last executing test programs: 2m56.718179215s ago: executing program 2 (id=345): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 2m56.568364847s ago: executing program 2 (id=348): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae8000000000500290001000000080003", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) 2m56.451539587s ago: executing program 2 (id=349): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1a, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x6, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x2, 0x8, 0x800}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x3, 0x3, 0xc, 0x5}, {0x5, 0x4000005, 0xb, 0x6}, {0x2, 0x3, 0x6, 0xa}], 0x10, 0x401}, 0x94) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 2m56.329005637s ago: executing program 2 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000003c0)='FREEZING\x00', 0x9) syz_emit_ethernet(0xe2, &(0x7f0000000400)={@local, @random="a22ccb570461", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0x1, @local, {[@cipso={0x86, 0x2b, 0x0, [{0x2, 0xe, "b1057df37f610d5e00000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x58, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x6, "589143a1"}, {0x5, 0x12, "118c5572ec3ca14c0ee79ac3de861f9b"}, {0x0, 0xa, "ab87709c27e85763"}, {0x5, 0x8, "b7380597c9fe"}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x100004, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m56.28055173s ago: executing program 2 (id=355): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x77c, &(0x7f0000001180)="$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") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) inotify_init() unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000900)=""/153, &(0x7f0000000d40)="63865a7d851f1ed9c79837abf6cc5cd7788a302d91719e", 0x0, 0x82, r1, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 2m56.076092227s ago: executing program 2 (id=363): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001dc0)='svcrdma_decode_rqst\x00', r1, 0x0, 0x2}, 0x18) open(&(0x7f00000005c0)='./bus\x00', 0x74842, 0x389b0d52417bb217) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000100005ff000000007f8f96c50000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32, @ANYBLOB="0500270000000000"], 0x44}}, 0x0) 2m56.0421039s ago: executing program 32 (id=363): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001dc0)='svcrdma_decode_rqst\x00', r1, 0x0, 0x2}, 0x18) open(&(0x7f00000005c0)='./bus\x00', 0x74842, 0x389b0d52417bb217) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000100005ff000000007f8f96c50000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32, @ANYBLOB="0500270000000000"], 0x44}}, 0x0) 4.0263697s ago: executing program 5 (id=3211): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0xfe, 0x4f2, &(0x7f0000000600)="$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") 3.813414226s ago: executing program 5 (id=3215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 3.750622731s ago: executing program 5 (id=3217): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159}) socket$rds(0x15, 0x5, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003"], 0x8c}}, 0x0) 3.697724996s ago: executing program 5 (id=3218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="010031aa"]) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, 0x0, 0x0, 0xffffffff8) 3.583551274s ago: executing program 5 (id=3221): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0xfe, 0x4f2, &(0x7f0000000600)="$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") 3.422173237s ago: executing program 1 (id=3224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3.355671482s ago: executing program 5 (id=3228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 3.057912055s ago: executing program 1 (id=3236): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x4, 0x5, 0xb, 0x81, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x20, 0x7, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c0000004900000329bd7000fcdbdf254a003800", @ANYRES32=r0, @ANYBLOB="0100000014000100fe8000000000000000000000000000aa1400010000000000000000000000000000000001140001000000000000000000000000000000000114000100fe8000000000000000000000000000bb"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) accept(0xffffffffffffffff, &(0x7f00000008c0)=@can, &(0x7f0000000940)=0x80) 2.825743884s ago: executing program 1 (id=3242): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 2.347482202s ago: executing program 4 (id=3248): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) 2.171389076s ago: executing program 4 (id=3251): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000019300)=@abs, &(0x7f00000001c0)=0x6e) connect$unix(r0, &(0x7f0000019380)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x1, 0xbb0, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x8001, 0x0, 0x1, 0x4, 0x0, @local, @multicast1}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$caif_seqpacket(0x25, 0x5, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x2000000005}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000019240)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) r7 = io_uring_setup(0x7cab, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x2, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 2.166863117s ago: executing program 0 (id=3252): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x533201, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x4, 0x5, 0xb, 0x81, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x20, 0x7, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c0000004900000329bd7000fcdbdf254a003800", @ANYRES32=r1, @ANYBLOB="0100000014000100fe8000000000000000000000000000aa1400010000000000000000000000000000000001140001000000000000000000000000000000000114000100fe8000000000000000000000000000bb"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) accept(r0, &(0x7f00000008c0)=@can, &(0x7f0000000940)=0x80) 1.987303351s ago: executing program 1 (id=3253): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x1, 0x6, 0xa, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000015850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600", 0x34}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040", 0x30}], 0x1}, 0xc001) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x13c, r10, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffffffffffff6fb3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffff931}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1400000}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc8, 0xa8, @random="79a2ee798790bcb9b1a673fce20da4e8ce5f13a0fce85f85ae82c3ce7a8a2c72089ec8887af2a2b8016977dd8dcd80b2e38ef01d44ae8e8e84cb2924fdf20ea871197c5a6be962fcfa94ea73df41abcb5e7579eb6fca5d7d7a98ebe3194800f2adff5563729817c3c20c6f09e9012af9402ec54b2c3bdf3852bea02a441b7d97fe86e4735412687f122ae5c9d6753e67e3c3b50758d00b6fe0e1cd81bbb4e1366ff39ae36176ba9097dcdedd649e952e4fa040cd1f57584e137e6acabc58532f207d60a2"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) r11 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') dup(r6) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") 1.837147353s ago: executing program 0 (id=3254): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000019300)=@abs, &(0x7f00000001c0)=0x6e) connect$unix(r0, &(0x7f0000019380)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x1, 0xbb0, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x8001, 0x0, 0x1, 0x4, 0x0, @local, @multicast1}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$caif_seqpacket(0x25, 0x5, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x2000000005}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000019240)={'veth0_to_bond\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) r10 = io_uring_setup(0x7cab, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x2, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0xff, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x8, 0x0, 0x1, 0x8, 0x3, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r8, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 1.828299634s ago: executing program 4 (id=3255): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, 0x0, 0x0) 1.711969963s ago: executing program 4 (id=3256): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x1, 0x6, 0xa, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000015850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.443311765s ago: executing program 0 (id=3258): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000200)='xen_mmu_set_pud\x00', r1, 0x0, 0x3}, 0x18) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x49c0, 0x80, 0x11}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb89080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd80003742f1a2222f19935e6996c7096fb7e40300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000040)=@ethtool_cmd={0x15, 0x6, 0xff, 0x3, 0xfa, 0x5, 0x0, 0x8, 0xc, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x8]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000008c0)={0x0, 0x4, {0x3, @usage=0x1, 0x0, 0x3ff, 0x2, 0x0, 0x0, 0x1ff, 0x4a4, @usage=0x7c, 0x0, 0x1, [0x2, 0x7f, 0x20000000000000, 0x7, 0x3f7, 0x5]}, {0x88, @struct={0x4, 0x5}, 0x0, 0x6, 0x4, 0x3, 0xebe, 0x9, 0x2, @struct={0xfffeffff, 0xffff}, 0x9, 0x5, [0x81, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xe]}, {0x80000000, @usage=0x10001, 0x0, 0x100, 0xff, 0xfffffffffffffff7, 0x6, 0x7fffffff, 0x202, @usage=0x1000, 0x7d989949, 0x8, [0xffff, 0x8, 0xa, 0x4, 0x7fffffffffffffff, 0x8]}, {0x2, 0x4, 0x6}}) socket$kcm(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) 1.223191552s ago: executing program 4 (id=3259): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000200)='xen_mmu_set_pud\x00', r1, 0x0, 0x3}, 0x18) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x49c0, 0x80, 0x11}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb89080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd80003742f1a2222f19935e6996c7096fb7e40300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000040)=@ethtool_cmd={0x15, 0x6, 0xff, 0x3, 0xfa, 0x5, 0x0, 0x8, 0xc, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x8]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000008c0)={0x0, 0x4, {0x3, @usage=0x1, 0x0, 0x3ff, 0x2, 0x0, 0x0, 0x1ff, 0x4a4, @usage=0x7c, 0x0, 0x1, [0x2, 0x7f, 0x20000000000000, 0x7, 0x3f7, 0x5]}, {0x88, @struct={0x4, 0x5}, 0x0, 0x6, 0x4, 0x3, 0xebe, 0x9, 0x2, @struct={0xfffeffff, 0xffff}, 0x9, 0x5, [0x81, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xe]}, {0x80000000, @usage=0x10001, 0x0, 0x100, 0xff, 0xfffffffffffffff7, 0x6, 0x7fffffff, 0x202, @usage=0x1000, 0x7d989949, 0x8, [0xffff, 0x8, 0xa, 0x4, 0x7fffffffffffffff, 0x8]}, {0x2, 0x4, 0x6}}) socket$kcm(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) 1.0104936s ago: executing program 3 (id=3261): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r0, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003"], 0x8c}}, 0x0) 962.808033ms ago: executing program 1 (id=3262): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 895.469918ms ago: executing program 3 (id=3263): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x5) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES8=r1], 0x5c}, 0x1, 0x0, 0x0, 0x10801}, 0x0) 867.887161ms ago: executing program 3 (id=3264): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000019300)=@abs, &(0x7f00000001c0)=0x6e) connect$unix(r0, &(0x7f0000019380)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x1, 0xbb0, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x8001, 0x0, 0x1, 0x4, 0x0, @local, @multicast1}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$caif_seqpacket(0x25, 0x5, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x2000000005}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000019240)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) r7 = io_uring_setup(0x7cab, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x2, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 534.805648ms ago: executing program 3 (id=3265): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x880, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f00000022c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) unshare(0x2a020480) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r1, 0x0, 0x0) 509.214409ms ago: executing program 0 (id=3266): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000800000000000000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000004000"], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffffd7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) dup3(r4, r2, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000010000006111b800000000009500000000000000"], &(0x7f00000004c0)='GPL\x00'}, 0x94) 409.354488ms ago: executing program 1 (id=3267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 346.090913ms ago: executing program 3 (id=3268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 326.138134ms ago: executing program 4 (id=3269): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c9202, 0x140) write(r3, &(0x7f0000004200)='t', 0x1) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r4 = socket(0x2c, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r6}, 0x18) close_range(r4, r5, 0x0) r7 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x0, 0x9, 0x8, 0x6, 0x0, 0xff, 0x4000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000380)}, 0x100c88, 0x8, 0x9, 0x1, 0x65029849, 0x831d, 0x3, 0x0, 0x641, 0x0, 0x2}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x7ff) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000200000403002c469bcc5bffd50fef80331248e10001000000000200000004000000"], 0x0, 0x3e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2(&(0x7f0000000080), 0x81000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffffff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r8 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000002e40)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRESOCT, @ANYRES32=0x0, @ANYRES16, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYBLOB="02000300", @ANYRESOCT, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593", @ANYRESDEC, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYBLOB="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", @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400fbfb88d59df0357b9840368558a48ef062e21f5927edf17f8ca65057fffee335cb18faf0cc9491c287675d8be5f5d3bfb00eee5628782848af3422caefade574ec003404ec7fe94842", @ANYRES32=r8, @ANYRES8], 0x94, 0x1) getegid() 154.891597ms ago: executing program 3 (id=3270): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c000000070000000000000001000004ff000000050000000400000040000000000000000700000d00000000f80c00000400000008000000040000000e000000030000000500000003007a090d0000000100000004000000050000eb02000000040000000000002e0061"], &(0x7f0000000000)=""/11, 0x7b, 0xb, 0x1}, 0x28) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) clock_adjtime(0x6, &(0x7f0000000300)={0x2, 0x9, 0x3, 0x7, 0x100000000, 0x75, 0x6b41, 0x8, 0x1, 0xffffffffffffffff, 0x4, 0x0, 0x8, 0x80, 0x6, 0xff, 0x2, 0x3, 0x4, 0x0, 0x5, 0x1, 0x3, 0xfffffffffffffff0, 0x2, 0x6}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000380)) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@initdev}, &(0x7f00000001c0)=0x14) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xd, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 108.578561ms ago: executing program 0 (id=3271): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000800000000000000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000004000"], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffffd7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) dup3(r3, r2, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000010000006111b800000000009500000000000000"], &(0x7f00000004c0)='GPL\x00'}, 0x94) 0s ago: executing program 0 (id=3272): r0 = creat(0x0, 0x0) io_setup(0x5ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) kernel console output (not intermixed with test programs): tag 0x0 [ 197.292313][T11376] loop3: detected capacity change from 0 to 512 [ 197.302695][T11375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.303032][T11373] hid-generic 0000:0003:0000.0085: hidraw0: HID v0.03 Device [syz0] on syz0 [ 197.311070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.331344][T11379] loop0: detected capacity change from 0 to 512 [ 197.345563][T11379] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.362219][T11350] 8021q: adding VLAN 0 to HW filter on device  [ 197.368944][T11379] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.383727][T11376] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.424360][T11382] loop4: detected capacity change from 0 to 1024 [ 197.433172][T11350] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.444420][T11382] EXT4-fs: Ignoring removed orlov option [ 197.457983][T11379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 197.480874][T11376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.493687][ T3358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.503249][T11379] System zones: 1-12 [ 197.507471][T11350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.508939][T11376] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.540964][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.549940][T11379] EXT4-fs (loop0): 1 truncate cleaned up [ 197.558020][T11382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.563641][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.589427][T11376] FAULT_INJECTION: forcing a failure. [ 197.589427][T11376] name failslab, interval 1, probability 0, space 0, times 0 [ 197.599935][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.602251][T11376] CPU: 1 UID: 0 PID: 11376 Comm: syz.3.2823 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.602282][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.602297][T11376] Call Trace: [ 197.602304][T11376] [ 197.602375][T11376] __dump_stack+0x1d/0x30 [ 197.602399][T11376] dump_stack_lvl+0xe8/0x140 [ 197.602422][T11376] dump_stack+0x15/0x1b [ 197.602444][T11376] should_fail_ex+0x265/0x280 [ 197.602469][T11376] should_failslab+0x8c/0xb0 [ 197.602499][T11376] kmem_cache_alloc_node_noprof+0x57/0x320 [ 197.602562][T11376] ? __alloc_skb+0x101/0x320 [ 197.602584][T11376] __alloc_skb+0x101/0x320 [ 197.602607][T11376] alloc_uevent_skb+0x5c/0x120 [ 197.602676][T11376] kobject_uevent_net_broadcast+0x23c/0x410 [ 197.602706][T11376] kobject_uevent_env+0x43d/0x570 [ 197.602731][T11376] ? device_pm_check_callbacks+0x683/0x6a0 [ 197.602771][T11376] kobject_uevent+0x1d/0x30 [ 197.602814][T11376] device_del+0x710/0x790 [ 197.602886][T11376] device_destroy+0x66/0xa0 [ 197.602927][T11376] drop_ref+0xbf/0x1a0 [ 197.602953][T11376] hidraw_disconnect+0x39/0x50 [ 197.602980][T11376] hid_device_remove+0x158/0x210 [ 197.603190][T11376] ? __pfx_hid_device_remove+0x10/0x10 [ 197.603229][T11376] device_release_driver_internal+0x2bb/0x4e0 [ 197.603264][T11376] device_release_driver+0x19/0x20 [ 197.603293][T11376] bus_remove_device+0x26d/0x290 [ 197.603382][T11376] device_del+0x36a/0x790 [ 197.603413][T11376] hid_destroy_device+0x54/0x120 [ 197.603450][T11376] uhid_dev_destroy+0x6a/0xb0 [ 197.603481][T11376] uhid_char_write+0x3aa/0x650 [ 197.603589][T11376] ? __pfx_uhid_char_write+0x10/0x10 [ 197.603621][T11376] vfs_write+0x269/0x960 [ 197.603648][T11376] ? __rcu_read_unlock+0x4f/0x70 [ 197.603674][T11376] ? __fget_files+0x184/0x1c0 [ 197.603706][T11376] ksys_write+0xda/0x1a0 [ 197.603811][T11376] __x64_sys_write+0x40/0x50 [ 197.603838][T11376] x64_sys_call+0x27fe/0x2ff0 [ 197.603864][T11376] do_syscall_64+0xd2/0x200 [ 197.603907][T11376] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 197.603937][T11376] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 197.603967][T11376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.604001][T11376] RIP: 0033:0x7f2ce168ebe9 [ 197.604025][T11376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.604084][T11376] RSP: 002b:00007f2ce00f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.604108][T11376] RAX: ffffffffffffffda RBX: 00007f2ce18b5fa0 RCX: 00007f2ce168ebe9 [ 197.604123][T11376] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 197.604137][T11376] RBP: 00007f2ce00f7090 R08: 0000000000000000 R09: 0000000000000000 [ 197.604152][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.604167][T11376] R13: 00007f2ce18b6038 R14: 00007f2ce18b5fa0 R15: 00007ffcad088988 [ 197.604242][T11376] [ 197.729145][T11379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.800791][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.904509][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.938649][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.012123][T11393] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.062612][T11401] netlink: 'syz.1.2829': attribute type 5 has an invalid length. [ 198.102184][T11377] random: crng reseeded on system resumption [ 198.148335][T11393] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.180415][T11401] loop1: detected capacity change from 0 to 1024 [ 198.187206][T11401] EXT4-fs: inline encryption not supported [ 198.195336][T11401] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 198.201432][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.206277][T11401] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 198.225130][T11401] JBD2: no valid journal superblock found [ 198.230896][T11401] EXT4-fs (loop1): Could not load journal inode [ 198.292033][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.305873][T11393] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.361509][T11393] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.399662][T11415] pim6reg: entered allmulticast mode [ 198.426274][T11415] pim6reg: left allmulticast mode [ 198.429071][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 198.429086][ T29] audit: type=1326 audit(1756165508.551:16129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.5.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 198.463394][ T29] audit: type=1326 audit(1756165508.561:16130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.5.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 198.487141][ T29] audit: type=1326 audit(1756165508.561:16131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.5.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 198.510905][ T29] audit: type=1326 audit(1756165508.561:16132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.5.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 198.534521][ T29] audit: type=1326 audit(1756165508.561:16133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.5.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 198.558354][ T29] audit: type=1326 audit(1756165508.593:16134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.5.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 198.582382][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.592367][ T29] audit: type=1326 audit(1756165508.593:16135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.5.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 198.616017][ T29] audit: type=1326 audit(1756165508.593:16136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.5.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 198.639767][ T29] audit: type=1326 audit(1756165508.593:16137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.5.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 198.663643][ T29] audit: type=1326 audit(1756165508.593:16138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.5.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 198.720028][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.753691][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.764406][T11427] loop5: detected capacity change from 0 to 512 [ 198.772950][T11428] netlink: 'syz.4.2841': attribute type 5 has an invalid length. [ 198.789175][T11371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.803522][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.821453][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.855603][T11427] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.912179][T11428] loop4: detected capacity change from 0 to 1024 [ 198.918964][T11428] EXT4-fs: inline encryption not supported [ 198.925468][T11428] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 198.936377][T11428] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 198.946421][T11371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.959425][T11428] JBD2: no valid journal superblock found [ 198.959633][T11427] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 198.965638][T11428] EXT4-fs (loop4): Could not load journal inode [ 199.025983][T11433] loop3: detected capacity change from 0 to 512 [ 199.034102][T11433] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.115820][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2845'. [ 199.132369][T11433] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 199.144558][T11427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 199.181862][T11427] System zones: 1-12 [ 199.187361][T11427] EXT4-fs (loop5): 1 truncate cleaned up [ 199.195748][T11433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 199.209741][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2845'. [ 199.222721][T11427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.247378][T11433] System zones: 1-12 [ 199.254239][T11433] EXT4-fs (loop3): 1 truncate cleaned up [ 199.287585][T11433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.381650][T11427] random: crng reseeded on system resumption [ 199.417983][T11453] lo speed is unknown, defaulting to 1000 [ 199.433829][T11453] lo speed is unknown, defaulting to 1000 [ 199.488778][ T4543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.554515][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.563837][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.656837][T11458] lo speed is unknown, defaulting to 1000 [ 199.697708][T11458] lo speed is unknown, defaulting to 1000 [ 199.785047][T11484] loop1: detected capacity change from 0 to 1024 [ 199.808714][T11484] EXT4-fs: Ignoring removed orlov option [ 199.942596][T11458] chnl_net:caif_netlink_parms(): no params data found [ 199.965844][ T290] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.011688][T11494] loop4: detected capacity change from 0 to 1024 [ 200.018848][T11494] EXT4-fs: Ignoring removed orlov option [ 200.045017][ T290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.079523][T11458] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.086710][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.096885][T11458] bridge_slave_0: entered allmulticast mode [ 200.104573][T11458] bridge_slave_0: entered promiscuous mode [ 200.114616][ T290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.131404][T11458] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.138520][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.146212][T11458] bridge_slave_1: entered allmulticast mode [ 200.153876][T11458] bridge_slave_1: entered promiscuous mode [ 200.174837][ T290] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.187778][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.199028][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.225866][T11458] team0: Port device team_slave_0 added [ 200.234020][T11458] team0: Port device team_slave_1 added [ 200.271561][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.278626][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.304627][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.323675][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.330693][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.356776][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.427600][T11458] hsr_slave_0: entered promiscuous mode [ 200.445304][T11502] loop5: detected capacity change from 0 to 1024 [ 200.452090][T11502] EXT4-fs: Ignoring removed orlov option [ 200.453553][T11458] hsr_slave_1: entered promiscuous mode [ 200.473116][T11458] debugfs: 'hsr0' already exists in 'hsr' [ 200.479002][T11458] Cannot create hsr debugfs directory [ 200.541066][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.589221][ T290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.616190][ T290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.629579][ T290] bond0 (unregistering): Released all slaves [ 201.435582][T11525] FAULT_INJECTION: forcing a failure. [ 201.435582][T11525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.448811][T11525] CPU: 1 UID: 0 PID: 11525 Comm: syz.3.2866 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.448843][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.448866][T11525] Call Trace: [ 201.448872][T11525] [ 201.448878][T11525] __dump_stack+0x1d/0x30 [ 201.448936][T11525] dump_stack_lvl+0xe8/0x140 [ 201.448960][T11525] dump_stack+0x15/0x1b [ 201.448980][T11525] should_fail_ex+0x265/0x280 [ 201.449006][T11525] should_fail+0xb/0x20 [ 201.449028][T11525] should_fail_usercopy+0x1a/0x20 [ 201.449126][T11525] _copy_to_user+0x20/0xa0 [ 201.449162][T11525] simple_read_from_buffer+0xb5/0x130 [ 201.449218][T11525] proc_fail_nth_read+0x10e/0x150 [ 201.449249][T11525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.449348][T11525] vfs_read+0x1a8/0x770 [ 201.449371][T11525] ? __rcu_read_unlock+0x4f/0x70 [ 201.449500][T11525] ? __fget_files+0x184/0x1c0 [ 201.449534][T11525] ksys_read+0xda/0x1a0 [ 201.449561][T11525] __x64_sys_read+0x40/0x50 [ 201.449582][T11525] x64_sys_call+0x27bc/0x2ff0 [ 201.449602][T11525] do_syscall_64+0xd2/0x200 [ 201.449661][T11525] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 201.449692][T11525] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 201.449796][T11525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.449872][T11525] RIP: 0033:0x7f2ce168d5fc [ 201.449890][T11525] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 201.449909][T11525] RSP: 002b:00007f2ce00f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.449999][T11525] RAX: ffffffffffffffda RBX: 00007f2ce18b5fa0 RCX: 00007f2ce168d5fc [ 201.450020][T11525] RDX: 000000000000000f RSI: 00007f2ce00f70a0 RDI: 0000000000000004 [ 201.450095][T11525] RBP: 00007f2ce00f7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.450122][T11525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.450136][T11525] R13: 00007f2ce18b6038 R14: 00007f2ce18b5fa0 R15: 00007ffcad088988 [ 201.450158][T11525] [ 201.684522][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.706372][ T290] hsr_slave_0: left promiscuous mode [ 201.715849][ T290] hsr_slave_1: left promiscuous mode [ 201.721543][ T290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.729083][ T290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.777528][ T290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.785215][ T290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.804200][T11542] loop5: detected capacity change from 0 to 512 [ 201.814565][ T290] veth1_macvtap: left promiscuous mode [ 201.821205][T11542] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2868: iget: bad i_size value: 38620345925642 [ 201.834150][ T290] veth0_macvtap: left promiscuous mode [ 201.839786][T11366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.843972][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2871'. [ 201.856837][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2871'. [ 201.873563][T11542] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2868: couldn't read orphan inode 15 (err -117) [ 201.922847][T11542] netlink: 'syz.5.2868': attribute type 27 has an invalid length. [ 202.000230][ T290] team0 (unregistering): Port device team_slave_1 removed [ 202.018034][ T290] team0 (unregistering): Port device team_slave_0 removed [ 202.026652][T11556] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2868: bg 0: block 5: invalid block bitmap [ 202.068076][T11556] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 202.080464][T11556] EXT4-fs (loop5): This should not happen!! Data will be lost [ 202.080464][T11556] [ 202.090143][T11556] EXT4-fs (loop5): Total free blocks count 0 [ 202.096181][T11556] EXT4-fs (loop5): Free/Dirty block details [ 202.102081][T11556] EXT4-fs (loop5): free_blocks=0 [ 202.107073][T11556] EXT4-fs (loop5): dirty_blocks=1 [ 202.112177][T11556] EXT4-fs (loop5): Block reservation details [ 202.118206][T11556] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 202.129211][T11519] lo speed is unknown, defaulting to 1000 [ 202.138782][T11519] lo speed is unknown, defaulting to 1000 [ 202.204907][T11542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.214771][T11542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.272397][T11554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.281253][T11554] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.297141][T11554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.325582][ T37] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.349415][ T37] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.391542][ T31] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.407783][ T31] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.461519][T11563] pim6reg: entered allmulticast mode [ 202.481420][T11563] pim6reg: left allmulticast mode [ 202.616384][T11458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.651207][T11458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.662659][T11574] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2876'. [ 202.762149][T11458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.801203][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2876'. [ 202.852958][T11458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.927805][T11458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.972165][T11591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2878'. [ 202.974105][T11458] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.003812][T11595] loop4: detected capacity change from 0 to 512 [ 203.016674][T11595] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2880: iget: bad i_size value: 38620345925642 [ 203.032762][T11595] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2880: couldn't read orphan inode 15 (err -117) [ 203.049327][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.056550][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.067974][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.075102][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.086383][T11595] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2880: bg 0: block 5: invalid block bitmap [ 203.115815][T11595] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 203.128078][T11595] EXT4-fs (loop4): This should not happen!! Data will be lost [ 203.128078][T11595] [ 203.137932][T11595] EXT4-fs (loop4): Total free blocks count 0 [ 203.143976][T11595] EXT4-fs (loop4): Free/Dirty block details [ 203.149982][T11595] EXT4-fs (loop4): free_blocks=0 [ 203.154982][T11595] EXT4-fs (loop4): dirty_blocks=1 [ 203.160063][T11595] EXT4-fs (loop4): Block reservation details [ 203.166117][T11595] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 203.192461][T11595] syz.4.2880 (11595) used greatest stack depth: 9680 bytes left [ 203.252783][T11616] pim6reg: entered allmulticast mode [ 203.261291][T11616] pim6reg: left allmulticast mode [ 203.274044][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.346459][T11458] veth0_vlan: entered promiscuous mode [ 203.358019][T11458] veth1_vlan: entered promiscuous mode [ 203.381715][T11458] veth0_macvtap: entered promiscuous mode [ 203.392361][T11458] veth1_macvtap: entered promiscuous mode [ 203.403390][T11458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.419727][T11458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.430762][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.442045][T11631] loop4: detected capacity change from 0 to 512 [ 203.445673][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.448945][T11631] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.461758][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.483144][T11631] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.483850][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.502360][T11631] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 203.516898][T11631] System zones: 1-12 [ 203.517144][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 203.517160][ T29] audit: type=1400 audit(1756165513.895:16350): avc: denied { mounton } for pid=11458 comm="syz-executor" path="/root/syzkaller.QF9nHk/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 203.551766][ T29] audit: type=1400 audit(1756165513.895:16351): avc: denied { mount } for pid=11458 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.555622][T11631] EXT4-fs (loop4): 1 truncate cleaned up [ 203.574252][ T29] audit: type=1400 audit(1756165513.895:16352): avc: denied { mounton } for pid=11458 comm="syz-executor" path="/root/syzkaller.QF9nHk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 203.606720][ T29] audit: type=1400 audit(1756165513.895:16353): avc: denied { mounton } for pid=11458 comm="syz-executor" path="/root/syzkaller.QF9nHk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 203.634591][ T29] audit: type=1400 audit(1756165513.895:16354): avc: denied { mounton } for pid=11458 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 203.657828][ T29] audit: type=1400 audit(1756165513.895:16355): avc: denied { mount } for pid=11458 comm="syz-executor" name="/" dev="gadgetfs" ino=3881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 203.693757][ T29] audit: type=1326 audit(1756165514.073:16356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.0.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 203.717483][ T29] audit: type=1326 audit(1756165514.073:16357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.0.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 203.741397][ T29] audit: type=1326 audit(1756165514.084:16358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.0.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 203.765129][ T29] audit: type=1326 audit(1756165514.084:16359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.0.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 203.833852][T11639] 9pnet_fd: Insufficient options for proto=fd [ 203.862582][T11641] lo speed is unknown, defaulting to 1000 [ 203.869039][T11641] lo speed is unknown, defaulting to 1000 [ 203.999251][T11654] loop1: detected capacity change from 0 to 512 [ 204.023299][T11654] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.037138][T11654] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.090087][T11654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 204.100385][T11658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2894'. [ 204.141785][T11654] System zones: 1-12 [ 204.149414][T11654] EXT4-fs (loop1): 1 truncate cleaned up [ 204.215051][T11674] loop5: detected capacity change from 0 to 512 [ 204.222107][T11674] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.255819][T11672] loop3: detected capacity change from 0 to 512 [ 204.262580][T11672] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.287219][T11654] random: crng reseeded on system resumption [ 204.295814][T11674] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 204.307656][T11672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.336470][T11674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 204.341241][T11672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 204.354288][T11674] System zones: 1-12 [ 204.358725][T11674] EXT4-fs (loop5): 1 truncate cleaned up [ 204.364545][T11672] System zones: 1-12 [ 204.371165][T11672] EXT4-fs (loop3): 1 truncate cleaned up [ 204.384523][T11677] loop4: detected capacity change from 0 to 1024 [ 204.391394][T11677] EXT4-fs: inline encryption not supported [ 204.398847][T11677] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 204.409895][T11677] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 204.420242][T11677] JBD2: no valid journal superblock found [ 204.426030][T11677] EXT4-fs (loop4): Could not load journal inode [ 204.484489][T11674] random: crng reseeded on system resumption [ 204.505115][T11672] random: crng reseeded on system resumption [ 204.573099][T11690] loop0: detected capacity change from 0 to 512 [ 204.590435][T11690] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2904: iget: bad i_size value: 38620345925642 [ 204.611132][T11690] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2904: couldn't read orphan inode 15 (err -117) [ 204.641161][T11690] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2904: bg 0: block 5: invalid block bitmap [ 204.667358][T11690] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 204.679615][T11690] EXT4-fs (loop0): This should not happen!! Data will be lost [ 204.679615][T11690] [ 204.689302][T11690] EXT4-fs (loop0): Total free blocks count 0 [ 204.695342][T11690] EXT4-fs (loop0): Free/Dirty block details [ 204.701246][T11690] EXT4-fs (loop0): free_blocks=0 [ 204.706247][T11690] EXT4-fs (loop0): dirty_blocks=1 [ 204.711287][T11690] EXT4-fs (loop0): Block reservation details [ 204.717345][T11690] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 204.725597][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'. [ 204.734547][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'. [ 204.786674][T11715] pim6reg: entered allmulticast mode [ 204.804412][T11715] pim6reg: left allmulticast mode [ 204.872719][T11720] loop5: detected capacity change from 0 to 512 [ 204.882745][T11720] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.912985][T11720] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 204.933394][T11720] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 204.941827][T11720] System zones: 1-12 [ 204.945612][T11725] loop3: detected capacity change from 0 to 512 [ 204.952398][T11720] EXT4-fs (loop5): 1 truncate cleaned up [ 204.986149][T11725] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.029308][T11725] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.082342][T11725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 205.110396][T11725] System zones: 1-12 [ 205.125804][T11725] EXT4-fs (loop3): 1 truncate cleaned up [ 205.145112][T11720] random: crng reseeded on system resumption [ 205.269256][T11725] random: crng reseeded on system resumption [ 205.394544][T11747] loop1: detected capacity change from 0 to 512 [ 205.433069][T11747] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2920: iget: bad i_size value: 38620345925642 [ 205.464410][T11748] loop3: detected capacity change from 0 to 512 [ 205.471225][T11747] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2920: couldn't read orphan inode 15 (err -117) [ 205.502885][T11748] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.524497][T11747] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2920: bg 0: block 5: invalid block bitmap [ 205.555277][T11747] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 205.567493][T11747] EXT4-fs (loop1): This should not happen!! Data will be lost [ 205.567493][T11747] [ 205.577194][T11747] EXT4-fs (loop1): Total free blocks count 0 [ 205.583221][T11747] EXT4-fs (loop1): Free/Dirty block details [ 205.589147][T11747] EXT4-fs (loop1): free_blocks=0 [ 205.594099][T11747] EXT4-fs (loop1): dirty_blocks=1 [ 205.599172][T11747] EXT4-fs (loop1): Block reservation details [ 205.605179][T11747] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 205.625649][T11748] EXT4-fs (loop3): 1 truncate cleaned up [ 205.663372][T11748] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.2919: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 205.744438][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2924'. [ 205.773347][T11764] loop1: detected capacity change from 0 to 2048 [ 205.782004][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2924'. [ 205.876322][ T3938] Alternate GPT is invalid, using primary GPT. [ 205.882562][ T3938] loop1: p1 p2 p3 [ 205.935523][T11764] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 206.043189][T11776] loop4: detected capacity change from 0 to 512 [ 206.062027][T11776] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.082104][T11776] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 206.105035][T11776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 206.116702][T11776] System zones: 1-12 [ 206.121018][T11776] EXT4-fs (loop4): 1 truncate cleaned up [ 206.126795][T11789] loop3: detected capacity change from 0 to 512 [ 206.133473][T11789] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.154900][T11789] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 206.175022][T11776] random: crng reseeded on system resumption [ 206.186450][T11789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 206.199265][T11789] System zones: 1-12 [ 206.210493][T11789] EXT4-fs (loop3): 1 truncate cleaned up [ 206.317285][T11803] random: crng reseeded on system resumption [ 206.449139][T11817] FAULT_INJECTION: forcing a failure. [ 206.449139][T11817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.462296][T11817] CPU: 1 UID: 0 PID: 11817 Comm: syz.1.2933 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.462323][T11817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.462334][T11817] Call Trace: [ 206.462339][T11817] [ 206.462345][T11817] __dump_stack+0x1d/0x30 [ 206.462368][T11817] dump_stack_lvl+0xe8/0x140 [ 206.462428][T11817] dump_stack+0x15/0x1b [ 206.462442][T11817] should_fail_ex+0x265/0x280 [ 206.462460][T11817] should_fail+0xb/0x20 [ 206.462492][T11817] should_fail_usercopy+0x1a/0x20 [ 206.462584][T11817] _copy_from_iter+0xd2/0xe80 [ 206.462610][T11817] ? __build_skb_around+0x1a0/0x200 [ 206.462641][T11817] ? __alloc_skb+0x223/0x320 [ 206.462663][T11817] netlink_sendmsg+0x471/0x6b0 [ 206.462692][T11817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.462852][T11817] __sock_sendmsg+0x145/0x180 [ 206.462879][T11817] ____sys_sendmsg+0x31e/0x4e0 [ 206.462905][T11817] ___sys_sendmsg+0x17b/0x1d0 [ 206.462943][T11817] __x64_sys_sendmsg+0xd4/0x160 [ 206.462969][T11817] x64_sys_call+0x191e/0x2ff0 [ 206.463059][T11817] do_syscall_64+0xd2/0x200 [ 206.463083][T11817] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.463104][T11817] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 206.463144][T11817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.463233][T11817] RIP: 0033:0x7f48604febe9 [ 206.463256][T11817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.463276][T11817] RSP: 002b:00007f485ef67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.463293][T11817] RAX: ffffffffffffffda RBX: 00007f4860725fa0 RCX: 00007f48604febe9 [ 206.463307][T11817] RDX: 0000000020040040 RSI: 0000200000000200 RDI: 0000000000000003 [ 206.463321][T11817] RBP: 00007f485ef67090 R08: 0000000000000000 R09: 0000000000000000 [ 206.463364][T11817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.463378][T11817] R13: 00007f4860726038 R14: 00007f4860725fa0 R15: 00007ffda9543488 [ 206.463398][T11817] [ 206.699169][T11826] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2935'. [ 206.702889][T11366] hid-generic 0000:0003:0000.0086: unknown main item tag 0x0 [ 206.715853][T11366] hid-generic 0000:0003:0000.0086: unknown main item tag 0x0 [ 206.728629][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.750939][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.759395][T11366] hid-generic 0000:0003:0000.0086: hidraw0: HID v0.03 Device [syz0] on syz0 [ 206.821159][T11833] fido_id[11833]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.838336][T11832] loop4: detected capacity change from 0 to 512 [ 206.860886][T11832] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.890152][T11832] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 206.930485][T11832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 206.955766][T11832] System zones: 1-12 [ 206.976051][T11832] EXT4-fs (loop4): 1 truncate cleaned up [ 207.060229][T11855] loop3: detected capacity change from 0 to 512 [ 207.083120][T11855] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.126484][T11855] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.137886][T11860] loop5: detected capacity change from 0 to 512 [ 207.155910][T11855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 207.163964][T11855] System zones: 1-12 [ 207.169288][T11855] EXT4-fs (loop3): 1 truncate cleaned up [ 207.205779][T11832] random: crng reseeded on system resumption [ 207.216551][T11860] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2941: iget: bad i_size value: 38620345925642 [ 207.233484][T11860] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2941: couldn't read orphan inode 15 (err -117) [ 207.256756][T11860] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2941: bg 0: block 5: invalid block bitmap [ 207.273307][T11860] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 207.285604][T11860] EXT4-fs (loop5): This should not happen!! Data will be lost [ 207.285604][T11860] [ 207.295323][T11860] EXT4-fs (loop5): Total free blocks count 0 [ 207.301399][T11860] EXT4-fs (loop5): Free/Dirty block details [ 207.307359][T11860] EXT4-fs (loop5): free_blocks=0 [ 207.312387][T11860] EXT4-fs (loop5): dirty_blocks=1 [ 207.317477][T11860] EXT4-fs (loop5): Block reservation details [ 207.323488][T11860] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 207.333467][T11855] random: crng reseeded on system resumption [ 207.478580][T11889] FAULT_INJECTION: forcing a failure. [ 207.478580][T11889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.491797][T11889] CPU: 0 UID: 0 PID: 11889 Comm: syz.3.2947 Not tainted syzkaller #0 PREEMPT(voluntary) [ 207.491872][T11889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.491888][T11889] Call Trace: [ 207.491894][T11889] [ 207.491902][T11889] __dump_stack+0x1d/0x30 [ 207.491926][T11889] dump_stack_lvl+0xe8/0x140 [ 207.491957][T11889] dump_stack+0x15/0x1b [ 207.491976][T11889] should_fail_ex+0x265/0x280 [ 207.492057][T11889] should_fail+0xb/0x20 [ 207.492145][T11889] should_fail_usercopy+0x1a/0x20 [ 207.492199][T11889] _copy_from_iter+0xd2/0xe80 [ 207.492230][T11889] ? __build_skb_around+0x1a0/0x200 [ 207.492296][T11889] ? __alloc_skb+0x223/0x320 [ 207.492321][T11889] netlink_sendmsg+0x471/0x6b0 [ 207.492442][T11889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.492469][T11889] __sock_sendmsg+0x145/0x180 [ 207.492524][T11889] ____sys_sendmsg+0x31e/0x4e0 [ 207.492553][T11889] ___sys_sendmsg+0x17b/0x1d0 [ 207.492595][T11889] __x64_sys_sendmsg+0xd4/0x160 [ 207.492639][T11889] x64_sys_call+0x191e/0x2ff0 [ 207.492663][T11889] do_syscall_64+0xd2/0x200 [ 207.492694][T11889] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 207.492721][T11889] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 207.492794][T11889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.492818][T11889] RIP: 0033:0x7f2ce168ebe9 [ 207.492831][T11889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.492849][T11889] RSP: 002b:00007f2ce00f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.492894][T11889] RAX: ffffffffffffffda RBX: 00007f2ce18b5fa0 RCX: 00007f2ce168ebe9 [ 207.492909][T11889] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000006 [ 207.492923][T11889] RBP: 00007f2ce00f7090 R08: 0000000000000000 R09: 0000000000000000 [ 207.492937][T11889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.492958][T11889] R13: 00007f2ce18b6038 R14: 00007f2ce18b5fa0 R15: 00007ffcad088988 [ 207.492981][T11889] [ 207.791668][T11904] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 207.800282][T11904] netem: change failed [ 207.882248][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2951'. [ 207.891442][ T3377] hid-generic 0000:0003:0000.0087: unknown main item tag 0x0 [ 207.898914][ T3377] hid-generic 0000:0003:0000.0087: unknown main item tag 0x0 [ 207.909843][T11912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.935363][ T3377] hid-generic 0000:0003:0000.0087: hidraw0: HID v0.03 Device [syz0] on syz0 [ 207.957920][T11912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.215607][T11921] loop0: detected capacity change from 0 to 512 [ 208.229030][T11921] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2955: iget: bad i_size value: 38620345925642 [ 208.242284][T11921] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2955: couldn't read orphan inode 15 (err -117) [ 208.263476][T11921] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2955: bg 0: block 5: invalid block bitmap [ 208.276951][T11921] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 208.289259][T11921] EXT4-fs (loop0): This should not happen!! Data will be lost [ 208.289259][T11921] [ 208.299117][T11921] EXT4-fs (loop0): Total free blocks count 0 [ 208.305408][T11921] EXT4-fs (loop0): Free/Dirty block details [ 208.311741][T11921] EXT4-fs (loop0): free_blocks=0 [ 208.316942][T11921] EXT4-fs (loop0): dirty_blocks=1 [ 208.322042][T11921] EXT4-fs (loop0): Block reservation details [ 208.328096][T11921] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 208.392007][T11939] loop0: detected capacity change from 0 to 512 [ 208.402271][T11939] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.409335][T11939] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 208.423518][T11939] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 208.432147][T11939] System zones: 1-12 [ 208.446079][T11939] EXT4-fs (loop0): 1 truncate cleaned up [ 208.452263][T11945] loop4: detected capacity change from 0 to 512 [ 208.462930][T11945] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.470317][T11945] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 208.481298][T11945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 208.489342][T11945] System zones: 1-12 [ 208.494017][T11945] EXT4-fs (loop4): 1 truncate cleaned up [ 208.509342][T11939] random: crng reseeded on system resumption [ 208.540469][T11945] random: crng reseeded on system resumption [ 208.705893][T11958] loop5: detected capacity change from 0 to 512 [ 208.724638][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 208.724651][ T29] audit: type=1326 audit(1756167055.364:16570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.3.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce168ebe9 code=0x7ffc0000 [ 208.754544][ T29] audit: type=1326 audit(1756167055.364:16571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.3.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce168ebe9 code=0x7ffc0000 [ 208.801035][T11958] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2964: iget: bad i_size value: 38620345925642 [ 208.838760][T11958] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2964: couldn't read orphan inode 15 (err -117) [ 208.857709][T11958] netlink: 'syz.5.2964': attribute type 27 has an invalid length. [ 208.859290][ T29] audit: type=1326 audit(1756167055.427:16572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.3.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ce168ebe9 code=0x7ffc0000 [ 208.889371][ T29] audit: type=1326 audit(1756167055.427:16573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.3.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce168ebe9 code=0x7ffc0000 [ 208.913042][ T29] audit: type=1326 audit(1756167055.427:16574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.3.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce168ebe9 code=0x7ffc0000 [ 208.936759][ T29] audit: type=1326 audit(1756167055.427:16575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.3.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ce168ebe9 code=0x7ffc0000 [ 208.960501][ T29] audit: type=1326 audit(1756167055.427:16576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.3.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce168ebe9 code=0x7ffc0000 [ 208.984149][ T29] audit: type=1326 audit(1756167055.427:16577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.3.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce168ebe9 code=0x7ffc0000 [ 209.007829][ T29] audit: type=1326 audit(1756167055.437:16578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.3.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ce168ebe9 code=0x7ffc0000 [ 209.012892][T11966] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2964: bg 0: block 5: invalid block bitmap [ 209.031459][ T29] audit: type=1326 audit(1756167055.437:16579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11960 comm="syz.3.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce168ebe9 code=0x7ffc0000 [ 209.128563][T11966] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 209.140845][T11966] EXT4-fs (loop5): This should not happen!! Data will be lost [ 209.140845][T11966] [ 209.150590][T11966] EXT4-fs (loop5): Total free blocks count 0 [ 209.156696][T11966] EXT4-fs (loop5): Free/Dirty block details [ 209.162704][T11966] EXT4-fs (loop5): free_blocks=0 [ 209.167655][T11966] EXT4-fs (loop5): dirty_blocks=1 [ 209.172730][T11966] EXT4-fs (loop5): Block reservation details [ 209.178736][T11966] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 209.247757][T11965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.258547][T11965] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.269230][T11965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.295435][T11970] lo speed is unknown, defaulting to 1000 [ 209.301584][T11970] lo speed is unknown, defaulting to 1000 [ 209.318071][T11968] lo speed is unknown, defaulting to 1000 [ 209.353588][T11968] lo speed is unknown, defaulting to 1000 [ 209.564230][T11366] hid-generic 0000:0003:0000.0088: unknown main item tag 0x0 [ 209.571858][T11366] hid-generic 0000:0003:0000.0088: unknown main item tag 0x0 [ 209.580503][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.617819][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.640649][T11991] netlink: 'syz.5.2975': attribute type 30 has an invalid length. [ 209.657112][T11366] hid-generic 0000:0003:0000.0088: hidraw0: HID v0.03 Device [syz0] on syz0 [ 209.704156][T11992] fido_id[11992]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 209.735773][T11995] : renamed from bond0 (while UP) [ 209.766518][T11999] loop1: detected capacity change from 0 to 512 [ 209.790779][T11999] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.806574][T12001] pim6reg: entered allmulticast mode [ 209.812749][T11999] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 209.822890][T12001] pim6reg: left allmulticast mode [ 209.836532][T11999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 209.845188][T11999] System zones: 1-12 [ 209.849515][T11999] EXT4-fs (loop1): 1 truncate cleaned up [ 210.016998][T11999] random: crng reseeded on system resumption [ 210.334323][T12023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2986'. [ 210.352108][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2986'. [ 210.392301][T12025] lo speed is unknown, defaulting to 1000 [ 210.399163][T12025] lo speed is unknown, defaulting to 1000 [ 210.413207][T12027] loop1: detected capacity change from 0 to 512 [ 210.578455][T12037] loop1: detected capacity change from 0 to 1024 [ 210.597196][T12037] EXT4-fs: Ignoring removed orlov option [ 210.736519][T12052] loop5: detected capacity change from 0 to 1024 [ 210.745079][T12052] EXT4-fs: Ignoring removed orlov option [ 210.890188][T12067] lo speed is unknown, defaulting to 1000 [ 210.897858][T12063] loop4: detected capacity change from 0 to 512 [ 210.904850][T12067] lo speed is unknown, defaulting to 1000 [ 210.911815][T12063] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.962227][T12063] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 211.050432][T12063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 211.063979][T12063] System zones: 1-12 [ 211.089896][T12063] EXT4-fs (loop4): 1 truncate cleaned up [ 211.102850][T12085] loop3: detected capacity change from 0 to 2048 [ 211.122840][T12087] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.130198][T12087] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.137696][T12087] bridge0: entered allmulticast mode [ 211.181628][T12087] bridge_slave_1: left allmulticast mode [ 211.187339][T12087] bridge_slave_1: left promiscuous mode [ 211.193087][T12087] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.216362][T12090] random: crng reseeded on system resumption [ 211.231696][T12087] bridge_slave_0: left allmulticast mode [ 211.237470][T12087] bridge_slave_0: left promiscuous mode [ 211.243271][T12087] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.261676][T12093] loop3: detected capacity change from 0 to 512 [ 211.278993][T12093] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.312723][T12093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 211.324344][T12093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 211.333170][T12093] System zones: 1-12 [ 211.337978][T12093] EXT4-fs (loop3): 1 truncate cleaned up [ 211.441324][T12089] random: crng reseeded on system resumption [ 211.469070][T12103] loop0: detected capacity change from 0 to 512 [ 211.476799][T12103] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.483627][T12103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 211.503807][T12103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 211.523904][T12103] System zones: 1-12 [ 211.529445][T12103] EXT4-fs (loop0): 1 truncate cleaned up [ 211.578319][T12110] loop5: detected capacity change from 0 to 1024 [ 211.605137][T12114] lo speed is unknown, defaulting to 1000 [ 211.611435][T12110] EXT4-fs: Ignoring removed orlov option [ 211.622634][T12114] lo speed is unknown, defaulting to 1000 [ 211.885308][T12103] random: crng reseeded on system resumption [ 211.904958][T12124] FAULT_INJECTION: forcing a failure. [ 211.904958][T12124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.918196][T12124] CPU: 0 UID: 0 PID: 12124 Comm: syz.3.3018 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.918236][T12124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.918252][T12124] Call Trace: [ 211.918260][T12124] [ 211.918286][T12124] __dump_stack+0x1d/0x30 [ 211.918320][T12124] dump_stack_lvl+0xe8/0x140 [ 211.918339][T12124] dump_stack+0x15/0x1b [ 211.918355][T12124] should_fail_ex+0x265/0x280 [ 211.918375][T12124] should_fail+0xb/0x20 [ 211.918393][T12124] should_fail_usercopy+0x1a/0x20 [ 211.918508][T12124] _copy_from_user+0x1c/0xb0 [ 211.918639][T12124] btf_new_fd+0x20a/0x790 [ 211.918661][T12124] bpf_btf_load+0x112/0x130 [ 211.918698][T12124] __sys_bpf+0x352/0x7b0 [ 211.918731][T12124] __x64_sys_bpf+0x41/0x50 [ 211.918825][T12124] x64_sys_call+0x2aea/0x2ff0 [ 211.918900][T12124] do_syscall_64+0xd2/0x200 [ 211.918929][T12124] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 211.918954][T12124] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 211.918980][T12124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.919000][T12124] RIP: 0033:0x7f2ce168ebe9 [ 211.919014][T12124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.919052][T12124] RSP: 002b:00007f2ce00f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.919076][T12124] RAX: ffffffffffffffda RBX: 00007f2ce18b5fa0 RCX: 00007f2ce168ebe9 [ 211.919091][T12124] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000012 [ 211.919105][T12124] RBP: 00007f2ce00f7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.919199][T12124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.919215][T12124] R13: 00007f2ce18b6038 R14: 00007f2ce18b5fa0 R15: 00007ffcad088988 [ 211.919239][T12124] [ 212.134518][T12129] loop4: detected capacity change from 0 to 512 [ 212.172221][T12129] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3020: iget: bad i_size value: 38620345925642 [ 212.206516][T12129] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3020: couldn't read orphan inode 15 (err -117) [ 212.215908][T12138] loop5: detected capacity change from 0 to 1024 [ 212.227037][T12129] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3020: bg 0: block 5: invalid block bitmap [ 212.249739][T12129] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 212.262011][T12129] EXT4-fs (loop4): This should not happen!! Data will be lost [ 212.262011][T12129] [ 212.271702][T12129] EXT4-fs (loop4): Total free blocks count 0 [ 212.277743][T12129] EXT4-fs (loop4): Free/Dirty block details [ 212.283641][T12129] EXT4-fs (loop4): free_blocks=0 [ 212.288660][T12129] EXT4-fs (loop4): dirty_blocks=1 [ 212.293729][T12129] EXT4-fs (loop4): Block reservation details [ 212.299774][T12129] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 212.335104][T12138] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.363905][T12138] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 212.365883][T12147] lo speed is unknown, defaulting to 1000 [ 212.378077][T12138] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000] [ 212.389428][T12138] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.3024: Freeing blocks not in datazone - block = 0, count = 4096 [ 212.394953][T12150] loop0: detected capacity change from 0 to 1024 [ 212.406275][T12138] EXT4-fs (loop5): 1 orphan inode deleted [ 212.416031][T12138] EXT4-fs mount: 63 callbacks suppressed [ 212.416047][T12138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.418622][T12150] EXT4-fs: Ignoring removed bh option [ 212.434244][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.458680][T12147] lo speed is unknown, defaulting to 1000 [ 212.461721][T12150] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 212.475715][ T4543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.539814][T12150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.541953][T12157] loop3: detected capacity change from 0 to 512 [ 212.561645][T12157] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.580457][T12157] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.605896][T12169] loop5: detected capacity change from 0 to 512 [ 212.626120][T12169] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.628347][T12150] EXT4-fs error (device loop0): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.0.3023: path /26/file2/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 212.655567][T12169] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 212.662924][T12157] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 212.666504][T12150] EXT4-fs (loop0): Remounting filesystem read-only [ 212.680323][T12169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 212.688685][T12169] System zones: 1-12 [ 212.692915][T12157] System zones: 1-12 [ 212.696999][T12169] EXT4-fs (loop5): 1 truncate cleaned up [ 212.703407][T12169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.726003][T12157] EXT4-fs (loop3): 1 truncate cleaned up [ 212.736510][T11458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.758910][T12157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.820471][T12169] random: crng reseeded on system resumption [ 212.849534][T12157] random: crng reseeded on system resumption [ 212.903047][T12183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3038'. [ 212.912831][T12183] netem: change failed [ 212.924360][ T4543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.966088][T12189] loop5: detected capacity change from 0 to 1024 [ 212.975853][T12189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.991715][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.016909][T12189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.036114][T12189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.095196][T12200] lo speed is unknown, defaulting to 1000 [ 213.113985][T12200] lo speed is unknown, defaulting to 1000 [ 213.149643][T12203] loop0: detected capacity change from 0 to 512 [ 213.167843][T12203] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.187011][T12203] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 213.211690][T12203] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 213.223949][T12203] System zones: 1-12 [ 213.241535][T12203] EXT4-fs (loop0): 1 truncate cleaned up [ 213.260068][T12203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.338062][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3049'. [ 213.347019][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3049'. [ 213.364680][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3050'. [ 213.425047][T12203] random: crng reseeded on system resumption [ 213.466041][T12226] loop3: detected capacity change from 0 to 512 [ 213.486243][T12226] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.505024][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 213.505039][ T29] audit: type=1400 audit(1756167828.385:16839): avc: denied { accept } for pid=12231 comm="syz.5.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 213.546872][T12208] lo speed is unknown, defaulting to 1000 [ 213.563392][T11458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.564507][T12226] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 213.590904][T12234] loop5: detected capacity change from 0 to 512 [ 213.597452][T12234] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.604579][T12208] lo speed is unknown, defaulting to 1000 [ 213.614904][T12234] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 213.631440][T12234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 213.640089][T12226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 213.652078][T12234] System zones: 1-12 [ 213.656105][T12226] System zones: 1-12 [ 213.660722][T12226] EXT4-fs (loop3): 1 truncate cleaned up [ 213.667835][T12234] EXT4-fs (loop5): 1 truncate cleaned up [ 213.676527][T12226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.689444][T12234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.696868][T12236] netlink: 87 bytes leftover after parsing attributes in process `syz.0.3054'. [ 213.763288][T12234] random: crng reseeded on system resumption [ 213.782589][T12226] random: crng reseeded on system resumption [ 213.859361][ T4543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.926521][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.937866][T12208] chnl_net:caif_netlink_parms(): no params data found [ 213.945286][ T29] audit: type=1326 audit(1756167828.836:16840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 213.968955][ T29] audit: type=1326 audit(1756167828.836:16841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 213.992819][ T29] audit: type=1326 audit(1756167828.836:16842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 214.016420][ T29] audit: type=1326 audit(1756167828.836:16843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 214.040118][ T29] audit: type=1326 audit(1756167828.836:16844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 214.063778][ T29] audit: type=1326 audit(1756167828.836:16845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 214.087568][ T29] audit: type=1326 audit(1756167828.836:16846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 214.111259][ T29] audit: type=1326 audit(1756167828.836:16847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 214.134856][ T29] audit: type=1326 audit(1756167828.836:16848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f57d394ec23 code=0x7ffc0000 [ 214.229417][T12208] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.236513][T12208] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.334834][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3061'. [ 214.343801][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3061'. [ 214.355115][T12208] bridge_slave_0: entered allmulticast mode [ 214.361785][T12208] bridge_slave_0: entered promiscuous mode [ 214.370645][T12208] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.377831][T12208] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.385274][T12208] bridge_slave_1: entered allmulticast mode [ 214.385308][T12256] loop3: detected capacity change from 0 to 32768 [ 214.391790][T12208] bridge_slave_1: entered promiscuous mode [ 214.422416][T12266] loop5: detected capacity change from 0 to 1024 [ 214.429115][T12266] EXT4-fs: inline encryption not supported [ 214.436035][T12266] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 214.446954][T12266] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 214.456782][T12266] JBD2: no valid journal superblock found [ 214.462521][T12266] EXT4-fs (loop5): Could not load journal inode [ 214.471735][T12208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.483718][T12259] lo speed is unknown, defaulting to 1000 [ 214.486139][T12208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.502782][T12259] lo speed is unknown, defaulting to 1000 [ 214.553002][T12273] loop0: detected capacity change from 0 to 256 [ 214.570808][T12208] team0: Port device team_slave_0 added [ 214.589808][T12208] team0: Port device team_slave_1 added [ 214.690723][T12208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.697806][T12208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.723877][T12208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.740687][T12208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.747682][T12208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.773679][T12208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.814565][T12208] hsr_slave_0: entered promiscuous mode [ 214.820792][T12285] loop4: detected capacity change from 0 to 1024 [ 214.828086][T12208] hsr_slave_1: entered promiscuous mode [ 214.834323][T12285] EXT4-fs: Ignoring removed orlov option [ 214.864577][T12285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.116437][T12297] C: renamed from team_slave_0 (while UP) [ 215.142456][T12294] can0: slcan on ttyS3. [ 215.191455][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3070'. [ 215.241361][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 215.254464][T12309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.264177][T12294] can0 (unregistered): slcan off ttyS3. [ 215.270605][T12311] loop0: detected capacity change from 0 to 512 [ 215.284948][T12311] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 215.303955][T12309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.323587][T12311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 215.347976][T12315] loop5: detected capacity change from 0 to 164 [ 215.354713][T12311] System zones: 1-12 [ 215.364390][T12311] EXT4-fs (loop0): orphan cleanup on readonly fs [ 215.371106][T12297] can0: slcan on ttyS3. [ 215.396525][T12311] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3068: bg 0: block 361: padding at end of block bitmap is not set [ 215.422066][T12311] EXT4-fs (loop0): Remounting filesystem read-only [ 215.426552][T12208] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.438026][T12311] EXT4-fs (loop0): 1 truncate cleaned up [ 215.444511][T12208] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.453223][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.465187][T12311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 215.484400][T12208] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.501679][T12208] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.509849][T12323] FAULT_INJECTION: forcing a failure. [ 215.509849][T12323] name failslab, interval 1, probability 0, space 0, times 0 [ 215.522671][T12323] CPU: 0 UID: 0 PID: 12323 Comm: syz.4.3072 Not tainted syzkaller #0 PREEMPT(voluntary) [ 215.522700][T12323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.522713][T12323] Call Trace: [ 215.522720][T12323] [ 215.522729][T12323] __dump_stack+0x1d/0x30 [ 215.522752][T12323] dump_stack_lvl+0xe8/0x140 [ 215.522774][T12323] dump_stack+0x15/0x1b [ 215.522841][T12323] should_fail_ex+0x265/0x280 [ 215.522933][T12323] should_failslab+0x8c/0xb0 [ 215.522962][T12323] kmem_cache_alloc_noprof+0x50/0x310 [ 215.522994][T12323] ? skb_clone+0x151/0x1f0 [ 215.523021][T12323] skb_clone+0x151/0x1f0 [ 215.523122][T12323] __netlink_deliver_tap+0x2c9/0x500 [ 215.523146][T12323] netlink_unicast+0x66b/0x690 [ 215.523214][T12323] netlink_sendmsg+0x58b/0x6b0 [ 215.523243][T12323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.523270][T12323] __sock_sendmsg+0x145/0x180 [ 215.523304][T12323] ____sys_sendmsg+0x31e/0x4e0 [ 215.523396][T12323] ___sys_sendmsg+0x17b/0x1d0 [ 215.523429][T12323] __x64_sys_sendmsg+0xd4/0x160 [ 215.523457][T12323] x64_sys_call+0x191e/0x2ff0 [ 215.523477][T12323] do_syscall_64+0xd2/0x200 [ 215.523530][T12323] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 215.523556][T12323] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 215.523585][T12323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.523608][T12323] RIP: 0033:0x7f23e29febe9 [ 215.523624][T12323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.523677][T12323] RSP: 002b:00007f23e145f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.523699][T12323] RAX: ffffffffffffffda RBX: 00007f23e2c25fa0 RCX: 00007f23e29febe9 [ 215.523779][T12323] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 215.523792][T12323] RBP: 00007f23e145f090 R08: 0000000000000000 R09: 0000000000000000 [ 215.523804][T12323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.523816][T12323] R13: 00007f23e2c26038 R14: 00007f23e2c25fa0 R15: 00007ffd31bc57a8 [ 215.523837][T12323] [ 215.764217][T12329] loop5: detected capacity change from 0 to 512 [ 215.796673][T12335] loop3: detected capacity change from 0 to 512 [ 215.808579][T12329] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3073: iget: bad i_size value: 38620345925642 [ 215.830259][T12293] can0 (unregistered): slcan off ttyS3. [ 215.838163][T12329] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3073: couldn't read orphan inode 15 (err -117) [ 215.852090][T12335] EXT4-fs: Ignoring removed orlov option [ 215.866288][T12208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.876080][T12335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.886456][T12329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.903715][T12208] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.914178][T12329] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3073: bg 0: block 5: invalid block bitmap [ 215.939911][T11458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 215.954540][T12335] EXT4-fs (loop3): orphan cleanup on readonly fs [ 215.973136][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.980363][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.987514][T12329] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 215.997989][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.999784][T12329] EXT4-fs (loop5): This should not happen!! Data will be lost [ 215.999784][T12329] [ 216.006824][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.016468][T12329] EXT4-fs (loop5): Total free blocks count 0 [ 216.029634][T12329] EXT4-fs (loop5): Free/Dirty block details [ 216.029943][T12335] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3074: bg 0: block 248: padding at end of block bitmap is not set [ 216.035660][T12329] EXT4-fs (loop5): free_blocks=0 [ 216.054881][T12329] EXT4-fs (loop5): dirty_blocks=1 [ 216.059958][T12329] EXT4-fs (loop5): Block reservation details [ 216.062174][T12335] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3074: Failed to acquire dquot type 1 [ 216.065947][T12329] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 216.083766][T12335] EXT4-fs (loop3): 1 truncate cleaned up [ 216.090236][T12335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.101182][T12208] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.112965][T12208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.137261][T12335] ext4: Unknown parameter '' [ 216.176645][T12335] syz.3.3074 (12335) used greatest stack depth: 9552 bytes left [ 216.206903][ T4543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.217412][T12208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.224648][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.250830][T12372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3080'. [ 216.306032][T12378] loop3: detected capacity change from 0 to 512 [ 216.313341][T12378] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.329987][T12378] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.348888][T12378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 216.378078][T12388] loop5: detected capacity change from 0 to 512 [ 216.388223][T12388] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.391676][T12378] System zones: 1-12 [ 216.410942][T12388] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.427123][T12208] veth0_vlan: entered promiscuous mode [ 216.437773][T12378] EXT4-fs (loop3): 1 truncate cleaned up [ 216.443823][T12378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.490944][T12208] veth1_vlan: entered promiscuous mode [ 216.497842][T12388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 216.526030][T12388] System zones: 1-12 [ 216.529687][T12378] random: crng reseeded on system resumption [ 216.537245][T12208] veth0_macvtap: entered promiscuous mode [ 216.544943][T12208] veth1_macvtap: entered promiscuous mode [ 216.555116][T12388] EXT4-fs (loop5): 1 truncate cleaned up [ 216.562001][T12388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.591901][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.629788][T12208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.656341][T12208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.669135][T12402] random: crng reseeded on system resumption [ 216.688695][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.708672][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.729868][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.797628][ T4543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.817065][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.916743][ T23] hid-generic 0000:0003:0000.0089: unknown main item tag 0x0 [ 216.924340][ T23] hid-generic 0000:0003:0000.0089: unknown main item tag 0x0 [ 216.934493][ T23] hid-generic 0000:0003:0000.0089: hidraw0: HID v0.03 Device [syz0] on syz0 [ 216.946046][T12428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.956509][T12428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.977375][T12429] fido_id[12429]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.145139][T12435] lo speed is unknown, defaulting to 1000 [ 217.151307][T12435] lo speed is unknown, defaulting to 1000 [ 217.235754][T12435] chnl_net:caif_netlink_parms(): no params data found [ 217.281798][T12435] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.289063][T12435] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.296433][T12435] bridge_slave_0: entered allmulticast mode [ 217.302919][T12435] bridge_slave_0: entered promiscuous mode [ 217.324268][T12435] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.331404][T12435] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.338691][T12435] bridge_slave_1: entered allmulticast mode [ 217.345174][T12435] bridge_slave_1: entered promiscuous mode [ 217.370403][T12435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.381330][T12435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.415145][ T37]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.424404][ T37]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.434185][ T37]  (unregistering): Released all slaves [ 217.451300][T12435] team0: Port device team_slave_0 added [ 217.458042][T12435] team0: Port device team_slave_1 added [ 217.494029][T12435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.501081][T12435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.506933][T12450] loop0: detected capacity change from 0 to 512 [ 217.527395][T12435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.553422][T12435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.560451][T12435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.568414][T12450] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3100: iget: bad i_size value: 38620345925642 [ 217.586445][T12435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.640815][ T37] hsr_slave_0: left promiscuous mode [ 217.646414][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.654399][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.662397][T12450] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3100: couldn't read orphan inode 15 (err -117) [ 217.678421][T12450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.695323][T12450] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3100: bg 0: block 5: invalid block bitmap [ 217.708538][T12457] loop1: detected capacity change from 0 to 128 [ 217.716555][T12450] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 217.728769][T12450] EXT4-fs (loop0): This should not happen!! Data will be lost [ 217.728769][T12450] [ 217.738436][T12450] EXT4-fs (loop0): Total free blocks count 0 [ 217.744443][T12450] EXT4-fs (loop0): Free/Dirty block details [ 217.750350][T12450] EXT4-fs (loop0): free_blocks=0 [ 217.755343][T12450] EXT4-fs (loop0): dirty_blocks=1 [ 217.760418][T12450] EXT4-fs (loop0): Block reservation details [ 217.766584][T12450] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 217.827498][T12467] loop1: detected capacity change from 0 to 1024 [ 217.833461][T11458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.843188][T12467] EXT4-fs: Ignoring removed orlov option [ 217.873072][T12473] __nla_validate_parse: 10 callbacks suppressed [ 217.873085][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3107'. [ 217.888400][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 217.889980][T12467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.910646][ T37] team0 (unregistering): Port device team_slave_1 removed [ 217.921169][ T37] team0 (unregistering): Port device team_slave_0 removed [ 218.014734][T12479] loop3: detected capacity change from 0 to 512 [ 218.027368][T12435] hsr_slave_0: entered promiscuous mode [ 218.046085][T12435] hsr_slave_1: entered promiscuous mode [ 218.052580][T12435] debugfs: 'hsr0' already exists in 'hsr' [ 218.058380][T12435] Cannot create hsr debugfs directory [ 218.078298][T12479] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3110: iget: bad i_size value: 38620345925642 [ 218.094409][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3111'. [ 218.124592][T12479] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3110: couldn't read orphan inode 15 (err -117) [ 218.154296][T12479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.249502][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.298615][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 218.298628][ T29] audit: type=1400 audit(1756168601.416:16921): avc: denied { read } for pid=12498 comm="syz.3.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.329679][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.351525][T12500] loop3: detected capacity change from 0 to 1024 [ 218.397775][T12500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.424130][T12500] ext4 filesystem being mounted at /611/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.562608][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.577903][T12435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.607809][T12435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.642154][T12435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.660949][T12533] netlink: 'syz.5.3116': attribute type 5 has an invalid length. [ 218.671344][T12435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.732042][T12540] loop3: detected capacity change from 0 to 512 [ 218.757684][T12540] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3117: iget: bad i_size value: 38620345925642 [ 218.798400][T12540] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3117: couldn't read orphan inode 15 (err -117) [ 218.810600][T12435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.815151][T12540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.824078][T12435] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.842202][T12548] loop5: detected capacity change from 0 to 1024 [ 218.849100][T12548] EXT4-fs: inline encryption not supported [ 218.855242][T12548] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 218.866293][T12548] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 218.884559][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.891714][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.901736][T12540] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3117: bg 0: block 5: invalid block bitmap [ 218.914413][T12548] JBD2: no valid journal superblock found [ 218.919389][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.920146][T12548] EXT4-fs (loop5): Could not load journal inode [ 218.933597][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.965447][T12540] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 218.977761][T12540] EXT4-fs (loop3): This should not happen!! Data will be lost [ 218.977761][T12540] [ 218.988094][T12540] EXT4-fs (loop3): Total free blocks count 0 [ 218.994122][T12540] EXT4-fs (loop3): Free/Dirty block details [ 219.000085][T12540] EXT4-fs (loop3): free_blocks=0 [ 219.001352][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3118'. [ 219.005040][T12540] EXT4-fs (loop3): dirty_blocks=1 [ 219.005057][T12540] EXT4-fs (loop3): Block reservation details [ 219.025063][T12540] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 219.061504][T12435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.070245][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.249749][T12435] veth0_vlan: entered promiscuous mode [ 219.261322][T12435] veth1_vlan: entered promiscuous mode [ 219.278489][T12435] veth0_macvtap: entered promiscuous mode [ 219.292853][T12435] veth1_macvtap: entered promiscuous mode [ 219.316492][T12435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.325624][T12435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.338981][T12594] tipc: Started in network mode [ 219.343977][T12594] tipc: Node identity cef2bd646cc3, cluster identity 4711 [ 219.351156][T12594] tipc: Enabled bearer , priority 0 [ 219.357842][ T269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.367265][ T269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.379626][T12594] syzkaller0: entered promiscuous mode [ 219.385239][T12594] syzkaller0: entered allmulticast mode [ 219.392819][ T269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.404067][ T269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.417595][T12598] loop3: detected capacity change from 0 to 512 [ 219.437317][T12598] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3124: iget: bad i_size value: 38620345925642 [ 219.462317][T12598] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3124: couldn't read orphan inode 15 (err -117) [ 219.483722][T12594] tipc: Resetting bearer [ 219.491609][T12593] tipc: Resetting bearer [ 219.502999][T12598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.519719][T12593] tipc: Disabling bearer [ 219.527947][ T29] audit: type=1326 audit(1756168602.686:16922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.4.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfdd2ebe9 code=0x7ffc0000 [ 219.536824][T12598] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3124: bg 0: block 5: invalid block bitmap [ 219.551743][ T29] audit: type=1326 audit(1756168602.686:16923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.4.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfdd2ebe9 code=0x7ffc0000 [ 219.565889][T12598] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 219.587662][ T29] audit: type=1326 audit(1756168602.686:16924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.4.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3dfdd2ebe9 code=0x7ffc0000 [ 219.599913][T12598] EXT4-fs (loop3): This should not happen!! Data will be lost [ 219.599913][T12598] [ 219.623465][ T29] audit: type=1326 audit(1756168602.686:16925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.4.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfdd2ebe9 code=0x7ffc0000 [ 219.633142][T12598] EXT4-fs (loop3): Total free blocks count 0 [ 219.656760][ T29] audit: type=1326 audit(1756168602.686:16926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.4.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfdd2ebe9 code=0x7ffc0000 [ 219.662703][T12598] EXT4-fs (loop3): Free/Dirty block details [ 219.686268][ T29] audit: type=1326 audit(1756168602.686:16927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.4.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3dfdd2ebe9 code=0x7ffc0000 [ 219.686300][ T29] audit: type=1326 audit(1756168602.686:16928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.4.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfdd2ebe9 code=0x7ffc0000 [ 219.686356][ T29] audit: type=1326 audit(1756168602.686:16929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.4.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3dfdd2ebe9 code=0x7ffc0000 [ 219.686388][ T29] audit: type=1326 audit(1756168602.686:16930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.4.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dfdd2ebe9 code=0x7ffc0000 [ 219.692275][T12598] EXT4-fs (loop3): free_blocks=0 [ 219.791734][T12598] EXT4-fs (loop3): dirty_blocks=1 [ 219.796779][T12598] EXT4-fs (loop3): Block reservation details [ 219.802794][T12598] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 219.816188][T12606] pim6reg: entered allmulticast mode [ 219.828165][T12609] pim6reg: left allmulticast mode [ 219.881058][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.889899][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3127'. [ 220.138768][T12626] lo speed is unknown, defaulting to 1000 [ 220.147005][T12626] lo speed is unknown, defaulting to 1000 [ 220.286778][T12626] chnl_net:caif_netlink_parms(): no params data found [ 220.365108][T12626] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.372321][T12626] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.379652][T12626] bridge_slave_0: entered allmulticast mode [ 220.386705][T12626] bridge_slave_0: entered promiscuous mode [ 220.394506][T12626] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.401745][T12626] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.409198][T12626] bridge_slave_1: entered allmulticast mode [ 220.415836][T12626] bridge_slave_1: entered promiscuous mode [ 220.436463][T12626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.447434][T12626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.470266][T12626] team0: Port device team_slave_0 added [ 220.476855][T12626] team0: Port device team_slave_1 added [ 220.493341][T12626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.500351][T12626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.526378][T12626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.537730][T12626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.544741][T12626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.570668][T12626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.599023][T12626] hsr_slave_0: entered promiscuous mode [ 220.605099][T12626] hsr_slave_1: entered promiscuous mode [ 220.611053][T12626] debugfs: 'hsr0' already exists in 'hsr' [ 220.616788][T12626] Cannot create hsr debugfs directory [ 220.688467][T12626] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.735020][T12626] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.772374][T12626] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.788627][T12656] loop4: detected capacity change from 0 to 128 [ 220.819952][T12658] loop5: detected capacity change from 0 to 512 [ 220.837478][T12658] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.869457][T12661] loop1: detected capacity change from 0 to 512 [ 220.870616][T12626] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.887661][T12658] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 220.898326][T12661] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3139: iget: bad i_size value: 38620345925642 [ 220.918144][T12661] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3139: couldn't read orphan inode 15 (err -117) [ 220.931967][T12661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.936792][T12662] loop4: detected capacity change from 0 to 512 [ 220.950822][T12658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 220.958865][T12658] System zones: 1-12 [ 220.968089][T12658] EXT4-fs (loop5): 1 truncate cleaned up [ 220.981214][T12658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.996549][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.002500][T12626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.008541][T12662] EXT4-fs (loop4): too many log groups per flexible block group [ 221.020103][T12662] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 221.030726][T12626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.040744][T12626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.043259][T12662] EXT4-fs (loop4): mount failed [ 221.059597][T12626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.069494][T12658] random: crng reseeded on system resumption [ 221.125662][ T4543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.138105][T12626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.147464][T12669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3140'. [ 221.161611][T12669] netem: change failed [ 221.170187][T12626] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.199144][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.206254][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.245238][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.252383][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.263525][T12677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3142'. [ 221.272851][T12677] netem: change failed [ 221.280238][T12679] lo speed is unknown, defaulting to 1000 [ 221.289993][T12679] lo speed is unknown, defaulting to 1000 [ 221.379416][T12689] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 221.396654][T12693] netlink: 'syz.1.3145': attribute type 5 has an invalid length. [ 221.427977][T12689] netem: change failed [ 221.480604][T12626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.512402][ T3410] hid-generic 0000:0003:0000.008A: unknown main item tag 0x0 [ 221.519936][ T3410] hid-generic 0000:0003:0000.008A: unknown main item tag 0x0 [ 221.538308][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.557111][ T3410] hid-generic 0000:0003:0000.008A: hidraw0: HID v0.03 Device [syz0] on syz0 [ 221.569454][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.617975][T12703] fido_id[12703]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.653930][T12710] loop4: detected capacity change from 0 to 1024 [ 221.660493][T12707] loop0: detected capacity change from 0 to 512 [ 221.661071][T12707] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.686364][T12710] EXT4-fs: Ignoring removed orlov option [ 221.692337][T12697] loop1: detected capacity change from 0 to 1024 [ 221.699392][T12697] EXT4-fs: inline encryption not supported [ 221.713346][T12707] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 221.721291][T12626] veth0_vlan: entered promiscuous mode [ 221.734590][T12710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.747526][T12697] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 221.758591][T12697] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 221.766502][T12626] veth1_vlan: entered promiscuous mode [ 221.774092][T12707] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 221.781514][T12697] JBD2: no valid journal superblock found [ 221.787737][T12697] EXT4-fs (loop1): Could not load journal inode [ 221.793831][T12707] System zones: 1-12 [ 221.828364][T12707] EXT4-fs (loop0): 1 truncate cleaned up [ 221.834450][T12707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.835634][T12626] veth0_macvtap: entered promiscuous mode [ 221.891385][T12626] veth1_macvtap: entered promiscuous mode [ 221.909688][T12626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.923292][T12626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.946072][ T269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.958180][ T269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.960199][T12707] random: crng reseeded on system resumption [ 221.981849][ T269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.009705][ T269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.036668][T11458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.048741][T12719] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.055984][T12719] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.068959][T12719] bridge0: entered allmulticast mode [ 222.080546][T12435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.104196][T12719] bridge_slave_1: left allmulticast mode [ 222.109941][T12719] bridge_slave_1: left promiscuous mode [ 222.115802][T12719] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.127540][T12719] bridge_slave_0: left allmulticast mode [ 222.133243][T12719] bridge_slave_0: left promiscuous mode [ 222.139069][T12719] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.150219][T12725] loop4: detected capacity change from 0 to 512 [ 222.175094][T12725] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3153: iget: bad i_size value: 38620345925642 [ 222.188482][T12725] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3153: couldn't read orphan inode 15 (err -117) [ 222.204725][T12725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.217868][T12729] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3154'. [ 222.222083][T12725] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3153: bg 0: block 5: invalid block bitmap [ 222.254648][T12725] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 222.266988][T12725] EXT4-fs (loop4): This should not happen!! Data will be lost [ 222.266988][T12725] [ 222.276909][T12725] EXT4-fs (loop4): Total free blocks count 0 [ 222.283024][T12725] EXT4-fs (loop4): Free/Dirty block details [ 222.289025][T12725] EXT4-fs (loop4): free_blocks=0 [ 222.290322][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3156'. [ 222.293980][T12725] EXT4-fs (loop4): dirty_blocks=1 [ 222.293997][T12725] EXT4-fs (loop4): Block reservation details [ 222.313936][T12725] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 222.327310][T12732] loop5: detected capacity change from 0 to 1024 [ 222.359179][T12732] EXT4-fs: Ignoring removed orlov option [ 222.368243][T12435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.400919][T12732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.488322][T12748] pim6reg: entered allmulticast mode [ 222.499105][T12748] pim6reg: left allmulticast mode [ 222.648260][T12758] loop4: detected capacity change from 0 to 512 [ 222.658105][T12758] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.666050][T12758] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.680372][T12758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 222.688910][T12758] System zones: 1-12 [ 222.693317][T12758] EXT4-fs (loop4): 1 truncate cleaned up [ 222.699553][T12758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.742157][ T4543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.770032][T12758] random: crng reseeded on system resumption [ 222.807995][T12435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.825438][T12766] __nla_validate_parse: 1 callbacks suppressed [ 222.825498][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 222.840629][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 222.914178][T12768] random: crng reseeded on system resumption [ 223.019319][T12777] lo speed is unknown, defaulting to 1000 [ 223.025439][T12777] lo speed is unknown, defaulting to 1000 [ 223.282771][T12783] loop3: detected capacity change from 0 to 128 [ 223.342661][T12789] loop1: detected capacity change from 0 to 512 [ 223.367035][T12791] loop4: detected capacity change from 0 to 1024 [ 223.378486][T12791] EXT4-fs: Ignoring removed orlov option [ 223.380430][T12789] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3177: iget: bad i_size value: 38620345925642 [ 223.400497][T12791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.417893][T12789] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3177: couldn't read orphan inode 15 (err -117) [ 223.464961][T12789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.497374][T12208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.573831][T12803] loop0: detected capacity change from 0 to 512 [ 223.580525][T12803] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.619327][T12803] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 223.635460][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 223.635477][ T29] audit: type=1326 audit(1756169375.009:17103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 223.665374][ T29] audit: type=1326 audit(1756169375.009:17104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 223.688963][ T29] audit: type=1326 audit(1756169375.009:17105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 223.712628][ T29] audit: type=1326 audit(1756169375.009:17106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 223.736302][ T29] audit: type=1326 audit(1756169375.009:17107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 223.738267][T12803] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 223.759873][ T29] audit: type=1326 audit(1756169375.009:17108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 223.759908][ T29] audit: type=1326 audit(1756169375.009:17109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 223.767860][T12803] System zones: [ 223.791618][ T29] audit: type=1326 audit(1756169375.009:17110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 223.815384][T12803] 1-12 [ 223.846890][T12803] EXT4-fs (loop0): 1 truncate cleaned up [ 223.853174][T12803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.867673][ T29] audit: type=1326 audit(1756169375.009:17111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 223.871095][T12435] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.891349][ T29] audit: type=1326 audit(1756169375.009:17112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d394ebe9 code=0x7ffc0000 [ 223.973636][T12803] random: crng reseeded on system resumption [ 223.997710][T12812] lo speed is unknown, defaulting to 1000 [ 224.024342][T12812] lo speed is unknown, defaulting to 1000 [ 224.031010][T11458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.207958][T12821] loop5: detected capacity change from 0 to 512 [ 224.223189][T12821] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.253348][T12821] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 224.277162][T12821] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 224.285719][T12828] loop0: detected capacity change from 0 to 512 [ 224.292475][T12821] System zones: 1-12 [ 224.297069][T12821] EXT4-fs (loop5): 1 truncate cleaned up [ 224.303877][T12821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.322775][T12821] random: crng reseeded on system resumption [ 224.348811][T12828] EXT4-fs (loop0): too many log groups per flexible block group [ 224.356575][T12828] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 224.385475][ T4543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.402616][T12828] EXT4-fs (loop0): mount failed [ 224.476959][T12841] loop5: detected capacity change from 0 to 1024 [ 224.496955][T12841] EXT4-fs: Ignoring removed orlov option [ 224.523476][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'. [ 224.546117][T12841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.567571][T12845] loop0: detected capacity change from 0 to 1024 [ 224.588424][T12845] EXT4-fs: Ignoring removed orlov option [ 224.634877][T12843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.873356][T12843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.907466][T12843] bond0 (unregistering): Released all slaves [ 224.929962][T12855] loop0: detected capacity change from 0 to 128 [ 225.061405][T12866] pim6reg: entered allmulticast mode [ 225.079926][T12866] pim6reg: left allmulticast mode [ 225.174246][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3207'. [ 225.183182][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3207'. [ 225.206213][T12875] lo speed is unknown, defaulting to 1000 [ 225.216272][T12881] C: renamed from team_slave_0 (while UP) [ 225.232316][T12875] lo speed is unknown, defaulting to 1000 [ 225.250464][T12881] can0: slcan on ttyS3. [ 225.257921][T12879] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 225.325805][T12889] loop5: detected capacity change from 0 to 512 [ 225.342882][T12872] can0 (unregistered): slcan off ttyS3. [ 225.366689][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3212'. [ 225.387379][T12881] can0: slcan on ttyS3. [ 225.392763][T12889] EXT4-fs (loop5): too many log groups per flexible block group [ 225.400549][T12889] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 225.432129][T12889] EXT4-fs (loop5): mount failed [ 225.496451][T12909] loop4: detected capacity change from 0 to 1024 [ 225.516544][T12870] can0 (unregistered): slcan off ttyS3. [ 225.535651][T12909] EXT4-fs: Ignoring removed orlov option [ 225.595609][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3216'. [ 225.604588][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3216'. [ 225.718935][T12935] loop1: detected capacity change from 0 to 512 [ 225.749039][T12937] loop5: detected capacity change from 0 to 512 [ 225.804950][T12935] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3219: iget: bad i_size value: 38620345925642 [ 225.832777][T12937] EXT4-fs (loop5): too many log groups per flexible block group [ 225.838420][T12935] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3219: couldn't read orphan inode 15 (err -117) [ 225.840642][T12937] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 225.859662][T12937] EXT4-fs (loop5): mount failed [ 225.893530][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3223'. [ 225.956786][T12955] loop3: detected capacity change from 0 to 128 [ 225.965592][T12953] lo speed is unknown, defaulting to 1000 [ 225.979155][T12953] lo speed is unknown, defaulting to 1000 [ 226.063332][T12959] C: renamed from team_slave_0 (while UP) [ 226.251588][T12981] loop1: detected capacity change from 0 to 512 [ 226.309799][T12981] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3236: iget: bad i_size value: 38620345925642 [ 226.362220][T12987] team0: Port device C removed [ 226.375217][T12981] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3236: couldn't read orphan inode 15 (err -117) [ 226.427008][T12998] loop4: detected capacity change from 0 to 512 [ 226.449317][T12998] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.456343][T12998] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 226.471048][T12998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 226.480140][T12998] System zones: 1-12 [ 226.485113][T12998] EXT4-fs (loop4): 1 truncate cleaned up [ 226.516459][T12971] lo speed is unknown, defaulting to 1000 [ 226.523238][T12971] lo speed is unknown, defaulting to 1000 [ 226.554357][T13005] loop1: detected capacity change from 0 to 1024 [ 226.566333][T13005] EXT4-fs: Ignoring removed orlov option [ 226.602899][T12998] random: crng reseeded on system resumption [ 226.658523][T13010] netem: change failed [ 226.827766][ T2941]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.843216][ T2941]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.854241][ T2941]  (unregistering): Released all slaves [ 226.968424][T12971] chnl_net:caif_netlink_parms(): no params data found [ 227.094652][ T2941] hsr_slave_0: left promiscuous mode [ 227.117645][ T2941] hsr_slave_1: left promiscuous mode [ 227.173305][T13051] loop4: detected capacity change from 0 to 512 [ 227.188591][T13056] loop0: detected capacity change from 0 to 512 [ 227.218975][T13051] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.226655][T13051] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 227.241651][T13056] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3252: iget: bad i_size value: 38620345925642 [ 227.314435][T13056] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3252: couldn't read orphan inode 15 (err -117) [ 227.375054][T13051] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 227.386471][ T2941] team0 (unregistering): Port device team_slave_1 removed [ 227.395108][T13051] System zones: 1-12 [ 227.415911][T13051] EXT4-fs (loop4): 1 truncate cleaned up [ 227.441861][ T2941] team0 (unregistering): Port device team_slave_0 removed [ 227.471162][T13051] random: crng reseeded on system resumption [ 227.559385][T13070] loop0: detected capacity change from 0 to 512 [ 227.582448][T13066] C: renamed from team_slave_0 (while UP) [ 227.594083][T13070] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.618024][T13071] can0: slcan on ttyS3. [ 227.653258][T13070] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 227.654836][T13070] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 227.654904][T13070] System zones: 1-12 [ 227.655151][T13070] EXT4-fs (loop0): 1 truncate cleaned up [ 227.696069][T12971] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.696107][T12971] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.696211][T12971] bridge_slave_0: entered allmulticast mode [ 227.697012][T12971] bridge_slave_0: entered promiscuous mode [ 227.697728][T12971] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.697761][T12971] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.697828][T12971] bridge_slave_1: entered allmulticast mode [ 227.698346][T12971] bridge_slave_1: entered promiscuous mode [ 227.736053][T12971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.737488][T12971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.738207][T13070] random: crng reseeded on system resumption [ 227.814110][T12971] team0: Port device team_slave_0 added [ 227.815171][T12971] team0: Port device team_slave_1 added [ 227.841590][T13064] can0 (unregistered): slcan off ttyS3. [ 227.849995][T13066] loop1: detected capacity change from 0 to 512 [ 227.861214][T13066] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 227.885083][T13066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 227.893400][T13066] System zones: 1-12 [ 227.897996][T13066] EXT4-fs (loop1): orphan cleanup on readonly fs [ 227.910465][T13086] loop3: detected capacity change from 0 to 512 [ 227.917723][T13066] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3253: bg 0: block 361: padding at end of block bitmap is not set [ 227.923360][T12971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.939030][T12971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.965002][T12971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.988029][T13086] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3257: iget: bad i_size value: 38620345925642 [ 227.990937][T13066] EXT4-fs (loop1): Remounting filesystem read-only [ 228.024259][T13074] can0: slcan on ttyS3. [ 228.025350][T12971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.035556][T12971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.054252][T13086] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3257: couldn't read orphan inode 15 (err -117) [ 228.061805][T12971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.097726][T13066] EXT4-fs (loop1): 1 truncate cleaned up [ 228.130584][T13086] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3257: bg 0: block 5: invalid block bitmap [ 228.155158][T13086] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 228.167501][T13086] EXT4-fs (loop3): This should not happen!! Data will be lost [ 228.167501][T13086] [ 228.177223][T13086] EXT4-fs (loop3): Total free blocks count 0 [ 228.183434][T13086] EXT4-fs (loop3): Free/Dirty block details [ 228.189345][T13086] EXT4-fs (loop3): free_blocks=0 [ 228.194440][T13086] EXT4-fs (loop3): dirty_blocks=1 [ 228.199488][T13086] EXT4-fs (loop3): Block reservation details [ 228.205623][T13086] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 228.252966][T12971] hsr_slave_0: entered promiscuous mode [ 228.268627][T13063] can0 (unregistered): slcan off ttyS3. [ 228.273561][T12971] hsr_slave_1: entered promiscuous mode [ 228.284007][T12971] debugfs: 'hsr0' already exists in 'hsr' [ 228.289815][T12971] Cannot create hsr debugfs directory [ 228.427045][T13117] loop1: detected capacity change from 0 to 1024 [ 228.468816][T13117] EXT4-fs: Ignoring removed orlov option [ 228.507633][T13129] loop3: detected capacity change from 0 to 512 [ 228.542080][T13129] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.556031][T13129] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 228.618650][T13129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 228.628421][T13129] System zones: 1-12 [ 228.639500][T13129] EXT4-fs (loop3): 1 truncate cleaned up [ 228.709680][T12971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 228.726623][T12971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 228.734524][T13129] random: crng reseeded on system resumption [ 228.743836][T12971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 228.757579][T12971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.842269][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 228.842286][ T29] audit: type=1326 audit(1756169380.479:17251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 228.880308][T13148] loop3: detected capacity change from 0 to 128 [ 228.923296][T12971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.945964][ T29] audit: type=1326 audit(1756169380.521:17252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 228.969605][ T29] audit: type=1326 audit(1756169380.521:17253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 228.993303][ T29] audit: type=1326 audit(1756169380.521:17254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 229.017365][ T29] audit: type=1326 audit(1756169380.521:17255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 229.040996][ T29] audit: type=1326 audit(1756169380.521:17256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 229.044151][T13158] loop4: detected capacity change from 0 to 1024 [ 229.064637][ T29] audit: type=1326 audit(1756169380.521:17257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 229.074644][T12971] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.094653][ T29] audit: type=1326 audit(1756169380.521:17258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 229.124875][ T29] audit: type=1326 audit(1756169380.521:17259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 229.148604][ T29] audit: type=1326 audit(1756169380.521:17260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cc66debe9 code=0x7ffc0000 [ 229.180209][T13158] EXT4-fs: Ignoring removed orlov option [ 229.187042][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.194227][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.202966][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.210042][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.247564][T13163] pim6reg: entered allmulticast mode [ 229.257617][T13156] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.265006][T13156] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.273544][T13156] bridge0: entered allmulticast mode [ 229.289262][T13166] pim6reg: left allmulticast mode [ 229.298609][T13171] bridge_slave_1: left allmulticast mode [ 229.304271][T13171] bridge_slave_1: left promiscuous mode [ 229.310280][T13171] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.340495][T13158] ================================================================== [ 229.348643][T13158] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode [ 229.357183][T13158] [ 229.359517][T13158] read-write to 0xffff8881331b9758 of 4 bytes by task 13174 on cpu 0: [ 229.367676][T13158] __writeback_single_inode+0x1e3/0x7c0 [ 229.373258][T13158] writeback_single_inode+0x167/0x3e0 [ 229.378670][T13158] sync_inode_metadata+0x5b/0x90 [ 229.383639][T13158] generic_buffers_fsync_noflush+0xd9/0x120 [ 229.389563][T13158] ext4_sync_file+0x1ab/0x690 [ 229.394278][T13158] vfs_fsync_range+0x10d/0x130 [ 229.399076][T13158] ext4_buffered_write_iter+0x34f/0x3c0 [ 229.404662][T13158] ext4_file_write_iter+0x383/0xf00 [ 229.409901][T13158] iter_file_splice_write+0x663/0xa60 [ 229.415312][T13158] direct_splice_actor+0x153/0x2a0 [ 229.420456][T13158] splice_direct_to_actor+0x30f/0x680 [ 229.425846][T13158] do_splice_direct+0xda/0x150 [ 229.430631][T13158] do_sendfile+0x380/0x650 [ 229.435102][T13158] __x64_sys_sendfile64+0x105/0x150 [ 229.440336][T13158] x64_sys_call+0x2bb0/0x2ff0 [ 229.445043][T13158] do_syscall_64+0xd2/0x200 [ 229.449581][T13158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.455495][T13158] [ 229.457827][T13158] read to 0xffff8881331b9758 of 4 bytes by task 13158 on cpu 1: [ 229.465544][T13158] __mark_inode_dirty+0x55/0x750 [ 229.470514][T13158] ext4_write_inline_data_end+0x3e5/0x5f0 [ 229.476277][T13158] ext4_write_end+0x3d7/0x730 [ 229.480981][T13158] generic_perform_write+0x312/0x490 [ 229.486320][T13158] ext4_buffered_write_iter+0x1ee/0x3c0 [ 229.491910][T13158] ext4_file_write_iter+0x383/0xf00 [ 229.497152][T13158] iter_file_splice_write+0x663/0xa60 [ 229.502551][T13158] direct_splice_actor+0x153/0x2a0 [ 229.507717][T13158] splice_direct_to_actor+0x30f/0x680 [ 229.513119][T13158] do_splice_direct+0xda/0x150 [ 229.517909][T13158] do_sendfile+0x380/0x650 [ 229.522374][T13158] __x64_sys_sendfile64+0x105/0x150 [ 229.527606][T13158] x64_sys_call+0x2bb0/0x2ff0 [ 229.532305][T13158] do_syscall_64+0xd2/0x200 [ 229.536858][T13158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.542815][T13158] [ 229.545155][T13158] value changed: 0x0000003a -> 0x00000002 [ 229.550889][T13158] [ 229.553225][T13158] Reported by Kernel Concurrency Sanitizer on: [ 229.559387][T13158] CPU: 1 UID: 0 PID: 13158 Comm: syz.4.3269 Not tainted syzkaller #0 PREEMPT(voluntary) [ 229.569212][T13158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.579305][T13158] ================================================================== [ 229.595244][T13171] bridge_slave_0: left allmulticast mode [ 229.601078][T13171] bridge_slave_0: left promiscuous mode [ 229.606926][T13171] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.794968][T12971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.805438][T12971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.952415][T12971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.067327][T12971] veth0_vlan: entered promiscuous mode [ 230.075001][T12971] veth1_vlan: entered promiscuous mode [ 230.089933][T12971] veth0_macvtap: entered promiscuous mode [ 230.097100][T12971] veth1_macvtap: entered promiscuous mode [ 230.107911][T12971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.118866][T12971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.130481][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.141619][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.150944][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.160236][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0