080a99a4905242562ea5962fa0eef77056c6c725e2c5ec4b41568b00d2ce2dbeb3551e9040a58b8ca84c009df4152f68e9425cdb6518ab0c850039cad50897e29db185343403b8d1a3e2619ca10b5c45cd26ab4cfb996c5988c4d1c8f1532a3f08858c66eb27be8d7cd3d4a483fa3a7cb2c0d1eaadded89f13312b7a7a25bcefdebff94cc15da007d3a5e661660283fb7d225d25f6abfa", 0xdd}, {&(0x7f0000000140)="5992234603a66a135ea6d5e3eb624135fd8667e1b3b8", 0x16}, {&(0x7f00000002c0)="5b5f64d4f4091bbc35d5b1b223ea3207ea3fe3baab077a0f6986c969d03fd0d7211d85f94a921d0bb5cf2533fed2280d6f6a338eff4085e79ccef35c218fa251f8d2b1abb934892277179746568d5aaaf6bd6242518d4b7e", 0x58}, {&(0x7f0000000340)="052afc595b47e578e2d305ed4d862a1f8f5ad438597db056e78d0208a438e9793b2da0961f1caebbeb3e741b4247b9e3e0bca912201a1dfe0e3e3d50a96da53251590816da25e65889c61e5ad6b77121313c2bb561285cbf705ef9c8300b137fbcfa56fcc00707f1450d", 0x6a}, {&(0x7f0000000400)="d50fb075cbd2fbaedb3679261b0a524375df3be0f5b1509d6f8722d8f7f987c2cfbf440932c108ef705244c8c9561ec1d676e61a79f9078620f05335453fbc824eef4cadaf19d483b6d6fd627c7797394fc8f0f584138aefed5a64198d9833c4dcf75acb80e21178a97be1bc93773dcd6477f5adb75b978a2c7b732590bc1e250e7fe8e9ee76be7e8619e3dc5e0511e269397b6544114a18bca5c55bdc2fcfc32df90e0fb2d12eb31ccb5b6e36aba09fc7318d076189ae733be4ee3070e2c317e18224634ae1d6b66674d27548db7c4e9980d787", 0xd4}, {&(0x7f0000000500)="2c86568f23fde98dd77340bc305963a1ba6b7828aeb76bb58a76a569918803f3da43ee480ab1b585c903da413e6f4f748c00ac937eee5a7f41c8eb3f195e0d2fd614f4e186ac1c441c197d771d7ea73784d27340f47cda5b2464db1c89d6586d54eb09bf9e508d28e6b229a02522fe856d7147afe1b218136105482ac8606febbf3194ae9c75ada312b37585dfd4440cd6b14bfa6cec327f952bdf7a5549a340376f54769812aad0d0f0ab7b9c18cbba3d601067d666c6baa48df033a04647cf1addeaeed8e579c147b7", 0xca}], 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000780)={0xffffffffffffffff, 0x6, "96850c", 0x6, 0xfb}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e4b41534337810c96470a2b973e8be79b4442438f6d37aedfa135550f4660fae45f74a7d7aaca3f6cc82613555376fe1d3993fcec9e63e4d4901e636789ecf1b0388303b8f05d6eda4cf3137d88d8fa08974170a2e94e271797b06ec65ddc14acbde299692802305e7b4e41c0db762d8912fee52d14954d1e08840f5513a74f1bad32615d2f4a6667a5cabd1e4ca0b89218c9d1106ed630d2a1153b4ab6ae66b7a5fe0974501294a09cc445c7b2fae8c699f5acf31d642449538c59998a3b8", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="f1effb4ac31537803bf24296e1f6bd35b58af92e0114104a254b3f2b9105dc38cf8bbcd10e6313567494b8a83c2a80bce27600019f54b4ee15158e33581e6fadf35ab44d4d9460a768b2b0a4260990b6fd72bc29fecb5fea47e7ddf5b58e366834db93d3", @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000139200000000008040d90000851100002300000085a2cfb7d0c6e20000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x14, 0xc, &(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="280100001700010029bd7000fcdbdf25e000e5ef93bc0453663bfa703e81785c5416000100000000000000000000000000ffffd5", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="e00000020000000000000000000000007f0000010000f4ffffffffffffff00004a2000004e220034d6000080040000005b15cf53a48e6f1c2e42731dc3548a4d5c922133b163c4c31b10", @ANYBLOB="b5db2a01b7aec4af4387b750aea3319f7299bc2ea5844e272e23b8e902006468d0c063dc219f8fcefcb848133be65fed892ec46394b26f1a83c08beb86eafd4a458f6fae4ba5dc3ed9408dbb5426cf51af9e09bdd5a7f4326a800a45cdce287808026cf5892c5d75d211c639736e316e7c1f0d847404dba78ef4f5f8b4e0903c6d3627fb58ec3f4346e45e14828e62f609c42e477eb22b329292d47efec860e9c6cc31bbb06a549b5e12375f2dcb2777e8b7d077257206807e3c5c0eff84c6fc43352088dba337cc71dd77fd33b8f6f5975508c6ad4f9105b4b557bd35657cbb44b704d8adcad09d", @ANYRES32=0x0, @ANYBLOB="03000000000000000500000000000000327a00000000000000000000000010008000000000000000070000000000000005000000000000002f144e250000000003000000000000003a06000000000000040000000000000004000000000000000d0000000000000002010200000000000a00000001000000050000002abd7000"], 0x128}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a84352fc7886fe18246e61a3acbfad82d00140600fead8b1efd31a974dd91991c492a38a4ef2a998957a9d700004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078fffd"], 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000b80)=ANY=[@ANYBLOB="28000000c60ecab610b61d5e91b9faa48f4468946747706cbdb4c7938ca527ad010b2782ae9a254763cd27ac00c4", @ANYRES16=0x0, @ANYBLOB="02002dbd7000ffdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099006e0f000042000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r8, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) 1.357448511s ago: executing program 0 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x19, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8, 0x0, 0x1}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r6, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x8000) syz_emit_ethernet(0xfcf0, &(0x7f0000000340)=ANY=[], 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r13, 0x100}, {r13, 0xa102}, {r13, 0x2000}, {r0, 0x8000}], 0x4, 0x7fffffff) 1.067766703s ago: executing program 2 (id=324): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r2 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) writev(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)="4277ae35e3a4ada63259c08475f653d79bb279aa63e8d12fd93be1663eda8854c00f3c4a3aea0fb33520465723b95d9c083357381ea4f6bc211a663b7224eeab5086cad217fe080a99a4905242562ea5962fa0eef77056c6c725e2c5ec4b41568b00d2ce2dbeb3551e9040a58b8ca84c009df4152f68e9425cdb6518ab0c850039cad50897e29db185343403b8d1a3e2619ca10b5c45cd26ab4cfb996c5988c4d1c8f1532a3f08858c66eb27be8d7cd3d4a483fa3a7cb2c0d1eaadded89f13312b7a7a25bcefdebff94cc15da007d3a5e661660283fb7d225d25f6abfa", 0xdd}, {&(0x7f0000000140)="5992234603a66a135ea6d5e3eb624135fd8667e1b3b8", 0x16}, {&(0x7f00000002c0)="5b5f64d4f4091bbc35d5b1b223ea3207ea3fe3baab077a0f6986c969d03fd0d7211d85f94a921d0bb5cf2533fed2280d6f6a338eff4085e79ccef35c218fa251f8d2b1abb934892277179746568d5aaaf6bd6242518d4b7e", 0x58}, {&(0x7f0000000340)="052afc595b47e578e2d305ed4d862a1f8f5ad438597db056e78d0208a438e9793b2da0961f1caebbeb3e741b4247b9e3e0bca912201a1dfe0e3e3d50a96da53251590816da25e65889c61e5ad6b77121313c2bb561285cbf705ef9c8300b137fbcfa56fcc00707f1450d", 0x6a}, {&(0x7f0000000400)="d50fb075cbd2fbaedb3679261b0a524375df3be0f5b1509d6f8722d8f7f987c2cfbf440932c108ef705244c8c9561ec1d676e61a79f9078620f05335453fbc824eef4cadaf19d483b6d6fd627c7797394fc8f0f584138aefed5a64198d9833c4dcf75acb80e21178a97be1bc93773dcd6477f5adb75b978a2c7b732590bc1e250e7fe8e9ee76be7e8619e3dc5e0511e269397b6544114a18bca5c55bdc2fcfc32df90e0fb2d12eb31ccb5b6e36aba09fc7318d076189ae733be4ee3070e2c317e18224634ae1d6b66674d27548db7c4e9980d787", 0xd4}, {&(0x7f0000000500)="2c86568f23fde98dd77340bc305963a1ba6b7828aeb76bb58a76a569918803f3da43ee480ab1b585c903da413e6f4f748c00ac937eee5a7f41c8eb3f195e0d2fd614f4e186ac1c441c197d771d7ea73784d27340f47cda5b2464db1c89d6586d54eb09bf9e508d28e6b229a02522fe856d7147afe1b218136105482ac8606febbf3194ae9c75ada312b37585dfd4440cd6b14bfa6cec327f952bdf7a5549a340376f54769812aad0d0f0ab7b9c18cbba3d601067d666c6baa48df033a04647cf1addeaeed8e579c147b7", 0xca}], 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000780)={0xffffffffffffffff, 0x6, "96850c", 0x6, 0xfb}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e4b41534337810c96470a2b973e8be79b4442438f6d37aedfa135550f4660fae45f74a7d7aaca3f6cc82613555376fe1d3993fcec9e63e4d4901e636789ecf1b0388303b8f05d6eda4cf3137d88d8fa08974170a2e94e271797b06ec65ddc14acbde299692802305e7b4e41c0db762d8912fee52d14954d1e08840f5513a74f1bad32615d2f4a6667a5cabd1e4ca0b89218c9d1106ed630d2a1153b4ab6ae66b7a5fe0974501294a09cc445c7b2fae8c699f5acf31d642449538c59998a3b8", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="f1effb4ac31537803bf24296e1f6bd35b58af92e0114104a254b3f2b9105dc38cf8bbcd10e6313567494b8a83c2a80bce27600019f54b4ee15158e33581e6fadf35ab44d4d9460a768b2b0a4260990b6fd72bc29fecb5fea47e7ddf5b58e366834db93d3", @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000139200000000008040d90000851100002300000085a2cfb7d0c6e20000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x14, 0xc, &(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="280100001700010029bd7000fcdbdf25e000e5ef93bc0453663bfa703e81785c5416000100000000000000000000000000ffffd5", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="e00000020000000000000000000000007f0000010000f4ffffffffffffff00004a2000004e220034d6000080040000005b15cf53a48e6f1c2e42731dc3548a4d5c922133b163c4c31b10", @ANYBLOB="b5db2a01b7aec4af4387b750aea3319f7299bc2ea5844e272e23b8e902006468d0c063dc219f8fcefcb848133be65fed892ec46394b26f1a83c08beb86eafd4a458f6fae4ba5dc3ed9408dbb5426cf51af9e09bdd5a7f4326a800a45cdce287808026cf5892c5d75d211c639736e316e7c1f0d847404dba78ef4f5f8b4e0903c6d3627fb58ec3f4346e45e14828e62f609c42e477eb22b329292d47efec860e9c6cc31bbb06a549b5e12375f2dcb2777e8b7d077257206807e3c5c0eff84c6fc43352088dba337cc71dd77fd33b8f6f5975508c6ad4f9105b4b557bd35657cbb44b704d8adcad09d", @ANYRES32=0x0, @ANYBLOB="03000000000000000500000000000000327a00000000000000000000000010008000000000000000070000000000000005000000000000002f144e250000000003000000000000003a06000000000000040000000000000004000000000000000d0000000000000002010200000000000a00000001000000050000002abd7000"], 0x128}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a84352fc7886fe18246e61a3acbfad82d00140600fead8b1efd31a974dd91991c492a38a4ef2a998957a9d700004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078fffd"], 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000b80)=ANY=[@ANYBLOB="28000000c60ecab610b61d5e91b9faa48f4468946747706cbdb4c7938ca527ad010b2782ae9a254763cd27ac00c4", @ANYRES16=0x0, @ANYBLOB="02002dbd7000ffdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099006e0f000042000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r9, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) 964.088103ms ago: executing program 3 (id=326): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) lstat(0x0, 0x0) 922.080254ms ago: executing program 3 (id=327): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0x4}, 0x100203, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x60040, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20008010) 857.381744ms ago: executing program 1 (id=328): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) syz_emit_ethernet(0x27, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r3 = getegid() lchown(&(0x7f0000000000)='./file0\x00', r2, r3) 807.103515ms ago: executing program 3 (id=329): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x200000d1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000}, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0xfffe, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x6, 0xaea}, 0x10005, 0x1, 0xfffffbff, 0x3, 0x1, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz8FpAlEUBdA7n/mZCQSyTxFTRxaBrLJOE/bhypUd2I7FiIJ8YRwtQV2cs3k8ePfBDc9VcmqttXLb345J9zVmSsm2Jqm/U9Jm6Yd7bH+dbTinbuqSTbKu+U/qe5KPJN3PMCar75Skn48+D+Pyo8vf7qFdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFXQIAAP//s1YVKg==") r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x4}) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) r8 = syz_open_dev$usbmon(&(0x7f0000001080), 0xa80, 0x11b900) ioctl$MON_IOCX_GET(r8, 0x40189206, &(0x7f0000001140)={&(0x7f00000010c0), &(0x7f0000001100)=""/3, 0x3}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000200)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x798c000}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000a0000001d6b1e2b2f43637299"], 0x14}}, 0x0) 768.610205ms ago: executing program 0 (id=330): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 706.943295ms ago: executing program 0 (id=331): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000240)={0x64e1, 0xff, 0x1, 'queue1\x00', 0x4}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") 695.321685ms ago: executing program 2 (id=332): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) r6 = eventfd(0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/mcfilter6\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r9 = eventfd(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000023c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002340), &(0x7f0000002380)=r3}, 0x20) r11 = eventfd(0x6) io_submit(r5, 0x7, &(0x7f0000002600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0xf, r4, &(0x7f0000000240)="fa32cf0c738ecf238ce9dd4ba328983b766a78ac5eeb5d3d734ab4fb3e4e824f20aa8dcceea470075798e1db0fce311279c2924b756876202f22d31f7ba5578062147c7d9862f70b6c22dc090d659e8145af53268c303ecfa6e9719eeb60935fea4af986a42422ad0c8c48b72c431861f08c8a1dd211914f18649464e7adc6cd83d7c80917dca757b30d9d7465abe2910895b399324fa5cc1187944290007f488c29300fe137ced229b638259330d757f8ca9381ab940bdc85e9804f0c95d87e6de9f8e9f9b80c7f6855f7d6b274cba93c308d0c4c3cf01839d04b742ebba1a979ef59c3e03c7bd34cca879cd7b0d12d4ac77cb2594414d858", 0xf9, 0x6, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x3ff, r1, &(0x7f0000000480)="96080d5d6302cffd414217812bf697ecbfbf3ffb971c1f54d708ab0d673a9ab1c9fe7e09e89f132e08c48eddf790ba0c58d3a13e9ae73e533ad8fdd42a22bebbcc380489946df87afdebb62396faac04701f86635b2b1cc3283e1b84c38b0ab28927b356c7dbe20c88b16b4bb18c4dcd3b4b84536edb4df5fe7ee4d1ae9a56061361e4241c47d71bc72a1042dbca4ca8e3899c10fd7733384e8af7411f", 0x9d, 0x101, 0x0, 0x2, r7}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x2, 0x400, 0xffffffffffffffff, &(0x7f0000001140)="c671e8070a0d811d7e24c7024b8ffe056228", 0x12, 0x400, 0x0, 0x1, r8}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x7, 0xe, r2, &(0x7f0000001200)="c0ad040348db7b608a1ce68b67eb754f684dd681a9190aac4e3e8fac47fd4d0c61b062e8507477771f45373aeaf43bb7de160e017328a957d52ae657886308137fc82f24b0c547b8a72f78e9b39380c49424d5268744e308cd95bb3338af26155a3c616f70cb90952858b5a37651af7a84cb3c53bfb430d75a41397d27e78c6a836c2983f34522a3cb0c8adfc35a8e009d4156d6c0d905bca7479b19e09508fa54cac0b64666eed5853f3719ad6aaa3bbcc6f4badf6f2c5d79dc151f5b4a", 0xbe, 0x6, 0x0, 0x1, r9}, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x2, 0x914, r0, &(0x7f0000001300)="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", 0x1000, 0x3, 0x0, 0x2}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0xc4fe, r10, &(0x7f0000002400)="64b2699a6467e14dc1b183e6d76d63d54ff2aba3c29368e381b9f7d04b71a788601d6c17949fb5e69cba3389381dcdebe085adbae74e60e7cd5596fbfe2d668b55df77310dbd814295b6e6fa7e1d940bca4742d87618bb30c43157462546717acd6d2b86304abfa07c0fce19c2da10a45c54295d2700a00c5610b964dcff87f5796174bb5d1c37a01301508099c8", 0x8e, 0x80000000000, 0x0, 0x3}, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x7, 0x4, r2, &(0x7f0000002500)="604182a2df0a09785941eaa5b097ec24b8e20140745e5e447b20e2f9cfb3018c1b5e935d77ca0e6a79774be73a3aadf9824fa9e4c93570d6b13cd7cd108a5950a01c3d2ac4bb43cb305570e9babb95693c31b9b08f8b35ad16a729fefc413b4efe312ebb977b8ef40581a250ae25866d100f1f1fd567e261e4692829d329a8584f475d06d0d21f050fe0e8", 0x8b, 0x1, 0x0, 0x1, r11}]) 426.608487ms ago: executing program 4 (id=333): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r2 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) writev(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)="4277ae35e3a4ada63259c08475f653d79bb279aa63e8d12fd93be1663eda8854c00f3c4a3aea0fb33520465723b95d9c083357381ea4f6bc211a663b7224eeab5086cad217fe080a99a4905242562ea5962fa0eef77056c6c725e2c5ec4b41568b00d2ce2dbeb3551e9040a58b8ca84c009df4152f68e9425cdb6518ab0c850039cad50897e29db185343403b8d1a3e2619ca10b5c45cd26ab4cfb996c5988c4d1c8f1532a3f08858c66eb27be8d7cd3d4a483fa3a7cb2c0d1eaadded89f13312b7a7a25bcefdebff94cc15da007d3a5e661660283fb7d225d25f6abfa", 0xdd}, {&(0x7f0000000140)="5992234603a66a135ea6d5e3eb624135fd8667e1b3b8", 0x16}, {&(0x7f00000002c0)="5b5f64d4f4091bbc35d5b1b223ea3207ea3fe3baab077a0f6986c969d03fd0d7211d85f94a921d0bb5cf2533fed2280d6f6a338eff4085e79ccef35c218fa251f8d2b1abb934892277179746568d5aaaf6bd6242518d4b7e", 0x58}, {&(0x7f0000000340)="052afc595b47e578e2d305ed4d862a1f8f5ad438597db056e78d0208a438e9793b2da0961f1caebbeb3e741b4247b9e3e0bca912201a1dfe0e3e3d50a96da53251590816da25e65889c61e5ad6b77121313c2bb561285cbf705ef9c8300b137fbcfa56fcc00707f1450d", 0x6a}, {&(0x7f0000000400)="d50fb075cbd2fbaedb3679261b0a524375df3be0f5b1509d6f8722d8f7f987c2cfbf440932c108ef705244c8c9561ec1d676e61a79f9078620f05335453fbc824eef4cadaf19d483b6d6fd627c7797394fc8f0f584138aefed5a64198d9833c4dcf75acb80e21178a97be1bc93773dcd6477f5adb75b978a2c7b732590bc1e250e7fe8e9ee76be7e8619e3dc5e0511e269397b6544114a18bca5c55bdc2fcfc32df90e0fb2d12eb31ccb5b6e36aba09fc7318d076189ae733be4ee3070e2c317e18224634ae1d6b66674d27548db7c4e9980d787", 0xd4}, {&(0x7f0000000500)="2c86568f23fde98dd77340bc305963a1ba6b7828aeb76bb58a76a569918803f3da43ee480ab1b585c903da413e6f4f748c00ac937eee5a7f41c8eb3f195e0d2fd614f4e186ac1c441c197d771d7ea73784d27340f47cda5b2464db1c89d6586d54eb09bf9e508d28e6b229a02522fe856d7147afe1b218136105482ac8606febbf3194ae9c75ada312b37585dfd4440cd6b14bfa6cec327f952bdf7a5549a340376f54769812aad0d0f0ab7b9c18cbba3d601067d666c6baa48df033a04647cf1addeaeed8e579c147b7", 0xca}], 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000780)={0xffffffffffffffff, 0x6, "96850c", 0x6, 0xfb}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e4b41534337810c96470a2b973e8be79b4442438f6d37aedfa135550f4660fae45f74a7d7aaca3f6cc82613555376fe1d3993fcec9e63e4d4901e636789ecf1b0388303b8f05d6eda4cf3137d88d8fa08974170a2e94e271797b06ec65ddc14acbde299692802305e7b4e41c0db762d8912fee52d14954d1e08840f5513a74f1bad32615d2f4a6667a5cabd1e4ca0b89218c9d1106ed630d2a1153b4ab6ae66b7a5fe0974501294a09cc445c7b2fae8c699f5acf31d642449538c59998a3b8", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="f1effb4ac31537803bf24296e1f6bd35b58af92e0114104a254b3f2b9105dc38cf8bbcd10e6313567494b8a83c2a80bce27600019f54b4ee15158e33581e6fadf35ab44d4d9460a768b2b0a4260990b6fd72bc29fecb5fea47e7ddf5b58e366834db93d3", @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000139200000000008040d90000851100002300000085a2cfb7d0c6e20000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x14, 0xc, &(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="280100001700010029bd7000fcdbdf25e000e5ef93bc0453663bfa703e81785c5416000100000000000000000000000000ffffd5", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="e00000020000000000000000000000007f0000010000f4ffffffffffffff00004a2000004e220034d6000080040000005b15cf53a48e6f1c2e42731dc3548a4d5c922133b163c4c31b10", @ANYBLOB="b5db2a01b7aec4af4387b750aea3319f7299bc2ea5844e272e23b8e902006468d0c063dc219f8fcefcb848133be65fed892ec46394b26f1a83c08beb86eafd4a458f6fae4ba5dc3ed9408dbb5426cf51af9e09bdd5a7f4326a800a45cdce287808026cf5892c5d75d211c639736e316e7c1f0d847404dba78ef4f5f8b4e0903c6d3627fb58ec3f4346e45e14828e62f609c42e477eb22b329292d47efec860e9c6cc31bbb06a549b5e12375f2dcb2777e8b7d077257206807e3c5c0eff84c6fc43352088dba337cc71dd77fd33b8f6f5975508c6ad4f9105b4b557bd35657cbb44b704d8adcad09d", @ANYRES32=0x0, @ANYBLOB="03000000000000000500000000000000327a00000000000000000000000010008000000000000000070000000000000005000000000000002f144e250000000003000000000000003a06000000000000040000000000000004000000000000000d0000000000000002010200000000000a00000001000000050000002abd7000"], 0x128}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a84352fc7886fe18246e61a3acbfad82d00140600fead8b1efd31a974dd91991c492a38a4ef2a998957a9d700004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078fffd"], 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000b80)=ANY=[@ANYBLOB="28000000c60ecab610b61d5e91b9faa48f4468946747706cbdb4c7938ca527ad010b2782ae9a254763cd27ac00c4", @ANYRES16=0x0, @ANYBLOB="02002dbd7000ffdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099006e0f000042000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r8, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) 408.378057ms ago: executing program 0 (id=334): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x40) socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 393.974177ms ago: executing program 2 (id=335): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$eJzs3M1vFGUYAPBnZtsiX7YifvChVtHY+NHSgsrBgxpNPGhiogc81rYQZKGG1kQI0WoMHg2Jd+PRxL/Ak16MejLxqndDQgwX0NOa2Z1pt8t2ocu2g+zvlwy873z0fZ6deXffmbfbAPrWaPZPErEjIv6IiOFGdfUOo43/rl05P/PPlfMzSdRqb/+d1Pe7euX8TLFrcdz2vDKWRqSfJ7GvTbsLZ8+dnK5W587k9YnFUx9MLJw99+yJU9PH547PnZ46cuTwockXnp96rid5ZjFd3fvx/P49r7978c2Zoxff++W7pMi/JY9VlrpucrTTxidqta5/8O1oZ1M5GSgxENalEhHZ6Rqs9//hqMTKyRuO1z4rNThgQ9Vqtdr2tTcv1YA7WBJlRwCUo/igz+5/i2WThh63hcsvN26Asryv5Utjy0Ck+T6DLfe3vTQaEUeX/v06W6LTcwgAgB75IRv/PNNu/JfG/U373Z3PDY1ExD0RsSsi7o2I3RFxX0R93wci4sF1tt86SXL9+Ce91FViNykb/72Yz22tHv8Vo78YqeS1nfX8B5NjJ6pzB/PXZCwGt2T1yQ5t/Pjq71+uta15/JctWfvFWDCP49LAltXHzE4vTt9Kzs0ufxqxd6Bd/snyTEASEXsiYm+XbZx46tv9a227cf4d9GCeqfZNxJON878ULfkXks7zkxN3RXXu4ERxVVzv198uvLVW+7eUfw9k539b2+t/Of+RpHm+dmH9bVz484s172m6vf6Hknfq5aF83UfTi4tnJiOGkjcaQTevn1o5tqgX+2f5jx1o3/93xcorsS8isov4oYh4OCIeyWN/NCIei4gDHfL/+ZXH3+8+/42V5T+7rvO/UhiK1jXtC5WTP32/qtGR9eSfnf/D9dJYvuZm3v9uJq7urmYAAAD4/0kjYkck6fhyOU3Hxxu/L787tqXV+YXFp4/Nf3h6tvEdgZEYTIsnXcNNz0Mn89v6oj7VUj+UPzf+qrK1Xh+fma/Olp089Lnta/T/zF+VsqMDNpzva0H/0v+hf+n/0L/0f+hfbfr/1jLiADZfu8//T0qIA9h8Lf1/edrvpRJiATaX+3/oX/o/9C/9H/rSwta48ZfkFTagUPx9hXLDqES3h0da/mt4xxQG84vhdonn5HS1xDclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHvovAAD//+qG390=") r2 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) writev(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)="4277ae35e3a4ada63259c08475f653d79bb279aa63e8d12fd93be1663eda8854c00f3c4a3aea0fb33520465723b95d9c083357381ea4f6bc211a663b7224eeab5086cad217fe080a99a4905242562ea5962fa0eef77056c6c725e2c5ec4b41568b00d2ce2dbeb3551e9040a58b8ca84c009df4152f68e9425cdb6518ab0c850039cad50897e29db185343403b8d1a3e2619ca10b5c45cd26ab4cfb996c5988c4d1c8f1532a3f08858c66eb27be8d7cd3d4a483fa3a7cb2c0d1eaadded89f13312b7a7a25bcefdebff94cc15da007d3a5e661660283fb7d225d25f6abfa", 0xdd}, {&(0x7f0000000140)="5992234603a66a135ea6d5e3eb624135fd8667e1b3b8", 0x16}, {&(0x7f00000002c0)="5b5f64d4f4091bbc35d5b1b223ea3207ea3fe3baab077a0f6986c969d03fd0d7211d85f94a921d0bb5cf2533fed2280d6f6a338eff4085e79ccef35c218fa251f8d2b1abb934892277179746568d5aaaf6bd6242518d4b7e", 0x58}, {&(0x7f0000000340)="052afc595b47e578e2d305ed4d862a1f8f5ad438597db056e78d0208a438e9793b2da0961f1caebbeb3e741b4247b9e3e0bca912201a1dfe0e3e3d50a96da53251590816da25e65889c61e5ad6b77121313c2bb561285cbf705ef9c8300b137fbcfa56fcc00707f1450d", 0x6a}, {&(0x7f0000000400)="d50fb075cbd2fbaedb3679261b0a524375df3be0f5b1509d6f8722d8f7f987c2cfbf440932c108ef705244c8c9561ec1d676e61a79f9078620f05335453fbc824eef4cadaf19d483b6d6fd627c7797394fc8f0f584138aefed5a64198d9833c4dcf75acb80e21178a97be1bc93773dcd6477f5adb75b978a2c7b732590bc1e250e7fe8e9ee76be7e8619e3dc5e0511e269397b6544114a18bca5c55bdc2fcfc32df90e0fb2d12eb31ccb5b6e36aba09fc7318d076189ae733be4ee3070e2c317e18224634ae1d6b66674d27548db7c4e9980d787", 0xd4}, {&(0x7f0000000500)="2c86568f23fde98dd77340bc305963a1ba6b7828aeb76bb58a76a569918803f3da43ee480ab1b585c903da413e6f4f748c00ac937eee5a7f41c8eb3f195e0d2fd614f4e186ac1c441c197d771d7ea73784d27340f47cda5b2464db1c89d6586d54eb09bf9e508d28e6b229a02522fe856d7147afe1b218136105482ac8606febbf3194ae9c75ada312b37585dfd4440cd6b14bfa6cec327f952bdf7a5549a340376f54769812aad0d0f0ab7b9c18cbba3d601067d666c6baa48df033a04647cf1addeaeed8e579c147b7", 0xca}], 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000780)={0xffffffffffffffff, 0x6, "96850c", 0x6, 0xfb}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e4b41534337810c96470a2b973e8be79b4442438f6d37aedfa135550f4660fae45f74a7d7aaca3f6cc82613555376fe1d3993fcec9e63e4d4901e636789ecf1b0388303b8f05d6eda4cf3137d88d8fa08974170a2e94e271797b06ec65ddc14acbde299692802305e7b4e41c0db762d8912fee52d14954d1e08840f5513a74f1bad32615d2f4a6667a5cabd1e4ca0b89218c9d1106ed630d2a1153b4ab6ae66b7a5fe0974501294a09cc445c7b2fae8c699f5acf31d642449538c59998a3b8", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="f1effb4ac31537803bf24296e1f6bd35b58af92e0114104a254b3f2b9105dc38cf8bbcd10e6313567494b8a83c2a80bce27600019f54b4ee15158e33581e6fadf35ab44d4d9460a768b2b0a4260990b6fd72bc29fecb5fea47e7ddf5b58e366834db93d3", @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000139200000000008040d90000851100002300000085a2cfb7d0c6e20000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x14, 0xc, &(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a84352fc7886fe18246e61a3acbfad82d00140600fead8b1efd31a974dd91991c492a38a4ef2a998957a9d700004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078fffd"], 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000b80)=ANY=[@ANYBLOB="28000000c60ecab610b61d5e91b9faa48f4468946747706cbdb4c7938ca527ad010b2782ae9a254763cd27ac00c4", @ANYRES16=0x0, @ANYBLOB="02002dbd7000ffdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099006e0f000042000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r8, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) 287.448228ms ago: executing program 3 (id=336): wait4(0x0, 0x0, 0x40000000, 0x0) 247.611638ms ago: executing program 0 (id=337): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x55, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="f80000001600080000000000000000000a01010000000000000000000000000000000000000000000000ffff"], 0xf8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x120}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x202, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu~\t\t') 143.184309ms ago: executing program 3 (id=338): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000d, 0x80010, r0, 0xd3efb000) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000003c0)={r4}) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000170000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = io_uring_setup(0x7891, &(0x7f0000000200)={0x0, 0x297a, 0x40, 0x80003, 0x2a5, 0x0, r0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000480), 0x66) 108.638289ms ago: executing program 0 (id=339): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0x4}, 0x100203, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x60040, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20008010) 102.73005ms ago: executing program 3 (id=340): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x2, [0xe54, 0x4]}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)='%pK \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r1, &(0x7f0000000440)="4a082da60a5f7882cb4222f56abef9bc5ef475b6bd1156c48b8cc4abf1bf7b9c0d3728ab4e033d74468fc7dfbac2ef545fc9d94a24fc4c65697f4c84e1ed6d3fbba6207280807f34a00b0a30888ec3faf545202a1b2d8531548b3abde9f4963568e0e092d8dbfbc72f3de5c080e189b080204ec5c5c722aebfae588e414a707b18298f872e8722ab397b07bb5c6f6c9a56855f5a49e3f5c18999e31eb11287a69f2f25a794c328cf4699d8047c1f57f08dfec93273970b09f6621fea2f9840571c1ab76ea88a28c437ccfc8caac934c8d87ea935c3efaafc72"}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006b4bd43b184f977c724275884f8bff081ff7dec249cb2bf2f43801cf12ccf7de2ef66ca6ab7d8873c6a117a75dd713f2366388f4042be3654432f741774cd700d9a77f85733fcd4b329a6bbf76719dcfc2b0cc45c0"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x401}, 0x11) r5 = syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0xa82) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x11, 0x6, 0x0, 0xffffffff, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x6, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r7, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004050}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. [ 26.074078][ T29] audit: type=1400 audit(1762763098.443:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.097267][ T29] audit: type=1400 audit(1762763098.463:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.097908][ T3304] cgroup: Unknown subsys name 'net' [ 26.125023][ T29] audit: type=1400 audit(1762763098.493:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.244458][ T3304] cgroup: Unknown subsys name 'cpuset' [ 26.250712][ T3304] cgroup: Unknown subsys name 'rlimit' [ 26.380568][ T29] audit: type=1400 audit(1762763098.743:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.405857][ T29] audit: type=1400 audit(1762763098.743:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.426416][ T29] audit: type=1400 audit(1762763098.743:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.431883][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.446807][ T29] audit: type=1400 audit(1762763098.743:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.475849][ T29] audit: type=1400 audit(1762763098.753:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.485675][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.500627][ T29] audit: type=1400 audit(1762763098.753:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.532722][ T29] audit: type=1400 audit(1762763098.823:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.693103][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.710029][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 27.794604][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 27.813341][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.820464][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.827691][ T3318] bridge_slave_0: entered allmulticast mode [ 27.834187][ T3318] bridge_slave_0: entered promiscuous mode [ 27.854268][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.861595][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.868807][ T3322] bridge_slave_0: entered allmulticast mode [ 27.875313][ T3322] bridge_slave_0: entered promiscuous mode [ 27.882064][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.889178][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.896321][ T3318] bridge_slave_1: entered allmulticast mode [ 27.902577][ T3318] bridge_slave_1: entered promiscuous mode [ 27.921029][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.928247][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.935398][ T3322] bridge_slave_1: entered allmulticast mode [ 27.941583][ T3322] bridge_slave_1: entered promiscuous mode [ 27.956705][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.967308][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.997226][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.011106][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.026398][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.045458][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.092008][ T3322] team0: Port device team_slave_0 added [ 28.101757][ T3318] team0: Port device team_slave_0 added [ 28.107606][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.114791][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.122130][ T3315] bridge_slave_0: entered allmulticast mode [ 28.128702][ T3315] bridge_slave_0: entered promiscuous mode [ 28.135466][ T3322] team0: Port device team_slave_1 added [ 28.150847][ T3318] team0: Port device team_slave_1 added [ 28.161750][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.168875][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.176232][ T3315] bridge_slave_1: entered allmulticast mode [ 28.182925][ T3315] bridge_slave_1: entered promiscuous mode [ 28.216537][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.223647][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.230986][ T3314] bridge_slave_0: entered allmulticast mode [ 28.237474][ T3314] bridge_slave_0: entered promiscuous mode [ 28.244101][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.251677][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.258901][ T3320] bridge_slave_0: entered allmulticast mode [ 28.265304][ T3320] bridge_slave_0: entered promiscuous mode [ 28.272247][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.279288][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.305185][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.320895][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.327882][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.353803][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.364944][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.372088][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.379361][ T3314] bridge_slave_1: entered allmulticast mode [ 28.385696][ T3314] bridge_slave_1: entered promiscuous mode [ 28.391973][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.399164][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.406391][ T3320] bridge_slave_1: entered allmulticast mode [ 28.412756][ T3320] bridge_slave_1: entered promiscuous mode [ 28.419195][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.426219][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.452241][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.464354][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.473657][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.480654][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.506711][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.534647][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.561199][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.581770][ T3315] team0: Port device team_slave_0 added [ 28.588476][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.598462][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.609404][ T3318] hsr_slave_0: entered promiscuous mode [ 28.615419][ T3318] hsr_slave_1: entered promiscuous mode [ 28.622763][ T3315] team0: Port device team_slave_1 added [ 28.633798][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.676266][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.683239][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.709260][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.730072][ T3320] team0: Port device team_slave_0 added [ 28.737591][ T3322] hsr_slave_0: entered promiscuous mode [ 28.743626][ T3322] hsr_slave_1: entered promiscuous mode [ 28.749770][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 28.755574][ T3322] Cannot create hsr debugfs directory [ 28.761404][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.768390][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.794409][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.814524][ T3314] team0: Port device team_slave_0 added [ 28.820938][ T3320] team0: Port device team_slave_1 added [ 28.831873][ T3314] team0: Port device team_slave_1 added [ 28.848006][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.855125][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.881189][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.909845][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.917346][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.943426][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.981673][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.988677][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.014609][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.039346][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.046360][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.072358][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.085132][ T3315] hsr_slave_0: entered promiscuous mode [ 29.091076][ T3315] hsr_slave_1: entered promiscuous mode [ 29.096971][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 29.102707][ T3315] Cannot create hsr debugfs directory [ 29.122216][ T3320] hsr_slave_0: entered promiscuous mode [ 29.128272][ T3320] hsr_slave_1: entered promiscuous mode [ 29.134189][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 29.139935][ T3320] Cannot create hsr debugfs directory [ 29.198768][ T3314] hsr_slave_0: entered promiscuous mode [ 29.204938][ T3314] hsr_slave_1: entered promiscuous mode [ 29.210733][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 29.216749][ T3314] Cannot create hsr debugfs directory [ 29.265349][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.286867][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.314217][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.339499][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.374873][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.387696][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.399010][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.411186][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.450762][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.465491][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.488876][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.497720][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.513524][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.520874][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.529797][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.542273][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.560293][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.569136][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.586486][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.597860][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.604963][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.616669][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.630404][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.639934][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.649582][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.656653][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.675893][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.683039][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.707551][ T1889] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.714660][ T1889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.723166][ T1889] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.730345][ T1889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.799711][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.816791][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.830601][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.855344][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.862432][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.871576][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.878655][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.890334][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.903922][ T1889] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.911081][ T1889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.923901][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.941450][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.950937][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.958023][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.993450][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.005879][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.022641][ T1889] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.029825][ T1889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.038835][ T1889] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.045922][ T1889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.081250][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.093546][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.139146][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.159518][ T3322] veth0_vlan: entered promiscuous mode [ 30.175091][ T3322] veth1_vlan: entered promiscuous mode [ 30.212243][ T3322] veth0_macvtap: entered promiscuous mode [ 30.229215][ T3322] veth1_macvtap: entered promiscuous mode [ 30.254705][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.268168][ T3318] veth0_vlan: entered promiscuous mode [ 30.277133][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.286671][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.295343][ T3318] veth1_vlan: entered promiscuous mode [ 30.306809][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.316971][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.329119][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.346270][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.367138][ T3318] veth0_macvtap: entered promiscuous mode [ 30.381622][ T3315] veth0_vlan: entered promiscuous mode [ 30.388963][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.401261][ T3315] veth1_vlan: entered promiscuous mode [ 30.415319][ T3318] veth1_macvtap: entered promiscuous mode [ 30.436045][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.465492][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.484343][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.487786][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.514370][ T3320] veth0_vlan: entered promiscuous mode [ 30.535025][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.550758][ T3315] veth0_macvtap: entered promiscuous mode [ 30.560173][ T3478] loop1: detected capacity change from 0 to 512 [ 30.569288][ T3478] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.574422][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.582373][ T3478] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 30.602806][ T3478] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.617913][ T3315] veth1_macvtap: entered promiscuous mode [ 30.622014][ T3478] EXT4-fs (loop1): 1 truncate cleaned up [ 30.628719][ T3320] veth1_vlan: entered promiscuous mode [ 30.629943][ T3478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.648262][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.672260][ T3320] veth0_macvtap: entered promiscuous mode [ 30.686735][ T3320] veth1_macvtap: entered promiscuous mode [ 30.701487][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.710277][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.732555][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.741748][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.752341][ T3314] veth0_vlan: entered promiscuous mode [ 30.774703][ T1777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.791666][ T1777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.804139][ T3314] veth1_vlan: entered promiscuous mode [ 30.825835][ T1777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.846316][ T3314] veth0_macvtap: entered promiscuous mode [ 30.902096][ T3493] loop3: detected capacity change from 0 to 2048 [ 30.904316][ T1777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.926072][ T3314] veth1_macvtap: entered promiscuous mode [ 30.947641][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.955318][ T1777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.971256][ T3493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 30.985723][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.994913][ T1777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.014976][ T1777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.029123][ T1889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.057616][ T1889] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.084480][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 31.084572][ T29] audit: type=1400 audit(1762763103.453:165): avc: denied { map } for pid=3491 comm="syz.3.6" path="/1/file2/memory.events.local" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.089720][ T1889] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.090747][ T29] audit: type=1400 audit(1762763103.453:166): avc: denied { read write } for pid=3491 comm="syz.3.6" path="/1/file2/memory.events.local" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.114871][ T3493] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, [ 31.122790][ T29] audit: type=1400 audit(1762763103.453:167): avc: denied { write } for pid=3501 comm="syz.2.7" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.122823][ T29] audit: type=1400 audit(1762763103.453:168): avc: denied { connect } for pid=3501 comm="syz.2.7" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.146941][ T3493] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.155105][ T29] audit: type=1400 audit(1762763103.453:169): avc: denied { name_connect } for pid=3501 comm="syz.2.7" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 31.231419][ T1889] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.240837][ T29] audit: type=1400 audit(1762763103.573:170): avc: denied { setopt } for pid=3501 comm="syz.2.7" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.281511][ T29] audit: type=1400 audit(1762763103.603:171): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.284340][ T3493] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 388 with error 28 [ 31.305755][ T29] audit: type=1400 audit(1762763103.603:172): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.318052][ T3493] EXT4-fs (loop3): This should not happen!! Data will be lost [ 31.318052][ T3493] [ 31.318069][ T3493] EXT4-fs (loop3): Total free blocks count 0 [ 31.318085][ T3493] EXT4-fs (loop3): Free/Dirty block details [ 31.318098][ T3493] EXT4-fs (loop3): free_blocks=2415919104 [ 31.318127][ T3493] EXT4-fs (loop3): dirty_blocks=400 [ 31.342740][ T29] audit: type=1400 audit(1762763103.603:173): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.345428][ T1889] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.352464][ T3493] EXT4-fs (loop3): Block reservation details [ 31.416058][ T3493] EXT4-fs (loop3): i_reserved_data_blocks=25 [ 31.431841][ T29] audit: type=1400 audit(1762763103.783:174): avc: denied { map_create } for pid=3505 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.504215][ T3493] syz.3.6 (3493) used greatest stack depth: 10120 bytes left [ 31.519759][ T3507] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 31.536413][ T3510] loop2: detected capacity change from 0 to 2048 [ 31.557645][ T1945] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.566554][ T1945] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.576148][ T1945] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.586666][ T1945] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.595373][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 31.640468][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.680219][ T3510] Alternate GPT is invalid, using primary GPT. [ 31.686855][ T3510] loop2: p2 p3 p7 [ 31.711945][ T3517] loop4: detected capacity change from 0 to 512 [ 31.730183][ T3515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 31.750856][ T3500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 31.773227][ T3517] ======================================================= [ 31.773227][ T3517] WARNING: The mand mount option has been deprecated and [ 31.773227][ T3517] and is ignored by this kernel. Remove the mand [ 31.773227][ T3517] option from the mount to silence this warning. [ 31.773227][ T3517] ======================================================= [ 31.832962][ T3006] Alternate GPT is invalid, using primary GPT. [ 31.839679][ T3006] loop2: p2 p3 p7 [ 31.854725][ T3517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.879086][ T3529] serio: Serial port ptm0 [ 31.911400][ T3517] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.956278][ T3517] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.11: corrupted inode contents [ 32.001131][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 32.009254][ T3517] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.11: mark_inode_dirty error [ 32.013206][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 32.033660][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 32.043112][ T3517] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.11: corrupted inode contents [ 32.074453][ T3517] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.11: mark_inode_dirty error [ 32.133921][ T3545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 32.149238][ T3547] netlink: 3 bytes leftover after parsing attributes in process `syz.0.16'. [ 32.158830][ T3547] 0ªX¹¦À: renamed from caif0 [ 32.169101][ T3547] 0ªX¹¦À: entered allmulticast mode [ 32.169117][ T3547] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 32.192257][ T3548] loop2: detected capacity change from 0 to 2048 [ 32.216334][ T3548] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 32.216358][ T3548] EXT4-fs (loop2): group descriptors corrupted! [ 32.217233][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.252223][ T3553] loop4: detected capacity change from 0 to 512 [ 32.300407][ T3553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.331211][ T3553] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.344751][ T3556] veth1_macvtap: left promiscuous mode [ 32.350333][ T3556] macsec0: entered promiscuous mode [ 32.387368][ T3553] EXT4-fs (loop4): 1 truncate cleaned up [ 32.409721][ T3553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.432930][ T3553] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.464017][ T3553] loop4: detected capacity change from 0 to 128 [ 32.488966][ T3553] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.510958][ T3553] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.514296][ T3565] xt_hashlimit: max too large, truncated to 1048576 [ 32.527227][ T3553] bond0: (slave veth1_to_bond): Error: Device can not be enslaved while up [ 32.527654][ T3565] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 32.580077][ T3572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 32.590692][ T3572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 32.629103][ T3579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 32.650043][ T3582] serio: Serial port ptm0 [ 32.978579][ T3591] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.993297][ T3594] 9p: Unknown access argument : -22 [ 33.090710][ T3603] loop0: detected capacity change from 0 to 512 [ 33.116779][ T3603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.130677][ T3603] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.151321][ T3603] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 33.196123][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.253068][ T3624] 9p: Unknown access argument : -22 [ 33.362006][ T3631] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 33.381648][ T3635] netlink: 76 bytes leftover after parsing attributes in process `syz.3.31'. [ 33.528304][ T3645] Zero length message leads to an empty skb [ 33.689090][ T3648] loop0: detected capacity change from 0 to 128 [ 33.724423][ T3648] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.765894][ T3648] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.936645][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.015178][ T3656] 9p: Unknown access argument : -22 [ 34.029699][ T3653] loop1: detected capacity change from 0 to 1024 [ 34.074193][ T3653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.113464][ T3653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.145690][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.493924][ T3676] loop2: detected capacity change from 0 to 128 [ 34.514095][ T3676] netlink: 84 bytes leftover after parsing attributes in process `syz.2.41'. [ 34.535963][ T3676] syz.2.41: attempt to access beyond end of device [ 34.535963][ T3676] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 34.592810][ T3673] infiniband syz!: set active [ 34.597638][ T3673] infiniband syz!: added team_slave_0 [ 34.629427][ T3673] RDS/IB: syz!: added [ 34.633551][ T3673] smc: adding ib device syz! with port count 1 [ 34.645418][ T3673] smc: ib device syz! port 1 has no pnetid [ 34.720037][ C1] hrtimer: interrupt took 36057 ns [ 34.755531][ T3682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 35.121449][ T3688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=3688 comm=syz.1.45 [ 35.156081][ T3688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=3688 comm=syz.1.45 [ 35.195236][ T3688] loop1: detected capacity change from 0 to 512 [ 35.233003][ T3688] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 35.297785][ T3698] loop3: detected capacity change from 0 to 512 [ 35.309514][ T3697] ALSA: seq fatal error: cannot create timer (-19) [ 35.362904][ T3703] serio: Serial port ptm0 [ 35.400762][ T3698] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 35.418874][ T3697] loop4: detected capacity change from 0 to 8192 [ 35.433878][ T3698] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.447787][ T3698] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.47: corrupted inode contents [ 35.484251][ T3518] loop4: p1 p2 < > p3 p4 < p5 > [ 35.489253][ T3518] loop4: partition table partially beyond EOD, truncated [ 35.502262][ T3698] EXT4-fs (loop3): Remounting filesystem read-only [ 35.511471][ T3518] loop4: p1 size 100663296 extends beyond EOD, truncated [ 35.526120][ T3698] EXT4-fs (loop3): 1 truncate cleaned up [ 35.532003][ T339] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.542629][ T339] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.555255][ T3518] loop4: p2 start 591104 is beyond EOD, truncated [ 35.561769][ T3518] loop4: p3 start 33572980 is beyond EOD, truncated [ 35.569536][ T3518] loop4: p5 size 100663296 extends beyond EOD, truncated [ 35.576770][ T339] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 35.589359][ T3698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.604688][ T3715] capability: warning: `syz.4.46' uses deprecated v2 capabilities in a way that may be insecure [ 35.632206][ T3698] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.633245][ T3697] loop4: p1 p2 < > p3 p4 < p5 > [ 35.646368][ T3697] loop4: partition table partially beyond EOD, truncated [ 35.658830][ T3716] ALSA: seq fatal error: cannot create timer (-19) [ 35.721777][ T3697] loop4: p1 size 100663296 extends beyond EOD, truncated [ 35.735542][ T3716] loop0: detected capacity change from 0 to 8192 [ 35.736259][ T3697] loop4: p2 start 591104 is beyond EOD, truncated [ 35.748535][ T3697] loop4: p3 start 33572980 is beyond EOD, truncated [ 35.765296][ T3697] loop4: p5 size 100663296 extends beyond EOD, truncated [ 35.804240][ T3530] loop0: p1 p2 < > p3 p4 < p5 > [ 35.809237][ T3530] loop0: partition table partially beyond EOD, truncated [ 35.848898][ T3530] loop0: p1 size 100663296 extends beyond EOD, truncated [ 35.878023][ T3530] loop0: p2 start 591104 is beyond EOD, truncated [ 35.884530][ T3530] loop0: p3 start 33572980 is beyond EOD, truncated [ 35.892058][ T3723] loop3: detected capacity change from 0 to 512 [ 35.893924][ T3530] loop0: p5 size 100663296 extends beyond EOD, truncated [ 35.922156][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 35.922313][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 35.934554][ T3716] loop0: p1 p2 < > p3 p4 < p5 > [ 35.946854][ T3716] loop0: partition table partially beyond EOD, truncated [ 35.956796][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 35.977648][ T3723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.982691][ T3716] loop0: p1 size 100663296 extends beyond EOD, truncated [ 36.001186][ T3723] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.020722][ T3723] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.56: corrupted inode contents [ 36.022058][ T3716] loop0: p2 start 591104 is beyond EOD, truncated [ 36.038853][ T3716] loop0: p3 start 33572980 is beyond EOD, truncated [ 36.046961][ T3716] loop0: p5 size 100663296 extends beyond EOD, truncated [ 36.051742][ T3723] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.56: mark_inode_dirty error [ 36.082842][ T3734] serio: Serial port ptm0 [ 36.113940][ T3723] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.56: corrupted inode contents [ 36.143583][ T3723] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.56: mark_inode_dirty error [ 36.153700][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 36.153717][ T29] audit: type=1400 audit(1762763108.503:637): avc: denied { cmd } for pid=3735 comm="syz.4.60" path="socket:[5459]" dev="sockfs" ino=5459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 36.210172][ T3740] serio: Serial port ptm0 [ 36.215044][ T29] audit: type=1400 audit(1762763108.553:638): avc: denied { mounton } for pid=3722 comm="syz.3.56" path="/12/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.257065][ T29] audit: type=1400 audit(1762763108.603:639): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.263985][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.277387][ T29] audit: type=1400 audit(1762763108.613:640): avc: denied { remove_name } for pid=3318 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.308870][ T29] audit: type=1400 audit(1762763108.613:641): avc: denied { unlink } for pid=3318 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.364790][ T29] audit: type=1400 audit(1762763108.673:642): avc: denied { create } for pid=3741 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 36.384444][ T29] audit: type=1400 audit(1762763108.723:643): avc: denied { read write } for pid=3744 comm="syz.4.64" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 36.407937][ T29] audit: type=1400 audit(1762763108.723:644): avc: denied { open } for pid=3744 comm="syz.4.64" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 36.417580][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 36.431334][ T29] audit: type=1400 audit(1762763108.723:645): avc: denied { ioctl } for pid=3744 comm="syz.4.64" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 36.447580][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 36.467730][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 36.495898][ T3747] 9p: Unknown access argument : -22 [ 36.502476][ T3742] batman_adv: batadv0: Adding interface: dummy0 [ 36.508985][ T3742] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.534521][ T29] audit: type=1400 audit(1762763108.863:646): avc: denied { create } for pid=3741 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.535128][ T3742] batman_adv: batadv0: Interface activated: dummy0 [ 36.581878][ T3742] batadv0: mtu less than device minimum [ 36.587787][ T3742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.598672][ T3742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.609545][ T3742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.620387][ T3742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.631188][ T3742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.641984][ T3742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.652845][ T3742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.663539][ T3742] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.695007][ T3749] loop1: detected capacity change from 0 to 512 [ 36.787808][ T3757] loop2: detected capacity change from 0 to 512 [ 36.844227][ T3757] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.67: bg 0: block 248: padding at end of block bitmap is not set [ 36.864105][ T3757] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.67: Failed to acquire dquot type 1 [ 36.876163][ T3757] EXT4-fs (loop2): 1 truncate cleaned up [ 36.882310][ T3757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.896902][ T3757] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.965335][ T3757] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 36.973091][ T3757] __nla_validate_parse: 2 callbacks suppressed [ 36.973108][ T3757] netlink: 224 bytes leftover after parsing attributes in process `syz.2.67'. [ 37.036553][ T3771] 9p: Unknown access argument : -22 [ 37.048536][ T3772] loop0: detected capacity change from 0 to 1024 [ 37.055449][ T3772] EXT4-fs: inline encryption not supported [ 37.080824][ T3772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.205574][ T3757] syz.2.67 (3757) used greatest stack depth: 9200 bytes left [ 37.217939][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.281967][ T3780] loop2: detected capacity change from 0 to 512 [ 37.319263][ T3780] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.349365][ T3780] EXT4-fs (loop2): mount failed [ 37.375093][ T3782] bridge0: port 3(gretap0) entered blocking state [ 37.381599][ T3782] bridge0: port 3(gretap0) entered disabled state [ 37.434028][ T3782] gretap0: entered allmulticast mode [ 37.440897][ T3782] gretap0: entered promiscuous mode [ 37.465962][ T3782] bridge0: port 3(gretap0) entered blocking state [ 37.472457][ T3782] bridge0: port 3(gretap0) entered forwarding state [ 37.745200][ T3795] pim6reg: entered allmulticast mode [ 37.757725][ T3795] pim6reg: left allmulticast mode [ 37.775970][ T3801] netlink: 200 bytes leftover after parsing attributes in process `syz.1.78'. [ 37.821094][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.871670][ T3804] serio: Serial port ptm0 [ 37.877590][ T3805] tipc: Started in network mode [ 37.882569][ T3805] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 37.892183][ T3807] loop3: detected capacity change from 0 to 1024 [ 37.903935][ T3807] EXT4-fs: Ignoring removed orlov option [ 37.917648][ T3807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.967262][ T3805] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 37.975679][ T3805] tipc: Enabled bearer , priority 10 [ 38.086068][ T3815] ip6t_srh: unknown srh match flags 4000 [ 38.183228][ T3815] loop4: detected capacity change from 0 to 8192 [ 38.189655][ T3818] netlink: 48 bytes leftover after parsing attributes in process `syz.0.81'. [ 38.224193][ T3518] loop4: p1 p2 p3 p4 [ 38.228397][ T3518] loop4: p1 size 196608 extends beyond EOD, truncated [ 38.236261][ T3518] loop4: p2 start 164919041 is beyond EOD, truncated [ 38.243011][ T3518] loop4: p3 size 66846464 extends beyond EOD, truncated [ 38.253036][ T3518] loop4: p4 size 37048832 extends beyond EOD, truncated [ 38.271571][ T3815] loop4: p1 p2 p3 p4 [ 38.283826][ T3815] loop4: p1 size 196608 extends beyond EOD, truncated [ 38.296047][ T3815] loop4: p2 start 164919041 is beyond EOD, truncated [ 38.302787][ T3815] loop4: p3 size 66846464 extends beyond EOD, truncated [ 38.334449][ T3815] loop4: p4 size 37048832 extends beyond EOD, truncated [ 38.362288][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.396581][ T3821] ALSA: seq fatal error: cannot create timer (-19) [ 38.519039][ T3821] loop3: detected capacity change from 0 to 8192 [ 38.533189][ T3006] loop4: p1 p2 p3 p4 [ 38.537946][ T3006] loop4: p1 size 196608 extends beyond EOD, truncated [ 38.548619][ T3006] loop4: p2 start 164919041 is beyond EOD, truncated [ 38.555598][ T3006] loop4: p3 size 66846464 extends beyond EOD, truncated [ 38.577202][ T3518] loop3: p1 p2 < > p3 p4 < p5 > [ 38.582196][ T3518] loop3: partition table partially beyond EOD, truncated [ 38.583828][ T3006] loop4: p4 size 37048832 extends beyond EOD, truncated [ 38.589691][ T3518] loop3: p1 size 100663296 extends beyond EOD, truncated [ 38.614334][ T3518] loop3: p2 start 591104 is beyond EOD, truncated [ 38.620932][ T3518] loop3: p3 start 33572980 is beyond EOD, truncated [ 38.639783][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 38.651165][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 38.667264][ T3729] udevd[3729]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 38.688704][ T3518] loop3: p5 size 100663296 extends beyond EOD, truncated [ 38.697067][ T3834] 9p: Unknown access argument : -22 [ 38.706897][ T3821] loop3: p1 p2 < > p3 p4 < p5 > [ 38.711943][ T3821] loop3: partition table partially beyond EOD, truncated [ 38.729714][ T3837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.86'. [ 38.754182][ T3821] loop3: p1 size 100663296 extends beyond EOD, truncated [ 38.774430][ T3821] loop3: p2 start 591104 is beyond EOD, truncated [ 38.780973][ T3821] loop3: p3 start 33572980 is beyond EOD, truncated [ 38.798708][ T3821] loop3: p5 size 100663296 extends beyond EOD, truncated [ 38.983859][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 38.995037][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 38.998421][ T3848] 9p: Unknown access argument : -22 [ 39.022864][ T3845] loop3: detected capacity change from 0 to 1024 [ 39.031741][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 39.046703][ T3845] EXT4-fs: Ignoring removed orlov option [ 39.057158][ T1945] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.070752][ T3845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.073316][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 39.094805][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 39.104601][ T36] tipc: Node number set to 1 [ 39.121320][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 39.292193][ T3862] ALSA: seq fatal error: cannot create timer (-19) [ 39.407527][ T3862] loop4: detected capacity change from 0 to 8192 [ 39.464811][ T3518] loop4: p1 p2 < > p3 p4 < p5 > [ 39.469853][ T3518] loop4: partition table partially beyond EOD, truncated [ 39.483784][ T3518] loop4: p1 size 100663296 extends beyond EOD, truncated [ 39.502069][ T3518] loop4: p2 start 591104 is beyond EOD, truncated [ 39.508625][ T3518] loop4: p3 start 33572980 is beyond EOD, truncated [ 39.544025][ T3518] loop4: p5 size 100663296 extends beyond EOD, truncated [ 39.567669][ T3862] loop4: p1 p2 < > p3 p4 < p5 > [ 39.572717][ T3862] loop4: partition table partially beyond EOD, truncated [ 39.583831][ T3862] loop4: p1 size 100663296 extends beyond EOD, truncated [ 39.612798][ T3862] loop4: p2 start 591104 is beyond EOD, truncated [ 39.619354][ T3862] loop4: p3 start 33572980 is beyond EOD, truncated [ 39.656201][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.674233][ T3862] loop4: p5 size 100663296 extends beyond EOD, truncated [ 39.759618][ T3870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 39.867560][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 39.963937][ T3879] FAULT_INJECTION: forcing a failure. [ 39.963937][ T3879] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.977083][ T3879] CPU: 0 UID: 0 PID: 3879 Comm: syz.3.98 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.977209][ T3879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.977221][ T3879] Call Trace: [ 39.977229][ T3879] [ 39.977238][ T3879] __dump_stack+0x1d/0x30 [ 39.977278][ T3879] dump_stack_lvl+0xe8/0x140 [ 39.977298][ T3879] dump_stack+0x15/0x1b [ 39.977359][ T3879] should_fail_ex+0x265/0x280 [ 39.977458][ T3879] should_fail+0xb/0x20 [ 39.977476][ T3879] should_fail_usercopy+0x1a/0x20 [ 39.977498][ T3879] _copy_from_user+0x1c/0xb0 [ 39.977523][ T3879] get_user_ifreq+0x53/0x110 [ 39.977617][ T3879] sock_ioctl+0x54e/0x610 [ 39.977644][ T3879] ? __pfx_sock_ioctl+0x10/0x10 [ 39.977744][ T3879] __se_sys_ioctl+0xce/0x140 [ 39.977769][ T3879] __x64_sys_ioctl+0x43/0x50 [ 39.977791][ T3879] x64_sys_call+0x1816/0x3000 [ 39.977813][ T3879] do_syscall_64+0xd2/0x200 [ 39.977833][ T3879] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.977879][ T3879] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.977917][ T3879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.978009][ T3879] RIP: 0033:0x7ff2ad62f6c9 [ 39.978024][ T3879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.978042][ T3879] RSP: 002b:00007ff2ac097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.978064][ T3879] RAX: ffffffffffffffda RBX: 00007ff2ad885fa0 RCX: 00007ff2ad62f6c9 [ 39.978076][ T3879] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000004 [ 39.978088][ T3879] RBP: 00007ff2ac097090 R08: 0000000000000000 R09: 0000000000000000 [ 39.978128][ T3879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.978142][ T3879] R13: 00007ff2ad886038 R14: 00007ff2ad885fa0 R15: 00007ffcbe749748 [ 39.978162][ T3879] [ 40.283299][ T3872] netlink: 48 bytes leftover after parsing attributes in process `syz.4.95'. [ 40.389562][ T3893] ALSA: seq fatal error: cannot create timer (-19) [ 40.468462][ T3893] loop4: detected capacity change from 0 to 8192 [ 40.548224][ T1889] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.557153][ T1889] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.573898][ T3893] loop4: p1 p2 < > p3 p4 < p5 > [ 40.574093][ T1889] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.578944][ T3893] loop4: partition table partially beyond EOD, truncated [ 40.593811][ T3893] loop4: p1 size 100663296 extends beyond EOD, truncated [ 40.621975][ T1889] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.631404][ T3893] loop4: p2 start 591104 is beyond EOD, truncated [ 40.637922][ T3893] loop4: p3 start 33572980 is beyond EOD, truncated [ 40.676520][ T3893] loop4: p5 size 100663296 extends beyond EOD, truncated [ 40.860440][ T3916] x_tables: duplicate underflow at hook 1 [ 40.869835][ T3898] netlink: 48 bytes leftover after parsing attributes in process `syz.2.104'. [ 40.888704][ T3916] loop4: detected capacity change from 0 to 128 [ 40.982524][ T3924] loop2: detected capacity change from 0 to 512 [ 40.998919][ T3924] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.023961][ T3924] EXT4-fs (loop2): mount failed [ 41.053565][ T3928] loop2: detected capacity change from 0 to 512 [ 41.124153][ T3853] Bluetooth: hci0: command 0x1003 tx timeout [ 41.130267][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.140478][ T3928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.153112][ T29] kauditd_printk_skb: 637 callbacks suppressed [ 41.153175][ T29] audit: type=1326 audit(1762763113.503:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 41.182817][ T29] audit: type=1326 audit(1762763113.503:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 41.209032][ T3928] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.221862][ T3928] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.114: corrupted inode contents [ 41.222421][ T3922] netlink: 48 bytes leftover after parsing attributes in process `syz.4.112'. [ 41.234090][ T3928] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.114: mark_inode_dirty error [ 41.253893][ T29] audit: type=1326 audit(1762763113.583:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 41.277558][ T29] audit: type=1326 audit(1762763113.583:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 41.301423][ T29] audit: type=1326 audit(1762763113.583:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 41.324935][ T29] audit: type=1326 audit(1762763113.583:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 41.348407][ T29] audit: type=1326 audit(1762763113.583:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 41.373398][ T29] audit: type=1326 audit(1762763113.583:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 41.375407][ T3928] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.114: corrupted inode contents [ 41.396903][ T29] audit: type=1326 audit(1762763113.583:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 41.409404][ T3928] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.114: mark_inode_dirty error [ 41.431891][ T29] audit: type=1326 audit(1762763113.583:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 41.494623][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.582937][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 41.629869][ T3948] tipc: Started in network mode [ 41.634908][ T3948] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 41.719834][ T3956] loop1: detected capacity change from 0 to 512 [ 41.726683][ T3948] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 41.735101][ T3948] tipc: Enabled bearer , priority 10 [ 41.747741][ T3956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.761077][ T3956] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.772129][ T3956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.821219][ T3973] loop4: detected capacity change from 0 to 512 [ 41.845871][ T3976] loop1: detected capacity change from 0 to 512 [ 41.852460][ T3978] FAULT_INJECTION: forcing a failure. [ 41.852460][ T3978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.865712][ T3978] CPU: 1 UID: 0 PID: 3978 Comm: syz.0.130 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.865745][ T3978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.865758][ T3978] Call Trace: [ 41.865784][ T3978] [ 41.865792][ T3978] __dump_stack+0x1d/0x30 [ 41.865820][ T3978] dump_stack_lvl+0xe8/0x140 [ 41.865846][ T3978] dump_stack+0x15/0x1b [ 41.865906][ T3978] should_fail_ex+0x265/0x280 [ 41.865974][ T3978] should_fail+0xb/0x20 [ 41.865993][ T3978] should_fail_usercopy+0x1a/0x20 [ 41.866016][ T3978] strncpy_from_user+0x25/0x230 [ 41.866044][ T3978] ? kmem_cache_alloc_noprof+0x242/0x480 [ 41.866110][ T3978] ? getname_flags+0x80/0x3b0 [ 41.866152][ T3978] getname_flags+0xae/0x3b0 [ 41.866229][ T3978] __x64_sys_link+0x40/0x70 [ 41.866294][ T3978] x64_sys_call+0x12a7/0x3000 [ 41.866330][ T3978] do_syscall_64+0xd2/0x200 [ 41.866445][ T3978] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.866473][ T3978] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.866549][ T3978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.866575][ T3978] RIP: 0033:0x7f41bbc4f6c9 [ 41.866594][ T3978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.866616][ T3978] RSP: 002b:00007f41ba6b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 41.866684][ T3978] RAX: ffffffffffffffda RBX: 00007f41bbea5fa0 RCX: 00007f41bbc4f6c9 [ 41.866697][ T3978] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000940 [ 41.866779][ T3978] RBP: 00007f41ba6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.866793][ T3978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.866808][ T3978] R13: 00007f41bbea6038 R14: 00007f41bbea5fa0 R15: 00007ffdae48d0e8 [ 41.866829][ T3978] [ 42.067472][ T3976] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.083294][ T3976] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.100499][ T3976] EXT4-fs (loop1): 1 truncate cleaned up [ 42.107379][ T3973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.111183][ T3976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.120282][ T3973] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.148479][ T3973] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.127: corrupted inode contents [ 42.160655][ T3973] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.127: mark_inode_dirty error [ 42.160859][ T3976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.172803][ T3973] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.127: corrupted inode contents [ 42.205987][ T3973] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.127: mark_inode_dirty error [ 42.221573][ T3987] bridge0: port 3(gretap0) entered blocking state [ 42.228274][ T3987] bridge0: port 3(gretap0) entered disabled state [ 42.237675][ T3987] gretap0: entered allmulticast mode [ 42.249309][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.251785][ T3987] gretap0: entered promiscuous mode [ 42.268238][ T3987] bridge0: port 3(gretap0) entered blocking state [ 42.274799][ T3987] bridge0: port 3(gretap0) entered forwarding state [ 42.285490][ T3987] gretap0: left allmulticast mode [ 42.290590][ T3987] gretap0: left promiscuous mode [ 42.295877][ T3987] bridge0: port 3(gretap0) entered disabled state [ 42.304162][ T3990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 42.309087][ T3979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.129'. [ 42.360280][ T3993] loop0: detected capacity change from 0 to 512 [ 42.367946][ T3976] loop1: detected capacity change from 0 to 128 [ 42.381913][ T3976] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.407528][ T3976] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.418556][ T3993] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.434172][ T3993] EXT4-fs (loop0): mount failed [ 42.476020][ T4002] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 42.539594][ T4009] netlink: 200 bytes leftover after parsing attributes in process `syz.4.140'. [ 42.550810][ T4004] ALSA: seq fatal error: cannot create timer (-19) [ 42.619597][ T4013] loop1: detected capacity change from 0 to 8192 [ 42.685982][ T4013] loop1: p1 p2 < > p3 p4 < p5 > [ 42.691016][ T4013] loop1: partition table partially beyond EOD, truncated [ 42.700788][ T4021] serio: Serial port ptm0 [ 42.715900][ T4013] loop1: p1 size 100663296 extends beyond EOD, truncated [ 42.726221][ T4013] loop1: p2 start 591104 is beyond EOD, truncated [ 42.732737][ T4013] loop1: p3 start 33572980 is beyond EOD, truncated [ 42.740828][ T4013] loop1: p5 size 100663296 extends beyond EOD, truncated [ 42.853747][ T3788] tipc: Node number set to 1 [ 42.871983][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 43.043940][ T4042] loop4: detected capacity change from 0 to 512 [ 43.070727][ T4033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.145'. [ 43.090141][ T4042] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.107690][ T4042] EXT4-fs (loop4): mount failed [ 43.145886][ T4048] loop4: detected capacity change from 0 to 512 [ 43.152947][ T4048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.172247][ T4048] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.184859][ T4048] EXT4-fs (loop4): 1 truncate cleaned up [ 43.194595][ T4048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.218730][ T4048] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.291538][ T4048] loop4: detected capacity change from 0 to 128 [ 43.301608][ T4048] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.338066][ T4048] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.340450][ T4067] netlink: 200 bytes leftover after parsing attributes in process `syz.3.157'. [ 43.366400][ T4065] serio: Serial port ptm0 [ 43.417632][ T4069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'. [ 43.465498][ T4073] ALSA: seq fatal error: cannot create timer (-19) [ 43.517597][ T4073] loop1: detected capacity change from 0 to 8192 [ 43.529498][ T4076] 9p: Unknown access argument : -22 [ 43.534553][ T4078] loop3: detected capacity change from 0 to 512 [ 43.555282][ T4078] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.563985][ T3518] loop1: p1 p2 < > p3 p4 < p5 > [ 43.570594][ T4078] EXT4-fs (loop3): mount failed [ 43.574888][ T3518] loop1: partition table partially beyond EOD, truncated [ 43.586973][ T3518] loop1: p1 size 100663296 extends beyond EOD, truncated [ 43.597596][ T3518] loop1: p2 start 591104 is beyond EOD, truncated [ 43.604098][ T3518] loop1: p3 start 33572980 is beyond EOD, truncated [ 43.611690][ T3518] loop1: p5 size 100663296 extends beyond EOD, truncated [ 43.624100][ T4073] loop1: p1 p2 < > p3 p4 < p5 > [ 43.629079][ T4073] loop1: partition table partially beyond EOD, truncated [ 43.638028][ T4073] loop1: p1 size 100663296 extends beyond EOD, truncated [ 43.645813][ T4073] loop1: p2 start 591104 is beyond EOD, truncated [ 43.645847][ T4073] loop1: p3 start 33572980 is beyond EOD, truncated [ 43.646480][ T4073] loop1: p5 size 100663296 extends beyond EOD, truncated [ 43.750013][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 43.750113][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 43.763081][ T4092] ALSA: seq fatal error: cannot create timer (-19) [ 43.771227][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 43.808846][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 43.808955][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 43.819925][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 43.852929][ T1889] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.867258][ T1889] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.876205][ T1889] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.885089][ T1889] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.941799][ T4097] serio: Serial port ptm1 [ 44.024418][ T4100] loop3: detected capacity change from 0 to 512 [ 44.032697][ T4100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.045604][ T4100] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.056805][ T4100] EXT4-fs (loop3): 1 truncate cleaned up [ 44.062923][ T4100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.076396][ T4100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.109190][ T4100] loop3: detected capacity change from 0 to 128 [ 44.116728][ T4100] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.134884][ T4100] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.148262][ T4100] bond0: (slave veth1_to_bond): Error: Device can not be enslaved while up [ 44.188130][ T4105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 44.236574][ T4107] netlink: 200 bytes leftover after parsing attributes in process `syz.3.171'. [ 44.359324][ T4113] loop3: detected capacity change from 0 to 512 [ 44.377177][ T4113] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.392333][ T4113] EXT4-fs (loop3): mount failed [ 44.706299][ T4127] serio: Serial port ptm0 [ 44.817890][ T4132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 44.884645][ T4136] loop1: detected capacity change from 0 to 512 [ 44.916103][ T4140] loop3: detected capacity change from 0 to 512 [ 44.917120][ T4136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.934969][ T4136] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.956845][ T4140] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.971992][ T4140] EXT4-fs (loop3): mount failed [ 44.990595][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.031261][ T4146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.040616][ T4146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.108727][ T1945] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.117694][ T1945] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.126847][ T1945] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.135954][ T339] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.163830][ T4156] serio: Serial port ptm0 [ 45.230434][ T4162] ALSA: seq fatal error: cannot create timer (-19) [ 45.284178][ T4162] loop1: detected capacity change from 0 to 8192 [ 45.324547][ T4162] loop1: p1 p2 < > p3 p4 < p5 > [ 45.329534][ T4162] loop1: partition table partially beyond EOD, truncated [ 45.336947][ T4162] loop1: p1 size 100663296 extends beyond EOD, truncated [ 45.345168][ T4162] loop1: p2 start 591104 is beyond EOD, truncated [ 45.351670][ T4162] loop1: p3 start 33572980 is beyond EOD, truncated [ 45.355886][ T4168] xt_socket: unknown flags 0x50 [ 45.358775][ T4162] loop1: p5 size 100663296 extends beyond EOD, truncated [ 45.377817][ T3006] loop1: p1 p2 < > p3 p4 < p5 > [ 45.382782][ T3006] loop1: partition table partially beyond EOD, truncated [ 45.392259][ T3006] loop1: p1 size 100663296 extends beyond EOD, truncated [ 45.408127][ T4170] loop4: detected capacity change from 0 to 512 [ 45.425131][ T3006] loop1: p2 start 591104 is beyond EOD, truncated [ 45.431637][ T3006] loop1: p3 start 33572980 is beyond EOD, truncated [ 45.440326][ T3006] loop1: p5 size 100663296 extends beyond EOD, truncated [ 45.448502][ T4170] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.504856][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 45.529549][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 45.541445][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 45.554030][ T4170] EXT4-fs (loop4): mount failed [ 45.584074][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 45.671214][ T4183] loop3: detected capacity change from 0 to 512 [ 45.730909][ T4183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.746754][ T4190] serio: Serial port ptm0 [ 45.765146][ T4183] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.832008][ T4183] EXT4-fs (loop3): 1 truncate cleaned up [ 45.838282][ T4183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.853878][ T4183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.877764][ T4198] ALSA: seq fatal error: cannot create timer (-19) [ 45.893384][ T4183] loop3: detected capacity change from 0 to 128 [ 45.920971][ T4183] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.953969][ T4183] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.970080][ T4205] loop0: detected capacity change from 0 to 512 [ 45.986961][ T4183] bond0: (slave veth1_to_bond): Error: Device can not be enslaved while up [ 46.015478][ T4198] loop2: detected capacity change from 0 to 8192 [ 46.029239][ T4205] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.044490][ T4205] EXT4-fs (loop0): mount failed [ 46.077504][ T3518] loop2: p1 p2 < > p3 p4 < p5 > [ 46.082540][ T3518] loop2: partition table partially beyond EOD, truncated [ 46.111830][ T3518] loop2: p1 size 100663296 extends beyond EOD, truncated [ 46.121400][ T3518] loop2: p2 start 591104 is beyond EOD, truncated [ 46.127946][ T3518] loop2: p3 start 33572980 is beyond EOD, truncated [ 46.151562][ T3518] loop2: p5 size 100663296 extends beyond EOD, truncated [ 46.166346][ T4198] loop2: p1 p2 < > p3 p4 < p5 > [ 46.171411][ T4198] loop2: partition table partially beyond EOD, truncated [ 46.179453][ T4198] loop2: p1 size 100663296 extends beyond EOD, truncated [ 46.202992][ T4198] loop2: p2 start 591104 is beyond EOD, truncated [ 46.209545][ T4198] loop2: p3 start 33572980 is beyond EOD, truncated [ 46.224525][ T4198] loop2: p5 size 100663296 extends beyond EOD, truncated [ 46.262311][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 46.262327][ T29] audit: type=1400 audit(1762763118.623:1710): avc: denied { setopt } for pid=4223 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.314695][ T29] audit: type=1400 audit(1762763118.653:1711): avc: denied { getopt } for pid=4223 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.391457][ T4232] ALSA: seq fatal error: cannot create timer (-19) [ 46.406665][ T29] audit: type=1326 audit(1762763118.773:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x0 [ 46.562089][ T29] audit: type=1326 audit(1762763118.923:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bbc4f6c9 code=0x7ffc0000 [ 46.586313][ T29] audit: type=1326 audit(1762763118.923:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bbc4f6c9 code=0x7ffc0000 [ 46.609744][ T29] audit: type=1326 audit(1762763118.923:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bbc4f6c9 code=0x7ffc0000 [ 46.633178][ T29] audit: type=1326 audit(1762763118.923:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bbc4f6c9 code=0x7ffc0000 [ 46.656604][ T29] audit: type=1326 audit(1762763118.923:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41bbc4f6c9 code=0x7ffc0000 [ 46.679991][ T29] audit: type=1326 audit(1762763118.923:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bbc4f6c9 code=0x7ffc0000 [ 46.703489][ T29] audit: type=1326 audit(1762763118.923:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bbc4f6c9 code=0x7ffc0000 [ 46.804480][ T4256] loop1: detected capacity change from 0 to 512 [ 46.820541][ T4261] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.233' sets config #0 [ 46.836126][ T4256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.849426][ T4258] ALSA: seq fatal error: cannot create timer (-19) [ 46.856344][ T4256] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.877809][ T4256] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.231: corrupted inode contents [ 46.890736][ T4256] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.231: mark_inode_dirty error [ 46.902482][ T4256] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.231: corrupted inode contents [ 46.914431][ T4258] loop0: detected capacity change from 0 to 8192 [ 46.926967][ T4256] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.231: mark_inode_dirty error [ 46.964517][ T3518] loop0: p1 p2 < > p3 p4 < p5 > [ 46.969529][ T3518] loop0: partition table partially beyond EOD, truncated [ 46.977574][ T3518] loop0: p1 size 100663296 extends beyond EOD, truncated [ 46.987681][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.999025][ T3518] loop0: p2 start 591104 is beyond EOD, truncated [ 47.005529][ T3518] loop0: p3 start 33572980 is beyond EOD, truncated [ 47.020553][ T3518] loop0: p5 size 100663296 extends beyond EOD, truncated [ 47.038605][ T4258] loop0: p1 p2 < > p3 p4 < p5 > [ 47.043605][ T4258] loop0: partition table partially beyond EOD, truncated [ 47.052287][ T4258] loop0: p1 size 100663296 extends beyond EOD, truncated [ 47.061095][ T4258] loop0: p2 start 591104 is beyond EOD, truncated [ 47.067612][ T4258] loop0: p3 start 33572980 is beyond EOD, truncated [ 47.075608][ T4258] loop0: p5 size 100663296 extends beyond EOD, truncated [ 47.110057][ T4276] ALSA: seq fatal error: cannot create timer (-19) [ 47.311074][ T4294] loop1: detected capacity change from 0 to 512 [ 47.322629][ T4291] team0 (unregistering): Port device team_slave_0 removed [ 47.334563][ T4291] team0 (unregistering): Port device team_slave_1 removed [ 47.352326][ T4294] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 47.370472][ T4294] EXT4-fs (loop1): invalid journal inode [ 47.373755][ T4300] mmap: syz.4.243 (4300) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.388806][ T4294] EXT4-fs (loop1): can't get journal size [ 47.399119][ T4294] EXT4-fs (loop1): 1 truncate cleaned up [ 47.406037][ T3404] syz!: Port: 1 Link DOWN [ 47.421280][ T4294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.434483][ T4287] __nla_validate_parse: 9 callbacks suppressed [ 47.434563][ T4287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.242'. [ 47.461410][ T4294] netlink: 256 bytes leftover after parsing attributes in process `syz.1.244'. [ 47.470567][ T4294] netlink: 72 bytes leftover after parsing attributes in process `syz.1.244'. [ 47.480257][ T4294] SELinux: policydb magic number 0x33747865 does not match expected magic number 0xf97cff8c [ 47.490523][ T4294] SELinux: failed to load policy [ 47.511736][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.544624][ T4308] loop4: detected capacity change from 0 to 512 [ 47.577145][ T4319] loop3: detected capacity change from 0 to 512 [ 47.579048][ T4316] ALSA: seq fatal error: cannot create timer (-19) [ 47.586935][ T4319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.602809][ T4318] FAULT_INJECTION: forcing a failure. [ 47.602809][ T4318] name failslab, interval 1, probability 0, space 0, times 1 [ 47.603861][ T4308] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.615555][ T4318] CPU: 0 UID: 0 PID: 4318 Comm: syz.1.249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.615583][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.615653][ T4318] Call Trace: [ 47.615660][ T4318] [ 47.615669][ T4318] __dump_stack+0x1d/0x30 [ 47.615694][ T4318] dump_stack_lvl+0xe8/0x140 [ 47.615716][ T4318] dump_stack+0x15/0x1b [ 47.615735][ T4318] should_fail_ex+0x265/0x280 [ 47.615787][ T4318] should_failslab+0x8c/0xb0 [ 47.615817][ T4318] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 47.615851][ T4318] ? __get_vm_area_node+0x106/0x1d0 [ 47.615952][ T4318] __get_vm_area_node+0x106/0x1d0 [ 47.615984][ T4318] __vmalloc_node_range_noprof+0x28c/0xed0 [ 47.616017][ T4318] ? sel_write_load+0x158/0x380 [ 47.616068][ T4318] ? _parse_integer+0x27/0x40 [ 47.616152][ T4318] ? sel_write_load+0x158/0x380 [ 47.616171][ T4318] vmalloc_noprof+0x82/0xc0 [ 47.616202][ T4318] ? sel_write_load+0x158/0x380 [ 47.616221][ T4318] sel_write_load+0x158/0x380 [ 47.616264][ T4318] ? __pfx_sel_write_load+0x10/0x10 [ 47.616284][ T4318] vfs_write+0x269/0x960 [ 47.616310][ T4318] ? __rcu_read_unlock+0x4f/0x70 [ 47.616415][ T4318] ? __fget_files+0x184/0x1c0 [ 47.616445][ T4318] ksys_write+0xda/0x1a0 [ 47.616471][ T4318] __x64_sys_write+0x40/0x50 [ 47.616498][ T4318] x64_sys_call+0x2802/0x3000 [ 47.616525][ T4318] do_syscall_64+0xd2/0x200 [ 47.616547][ T4318] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.616650][ T4318] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 47.616684][ T4318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.616707][ T4318] RIP: 0033:0x7fa9c387f6c9 [ 47.616787][ T4318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.616843][ T4318] RSP: 002b:00007fa9c22df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.616864][ T4318] RAX: ffffffffffffffda RBX: 00007fa9c3ad5fa0 RCX: 00007fa9c387f6c9 [ 47.616878][ T4318] RDX: 00000000000190da RSI: 0000200000000000 RDI: 0000000000000005 [ 47.616891][ T4318] RBP: 00007fa9c22df090 R08: 0000000000000000 R09: 0000000000000000 [ 47.616979][ T4318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.616992][ T4318] R13: 00007fa9c3ad6038 R14: 00007fa9c3ad5fa0 R15: 00007ffdf36f42e8 [ 47.617011][ T4318] [ 47.617019][ T4318] syz.1.249: vmalloc error: size 102618, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 47.666978][ T4319] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.669787][ T4318] ,cpuset=/,mems_allowed=0 [ 47.669890][ T4318] CPU: 0 UID: 0 PID: 4318 Comm: syz.1.249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.669917][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.669930][ T4318] Call Trace: [ 47.669937][ T4318] [ 47.669945][ T4318] __dump_stack+0x1d/0x30 [ 47.670042][ T4318] dump_stack_lvl+0xe8/0x140 [ 47.670064][ T4318] dump_stack+0x15/0x1b [ 47.670082][ T4318] warn_alloc+0x12b/0x1a0 [ 47.670219][ T4318] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 47.670256][ T4318] ? _parse_integer+0x27/0x40 [ 47.670336][ T4318] ? sel_write_load+0x158/0x380 [ 47.670364][ T4318] vmalloc_noprof+0x82/0xc0 [ 47.670397][ T4318] ? sel_write_load+0x158/0x380 [ 47.670416][ T4318] sel_write_load+0x158/0x380 [ 47.670436][ T4318] ? __pfx_sel_write_load+0x10/0x10 [ 47.670495][ T4318] vfs_write+0x269/0x960 [ 47.670566][ T4318] ? __rcu_read_unlock+0x4f/0x70 [ 47.670594][ T4318] ? __fget_files+0x184/0x1c0 [ 47.670624][ T4318] ksys_write+0xda/0x1a0 [ 47.670651][ T4318] __x64_sys_write+0x40/0x50 [ 47.670729][ T4318] x64_sys_call+0x2802/0x3000 [ 47.670810][ T4318] do_syscall_64+0xd2/0x200 [ 47.670832][ T4318] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.670861][ T4318] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 47.670895][ T4318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.670972][ T4318] RIP: 0033:0x7fa9c387f6c9 [ 47.671016][ T4318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.671035][ T4318] RSP: 002b:00007fa9c22df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.671056][ T4318] RAX: ffffffffffffffda RBX: 00007fa9c3ad5fa0 RCX: 00007fa9c387f6c9 [ 47.671069][ T4318] RDX: 00000000000190da RSI: 0000200000000000 RDI: 0000000000000005 [ 47.671083][ T4318] RBP: 00007fa9c22df090 R08: 0000000000000000 R09: 0000000000000000 [ 47.671095][ T4318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.671108][ T4318] R13: 00007fa9c3ad6038 R14: 00007fa9c3ad5fa0 R15: 00007ffdf36f42e8 [ 47.671144][ T4318] [ 47.671151][ T4318] Mem-Info: [ 47.690599][ T4319] EXT4-fs (loop3): 1 truncate cleaned up [ 47.695181][ T4318] active_anon:10160 inactive_anon:3 isolated_anon:0 [ 47.695181][ T4318] active_file:9099 inactive_file:2257 isolated_file:0 [ 47.695181][ T4318] unevictable:0 dirty:1692 writeback:0 [ 47.695181][ T4318] slab_reclaimable:3213 slab_unreclaimable:15731 [ 47.695181][ T4318] mapped:29525 shmem:2635 pagetables:1468 [ 47.695181][ T4318] sec_pagetables:0 bounce:0 [ 47.695181][ T4318] kernel_misc_reclaimable:0 [ 47.695181][ T4318] free:1837931 free_pcp:63850 free_cma:0 [ 47.701640][ T4319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.705878][ T4318] Node 0 active_anon:40640kB inactive_anon:12kB active_file:36396kB inactive_file:9028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118100kB dirty:6768kB writeback:0kB shmem:10540kB kernel_stack:3520kB pagetables:5872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 47.712129][ T4319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.715430][ T4318] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 47.744512][ T4308] EXT4-fs (loop4): mount failed [ 47.748966][ T4318] lowmem_reserve[]: [ 47.773319][ T4316] loop2: detected capacity change from 0 to 8192 [ 47.778965][ T4318] 0 2881 7859 7859 [ 48.242778][ T4318] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 48.274358][ T4318] lowmem_reserve[]: 0 0 4978 4978 [ 48.279438][ T4318] Node 0 Normal free:4405992kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35304kB inactive_anon:12kB active_file:36396kB inactive_file:9144kB unevictable:0kB writepending:6768kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:239840kB local_pcp:69108kB free_cma:0kB [ 48.282941][ T4332] ALSA: seq fatal error: cannot create timer (-19) [ 48.312845][ T4318] lowmem_reserve[]: 0 0 0 0 [ 48.324187][ T4318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 48.337148][ T4318] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 48.353500][ T4318] Node 0 Normal: 768*4kB (UME) 348*8kB (UM) 200*16kB (UM) 145*32kB (UM) 95*64kB (UME) 70*128kB (UM) 69*256kB (UM) 49*512kB (UM) 53*1024kB (UM) 28*2048kB (UME) 1031*4096kB (UM) = 4406080kB [ 48.372618][ T4318] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 48.382342][ T4318] 12686 total pagecache pages [ 48.387090][ T4318] 3 pages in swap cache [ 48.391253][ T4318] Free swap = 124984kB [ 48.395433][ T4318] Total swap = 124996kB [ 48.399596][ T4318] 2097051 pages RAM [ 48.403505][ T4318] 0 pages HighMem/MovableOnly [ 48.408207][ T4318] 81087 pages reserved [ 48.432732][ T4319] loop3: detected capacity change from 0 to 128 [ 48.439492][ T4319] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.452097][ T4316] loop2: p1 p2 < > p3 p4 < p5 > [ 48.457132][ T4316] loop2: partition table partially beyond EOD, truncated [ 48.464417][ T4319] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.477107][ T4316] loop2: p1 size 100663296 extends beyond EOD, truncated [ 48.492528][ T4316] loop2: p2 start 591104 is beyond EOD, truncated [ 48.495537][ T4319] bond0: (slave veth1_to_bond): Error: Device can not be enslaved while up [ 48.499162][ T4316] loop2: p3 start 33572980 is beyond EOD, truncated [ 48.515087][ T4316] loop2: p5 size 100663296 extends beyond EOD, truncated [ 48.613481][ T4348] FAULT_INJECTION: forcing a failure. [ 48.613481][ T4348] name failslab, interval 1, probability 0, space 0, times 0 [ 48.626291][ T4348] CPU: 0 UID: 0 PID: 4348 Comm: syz.3.261 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.626322][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.626380][ T4348] Call Trace: [ 48.626387][ T4348] [ 48.626396][ T4348] __dump_stack+0x1d/0x30 [ 48.626420][ T4348] dump_stack_lvl+0xe8/0x140 [ 48.626440][ T4348] dump_stack+0x15/0x1b [ 48.626457][ T4348] should_fail_ex+0x265/0x280 [ 48.626477][ T4348] should_failslab+0x8c/0xb0 [ 48.626592][ T4348] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 48.626628][ T4348] ? __alloc_skb+0x101/0x320 [ 48.626662][ T4348] __alloc_skb+0x101/0x320 [ 48.626764][ T4348] __ip6_append_data+0x190f/0x2390 [ 48.626795][ T4348] ? __pfx_raw6_getfrag+0x10/0x10 [ 48.626817][ T4348] ? xfrm_lookup_with_ifid+0x10c2/0x1360 [ 48.626928][ T4348] ? __rcu_read_unlock+0x4f/0x70 [ 48.626987][ T4348] ? __pfx_ip6_mtu+0x10/0x10 [ 48.627020][ T4348] ? ip6_mtu+0xf5/0x120 [ 48.627096][ T4348] ip6_append_data+0x138/0x240 [ 48.627118][ T4348] ? __pfx_raw6_getfrag+0x10/0x10 [ 48.627138][ T4348] rawv6_sendmsg+0xdc1/0xf70 [ 48.627209][ T4348] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 48.627248][ T4348] inet_sendmsg+0xc5/0xd0 [ 48.627272][ T4348] __sock_sendmsg+0x102/0x180 [ 48.627309][ T4348] sock_write_iter+0x1a7/0x1f0 [ 48.627360][ T4348] do_iter_readv_writev+0x4a1/0x540 [ 48.627391][ T4348] vfs_writev+0x2df/0x8b0 [ 48.627475][ T4348] do_writev+0xe7/0x210 [ 48.627556][ T4348] __x64_sys_writev+0x45/0x50 [ 48.627658][ T4348] x64_sys_call+0x1e9a/0x3000 [ 48.627759][ T4348] do_syscall_64+0xd2/0x200 [ 48.627779][ T4348] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.627807][ T4348] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.627843][ T4348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.627902][ T4348] RIP: 0033:0x7ff2ad62f6c9 [ 48.627920][ T4348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.627941][ T4348] RSP: 002b:00007ff2ac097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 48.627962][ T4348] RAX: ffffffffffffffda RBX: 00007ff2ad885fa0 RCX: 00007ff2ad62f6c9 [ 48.627975][ T4348] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 48.627987][ T4348] RBP: 00007ff2ac097090 R08: 0000000000000000 R09: 0000000000000000 [ 48.628071][ T4348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.628086][ T4348] R13: 00007ff2ad886038 R14: 00007ff2ad885fa0 R15: 00007ffcbe749748 [ 48.628107][ T4348] [ 48.928103][ T4353] loop1: detected capacity change from 0 to 512 [ 48.988201][ T4361] loop3: detected capacity change from 0 to 1024 [ 48.997408][ T4353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.012026][ T4361] EXT4-fs: Ignoring removed orlov option [ 49.019629][ T4353] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.040662][ T4353] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.263: corrupted inode contents [ 49.070051][ T4361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.093046][ T4353] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.263: mark_inode_dirty error [ 49.203888][ T4353] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.263: corrupted inode contents [ 49.244048][ T4353] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.263: mark_inode_dirty error [ 49.322608][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.360613][ T4370] loop2: detected capacity change from 0 to 2048 [ 49.369174][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.389756][ T4372] ALSA: seq fatal error: cannot create timer (-19) [ 49.413933][ T4370] loop2: p1 p3 [ 49.417491][ T4370] loop2: p1 start 458752 is beyond EOD, truncated [ 49.423970][ T4370] loop2: p3 start 8388352 is beyond EOD, truncated [ 49.452068][ T3006] loop2: p1 p3 [ 49.455751][ T3006] loop2: p1 start 458752 is beyond EOD, truncated [ 49.462231][ T3006] loop2: p3 start 8388352 is beyond EOD, truncated [ 49.491991][ T4372] loop3: detected capacity change from 0 to 8192 [ 49.534323][ T3530] loop3: p1 p2 < > p3 p4 < p5 > [ 49.539322][ T3530] loop3: partition table partially beyond EOD, truncated [ 49.551368][ T3530] loop3: p1 size 100663296 extends beyond EOD, truncated [ 49.560441][ T3530] loop3: p2 start 591104 is beyond EOD, truncated [ 49.566949][ T3530] loop3: p3 start 33572980 is beyond EOD, truncated [ 49.574725][ T3530] loop3: p5 size 100663296 extends beyond EOD, truncated [ 49.587296][ T4372] loop3: p1 p2 < > p3 p4 < p5 > [ 49.592290][ T4372] loop3: partition table partially beyond EOD, truncated [ 49.600325][ T4372] loop3: p1 size 100663296 extends beyond EOD, truncated [ 49.608389][ T4372] loop3: p2 start 591104 is beyond EOD, truncated [ 49.614989][ T4372] loop3: p3 start 33572980 is beyond EOD, truncated [ 49.631092][ T4372] loop3: p5 size 100663296 extends beyond EOD, truncated [ 49.683546][ T4390] loop4: detected capacity change from 0 to 512 [ 49.711043][ T4390] msdos: Unknown parameter 'fsuuid' [ 49.747107][ T4394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.277'. [ 49.793948][ T4397] FAULT_INJECTION: forcing a failure. [ 49.793948][ T4397] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 49.807399][ T4397] CPU: 0 UID: 0 PID: 4397 Comm: syz.3.279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.807431][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 49.807445][ T4397] Call Trace: [ 49.807454][ T4397] [ 49.807463][ T4397] __dump_stack+0x1d/0x30 [ 49.807536][ T4397] dump_stack_lvl+0xe8/0x140 [ 49.807559][ T4397] dump_stack+0x15/0x1b [ 49.807580][ T4397] should_fail_ex+0x265/0x280 [ 49.807602][ T4397] should_fail_alloc_page+0xf2/0x100 [ 49.807635][ T4397] __alloc_frozen_pages_noprof+0xff/0x360 [ 49.807747][ T4397] alloc_pages_mpol+0xb3/0x260 [ 49.807812][ T4397] alloc_pages_noprof+0x90/0x130 [ 49.807836][ T4397] kimage_alloc_control_pages+0x2ec/0x7d0 [ 49.807865][ T4397] do_kexec_load+0x2c0/0x500 [ 49.807892][ T4397] __se_sys_kexec_load+0x134/0x160 [ 49.807977][ T4397] __x64_sys_kexec_load+0x55/0x70 [ 49.808005][ T4397] x64_sys_call+0x289c/0x3000 [ 49.808112][ T4397] do_syscall_64+0xd2/0x200 [ 49.808135][ T4397] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.808244][ T4397] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 49.808288][ T4397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.808324][ T4397] RIP: 0033:0x7ff2ad62f6c9 [ 49.808342][ T4397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.808362][ T4397] RSP: 002b:00007ff2ac097038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 49.808385][ T4397] RAX: ffffffffffffffda RBX: 00007ff2ad885fa0 RCX: 00007ff2ad62f6c9 [ 49.808410][ T4397] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000 [ 49.808425][ T4397] RBP: 00007ff2ac097090 R08: 0000000000000000 R09: 0000000000000000 [ 49.808439][ T4397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.808454][ T4397] R13: 00007ff2ad886038 R14: 00007ff2ad885fa0 R15: 00007ffcbe749748 [ 49.808474][ T4397] [ 49.808485][ T4397] kexec: Could not allocate control_code_buffer [ 49.904725][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 49.916808][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 49.955199][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 50.045784][ T4399] loop1: detected capacity change from 0 to 1024 [ 50.055209][ T4403] loop3: detected capacity change from 0 to 1024 [ 50.056040][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 50.061801][ T4403] EXT4-fs: Ignoring removed orlov option [ 50.079362][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 50.094088][ T4399] EXT4-fs: Ignoring removed orlov option [ 50.109686][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 50.111596][ T4407] FAULT_INJECTION: forcing a failure. [ 50.111596][ T4407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.132792][ T4407] CPU: 0 UID: 0 PID: 4407 Comm: syz.4.284 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.132821][ T4407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.132876][ T4407] Call Trace: [ 50.132884][ T4407] [ 50.132894][ T4407] __dump_stack+0x1d/0x30 [ 50.132921][ T4407] dump_stack_lvl+0xe8/0x140 [ 50.132966][ T4407] dump_stack+0x15/0x1b [ 50.132985][ T4407] should_fail_ex+0x265/0x280 [ 50.133063][ T4407] should_fail+0xb/0x20 [ 50.133083][ T4407] should_fail_usercopy+0x1a/0x20 [ 50.133109][ T4407] _copy_from_iter+0xd2/0xe80 [ 50.133138][ T4407] ? selinux_file_open+0x2df/0x330 [ 50.133210][ T4407] ? __rcu_read_unlock+0x4f/0x70 [ 50.133242][ T4407] rawv6_sendmsg+0x81f/0xf70 [ 50.133296][ T4407] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 50.133400][ T4407] inet_sendmsg+0xc5/0xd0 [ 50.133427][ T4407] __sock_sendmsg+0x102/0x180 [ 50.133467][ T4407] sock_write_iter+0x1a7/0x1f0 [ 50.133492][ T4407] ? __pfx_sock_write_iter+0x10/0x10 [ 50.133515][ T4407] vfs_write+0x52a/0x960 [ 50.133547][ T4407] ksys_write+0xda/0x1a0 [ 50.133588][ T4407] __x64_sys_write+0x40/0x50 [ 50.133615][ T4407] x64_sys_call+0x2802/0x3000 [ 50.133637][ T4407] do_syscall_64+0xd2/0x200 [ 50.133686][ T4407] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.133718][ T4407] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.133755][ T4407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.133780][ T4407] RIP: 0033:0x7ff146b7f6c9 [ 50.133840][ T4407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.133858][ T4407] RSP: 002b:00007ff1455df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.133880][ T4407] RAX: ffffffffffffffda RBX: 00007ff146dd5fa0 RCX: 00007ff146b7f6c9 [ 50.133895][ T4407] RDX: 00000000000005ac RSI: 00002000000000c0 RDI: 0000000000000003 [ 50.133908][ T4407] RBP: 00007ff1455df090 R08: 0000000000000000 R09: 0000000000000000 [ 50.133920][ T4407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.133945][ T4407] R13: 00007ff146dd6038 R14: 00007ff146dd5fa0 R15: 00007fffc62d0188 [ 50.133967][ T4407] [ 50.379048][ T4399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.400915][ T4403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.414599][ T4389] loop2: detected capacity change from 0 to 8192 [ 50.484561][ T4419] FAULT_INJECTION: forcing a failure. [ 50.484561][ T4419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.497840][ T4419] CPU: 1 UID: 0 PID: 4419 Comm: syz.0.288 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.497873][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.497888][ T4419] Call Trace: [ 50.497896][ T4419] [ 50.497904][ T4419] __dump_stack+0x1d/0x30 [ 50.498003][ T4419] dump_stack_lvl+0xe8/0x140 [ 50.498026][ T4419] dump_stack+0x15/0x1b [ 50.498043][ T4419] should_fail_ex+0x265/0x280 [ 50.498063][ T4419] should_fail+0xb/0x20 [ 50.498083][ T4419] should_fail_usercopy+0x1a/0x20 [ 50.498165][ T4419] _copy_from_user+0x1c/0xb0 [ 50.498219][ T4419] __sys_bind+0x106/0x2a0 [ 50.498268][ T4419] __x64_sys_bind+0x3f/0x50 [ 50.498297][ T4419] x64_sys_call+0x2b72/0x3000 [ 50.498325][ T4419] do_syscall_64+0xd2/0x200 [ 50.498422][ T4419] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.498457][ T4419] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.498496][ T4419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.498553][ T4419] RIP: 0033:0x7f41bbc4f6c9 [ 50.498650][ T4419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.498672][ T4419] RSP: 002b:00007f41ba6b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 50.498695][ T4419] RAX: ffffffffffffffda RBX: 00007f41bbea5fa0 RCX: 00007f41bbc4f6c9 [ 50.498707][ T4419] RDX: 0000000000000074 RSI: 0000200000000000 RDI: 0000000000000004 [ 50.498720][ T4419] RBP: 00007f41ba6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.498733][ T4419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.498745][ T4419] R13: 00007f41bbea6038 R14: 00007f41bbea5fa0 R15: 00007ffdae48d0e8 [ 50.498763][ T4419] [ 50.502418][ T4420] serio: Serial port ptm0 [ 50.794081][ T4429] loop0: detected capacity change from 0 to 512 [ 50.837947][ T4429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.856797][ T4429] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.884243][ T4429] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.289: corrupted inode contents [ 50.920240][ T4429] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.289: mark_inode_dirty error [ 50.932456][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.942131][ T4429] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.289: corrupted inode contents [ 50.955210][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.974450][ T4429] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.289: mark_inode_dirty error [ 51.024487][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.044924][ T4440] loop3: detected capacity change from 0 to 512 [ 51.085823][ T4444] loop0: detected capacity change from 0 to 512 [ 51.105383][ T4440] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.105633][ T4444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.162901][ T4444] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.171627][ T4440] EXT4-fs (loop3): mount failed [ 51.173939][ T4450] FAULT_INJECTION: forcing a failure. [ 51.173939][ T4450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.182315][ T4434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.291'. [ 51.191428][ T4450] CPU: 1 UID: 0 PID: 4450 Comm: syz.1.297 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.191461][ T4450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.191473][ T4450] Call Trace: [ 51.191480][ T4450] [ 51.191498][ T4450] __dump_stack+0x1d/0x30 [ 51.191523][ T4450] dump_stack_lvl+0xe8/0x140 [ 51.191545][ T4450] dump_stack+0x15/0x1b [ 51.191586][ T4450] should_fail_ex+0x265/0x280 [ 51.191607][ T4450] should_fail+0xb/0x20 [ 51.191625][ T4450] should_fail_usercopy+0x1a/0x20 [ 51.191648][ T4450] _copy_from_iter+0xd2/0xe80 [ 51.191708][ T4450] ? __rcu_read_unlock+0x4f/0x70 [ 51.191736][ T4450] ? mntput_no_expire+0x6f/0x440 [ 51.191855][ T4450] copy_page_from_iter+0x178/0x2a0 [ 51.191881][ T4450] tun_get_user+0x679/0x26e0 [ 51.191915][ T4450] ? ref_tracker_alloc+0x1f2/0x2f0 [ 51.191982][ T4450] tun_chr_write_iter+0x15e/0x210 [ 51.192054][ T4450] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 51.192082][ T4450] vfs_write+0x52a/0x960 [ 51.192121][ T4450] ksys_write+0xda/0x1a0 [ 51.192148][ T4450] __x64_sys_write+0x40/0x50 [ 51.192175][ T4450] x64_sys_call+0x2802/0x3000 [ 51.192253][ T4450] do_syscall_64+0xd2/0x200 [ 51.192274][ T4450] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.192303][ T4450] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 51.192373][ T4450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.192396][ T4450] RIP: 0033:0x7fa9c387e17f [ 51.192414][ T4450] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 51.192433][ T4450] RSP: 002b:00007fa9c22df000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 51.192455][ T4450] RAX: ffffffffffffffda RBX: 00007fa9c3ad5fa0 RCX: 00007fa9c387e17f [ 51.192519][ T4450] RDX: 000000000000004e RSI: 0000200000000000 RDI: 00000000000000c8 [ 51.192532][ T4450] RBP: 00007fa9c22df090 R08: 0000000000000000 R09: 0000000000000000 [ 51.192545][ T4450] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 51.192557][ T4450] R13: 00007fa9c3ad6038 R14: 00007fa9c3ad5fa0 R15: 00007ffdf36f42e8 [ 51.192576][ T4450] [ 51.275985][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 51.276002][ T29] audit: type=1326 audit(1762763123.643:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016907f6c9 code=0x7ffc0000 [ 51.394644][ T4456] serio: Serial port ptm0 [ 51.441505][ T29] audit: type=1326 audit(1762763123.683:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 51.468115][ T29] audit: type=1326 audit(1762763123.683:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 51.491497][ T29] audit: type=1326 audit(1762763123.683:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 51.514848][ T29] audit: type=1326 audit(1762763123.683:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 51.538326][ T29] audit: type=1326 audit(1762763123.683:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 51.561789][ T29] audit: type=1326 audit(1762763123.683:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 51.585345][ T29] audit: type=1326 audit(1762763123.683:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 51.608743][ T29] audit: type=1326 audit(1762763123.683:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 51.632073][ T29] audit: type=1326 audit(1762763123.683:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff146b7f6c9 code=0x7ffc0000 [ 51.718270][ T4465] ALSA: seq fatal error: cannot create timer (-19) [ 51.736333][ T4463] loop3: detected capacity change from 0 to 1024 [ 51.743852][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.753573][ T4463] EXT4-fs: Ignoring removed orlov option [ 51.796457][ T4463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.799778][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 51.856613][ T4470] loop2: detected capacity change from 0 to 512 [ 51.863042][ T4477] ALSA: seq fatal error: cannot create timer (-19) [ 51.871034][ T4470] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.905295][ T4470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.931313][ T4470] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.944550][ T4477] loop0: detected capacity change from 0 to 8192 [ 51.977893][ T3518] loop0: p1 p2 < > p3 p4 < p5 > [ 51.980654][ T4488] netlink: 200 bytes leftover after parsing attributes in process `syz.1.310'. [ 51.982898][ T3518] loop0: partition table partially beyond EOD, truncated [ 52.014394][ T3518] loop0: p1 size 100663296 extends beyond EOD, truncated [ 52.021447][ T4488] tipc: Enabling of bearer rejected, already enabled [ 52.028662][ T3518] loop0: p2 start 591104 is beyond EOD, truncated [ 52.030546][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.035614][ T3518] loop0: p3 start 33572980 is beyond EOD, truncated [ 52.045482][ T3518] loop0: p5 size 100663296 extends beyond EOD, truncated [ 52.062139][ T4477] loop0: p1 p2 < > p3 p4 < p5 > [ 52.067180][ T4477] loop0: partition table partially beyond EOD, truncated [ 52.074687][ T4477] loop0: p1 size 100663296 extends beyond EOD, truncated [ 52.082641][ T4477] loop0: p2 start 591104 is beyond EOD, truncated [ 52.089284][ T4477] loop0: p3 start 33572980 is beyond EOD, truncated [ 52.096566][ T4477] loop0: p5 size 100663296 extends beyond EOD, truncated [ 52.121899][ T4492] serio: Serial port ptm0 [ 52.171171][ T4499] 9p: Unknown access argument : -22 [ 52.260866][ T4509] loop2: detected capacity change from 0 to 512 [ 52.271416][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 52.272307][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 52.286264][ T4511] loop1: detected capacity change from 0 to 512 [ 52.298505][ T4509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.306405][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 52.322066][ T4511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.336001][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 52.348684][ T4509] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.371832][ T4511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.386688][ T4509] EXT4-fs (loop2): 1 truncate cleaned up [ 52.392912][ T4509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.432420][ T4511] EXT4-fs (loop1): 1 truncate cleaned up [ 52.443839][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.462495][ T4511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.511663][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.544110][ T4509] loop2: detected capacity change from 0 to 128 [ 52.558614][ T4511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.572662][ T4517] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 52.588717][ T4509] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.609411][ T4511] loop1: detected capacity change from 0 to 128 [ 52.612304][ T4517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.625235][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 52.640040][ T4509] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.653952][ T4509] bond0: (slave veth1_to_bond): Error: Device can not be enslaved while up [ 52.657581][ T4511] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.688309][ T4524] loop2: detected capacity change from 0 to 512 [ 52.704634][ T4524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.721527][ T4524] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.748892][ T4511] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.759113][ T4524] EXT4-fs (loop2): 1 truncate cleaned up [ 52.770970][ T4517] bond1: (slave veth3): Enslaving as an active interface with a down link [ 52.779741][ T4527] batman_adv: batadv0: Interface deactivated: dummy0 [ 52.784315][ T4524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.794211][ T4527] batman_adv: batadv0: Removing interface: dummy0 [ 52.808331][ T4524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.831683][ T4532] serio: Serial port ptm1 [ 52.840308][ T4527] bond1: (slave dummy0): making interface the new active one [ 52.850183][ T4527] dummy0: entered promiscuous mode [ 52.855619][ T4527] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 52.864588][ T4511] bond0: (slave veth1_to_bond): Error: Device can not be enslaved while up [ 52.906682][ T4524] loop2: detected capacity change from 0 to 128 [ 52.924630][ T4524] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.953032][ T4538] ALSA: seq fatal error: cannot create timer (-19) [ 52.994285][ T4524] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.027810][ T4524] bond0: (slave veth1_to_bond): Error: Device can not be enslaved while up [ 53.062322][ T4545] loop2: detected capacity change from 0 to 1024 [ 53.075202][ T4545] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 53.078150][ T4546] loop0: detected capacity change from 0 to 512 [ 53.111331][ T4538] loop3: detected capacity change from 0 to 8192 [ 53.118012][ T4545] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.131471][ T4545] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 53.140581][ T4545] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.147490][ T4545] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.332: Inode bitmap for bg 0 marked uninitialized [ 53.162171][ T4545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.187819][ T3519] loop3: p1 p2 < > p3 p4 < p5 > [ 53.192216][ T4546] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.192903][ T3519] loop3: partition table partially beyond EOD, truncated [ 53.228186][ T4546] EXT4-fs (loop0): mount failed [ 53.236500][ T3519] loop3: p1 size 100663296 extends beyond EOD, truncated [ 53.251542][ T3519] loop3: p2 start 591104 is beyond EOD, truncated [ 53.258067][ T3519] loop3: p3 start 33572980 is beyond EOD, truncated [ 53.273819][ T3519] loop3: p5 size 100663296 extends beyond EOD, truncated [ 53.292687][ T4538] loop3: p1 p2 < > p3 p4 < p5 > [ 53.297765][ T4538] loop3: partition table partially beyond EOD, truncated [ 53.309646][ T4538] loop3: p1 size 100663296 extends beyond EOD, truncated [ 53.322060][ T4538] loop3: p2 start 591104 is beyond EOD, truncated [ 53.328640][ T4538] loop3: p3 start 33572980 is beyond EOD, truncated [ 53.339344][ T4556] netlink: 200 bytes leftover after parsing attributes in process `syz.0.334'. [ 53.345336][ T4538] loop3: p5 size 100663296 extends beyond EOD, truncated [ 53.356251][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.358287][ T4556] tipc: Started in network mode [ 53.370289][ T4556] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 53.370440][ T4554] loop4: detected capacity change from 0 to 512 [ 53.385921][ T4556] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 53.394427][ T4556] tipc: Enabled bearer , priority 10 [ 53.400562][ T4554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.423403][ T4558] loop2: detected capacity change from 0 to 512 [ 53.434379][ T4558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.445932][ T4554] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.485975][ T4558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.489095][ T4554] EXT4-fs (loop4): 1 truncate cleaned up [ 53.511134][ T4554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.528000][ T4558] EXT4-fs (loop2): 1 truncate cleaned up [ 53.534609][ T4558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.547973][ T4558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.570427][ T4554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.606096][ T4558] loop2: detected capacity change from 0 to 128 [ 53.613107][ T4558] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.628583][ T4554] loop4: detected capacity change from 0 to 128 [ 53.641656][ T4558] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.659804][ T4558] bond0: (slave veth1_to_bond): Error: Device can not be enslaved while up [ 53.662676][ T4568] serio: Serial port ptm1 [ 53.673325][ T4554] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.699206][ T3518] ================================================================== [ 53.702436][ T4554] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.707357][ T3518] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 53.723412][ T3518] [ 53.725751][ T3518] write to 0xffff88810351f544 of 4 bytes by task 3530 on cpu 1: [ 53.733402][ T3518] shmem_mknod+0x137/0x180 [ 53.737846][ T3518] shmem_create+0x34/0x50 [ 53.742192][ T3518] path_openat+0x1105/0x2170 [ 53.746834][ T3518] do_filp_open+0x109/0x230 [ 53.751360][ T3518] do_sys_openat2+0xa6/0x110 [ 53.755975][ T3518] __x64_sys_openat+0xf2/0x120 [ 53.760744][ T3518] x64_sys_call+0x2eab/0x3000 [ 53.765431][ T3518] do_syscall_64+0xd2/0x200 [ 53.769938][ T3518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.775907][ T3518] [ 53.778230][ T3518] read to 0xffff88810351f544 of 4 bytes by task 3518 on cpu 0: [ 53.785773][ T3518] fill_mg_cmtime+0x5b/0x260 [ 53.790375][ T3518] generic_fillattr+0x24a/0x340 [ 53.795253][ T3518] shmem_getattr+0x181/0x200 [ 53.799854][ T3518] vfs_getattr_nosec+0x146/0x1e0 [ 53.804803][ T3518] vfs_statx+0x113/0x390 [ 53.809058][ T3518] vfs_fstatat+0x115/0x170 [ 53.813487][ T3518] __se_sys_newfstatat+0x55/0x260 [ 53.818528][ T3518] __x64_sys_newfstatat+0x55/0x70 [ 53.823567][ T3518] x64_sys_call+0x135a/0x3000 [ 53.828255][ T3518] do_syscall_64+0xd2/0x200 [ 53.832766][ T3518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.838664][ T3518] [ 53.841052][ T3518] value changed: 0x04022016 -> 0x0493f10e [ 53.847031][ T3518] [ 53.849357][ T3518] Reported by Kernel Concurrency Sanitizer on: [ 53.855508][ T3518] CPU: 0 UID: 0 PID: 3518 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.864797][ T3518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 53.874870][ T3518] ================================================================== [ 53.891471][ T4554] bond0: (slave veth1_to_bond): Error: Device can not be enslaved while up [ 53.928950][ T4570] loop3: detected capacity change from 0 to 512 [ 53.968225][ T4575] loop4: detected capacity change from 0 to 1024 [ 53.977849][ T4575] EXT4-fs: Ignoring removed orlov option [ 53.979899][ T4570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.997817][ T4570] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.010699][ T4570] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.340: corrupted inode contents [ 54.023124][ T4570] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.340: mark_inode_dirty error [ 54.026463][ T4575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.035227][ T4570] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.340: corrupted inode contents [ 54.059080][ T4570] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.340: mark_inode_dirty error [ 54.080556][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.090807][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.413737][ T9] tipc: Node number set to 1