last executing test programs: 1m50.028994523s ago: executing program 4 (id=1041): bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmmsg(r0, &(0x7f000000c8c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="23e5e6", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)="b16d4001b5c9ef7dcaa4448c048b1c4bcbfe2536d94749a86137cd6b4225134d19e093a7c7bfbbc6a552d75c8c4be4ec24006b4f935a1923f2c5c6e105a5cd16467f79692b46258fd87d6fdafa6d74c72d78c41b47c65d7d067d40f2f95df14524ced0bb910703f0a9b5226410e8a5e228170421980cf2170d0f06b3f240a13c9f92c0a6083f3fec19faba57ffeefca668313e81427c7d31c3437f88103c04c5175de046fe09730b76d7cc83e8f2e0a4345f2652615a9d1cf491b25600d02adf71e973924d1d0c2fe6ba6fce8779747a185ff7d1f3e18d1f85646134e416e89a3dea9aec90a19a90cd70fa3ffee89fc2a64ef0f7484c72", 0xf7}, {&(0x7f0000001a00)="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", 0xfff}, {&(0x7f00000001c0)='aOa', 0x3}], 0x3, &(0x7f0000002a00)=ANY=[@ANYBLOB="10000000000000000b00000003000000a80000000000000014010000fa3200009d14db135478f3451b1855cc2fe4476382d1756433e3a33910044fbfe417c9d3016d34f5c798eeef5dc697b586d459865dc0cb05662f5cb3c6a548b89e4ffb93ef08d124aec30f160f749975f99d9f2d93c08cc9eeb797b0a21850bd8852b376e4d31042bb5f689b85eb2ea8e4bf96facab696c8e7e547958261ac49b07737b59495ca28b5b9c90a8d83b2b210000000000000000a010000030000001000000000000000090100"/216], 0xd8}}, {{&(0x7f0000000800)=@ieee802154={0x24, @long={0x3, 0x3, {0x200}}}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000002cc0)="56bcffed85a980ca6e3d36525bbd465faff0a9de7a70dc935660bb254530ae3d73994a513a03896e98ef4b6bf14c64ee143e1a4077c424e6e86b50e46c55dc3f2502faa24e89c9dd7e79500a45bfe54f3627d27d76467e3b4f48f567429be8a252fc830c7bfe3df232500da1b085d331dbda18a06b7abe3963894a02ea4632d4de672bcf8635f67df148aeb9bc4c808b0f5332833387243ee77a9d812b1c955bb9ec0d495f0308a32a2c8e70ddac63f1d789d0d3d4f43c0cb5816add022cfa96fa2e58d934cd83e75b86c0642e50e7961cfdc0f43358b51c296fc235b235321b25caddd97d99e0be876f360745c6e65a95be6edec85b5a359db6850dac86a3c7f67e622a624afadf20bdc907cb3e7bb3fe10ed7213f896addeb19c336a2b3316b645bb8f7c8e4bf0e8cf5401405e857b6d57694b07e884f3a76c93857cf59c23d32c08ee41e5f819ad815a3f4133ed92c5f95c81ff0f54ce44add603d1eb6702f3194eb7f08449064f5091ae0591977c925acda8ba3f0d5302a6ea829b4e2500c49b66e28f22116edb7cda078a3cfaa8b9b2786d8ae69e9202dc77569e7ce27a55c6eafa6b18cfbac04927e632a3544bef4eb735fe18cd1331adde4156c3faf80c8926b047e8405322eb4a505d9fecb46475040918c8f356b93b2020d7d1f74629028013731029757ffd7ccec0b422336e2d5072542383994eaa19180463de3958276ca0fd8b37785c248e2b6e393b046ab4c28cb52818efee18e52db0de2a5689196f62e100b30d173ff31d4d2bda618edad6a5378bea2b648ca8374750589b483506f07a429203a74f7bc610430656fce7a85ec61dd124e66414b08ee116434fc5e7e12a7fd9c20c7a0031c1184a17f29cf7c927cd18a0670b75d6deb4ce0a16dcac08ab44aea6434d12dccfff3c3a3fdfdbdea6b309fada2b60475d677c1fabb455c6f654c41c0c52e7bc1683cb19a127446141e9541e02b5b069821a46a647735b33343c0aff643e4f8fc62af5d5d22429922a0521a3dd6ced35978f74cb1b90458a3f0f45e49e67f5dc6c575c069a5b85b49b984f11ef1c7fa8ea560fdb207c76af765cc7adc5dd1af7c46855b5c229fb41953997edf9c702905868d03632c28df75939107475ae7d147d987546544a0da3bb961cdd7cd975a5527f47002b6cb3533e1849719b9a94edfe2dabed59b714cf4bd57730b92c5c274db30afdd45e120ba8c0fdf1e1af6cdfee099415543c37fadac12db873a8ae6a5df52e015cae2c745873bd006fbb0cb634632f3c627f27b3f030375612d7d28ed16b230f6647cd1dc39fcdb77b356ba27a4afa4219073554d64b2308cae255b9a87d85be32f0df34e58aefa46f9364b6fb1996d800151b167342900ca64fc0ebddeb2aba713906b8b53c74fd20b774787192382e7e93fed071dda148c115be93584fd2b1cd8455f0cd6a520f5a1602b14b3ea1ff2ad7b175c84470f85aa41e71babe60613ee9d94229d58db9d844186030451c35ab36cba6c04d8fcaaf95ce54e674df9e49d45e81b4e40b9cdbf9a7365a75b3b62d7bdf0777c1b1971cb4b29951dc670315c658115a834dd3554758cb6188b874b197eac733c1b0eb0ac7dc1cbe18601e2ec39f19fa8ece44f867c6fb963756bcdb325364ff429e218d18f253078cff7871686fa2f58333dea58d9de2d2d8c120f60fa5943b95c3b31c90e5f983918d490700e960d4af0e2f82ca1417d1f294785b2ab90602fe2b56afe46a426aca23adb5ad1dc75a21e8d35ab92b90eb19256a994d18ad6bbe374e2980fed2e0eeb2e3e2d35af52435faad9aa9d2d416246974d911e697d9218955c50b8084cc91e5e972850ae6b1d244d536aa34e49bb0943386687b04484b796b26c579afefa41038c6f1c10bb606322d32a4723bac427b79f9ce88f91903f5fbb85aa2928c6951d332a32b56643e6e777437ac7701a6922a2c1007ee4bf270479b58d8b13332bfea363f8f44004335259987dc5ab5335fb4693b665bb0176b4b1e6e0c187bdd3781298f85927c48b33abc2106f180b27a58308637bb776db3ed0b02b5ea96dcd5967f081a4d543887a563886fd40318a6e1863ffac321016781d83135710cfff3f126889e117abffe9a11bb9b9fa69a06852cdc600ef79277fbaa2c48fdfb0e298bb1666bdc4c3976b2839422791cda30cbeb17273040483ec58ff0627a529ce39c65b845cb21c9c5f8e929c27b9e636ae6ff8d9c7d2841dfea24f79511d0c66a056d8d203140bc4899239b3eeb4127d38eccc4c132e9574ef343f037cb8b7ff448fe4fbf55646b125012bb0cedd12d687babe419f39ad537c91c93a866356108d013065231c3d9ac498bb3b808f650676a2102e54f918f0de4bb68dcc2cf94d1a989c7bd1a3fbbb34644c6a4668e2e9365fd0897fd542de0cfef6fba57cee8b58f1f8997923ec541083564cd17734e51872e69d04d0f0424916d40a52eed6337d4a52658f552ef465fe89e2ccba862bccf247aec9d5418e18bb2040ea22ca51278ee9b7f56912b711d89480f1ad5bd2f1f9a56faa6710fed9243698ea60aaa2438cbd477fce04e78c18fa307336de7143fc61ebf48ca4d1f74dd536b2c45c1101f931c55f69f11153aa45087802bf5310352853a8cef770b7119226d1ed9f30bb56127b9e668e305e99c16c54eeff4f4ce59e4e69876eec1d85b9240d87fb617db01b6cacac6deab6d7450774417c9958f388f0a9b7c3c44d30e0563a7ad07882d5ce20e9b56c3bd3f882ea488054b0ecb7711c1d61e35b76ca1e65930d0df02c609295ffc3bc2a555079be6bbfe6012e2a02777e385af0ddc600d150149323988c6bdaed091442abe18499b5a624d18a0100b81080dbd3b65cdf5b7a7a9e0e4e55faa0c68e608539eadb8f58f54a6fe43fe2657f6c344187c1f3e33a6f7ab54ae28b5a44fdff8b5501ab33d91beb18caa77c69899fd47d050f2c415133361d83bc765303908c8e8312f78f212c74c473cfcf32a4d88160cbf67ec4d838f5481e26abd6187c5652a8f053c9b8af90abff6cd8958fa2ea6a895d9ff9117ebd39059869fb008623ce6aa011d0ede3cea9c16689d33f30ca6c9cf650962470b81ce021d59c04b57c4d6676e4df0a4ce809654f11d15f7f3a4b70130c0f92f08fa930c1b366726423186c927add42b5e395badaa221df9d2728cc1e8af021c1d073126e8f3583bbd31f8999019150c51b09d5a8bac0d3f609f28e626f50c6aee34f6a168cd26c1c4c1047f2c715c45d63d46e2eef6a76096c7d8420e6810c3780a361dcc96b896bc054d4ee1ed55a6f448328218f802b45404892291bfe12af5f68631d0d0bbea8844a7b9ee1e90be76ef30fdb6b3038552ea549b363e1b1eb7dac435d87b4abc78f934950876072240bf741c396564d396b2f86ef893e3a6351d428acb44853848a6673839e133fefe0012577846e87a5582b0c4fd6d4a549f4c093033be93d30421e06d20ec8a8d3d3c84218758e5b0c36235f089dc6cc998da35f87cab037ddbf98d5417f50ee923fcc8edf001cfde140309e15c688654e175145c6374ede3d77de0001260f419e6b39769b6f28ed5780105079ef3c0c214dadef93d994863031ddeb114ca7d12b5fdff6eb32aa444f67c2da66685a22c24d8034f0b4df2e3233b1cdfdef5240f248aecd74543793d45c9e1ae5bf7ef9fd92ed1f840c6c994f87fc2a26c2c1944770e97973d52d8c8a8c3a974afa5c6399f5bd58fa7c21ce98da58802542ccd70c5b61dc25b2f720e00917654d43b1cfecd946d9dd1deb544cb4b0312213525a257c1c8ba5063de837f19f65afd4ef5665fd73bd9bca87ff0433eb3e03cf07f11a0e78905235d0b1cea10e1475a6d6f1ae2bf1fefdee9dfab16eef13b2c256665d357d00282d4a53224848e6753a80dfabdb4554f8da10a311afbae0bff6b46c23e7e8c7df99767f98aa04d450a74a8009ab5b5b4c3773ee5994e6973548e988f43ab2fd01752903b08ba1f0f710ef9860c49091ba51a50e7757c4555543bb000658086ad722846c456b0fd058fe011411655b1d5ca9d7f366f3e6271c77104414f76885ca54d0529332166e897799608786eaf006464139d89ad43d5e60beb9c76e53dc3864e23b2b065e8966a64f0457afcd4e95814c62e134edf58412ae2114700178595d4920a48556e94d103601b98def3998a0c4e66c727d3e5788d0c6b5590d4f18dc02ed2da97d9ea1e580f37eb651c61816e1983161ea6e9be618fb0d957db595443bc765e0e5ceace10cb9b8316e29b47080ceed98bbcc74886a70cfacf0bcd95761b60b3cabfac784ac0e60f48aebf3b8d6a6c1a6b0e6d329501e53c1fd63d0da9270148cf3ef34fc058306978a3ab7b1bd06b34950e360480f81d82d537fa1c74f865eb7f5ea2bdda90927679dcea225f0c1e4136b10f6583faf7f5adbf67c85872f738744500648834181b2e70c6f6edb1084611d27bb3158b4c0578dc632a09a80a19b753aa5a893710757a354811783147eecd44c78c8e7314d067d3192dd2520bf7f5fc3a4f31c9bb3f18f9574b5e688b890af8dac0eb47d8292f7531eb63d4f62a719c828b3fc6acc72a1f7bb4a9aabb78639a2d16ecc8d4ee09277891f37c1a148d727a25db5f5d4546f4ad38098788c261207d1ff4b2235d4bd033ff258b8c08d0e5b9163dec06e336a9c87615665e9e67abfc9cf85b60cd984dd21d46aa547cfcb368daa2afe4a45c0eb526ec543eef3a0a6b19b6262c883a7b267f214df4f0c3fd62df127bb5d1d724c59b27a61360998a5e0e039dce1103f6d6818a5896be8f7cbb840d8394adaa6282df063e0c45a2e89a8ffd1777c34bfe87188628b9c365214489ad9b98960f93817d7bf01e875f0ca7e60b8a9d90fb28a771573d88f7ecd2d3a79dd08a69823c9db7ad08c1495966c4ab53721931c8759ea551879bacf0f3905357f3bf46d92fda95fe005ea36e46828d77dc3d9104eea5cad85c5b2060f90492063243d1c2f37f8c57218f69f3e5b3a407eda65d5ccc8981ca13d0dd30f6f281800f4a0151e55a3f4d8c53b3dbb55e4723a94296b8283788a4e741f67751c954ac3047c5eaf9ce4037cac07323e571c96a53893b80b562f9e363b24d4b25d97be552a9426bd5c32e8b102680ac8b45e8861e7585dda5ba3bb6875add1f4502a8cee9ac16bfc23164ecf77301ccfcaf5085f3c0b483e76f2b070787dc8396385be72d81f067f679a2e8f25d4fd29c26c582ca1e6ece0ab0f676e0db9de502ca82769d00166de54a067d757fbea8fc3856a195c53729e904f629a441368f5acb4cdf6c8d47a28e6b8b565acead7f6ba6a5dfa4f938223c5ae33e081a16f719a10cc48751b7c64dff1efc204b2864278593051b03aba4dc2152df631984652e34e46ec22dbe56b317e8e9559ddad60ab6ddc958397a7782d0bd1444b7c44f5d419e0dcf706cb634dce1325f5fa490a568b61d801e51ed628bc2bd51df4de59d0b4d28c798d02f2dee6c806b25146ec944cd2d09aff5129ed4e9b91818f76666a183d58d02ab2fa51ccfa21526c1881ce2fb042fb6456492e0780f41736fb434d6520069981cc2390e5b8045f6c2e7efb0ee8113b6bb6b8d769bf0dde2204d347c3840379bf69293a5d79c894175274410cd1f45ae040d4367d55e13340e3b648046da36427099abc90b3436e9e41e29e9c8635730d84529a7f1b4101d34cec4f55341773a09cba4bad5d45c8f7a229effac9661184ddf6dbe565c841837fb37cf23648f8585e84193", 0x1000}, {&(0x7f0000003cc0)="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", 0x1000}, {&(0x7f0000000880)="9a9c8658e3a9740a46820730b7887cddc625fff1ae5e2df8cc81cdfe909d9a2ecd5262fe5081ea90a676f01a4c5aa52e31cae3f6b9130513a5151f69594cf30f8d935a71a8dfb692cb82e38b0482d7d7a0ff8fb7bb8d8f4181be9eb852232ce67eeb200c4e0b3aac2d23927043aa62c6a161dd3459b141457a2ebae886c5ed8f205bdff10212628297004dbf997f2d9001950cf2446374189fa82a03aeb5be61", 0xa0}, {&(0x7f0000000580)="76ea055910e1b1afdb1b55213008d4ae5a29f6cd11", 0x15}, {&(0x7f0000004cc0)="f9cd468074bc06bde1996c2fefeafe402dca7c19ae61a2541638a0e4e4112d438ac479d0ce06b7a8ed162991d75269fff4b4f29253a4deccb135781141d050b2b8f4fda629a7c29faeba8a54149084262c3f0d425a4f2b93bfabea9770afdfee212872fafecd88a88af65b1182148e9659d2af78d01572a6f0f52e6e38b67533c06889facb0eb21d748f288bf2ede7ca5a3dc2acee968ac2a27ad27574198f498b55f8fde2789836dd4bc0e46dd801a3888285e5c0e76ad98e", 0xb9}, {&(0x7f0000000940)="f19f1934407c32ebb113ae7fc56d37f06ca9c9839077c13ebcc7f75cd84f3439e93c94455d8515ce92f1dd6790a7be23becf482215525459ef65cd6c4c0f5f50", 0x40}, {&(0x7f0000004d80)="e3ff8fcdf1ef4813ecfb1763eca432f5e06a7c8f137a0b84ea5e4c", 0x1b}, {&(0x7f0000004dc0)="4f1fefc12f1e5edb4e333235debc8b997fe797378fe76b80e6662752ac975e60727784df0e60fa55a04ad958b6a132add950774805a291292fb157e78975709349bb29cb28f378edd68b3c4cd28c3da56c102c55c1292b01d5608f7b05891fbb", 0x60}], 0x8}}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000006040)="f8b57451ad85b52ee4f498cf1e9d5a4a7a0426af00d21266d27030dffa3b61f4742bdc3cdd13c9b7a4948fa1ba5d5ba2b7d7f8b087b9bd61a1be93bba98509059dfd8bf2650fb1bc0b0c2f1397403c319d9aeacaf8c5619dfd2a60f97eabe36a228415f9cabb37b7", 0x68}, {&(0x7f0000006140)="4c53ddbbfbd1c9c3442617dbfce6af18bfad0563de6824067217347770822142c9e719c680228745fd29336475e6b61904695782bdd7b334a4b5b9d0af2989658839d22051e344646ad7bce63b8eca6e6ba5d1aa343401b84d44cce3e2ad7ce9564071b13792fb91e2bf256f79e9", 0x6e}, {&(0x7f00000061c0)="a65f5c3179bce53b281dc68303d936bc9029b325bb0516a4e04f6d598474063fb350131db0358b2f6482b05c87a017f314560f447dca27bbe16cc2f0c84be2d48b72036803c7301b990d5e6eb96b5fbdf410dc057cb6e5eef74160583fe4e5cb6d89f3708074f80ac073bb14eaac0c874e0fbe6b717614b7f43456d4e4bf59b198f65198c8eb74c62bb351db036db1ced082b7a30a8ef1c10ab95df0b189b3540d5ab51ce41bea5eced00754847a1273998479", 0xb3}], 0x3, &(0x7f00000062c0)}}, {{0x0, 0x0, &(0x7f0000008700)=[{&(0x7f0000006380)="dfb15507815b212f1a67912b7f9fda6c7124d377240c4a6c617cb9d177bfb374a4b077a5305d530a5ec7edcdbbe7649dd90975467ac1a18ddcf1fdf318f72eedbe39782ae3424558981a54d535423b99e85daa240712c5b6e68de114856bc677258863ddf506de0db4d80c6be1183d0f79c8c1fb6a8e48d3a5279783d9a0a213fc6b445ec4cda6cde811acca7c2e3472fef229aede91ce27f19be06d76b6a4dede9900a6d74385c65b6fc1979d623c55b81946d1b59ecb33087bfaf77dfafa0f954d2a7de59056ad8a92", 0xca}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f000000c100), 0x0, &(0x7f000000c180)=ANY=[@ANYBLOB], 0x90}}], 0x6, 0x4000005) 1m49.109901843s ago: executing program 4 (id=1055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf25370000000c0099000400000068000000080027c737649c4b00991600000800a00004000000080057000300000008005700000000000800270001000000050019010f00000005001801010000000800a000a604000005001801030000000800a000020000000800570002000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2800000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) write$sndseq(r4, &(0x7f0000000100)=[{0x9, 0xc8, 0xd, 0xd2, @tick=0x8001, {0x2, 0xe}, {0x10, 0x6}, @raw32={[0xbcf, 0x5bd, 0xfffffffb]}}], 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f0000000840), &(0x7f0000004880)=@udp=r2}, 0x20) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r7}, 0x10) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r8, 0x0) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 1m49.015011847s ago: executing program 4 (id=1058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x10) 1m48.930187261s ago: executing program 4 (id=1060): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x20008000) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x4000) 1m48.831024155s ago: executing program 4 (id=1062): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_fail_link\x00', r0}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r2 = getpgrp(0xffffffffffffffff) waitid(0x0, r2, 0x0, 0x1, &(0x7f0000000240)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x144070, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)="ce", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4a23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 1m48.599787525s ago: executing program 4 (id=1063): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x400c865}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) getpeername$packet(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x1ffffffffffffffd}, 0x18) r4 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x800, 0x44, 0x246}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r4, 0x24, &(0x7f0000000000), 0x0) r5 = socket(0x10, 0x803, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x20) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 1m33.531471657s ago: executing program 32 (id=1063): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x400c865}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) getpeername$packet(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x1ffffffffffffffd}, 0x18) r4 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x800, 0x44, 0x246}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r4, 0x24, &(0x7f0000000000), 0x0) r5 = socket(0x10, 0x803, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x20) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 5.418253326s ago: executing program 3 (id=2115): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffe2b, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.328789279s ago: executing program 3 (id=2117): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x512b, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x400006, 0x20e}, &(0x7f0000000240), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0x38}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000001040000000800000008000000000000dd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x9) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r6, r7, 0x0, 0x100000000403) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0}) 4.442930378s ago: executing program 3 (id=2123): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 4.39158788s ago: executing program 3 (id=2124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) shutdown(r2, 0x0) 4.291544994s ago: executing program 3 (id=2125): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x0, 0x4, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0, 0x200) 4.246076107s ago: executing program 3 (id=2126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) 3.546490187s ago: executing program 1 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x0, 0x4, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0, 0x200) 3.506003039s ago: executing program 1 (id=2136): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x0, 0x4, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0, 0x200) 3.46951766s ago: executing program 1 (id=2138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x538, &(0x7f0000003480)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 3.430071222s ago: executing program 1 (id=2139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) eventfd(0xfffffffb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) r8 = socket$kcm(0x1e, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r11 = socket$kcm(0x1e, 0x4, 0x0) close(r8) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0xfdef) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 3.117917526s ago: executing program 1 (id=2140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = dup(r5) execveat(r7, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000300)='cpuset', &(0x7f0000000340)=':\',[#\x00']}, &(0x7f0000000800)={[&(0x7f0000000400)='cgroup2\x00', &(0x7f0000000440)='ct\x00', &(0x7f0000000500)='syzkaller\x00', &(0x7f00000005c0)='&\xfd\\:-/](/&^}*^\'\xdb-$++,\x00', &(0x7f00000006c0)='-\x00', &(0x7f0000000700)='syzkaller\x00', &(0x7f0000000740)='\']E\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)=']^^\xe2^\x00']}, 0x400) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r8 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4662, 0x400, 0x0, 0x284}, &(0x7f00000004c0), &(0x7f0000000280)) io_uring_enter(r8, 0x40f5, 0x1f18, 0xa5, 0x0, 0x0) r9 = fsmount(r1, 0x1, 0x4) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)={[{0x2b, 'cpuset'}]}, 0x8) 1.768940124s ago: executing program 5 (id=2149): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000680001002dbd70000000008000000200000000000c00088008"], 0x48}}, 0x44010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000600)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x80a03, 0x7, 0x43a1bd76, 0x0, 0x400009, 0xfffffff9, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r4, 0x0, 0x0) 1.528379364s ago: executing program 5 (id=2150): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000068000100030010f0fdffff7f00000000000000000c00020001000000150000000c000c8005000100d23f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300f2ff0000008500000005000000bf092000000000006609010000000000060000000b0000002c93000000000000b5030008000a4e09d841cc9ec3451f210000008500000076000000b7fbffffff"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x80000000}) socket(0xa, 0x80805, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x3, 0x0, 0x0, 0x0, 0x9, 0xb4038, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd7a, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, r1, 0x11) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x51031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000010004b042cbd7000fcdbdf", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800800010067747000340002800800030005000000050005000000000008000300020000000800040001001200080007008d0000010800040000000000"], 0x60}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x448, &(0x7f0000000d00)="$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") set_mempolicy(0x3, &(0x7f0000000040)=0x10000000001, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x1ff, 0x2, 0x9, 0x7}, {0x7, 0x8, 0x6e, 0x2}, {0x1f7a, 0x2, 0x1, 0x2}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rename(&(0x7f0000000000)='./file1\x00', 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0x0, 0x8}, {0xffff, 0xfff1}}}, 0x24}, 0x1, 0x200000000000000, 0x0, 0x8008014}, 0x0) 1.38764209s ago: executing program 2 (id=2153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x6, &(0x7f0000000140)) shutdown(r0, 0x0) 1.251324656s ago: executing program 2 (id=2156): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) 1.226973047s ago: executing program 1 (id=2157): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x1, 0xb, 0x9, 0x2, 0x4, "3bc9a3558fc50251a1a8a1000000ddff00", 0x3, 0xcb}) 736.945829ms ago: executing program 2 (id=2158): lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0xb9, 0x2) 689.45077ms ago: executing program 2 (id=2159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r2, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 687.252081ms ago: executing program 5 (id=2160): lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0xb9, 0x2) 622.574134ms ago: executing program 5 (id=2161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 583.845875ms ago: executing program 5 (id=2162): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="ff0f0000000000000489101bf87ede01708992edc5cfeff3dbf3236df9d9ff08fdec98240f14ca2cce8459fb24d3f131175a7e2ee21c7f3b4b12415afe910d23be6263607ca6ad39381f783ea8af477290dd7291a02c0f1fb774fdb015a13782af", @ANYRESHEX, @ANYRESHEX], 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r3, &(0x7f00000005c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0) close(r4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) preadv2(r6, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/32, 0x20}, {&(0x7f0000000700)=""/112, 0x70}], 0x2, 0x2, 0x8, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 553.979837ms ago: executing program 2 (id=2163): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) socket$inet6(0xa, 0x4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2686dd6c370c8900282b01ce800000000000000000000000000025fe8000000000000000000000000000aa3c000000000000003b"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpgrp(0x0) tkill(r4, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) 422.421102ms ago: executing program 0 (id=2164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) eventfd(0xfffffffb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) r8 = socket$kcm(0x1e, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r11 = socket$kcm(0x1e, 0x4, 0x0) close(r8) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0xfdef) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 222.219091ms ago: executing program 0 (id=2165): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c46040700030700000000000000020003"], 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 196.195212ms ago: executing program 2 (id=2166): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = dup(r3) execveat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000300)='cpuset', &(0x7f0000000340)=':\',[#\x00']}, &(0x7f0000000800)={[&(0x7f0000000400)='cgroup2\x00', &(0x7f0000000440)='ct\x00', &(0x7f0000000500)='syzkaller\x00', &(0x7f00000005c0)='&\xfd\\:-/](/&^}*^\'\xdb-$++,\x00', &(0x7f00000006c0)='-\x00', &(0x7f0000000700)='syzkaller\x00', &(0x7f0000000740)='\']E\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)=']^^\xe2^\x00']}, 0x400) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) fsmount(0xffffffffffffffff, 0x1, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2b, 'cpuset'}]}, 0x8) 164.880673ms ago: executing program 0 (id=2167): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="fcffffff000000f8000000000000000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) ftruncate(0xffffffffffffffff, 0x2000009) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb}) 102.691836ms ago: executing program 0 (id=2168): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1130, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0x3}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000045000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f30000000ffff000140000000200900020073797a30"], 0x2dc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x2860, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 79.849527ms ago: executing program 5 (id=2169): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="ff0f0000000000000489101bf87ede01708992edc5cfeff3dbf3236df9d9ff08fdec98240f14ca2cce8459fb24d3f131175a7e2ee21c7f3b4b12415afe910d23be6263607ca6ad39381f783ea8af477290dd7291a02c0f1fb774fdb015a13782af", @ANYRESHEX, @ANYRESHEX], 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r3, &(0x7f00000005c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0) close(r4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) preadv2(r6, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/32, 0x20}, {&(0x7f0000000700)=""/112, 0x70}], 0x2, 0x2, 0x8, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7fffffff, 0x4c}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x235}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 33.175509ms ago: executing program 0 (id=2170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 0s ago: executing program 0 (id=2171): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000068000100030010f0fdffff7f00000000000000000c00020001000000150000000c000c8005000100d23f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300f2ff0000008500000005000000bf092000000000006609010000000000060000000b0000002c93000000000000b5030008000a4e09d841cc9ec3451f210000008500000076000000b7fbffffff"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x80000000}) socket(0xa, 0x80805, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x3, 0x0, 0x0, 0x0, 0x9, 0xb4038, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd7a, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, r1, 0x11) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x51031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000010004b042cbd7000fcdbdf257a0000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800800010067747000340002800800030005000000050005000000000008000300020000000800040001001200080007008d0000010800040000000000"], 0x60}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x448, &(0x7f0000000d00)="$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") set_mempolicy(0x3, &(0x7f0000000040)=0x10000000001, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x1ff, 0x2, 0x9, 0x7}, {0x7, 0x8, 0x6e, 0x2}, {0x1f7a, 0x2, 0x1, 0x2}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rename(&(0x7f0000000000)='./file1\x00', 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0x0, 0x8}, {0xffff, 0xfff1}}}, 0x24}, 0x1, 0x200000000000000, 0x0, 0x8008014}, 0x0) kernel console output (not intermixed with test programs): [ T8850] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 179.691107][ T8863] loop5: detected capacity change from 0 to 512 [ 179.702014][ T8863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.714081][ T8863] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1504: invalid indirect mapped block 4294967295 (level 1) [ 179.729040][ T8863] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1504: invalid indirect mapped block 4294967295 (level 1) [ 179.747719][ T8863] EXT4-fs (loop5): 2 truncates cleaned up [ 179.755484][ T8863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.782323][ T8863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.212751][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 180.221721][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 180.389562][ T8876] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 180.475805][ T8869] Set syz1 is full, maxelem 65536 reached [ 180.601678][ T8886] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1514'. [ 180.852841][ T8897] loop1: detected capacity change from 0 to 512 [ 180.984984][ T8897] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 180.993199][ T8897] EXT4-fs (loop1): orphan cleanup on readonly fs [ 181.005552][ T8897] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 181.018361][ T8897] EXT4-fs (loop1): Remounting filesystem read-only [ 181.025138][ T8897] EXT4-fs (loop1): 1 truncate cleaned up [ 181.031185][ T53] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 181.041851][ T53] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 181.273754][ T53] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 181.316876][ T8897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.329816][ T8897] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.360372][ T8889] lo speed is unknown, defaulting to 1000 [ 181.401304][ T8889] lo speed is unknown, defaulting to 1000 [ 181.407562][ T8889] wg1 speed is unknown, defaulting to 1000 [ 181.604257][ T8918] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 181.639992][ T8918] netlink: 64 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 181.667182][ T8918] loop1: detected capacity change from 0 to 512 [ 181.702545][ T8918] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.712555][ T8918] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 181.814752][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1524'. [ 181.844000][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 181.966639][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1529'. [ 181.978804][ T8929] loop5: detected capacity change from 0 to 512 [ 181.985706][ T8929] EXT4-fs: Ignoring removed bh option [ 181.998910][ T8929] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.008474][ T8929] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 182.034119][ T8929] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 182.062336][ T8929] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 182.082569][ T8929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.114814][ T8929] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 182.157746][ T8929] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.207065][ T8937] tipc: Enabling of bearer rejected, already enabled [ 182.245598][ T8929] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.362037][ T8929] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.461048][ T8929] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.734551][ T8932] Set syz1 is full, maxelem 65536 reached [ 182.746999][ T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.758892][ T52] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.769970][ T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.806713][ T1755] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.829013][ T7693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.840959][ T8942] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 182.847514][ T8942] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 182.855741][ T8942] vhci_hcd vhci_hcd.0: Device attached [ 182.913881][ T8955] loop5: detected capacity change from 0 to 1024 [ 182.952160][ T8955] ext4: Unknown parameter 'uid<00000000000000000000' [ 183.151907][ T3838] usb 2-1: SetAddress Request (10) to port 0 [ 183.157991][ T3838] usb 2-1: new SuperSpeed USB device number 10 using vhci_hcd [ 183.393794][ T3796] usb 4-1: device descriptor read/8, error -110 [ 183.475776][ T8949] vhci_hcd: connection reset by peer [ 183.485459][ T52] vhci_hcd: stop threads [ 183.489789][ T52] vhci_hcd: release socket [ 183.494283][ T52] vhci_hcd: disconnect device [ 183.511002][ T3796] usb 4-1: new SuperSpeed USB device number 11 using vhci_hcd [ 183.520234][ T8975] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 183.531060][ T3796] usb 4-1: enqueue for inactive port 0 [ 183.543642][ T3796] usb 4-1: enqueue for inactive port 0 [ 183.555550][ T3796] usb 4-1: enqueue for inactive port 0 [ 184.007619][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 184.049589][ T8981] loop3: detected capacity change from 0 to 512 [ 184.077991][ T8981] EXT4-fs: Ignoring removed bh option [ 184.162956][ T8981] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.172191][ T8981] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 184.223246][ T8981] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 184.233486][ T8981] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 184.243300][ T8981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.258068][ T8981] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 184.512226][ T8987] lo speed is unknown, defaulting to 1000 [ 184.598041][ T8987] lo speed is unknown, defaulting to 1000 [ 184.604892][ T8987] wg1 speed is unknown, defaulting to 1000 [ 184.807111][ T3796] usb usb4-port1: attempt power cycle [ 184.883181][ T8991] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.897261][ T8990] tipc: Enabling of bearer rejected, already enabled [ 184.953660][ T8991] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.981206][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1547'. [ 184.990224][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1547'. [ 185.014943][ T9000] netlink: 'syz.0.1548': attribute type 10 has an invalid length. [ 185.024333][ T9000] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 185.043227][ T8991] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.074123][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 185.074138][ T29] audit: type=1326 audit(1765084109.652:23044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 185.123929][ T8991] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.141255][ T29] audit: type=1326 audit(1765084109.682:23045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 185.165215][ T29] audit: type=1326 audit(1765084110.693:23046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 185.189219][ T29] audit: type=1326 audit(1765084110.693:23047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 185.213244][ T29] audit: type=1326 audit(1765084110.693:23048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 185.236824][ T29] audit: type=1326 audit(1765084110.693:23049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 185.260352][ T29] audit: type=1326 audit(1765084110.693:23050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 185.284339][ T29] audit: type=1326 audit(1765084110.693:23051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 185.308010][ T29] audit: type=1326 audit(1765084110.693:23052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 185.332267][ T29] audit: type=1326 audit(1765084110.693:23053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 185.410085][ T850] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.432413][ T850] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.450458][ T850] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.463638][ T9009] siw: device registration error -23 [ 185.481183][ T850] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.495543][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.506373][ T9009] 9pnet_fd: Insufficient options for proto=fd [ 185.703498][ T9019] loop1: detected capacity change from 0 to 4096 [ 185.731945][ T9019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.769357][ T9019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.848153][ T9023] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 185.854898][ T9023] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 185.863237][ T9023] vhci_hcd vhci_hcd.0: Device attached [ 185.944303][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.092095][ T9043] netlink: 'syz.1.1560': attribute type 10 has an invalid length. [ 186.099971][ T9043] __nla_validate_parse: 1 callbacks suppressed [ 186.099990][ T9043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1560'. [ 186.433475][ T9027] vhci_hcd: connection closed [ 186.433670][ T1755] vhci_hcd: stop threads [ 186.442693][ T1755] vhci_hcd: release socket [ 186.447121][ T1755] vhci_hcd: disconnect device [ 186.578781][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1563'. [ 186.592436][ T9066] loop3: detected capacity change from 0 to 512 [ 186.601294][ T9066] EXT4-fs: Ignoring removed bh option [ 186.612937][ T9066] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.622121][ T9066] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 186.638118][ T9066] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 186.651870][ T9066] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 186.660684][ T9066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.676758][ T9066] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 186.695256][ T9066] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.721403][ T3796] usb usb4-port1: unable to enumerate USB device [ 186.742833][ T9066] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.761283][ T9069] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 186.805693][ T9066] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.842912][ T9066] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.892249][ T9074] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 186.906344][ T9074] netlink: 16 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 186.920057][ T9074] loop5: detected capacity change from 0 to 512 [ 186.928481][ T9074] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 186.938419][ T9074] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 187.002123][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1565'. [ 187.013291][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1565'. [ 187.060344][ T9079] loop0: detected capacity change from 0 to 1024 [ 187.067631][ T9079] ext4: Unknown parameter 'uid<00000000000000000000' [ 187.114879][ T9083] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.183587][ T9083] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.243573][ T9083] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.349748][ T9087] lo speed is unknown, defaulting to 1000 [ 187.436100][ T9087] lo speed is unknown, defaulting to 1000 [ 187.442578][ T9087] wg1 speed is unknown, defaulting to 1000 [ 187.804624][ T9083] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.832986][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1572'. [ 187.866556][ T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.883794][ T850] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.892403][ T9095] loop5: detected capacity change from 0 to 512 [ 187.905508][ T850] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.919033][ T9095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.936642][ T850] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.952121][ T9095] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1573: invalid indirect mapped block 4294967295 (level 1) [ 187.988596][ T9095] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1573: invalid indirect mapped block 4294967295 (level 1) [ 188.005636][ T9095] EXT4-fs (loop5): 2 truncates cleaned up [ 188.013870][ T9095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.038480][ T9103] netlink: 'syz.0.1575': attribute type 10 has an invalid length. [ 188.038501][ T9103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1575'. [ 188.039257][ T9103] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 188.114574][ T9095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.231190][ T3838] usb 2-1: device descriptor read/8, error -110 [ 188.274650][ T9126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1586'. [ 188.283791][ T9126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1586'. [ 188.304226][ T9128] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1587'. [ 188.337659][ T9130] netlink: 'syz.5.1588': attribute type 10 has an invalid length. [ 188.345749][ T3838] usb 2-1: new SuperSpeed USB device number 10 using vhci_hcd [ 188.371044][ T3838] usb 2-1: enqueue for inactive port 0 [ 188.376677][ T3838] usb 2-1: enqueue for inactive port 0 [ 188.383399][ T3838] usb 2-1: enqueue for inactive port 0 [ 189.023940][ T9150] 9p: Unknown Cache mode or invalid value m [ 189.045514][ T9154] siw: device registration error -23 [ 189.431833][ T1921] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.438711][ T3838] usb usb2-port1: attempt power cycle [ 189.440950][ T1921] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.453893][ T1921] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.454812][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.462243][ T1921] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.565202][ T9169] loop0: detected capacity change from 0 to 512 [ 189.613432][ T9169] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 189.621802][ T9169] EXT4-fs (loop0): orphan cleanup on readonly fs [ 189.633499][ T9169] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 189.646020][ T9169] EXT4-fs (loop0): Remounting filesystem read-only [ 189.652905][ T9169] EXT4-fs (loop0): 1 truncate cleaned up [ 189.659094][ T850] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 189.670086][ T850] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 189.761869][ T850] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 189.820757][ T9169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.834723][ T9169] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.923638][ T9169] lo speed is unknown, defaulting to 1000 [ 190.009697][ T9169] lo speed is unknown, defaulting to 1000 [ 190.016504][ T9169] wg1 speed is unknown, defaulting to 1000 [ 190.336543][ T29] kauditd_printk_skb: 638 callbacks suppressed [ 190.336561][ T29] audit: type=1326 audit(1765084119.917:23686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9190 comm="syz.0.1612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x0 [ 190.376740][ T9188] loop3: detected capacity change from 0 to 512 [ 190.394053][ T9188] EXT4-fs: Ignoring removed bh option [ 190.408074][ T9188] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.417269][ T9188] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 190.435560][ T9188] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 190.465836][ T9188] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 190.478112][ T9195] loop0: detected capacity change from 0 to 4096 [ 190.489574][ T29] audit: type=1400 audit(1765084120.067:23687): avc: denied { getopt } for pid=9181 comm="syz.1.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.492401][ T9188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.557569][ T9195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.566919][ T29] audit: type=1326 audit(1765084120.067:23688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9184 comm="syz.5.1610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f8adaf749 code=0x0 [ 190.598377][ T9188] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 190.604261][ T9182] pim6reg: entered allmulticast mode [ 190.615088][ T9196] pim6reg: left allmulticast mode [ 190.639948][ T9195] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.663572][ T9188] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.702974][ T9188] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.716743][ T9199] tipc: Enabling of bearer rejected, already enabled [ 190.753184][ T9188] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.804008][ T9188] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.923102][ T9232] loop1: detected capacity change from 0 to 512 [ 190.929845][ T9232] EXT4-fs: Ignoring removed bh option [ 190.944757][ T9232] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.953890][ T9232] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 190.963159][ T9232] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 190.973901][ T9232] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 190.982589][ T9232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.996512][ T9232] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 191.009570][ T9232] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.052560][ T9232] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.065847][ T9239] tipc: Started in network mode [ 191.070729][ T9239] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 191.079934][ T9239] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 191.088207][ T9239] tipc: Enabled bearer , priority 10 [ 191.115537][ T9232] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.159826][ T29] audit: type=1326 audit(1765084120.737:23689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.5.1618" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f8adaf749 code=0x0 [ 191.184751][ T9232] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.266557][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.306766][ T9257] loop2: detected capacity change from 0 to 1024 [ 191.321967][ T9257] ext4: Unknown parameter 'uid<00000000000000000000' [ 191.348242][ T9261] __nla_validate_parse: 5 callbacks suppressed [ 191.348257][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 191.363767][ T29] audit: type=1326 audit(1765084120.937:23690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ec13f749 code=0x7ffc0000 [ 191.387734][ T29] audit: type=1326 audit(1765084120.937:23691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ec13f749 code=0x7ffc0000 [ 191.411485][ T29] audit: type=1326 audit(1765084120.937:23692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f72ec13f749 code=0x7ffc0000 [ 191.435380][ T29] audit: type=1326 audit(1765084120.937:23693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ec13f749 code=0x7ffc0000 [ 191.459638][ T29] audit: type=1326 audit(1765084120.937:23694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f72ec13f749 code=0x7ffc0000 [ 191.465728][ T9261] loop0: detected capacity change from 0 to 512 [ 191.483220][ T29] audit: type=1326 audit(1765084120.937:23695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ec13f749 code=0x7ffc0000 [ 191.515031][ T9261] EXT4-fs: Ignoring removed bh option [ 191.534189][ T9261] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.543560][ T9261] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 191.563486][ T9261] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 191.573269][ T9261] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 191.582029][ T9261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.598628][ T9261] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 191.668327][ T9261] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.719127][ T9291] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 191.727457][ T9291] tipc: Enabled bearer , priority 10 [ 191.736752][ T9261] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.784193][ T9261] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.835223][ T9261] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.851464][ T3838] usb usb2-port1: unable to enumerate USB device [ 191.888197][ T53] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.899409][ T53] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.911357][ T53] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.922273][ T53] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.962655][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.022542][ T9297] netlink: 'syz.0.1624': attribute type 10 has an invalid length. [ 192.030444][ T9297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1624'. [ 192.040350][ T9297] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 192.081104][ T3375] tipc: Node number set to 1 [ 192.099279][ T850] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.120559][ T850] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.138536][ T850] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.168669][ T850] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.186022][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.217643][ T9309] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1628'. [ 192.286329][ T9310] loop5: detected capacity change from 0 to 4096 [ 192.306523][ T9310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.379691][ T9310] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.395882][ T3375] lo speed is unknown, defaulting to 1000 [ 192.523794][ T9313] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 192.530353][ T9313] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 192.538597][ T9313] vhci_hcd vhci_hcd.0: Device attached [ 192.546301][ T9334] vhci_hcd: connection closed [ 192.546626][ T53] vhci_hcd: stop threads [ 192.555624][ T53] vhci_hcd: release socket [ 192.560051][ T53] vhci_hcd: disconnect device [ 193.091819][ T7693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.212685][ T9374] netlink: 'syz.1.1636': attribute type 7 has an invalid length. [ 193.535653][ T9403] loop5: detected capacity change from 0 to 512 [ 193.563626][ T9403] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 193.571942][ T9403] EXT4-fs (loop5): orphan cleanup on readonly fs [ 194.738687][ T9408] loop2: detected capacity change from 0 to 512 [ 194.813541][ T9403] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 194.905060][ T9403] EXT4-fs (loop5): Remounting filesystem read-only [ 194.911933][ T9403] EXT4-fs (loop5): 1 truncate cleaned up [ 194.927589][ T1755] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.938194][ T1755] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.957458][ T850] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.959168][ T1755] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 194.976395][ T9408] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 194.984730][ T9408] EXT4-fs (loop2): orphan cleanup on readonly fs [ 194.992709][ T9403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.007096][ T9403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.016631][ T1755] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.027350][ T9408] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 195.039300][ T1755] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.048933][ T9408] EXT4-fs (loop2): Remounting filesystem read-only [ 195.055838][ T9408] EXT4-fs (loop2): 1 truncate cleaned up [ 195.089037][ T9417] lo speed is unknown, defaulting to 1000 [ 195.174188][ T9417] lo speed is unknown, defaulting to 1000 [ 195.180962][ T9417] wg1 speed is unknown, defaulting to 1000 [ 195.280224][ T1755] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 195.290811][ T1755] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 195.336719][ T1755] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 195.347090][ T1755] __quota_error: 32 callbacks suppressed [ 195.347104][ T1755] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 195.528911][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.538071][ T8020] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.554066][ T9397] lo speed is unknown, defaulting to 1000 [ 195.574289][ T9374] loop1: detected capacity change from 0 to 512 [ 195.587798][ T9397] lo speed is unknown, defaulting to 1000 [ 195.593947][ T9397] wg1 speed is unknown, defaulting to 1000 [ 195.600686][ T29] audit: type=1326 audit(1765084125.177:23718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.0.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 195.629691][ T1755] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 195.678717][ T9408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.693554][ T9408] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.723681][ T29] audit: type=1326 audit(1765084125.207:23719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.0.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 195.747327][ T29] audit: type=1326 audit(1765084126.214:23720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.0.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 195.771063][ T29] audit: type=1326 audit(1765084126.214:23721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.0.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 195.794662][ T29] audit: type=1326 audit(1765084126.214:23722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.0.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 195.818406][ T29] audit: type=1326 audit(1765084126.214:23723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.0.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 195.842082][ T29] audit: type=1326 audit(1765084126.214:23724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.0.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 195.865868][ T29] audit: type=1326 audit(1765084126.214:23725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.0.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 195.952483][ T9432] loop5: detected capacity change from 0 to 512 [ 195.983307][ T9407] lo speed is unknown, defaulting to 1000 [ 196.018710][ T9407] lo speed is unknown, defaulting to 1000 [ 196.025002][ T9407] wg1 speed is unknown, defaulting to 1000 [ 196.084818][ T9432] EXT4-fs (loop5): 1 orphan inode deleted [ 196.103837][ T9432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.127184][ T9444] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 196.173056][ T9432] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.189222][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1649'. [ 196.208410][ T9443] IPVS: stopping master sync thread 9444 ... [ 196.372108][ T9432] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1646'. [ 196.408807][ T7693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.608011][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1663'. [ 196.670450][ T9485] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 197.678863][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1665'. [ 197.738703][ T9492] loop0: detected capacity change from 0 to 512 [ 197.771453][ T9492] EXT4-fs: Ignoring removed bh option [ 197.806748][ T9492] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.815841][ T9492] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 197.886352][ T9492] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 197.921357][ T9492] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 197.950194][ T9492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.031570][ T9492] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 198.418919][ T9508] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.477225][ T9509] tipc: Enabling of bearer rejected, already enabled [ 198.512158][ T9508] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.563147][ T9508] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.622663][ T9508] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.678316][ T9514] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 198.716492][ T9514] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 198.749483][ T9514] loop3: detected capacity change from 0 to 512 [ 198.769030][ T9514] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 198.779020][ T9514] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 198.873071][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1672'. [ 198.886023][ T9456] loop2: detected capacity change from 0 to 8192 [ 198.887020][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1672'. [ 199.016186][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.049518][ T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.069231][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.078983][ T61] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.088372][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.001145][ T3521] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 200.008319][ T9505] FAULT_INJECTION: forcing a failure. [ 200.008319][ T9505] name failslab, interval 1, probability 0, space 0, times 0 [ 200.021091][ T9505] CPU: 0 UID: 0 PID: 9505 Comm: syz.5.1670 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.021121][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.021132][ T9505] Call Trace: [ 200.021137][ T9505] [ 200.021145][ T9505] __dump_stack+0x1d/0x30 [ 200.021169][ T9505] dump_stack_lvl+0xe8/0x140 [ 200.021197][ T9505] dump_stack+0x15/0x1b [ 200.021219][ T9505] should_fail_ex+0x265/0x280 [ 200.021244][ T9505] should_failslab+0x8c/0xb0 [ 200.021308][ T9505] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 200.021328][ T9505] ? __alloc_skb+0x324/0x4d0 [ 200.021363][ T9505] __alloc_skb+0x324/0x4d0 [ 200.021381][ T9505] ? __alloc_skb+0x24d/0x4d0 [ 200.021403][ T9505] alloc_uevent_skb+0x5c/0x120 [ 200.021467][ T9505] kobject_uevent_net_broadcast+0x23c/0x410 [ 200.021492][ T9505] kobject_uevent_env+0x43d/0x570 [ 200.021512][ T9505] kobject_uevent+0x1d/0x30 [ 200.021529][ T9505] device_del+0x710/0x790 [ 200.021555][ T9505] rfkill_unregister+0x80/0x170 [ 200.021600][ T9505] hci_unregister_dev+0x26c/0x2b0 [ 200.021640][ T9505] hci_uart_tty_close+0x115/0x170 [ 200.021668][ T9505] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 200.021802][ T9505] tty_ldisc_kill+0x8d/0x140 [ 200.021826][ T9505] tty_ldisc_hangup+0x2fa/0x370 [ 200.021849][ T9505] __tty_hangup+0x3c2/0x540 [ 200.021899][ T9505] tty_ioctl+0x601/0xb80 [ 200.021916][ T9505] ? __pfx_tty_ioctl+0x10/0x10 [ 200.021934][ T9505] __se_sys_ioctl+0xce/0x140 [ 200.021994][ T9505] __x64_sys_ioctl+0x43/0x50 [ 200.022019][ T9505] x64_sys_call+0x14b0/0x3000 [ 200.022040][ T9505] do_syscall_64+0xd8/0x2a0 [ 200.022072][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.022228][ T9505] RIP: 0033:0x7f2f8adaf749 [ 200.022243][ T9505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.022261][ T9505] RSP: 002b:00007f2f89817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.022285][ T9505] RAX: ffffffffffffffda RBX: 00007f2f8b005fa0 RCX: 00007f2f8adaf749 [ 200.022300][ T9505] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 200.022392][ T9505] RBP: 00007f2f89817090 R08: 0000000000000000 R09: 0000000000000000 [ 200.022406][ T9505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.022420][ T9505] R13: 00007f2f8b006038 R14: 00007f2f8b005fa0 R15: 00007fffa9dd0608 [ 200.022442][ T9505] [ 200.442032][ T9562] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1692'. [ 200.496995][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 200.497012][ T29] audit: type=1326 audit(1765084132.072:24395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9565 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 200.526885][ T29] audit: type=1326 audit(1765084132.072:24396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9565 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 200.553224][ T9564] syzkaller0: entered promiscuous mode [ 200.558752][ T9564] syzkaller0: entered allmulticast mode [ 200.571011][ T29] audit: type=1326 audit(1765084132.072:24397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9565 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 200.594806][ T29] audit: type=1326 audit(1765084132.072:24398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9565 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 200.618830][ T29] audit: type=1326 audit(1765084132.072:24399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9565 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 200.642422][ T29] audit: type=1326 audit(1765084132.132:24400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9565 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 200.665964][ T29] audit: type=1326 audit(1765084132.142:24401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9565 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 200.689479][ T29] audit: type=1326 audit(1765084132.142:24402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9565 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 200.690153][ T9568] loop2: detected capacity change from 0 to 512 [ 200.713351][ T29] audit: type=1326 audit(1765084132.142:24403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9565 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 200.713384][ T29] audit: type=1326 audit(1765084132.142:24404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9565 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 200.797790][ T9568] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1693: invalid block [ 200.839282][ T9550] loop0: detected capacity change from 0 to 8192 [ 200.899110][ T9568] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1693: invalid indirect mapped block 4294967295 (level 1) [ 200.941711][ T9568] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1693: invalid indirect mapped block 4294967295 (level 1) [ 200.966350][ T9582] macvtap2: entered allmulticast mode [ 200.986608][ T9568] EXT4-fs (loop2): 2 truncates cleaned up [ 201.006081][ T9568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.146182][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.474797][ T9599] lo speed is unknown, defaulting to 1000 [ 201.560385][ T9599] lo speed is unknown, defaulting to 1000 [ 201.567484][ T9599] wg1 speed is unknown, defaulting to 1000 [ 201.962445][ T9603] lo speed is unknown, defaulting to 1000 [ 202.005215][ T9603] lo speed is unknown, defaulting to 1000 [ 202.016616][ T9603] wg1 speed is unknown, defaulting to 1000 [ 202.111845][ T9607] netlink: 'syz.1.1705': attribute type 1 has an invalid length. [ 202.217679][ T9614] loop1: detected capacity change from 0 to 512 [ 202.280019][ T9614] EXT4-fs (loop1): 1 orphan inode deleted [ 202.311524][ T9614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.371263][ T9614] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.453107][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.509625][ T9620] macvtap2: entered allmulticast mode [ 202.743511][ T8021] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.951354][ T9629] macvtap2: entered allmulticast mode [ 203.464406][ T9640] loop3: detected capacity change from 0 to 512 [ 203.612535][ T9640] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 203.620813][ T9640] EXT4-fs (loop3): orphan cleanup on readonly fs [ 203.633143][ T9640] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 203.645923][ T9640] EXT4-fs (loop3): Remounting filesystem read-only [ 203.652839][ T9640] EXT4-fs (loop3): 1 truncate cleaned up [ 203.658769][ T1921] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 203.669452][ T1921] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 203.834509][ T1921] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 203.911759][ T9640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.925716][ T9640] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.004351][ T9639] lo speed is unknown, defaulting to 1000 [ 204.023528][ T9625] loop1: detected capacity change from 0 to 8192 [ 204.040407][ T9639] lo speed is unknown, defaulting to 1000 [ 204.046741][ T9639] wg1 speed is unknown, defaulting to 1000 [ 204.262067][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 204.296360][ T9649] loop3: detected capacity change from 0 to 512 [ 204.319925][ T9649] EXT4-fs: Ignoring removed bh option [ 204.328077][ T9649] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 204.337218][ T9649] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 204.375440][ T9649] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 204.388280][ T9649] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 204.398358][ T9649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.421847][ T9649] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 204.486632][ T9662] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.540229][ T9649] tipc: Enabling of bearer rejected, already enabled [ 204.551494][ T9666] macvtap2: entered allmulticast mode [ 204.573427][ T9662] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.658566][ T9667] loop1: detected capacity change from 0 to 512 [ 204.727068][ T9667] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 204.735615][ T9667] EXT4-fs (loop1): orphan cleanup on readonly fs [ 204.745896][ T9667] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 204.758347][ T9667] EXT4-fs (loop1): Remounting filesystem read-only [ 204.765285][ T9667] EXT4-fs (loop1): 1 truncate cleaned up [ 204.790927][ T3521] Bluetooth: hci0: command 0x1003 tx timeout [ 204.811220][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.125638][ T2038] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 205.136344][ T2038] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 205.178516][ T9662] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.189014][ T2038] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 205.211794][ T9667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.224794][ T9667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.308697][ T9681] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1729'. [ 205.401122][ T9662] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.493083][ T9663] lo speed is unknown, defaulting to 1000 [ 205.650993][ T9663] lo speed is unknown, defaulting to 1000 [ 205.658472][ T9663] wg1 speed is unknown, defaulting to 1000 [ 206.089634][ T9682] loop2: detected capacity change from 0 to 512 [ 206.132358][ T9682] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 206.140495][ T9682] EXT4-fs (loop2): orphan cleanup on readonly fs [ 206.153037][ T9682] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 206.165019][ T9682] EXT4-fs (loop2): Remounting filesystem read-only [ 206.166664][ T9689] 9pnet_fd: Insufficient options for proto=fd [ 206.171764][ T9682] EXT4-fs (loop2): 1 truncate cleaned up [ 206.184082][ T8021] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 206.194659][ T8021] __quota_error: 155 callbacks suppressed [ 206.194677][ T8021] Quota error (device loop2): write_blk: dquota write failed [ 206.207842][ T8021] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 206.217989][ T8021] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 206.228788][ T8021] Quota error (device loop2): write_blk: dquota write failed [ 206.236445][ T8021] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 206.248861][ T8021] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 206.259186][ T8021] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 206.268466][ T8021] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 206.273367][ T9683] lo speed is unknown, defaulting to 1000 [ 206.284859][ T9682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.297990][ T9682] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.383778][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.394665][ T9682] lo speed is unknown, defaulting to 1000 [ 206.431694][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.440344][ T9682] lo speed is unknown, defaulting to 1000 [ 206.446456][ T9682] wg1 speed is unknown, defaulting to 1000 [ 206.507213][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.519597][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.531084][ T9683] lo speed is unknown, defaulting to 1000 [ 206.574972][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.582102][ T9683] wg1 speed is unknown, defaulting to 1000 [ 206.782786][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 206.816875][ T9706] loop3: detected capacity change from 0 to 512 [ 206.843554][ T9706] EXT4-fs: Ignoring removed bh option [ 206.894313][ T9714] lo speed is unknown, defaulting to 1000 [ 206.979350][ T9714] lo speed is unknown, defaulting to 1000 [ 206.989504][ T9714] wg1 speed is unknown, defaulting to 1000 [ 207.173941][ T9718] macvtap2: entered allmulticast mode [ 207.372518][ T9706] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.381692][ T9706] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 207.405731][ T9706] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 207.415477][ T9706] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 207.431957][ T9706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.455348][ T9706] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 207.470234][ T9706] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.523210][ T9711] tipc: Enabling of bearer rejected, already enabled [ 207.552787][ T9725] siw: device registration error -23 [ 207.560272][ T9706] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.582890][ T9727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1741'. [ 207.677735][ T9706] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.696637][ T9737] netlink: 'syz.2.1746': attribute type 10 has an invalid length. [ 207.704567][ T9737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1746'. [ 207.753940][ T9729] netlink: 'syz.5.1742': attribute type 7 has an invalid length. [ 207.758998][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1750'. [ 207.772801][ T9706] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.801586][ T9746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1749'. [ 208.172540][ T9729] loop5: detected capacity change from 0 to 512 [ 208.214829][ T29] audit: type=1326 audit(1765084140.792:24548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.2.1754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72ec13f749 code=0x0 [ 208.296593][ T9761] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 208.654948][ T9765] lo speed is unknown, defaulting to 1000 [ 208.664093][ T9751] Set syz1 is full, maxelem 65536 reached [ 208.696847][ T9765] lo speed is unknown, defaulting to 1000 [ 208.704277][ T9765] wg1 speed is unknown, defaulting to 1000 [ 208.809866][ T9774] siw: device registration error -23 [ 208.875953][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 208.888528][ T9778] loop1: detected capacity change from 0 to 512 [ 208.895614][ T9778] EXT4-fs: Ignoring removed bh option [ 208.902811][ T9778] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 208.912051][ T9778] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 208.938562][ T9778] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 208.948488][ T9778] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 208.981714][ T9778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.995529][ T9778] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 209.021821][ T9778] tipc: Enabling of bearer rejected, already enabled [ 209.082380][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 209.111141][ T9787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1762'. [ 209.123579][ T9783] loop2: detected capacity change from 0 to 512 [ 209.131807][ T9783] EXT4-fs: Ignoring removed bh option [ 209.148912][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.158554][ T9783] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.167803][ T9783] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 209.308579][ T9783] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 209.326469][ T9783] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 209.335600][ T9783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.388914][ T9783] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 209.435107][ T9796] loop0: detected capacity change from 0 to 512 [ 209.472990][ T9796] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 209.481523][ T9796] EXT4-fs (loop0): orphan cleanup on readonly fs [ 209.492078][ T9796] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 209.504905][ T9796] EXT4-fs (loop0): Remounting filesystem read-only [ 209.511676][ T9796] EXT4-fs (loop0): 1 truncate cleaned up [ 209.517751][ T53] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 209.528366][ T53] Quota error (device loop0): write_blk: dquota write failed [ 209.535805][ T53] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 209.545967][ T53] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 209.556699][ T53] Quota error (device loop0): write_blk: dquota write failed [ 209.597825][ T9802] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 209.681295][ T9801] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.773186][ T9803] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 209.781423][ T9803] tipc: Enabled bearer , priority 10 [ 209.789308][ T9802] loop5: detected capacity change from 0 to 512 [ 209.815977][ T9802] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 209.826055][ T9802] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 209.836278][ T53] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 209.878469][ T9796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.892419][ T9796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.009696][ T9793] lo speed is unknown, defaulting to 1000 [ 210.062459][ T9793] lo speed is unknown, defaulting to 1000 [ 210.068865][ T9793] wg1 speed is unknown, defaulting to 1000 [ 210.073662][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1766'. [ 210.092503][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1766'. [ 210.146783][ T9801] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.244007][ T9801] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.345435][ T9801] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.380269][ T1755] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.402791][ T1755] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.430959][ T1755] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.443730][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.453502][ T1755] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.456969][ T9825] netlink: 'syz.0.1774': attribute type 10 has an invalid length. [ 210.469733][ T9825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1774'. [ 210.487415][ T9825] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 210.697045][ T9838] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 210.909406][ T9846] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1778'. [ 210.948504][ T9847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1779'. [ 211.549118][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.594110][ T8150] tipc: Node number set to 4294246401 [ 211.673008][ T9864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1785'. [ 212.277069][ T9875] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1790'. [ 212.614490][ T9855] Set syz1 is full, maxelem 65536 reached [ 212.695110][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 212.695127][ T29] audit: type=1326 audit(1765084146.276:24796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.3.1792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff760bdf749 code=0x0 [ 212.756475][ T9885] netlink: 'syz.2.1793': attribute type 10 has an invalid length. [ 212.764364][ T9885] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1793'. [ 213.111246][ T29] audit: type=1326 audit(1765084146.696:24797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9902 comm="syz.5.1800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f8adaf749 code=0x0 [ 213.230771][ T9904] loop5: detected capacity change from 0 to 4096 [ 213.252556][ T9904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.340467][ T9904] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.384271][ T9858] loop1: detected capacity change from 0 to 8192 [ 213.670716][ T9862] loop0: detected capacity change from 0 to 8192 [ 213.856161][ T9935] netlink: 'syz.2.1806': attribute type 10 has an invalid length. [ 213.864315][ T9935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1806'. [ 214.033879][ T7693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.230750][ T9972] loop2: detected capacity change from 0 to 512 [ 214.313655][ T9972] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 214.322364][ T9972] EXT4-fs (loop2): orphan cleanup on readonly fs [ 214.335544][ T9972] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 214.348095][ T9972] EXT4-fs (loop2): Remounting filesystem read-only [ 214.354908][ T9972] EXT4-fs (loop2): 1 truncate cleaned up [ 214.361347][ T53] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 214.372063][ T53] Quota error (device loop2): write_blk: dquota write failed [ 214.379536][ T53] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 214.389607][ T53] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 214.400172][ T53] Quota error (device loop2): write_blk: dquota write failed [ 214.407580][ T53] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 214.547438][ T29] audit: type=1326 audit(1765084148.036:24798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 214.571124][ T29] audit: type=1326 audit(1765084148.036:24799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 214.594801][ T29] audit: type=1326 audit(1765084148.036:24800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 214.618556][ T29] audit: type=1326 audit(1765084148.036:24801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.1.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 214.772698][ T53] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 214.801974][ T9972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.819061][ T9972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.867527][ T9965] lo speed is unknown, defaulting to 1000 [ 214.904001][ T9965] lo speed is unknown, defaulting to 1000 [ 214.910288][ T9965] wg1 speed is unknown, defaulting to 1000 [ 215.073872][T10012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1820'. [ 215.082983][T10012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1820'. [ 215.247647][T10013] lo speed is unknown, defaulting to 1000 [ 215.595928][T10013] lo speed is unknown, defaulting to 1000 [ 215.620182][T10013] wg1 speed is unknown, defaulting to 1000 [ 215.678518][T10026] siw: device registration error -23 [ 215.779573][T10039] loop2: detected capacity change from 0 to 1024 [ 215.813551][T10041] siw: device registration error -23 [ 215.979666][T10039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 215.992771][T10039] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.008245][T10039] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1823: bg 0: block 112: padding at end of block bitmap is not set [ 216.057574][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 216.115835][T10015] Set syz1 is full, maxelem 65536 reached [ 216.403018][T10073] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1837'. [ 216.412136][T10073] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1837'. [ 216.683117][T10094] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 216.710427][T10094] loop3: detected capacity change from 0 to 512 [ 216.741691][T10094] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.751715][T10094] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 216.853147][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1846'. [ 216.878966][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1846'. [ 216.956453][T10088] lo speed is unknown, defaulting to 1000 [ 216.998379][T10088] lo speed is unknown, defaulting to 1000 [ 217.059748][T10088] wg1 speed is unknown, defaulting to 1000 [ 217.213994][T10104] siw: device registration error -23 [ 217.363552][T10086] Set syz1 is full, maxelem 65536 reached [ 217.492792][T10113] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1853'. [ 217.560836][T10116] macvtap2: entered allmulticast mode [ 217.599321][T10120] macvtap3: entered allmulticast mode [ 217.815221][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 217.815240][ T29] audit: type=1326 audit(1765084153.385:25374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 217.845385][ T29] audit: type=1326 audit(1765084153.385:25375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 217.869237][ T29] audit: type=1326 audit(1765084153.395:25376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 217.893003][ T29] audit: type=1326 audit(1765084153.395:25377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 217.917789][ T29] audit: type=1326 audit(1765084153.395:25378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 217.950779][ T29] audit: type=1326 audit(1765084153.395:25379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 217.974512][ T29] audit: type=1326 audit(1765084153.395:25380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 217.998401][ T29] audit: type=1326 audit(1765084153.395:25381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 218.022172][ T29] audit: type=1326 audit(1765084153.395:25382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 218.045994][ T29] audit: type=1326 audit(1765084153.395:25383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.0.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7aab57f749 code=0x7ffc0000 [ 218.088925][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 218.315377][T10156] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 218.402843][T10141] pim6reg: entered allmulticast mode [ 218.416394][T10166] netlink: 'syz.1.1873': attribute type 10 has an invalid length. [ 218.416445][T10166] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1873'. [ 218.446230][T10148] pim6reg: left allmulticast mode [ 218.473609][T10164] macvtap2: entered allmulticast mode [ 218.527268][T10169] FAULT_INJECTION: forcing a failure. [ 218.527268][T10169] name failslab, interval 1, probability 0, space 0, times 0 [ 218.540051][T10169] CPU: 1 UID: 0 PID: 10169 Comm: syz.1.1874 Not tainted syzkaller #0 PREEMPT(voluntary) [ 218.540135][T10169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.540195][T10169] Call Trace: [ 218.540202][T10169] [ 218.540212][T10169] __dump_stack+0x1d/0x30 [ 218.540239][T10169] dump_stack_lvl+0xe8/0x140 [ 218.540269][T10169] dump_stack+0x15/0x1b [ 218.540290][T10169] should_fail_ex+0x265/0x280 [ 218.540316][T10169] should_failslab+0x8c/0xb0 [ 218.540342][T10169] __kmalloc_cache_noprof+0x65/0x4c0 [ 218.540379][T10169] ? resv_map_alloc+0x57/0x190 [ 218.540401][T10169] resv_map_alloc+0x57/0x190 [ 218.540460][T10169] hugetlbfs_get_inode+0x67/0x370 [ 218.540490][T10169] ? mutex_unlock+0x4f/0x90 [ 218.540532][T10169] hugetlb_file_setup+0x192/0x3d0 [ 218.540565][T10169] ksys_mmap_pgoff+0x157/0x310 [ 218.540604][T10169] x64_sys_call+0x16bb/0x3000 [ 218.540632][T10169] do_syscall_64+0xd8/0x2a0 [ 218.540659][T10169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.540759][T10169] RIP: 0033:0x7f2e0de2f749 [ 218.540776][T10169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.540833][T10169] RSP: 002b:00007f2e0c897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 218.540856][T10169] RAX: ffffffffffffffda RBX: 00007f2e0e085fa0 RCX: 00007f2e0de2f749 [ 218.540876][T10169] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 218.540948][T10169] RBP: 00007f2e0c897090 R08: ffffffffffffffff R09: 0000000000000000 [ 218.540961][T10169] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 218.540975][T10169] R13: 00007f2e0e086038 R14: 00007f2e0e085fa0 R15: 00007ffffcf118c8 [ 218.541049][T10169] [ 218.751304][T10172] loop1: detected capacity change from 0 to 512 [ 218.782757][T10172] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 218.806881][T10172] EXT4-fs (loop1): failed to open journal device unknown-block(8,3) -6 [ 218.839273][T10175] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 218.867020][T10172] loop1: detected capacity change from 0 to 1024 [ 218.887458][T10175] loop2: detected capacity change from 0 to 512 [ 218.901933][T10172] EXT4-fs: Ignoring removed orlov option [ 218.925097][T10172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.942477][T10175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 218.952551][T10175] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 219.028378][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1877'. [ 219.054215][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 219.297019][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.623396][T10215] macvtap2: entered allmulticast mode [ 219.710968][T10220] siw: device registration error -23 [ 220.211415][T10243] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 220.247961][T10243] loop3: detected capacity change from 0 to 512 [ 220.285980][T10247] macvtap2: entered allmulticast mode [ 220.321568][T10243] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 220.331654][T10243] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 220.456658][T10253] __nla_validate_parse: 2 callbacks suppressed [ 220.456675][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1899'. [ 220.531864][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 220.684073][T10226] Set syz1 is full, maxelem 65536 reached [ 220.766790][T10262] loop0: detected capacity change from 0 to 512 [ 220.774173][T10262] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 220.809733][T10269] FAULT_INJECTION: forcing a failure. [ 220.809733][T10269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.822883][T10269] CPU: 0 UID: 0 PID: 10269 Comm: syz.1.1908 Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.822951][T10269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.822961][T10269] Call Trace: [ 220.822968][T10269] [ 220.822976][T10269] __dump_stack+0x1d/0x30 [ 220.823000][T10269] dump_stack_lvl+0xe8/0x140 [ 220.823052][T10269] dump_stack+0x15/0x1b [ 220.823104][T10269] should_fail_ex+0x265/0x280 [ 220.823154][T10269] should_fail+0xb/0x20 [ 220.823175][T10269] should_fail_usercopy+0x1a/0x20 [ 220.823216][T10269] strncpy_from_user+0x27/0x260 [ 220.823246][T10269] ? htab_map_hash+0x1cc/0x1d0 [ 220.823331][T10269] strncpy_from_user_nofault+0x68/0xf0 [ 220.823363][T10269] bpf_probe_read_user_str+0x2a/0x70 [ 220.823453][T10269] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 220.823474][T10269] bpf_trace_run2+0x107/0x1d0 [ 220.823507][T10269] ? security_compute_sid+0x11da/0x1290 [ 220.823534][T10269] ? security_compute_sid+0x11da/0x1290 [ 220.823596][T10269] __traceiter_kfree+0x2e/0x50 [ 220.823627][T10269] ? security_compute_sid+0x11da/0x1290 [ 220.823728][T10269] kfree+0x353/0x3c0 [ 220.823757][T10269] security_compute_sid+0x11da/0x1290 [ 220.823792][T10269] ? obj_cgroup_charge_account+0x122/0x1a0 [ 220.823977][T10269] security_transition_sid+0x5a/0x70 [ 220.824008][T10269] inode_doinit_with_dentry+0x327/0x7a0 [ 220.824174][T10269] selinux_d_instantiate+0x27/0x40 [ 220.824193][T10269] security_d_instantiate+0x7a/0xa0 [ 220.824251][T10269] d_instantiate+0x41/0xa0 [ 220.824278][T10269] alloc_file_pseudo+0xa3/0x160 [ 220.824310][T10269] __shmem_file_setup+0x1de/0x210 [ 220.824357][T10269] shmem_file_setup+0x3b/0x50 [ 220.824384][T10269] __se_sys_memfd_create+0x2f7/0x6b0 [ 220.824490][T10269] __x64_sys_memfd_create+0x31/0x40 [ 220.824522][T10269] x64_sys_call+0x28cb/0x3000 [ 220.824543][T10269] do_syscall_64+0xd8/0x2a0 [ 220.824651][T10269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.824671][T10269] RIP: 0033:0x7f2e0de2f749 [ 220.824721][T10269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.824740][T10269] RSP: 002b:00007f2e0c896e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 220.824826][T10269] RAX: ffffffffffffffda RBX: 00000000000004e0 RCX: 00007f2e0de2f749 [ 220.824839][T10269] RDX: 00007f2e0c896ef0 RSI: 0000000000000000 RDI: 00007f2e0deb4960 [ 220.824851][T10269] RBP: 0000200000001a40 R08: 00007f2e0c896bb7 R09: 00007f2e0c896e40 [ 220.824863][T10269] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 220.824877][T10269] R13: 00007f2e0c896ef0 R14: 00007f2e0c896eb0 R15: 0000200000000440 [ 220.824899][T10269] [ 221.101554][T10262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.114985][T10269] loop1: detected capacity change from 0 to 512 [ 221.124966][T10262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.164953][T10269] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 221.173906][T10269] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 221.252981][T10269] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1908: Allocating blocks 41-42 which overlap fs metadata [ 221.276092][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1910'. [ 221.285228][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1910'. [ 221.285952][T10269] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1908: Failed to acquire dquot type 1 [ 221.306942][T10269] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 221.307394][T10269] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1908: corrupted inode contents [ 221.307619][T10269] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.1908: mark_inode_dirty error [ 221.307874][T10269] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1908: corrupted inode contents [ 221.308118][T10269] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.1908: mark_inode_dirty error [ 221.308409][T10269] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1908: corrupted inode contents [ 221.308599][T10269] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 221.308947][T10269] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.1908: corrupted inode contents [ 221.309305][T10269] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.1908: mark_inode_dirty error [ 221.309598][T10269] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 221.310108][T10269] EXT4-fs (loop1): 1 truncate cleaned up [ 221.310584][T10269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.435571][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.557896][T10264] pim6reg: entered allmulticast mode [ 221.570999][T10278] pim6reg: left allmulticast mode [ 221.636518][T10287] FAULT_INJECTION: forcing a failure. [ 221.636518][T10287] name failslab, interval 1, probability 0, space 0, times 0 [ 221.636562][T10287] CPU: 1 UID: 0 PID: 10287 Comm: syz.1.1912 Not tainted syzkaller #0 PREEMPT(voluntary) [ 221.636667][T10287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.636678][T10287] Call Trace: [ 221.636685][T10287] [ 221.636692][T10287] __dump_stack+0x1d/0x30 [ 221.636786][T10287] dump_stack_lvl+0xe8/0x140 [ 221.636812][T10287] dump_stack+0x15/0x1b [ 221.636874][T10287] should_fail_ex+0x265/0x280 [ 221.636898][T10287] should_failslab+0x8c/0xb0 [ 221.636923][T10287] kmem_cache_alloc_noprof+0x69/0x4b0 [ 221.636947][T10287] ? security_file_alloc+0x32/0x100 [ 221.636977][T10287] security_file_alloc+0x32/0x100 [ 221.637034][T10287] init_file+0x5c/0x1c0 [ 221.637126][T10287] alloc_empty_file+0x8b/0x200 [ 221.637148][T10287] alloc_file_pseudo+0xc6/0x160 [ 221.637251][T10287] __shmem_file_setup+0x1de/0x210 [ 221.637281][T10287] shmem_file_setup+0x3b/0x50 [ 221.637303][T10287] __se_sys_memfd_create+0x2f7/0x6b0 [ 221.637361][T10287] __x64_sys_memfd_create+0x31/0x40 [ 221.637440][T10287] x64_sys_call+0x28cb/0x3000 [ 221.637462][T10287] do_syscall_64+0xd8/0x2a0 [ 221.637488][T10287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.637507][T10287] RIP: 0033:0x7f2e0de2f749 [ 221.637522][T10287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.637599][T10287] RSP: 002b:00007f2e0c896e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 221.637620][T10287] RAX: ffffffffffffffda RBX: 0000000000000537 RCX: 00007f2e0de2f749 [ 221.637635][T10287] RDX: 00007f2e0c896ef0 RSI: 0000000000000000 RDI: 00007f2e0deb4960 [ 221.637650][T10287] RBP: 0000200000000fc0 R08: 00007f2e0c896bb7 R09: 00007f2e0c896e40 [ 221.637674][T10287] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000500 [ 221.637688][T10287] R13: 00007f2e0c896ef0 R14: 00007f2e0c896eb0 R15: 0000200000000280 [ 221.637709][T10287] [ 221.708721][T10288] loop0: detected capacity change from 0 to 512 [ 221.835028][T10288] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 221.835352][T10288] EXT4-fs (loop0): orphan cleanup on readonly fs [ 221.839185][T10288] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 221.839940][T10288] EXT4-fs (loop0): Remounting filesystem read-only [ 221.840292][T10288] EXT4-fs (loop0): 1 truncate cleaned up [ 221.880361][T10294] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1914'. [ 222.186848][ T61] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 222.186908][ T61] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 222.187093][ T61] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 222.187561][T10288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.187977][T10288] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.191613][T10298] macvtap2: entered allmulticast mode [ 222.225139][T10285] lo speed is unknown, defaulting to 1000 [ 222.561716][T10285] lo speed is unknown, defaulting to 1000 [ 222.567984][T10285] wg1 speed is unknown, defaulting to 1000 [ 222.715371][T10317] siw: device registration error -23 [ 222.779965][T10319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1923'. [ 222.843200][T10321] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1924'. [ 222.919876][T10323] siw: device registration error -23 [ 222.970165][T10330] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1927'. [ 223.006661][T10333] macvtap2: entered allmulticast mode [ 223.020517][ T29] kauditd_printk_skb: 658 callbacks suppressed [ 223.020534][ T29] audit: type=1326 audit(1765084158.595:26033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 223.051059][ T29] audit: type=1326 audit(1765084158.605:26034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 223.074976][ T29] audit: type=1326 audit(1765084158.615:26035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 223.098756][ T29] audit: type=1326 audit(1765084159.628:26036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 223.122531][ T29] audit: type=1326 audit(1765084159.628:26037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 223.146357][ T29] audit: type=1326 audit(1765084159.628:26038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 223.146387][ T29] audit: type=1326 audit(1765084159.628:26039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 223.193556][ T29] audit: type=1326 audit(1765084159.628:26040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 223.217679][ T29] audit: type=1326 audit(1765084159.628:26041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 223.241474][ T29] audit: type=1326 audit(1765084159.628:26042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 223.265930][T10306] pim6reg: entered allmulticast mode [ 223.301182][T10309] pim6reg: left allmulticast mode [ 223.564132][T10346] lo speed is unknown, defaulting to 1000 [ 223.676970][T10346] lo speed is unknown, defaulting to 1000 [ 223.684680][T10346] wg1 speed is unknown, defaulting to 1000 [ 223.730817][T10350] loop1: detected capacity change from 0 to 512 [ 224.534012][T10350] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 224.542099][T10350] EXT4-fs (loop1): orphan cleanup on readonly fs [ 224.552590][T10350] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 224.564411][T10350] EXT4-fs (loop1): Remounting filesystem read-only [ 224.571276][T10350] EXT4-fs (loop1): 1 truncate cleaned up [ 224.577235][ T1921] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 224.588359][ T1921] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 224.607544][T10356] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1937'. [ 224.641313][ T1921] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 224.656228][T10350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.670086][T10350] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.719958][T10350] lo speed is unknown, defaulting to 1000 [ 224.803135][T10350] lo speed is unknown, defaulting to 1000 [ 224.810410][T10350] wg1 speed is unknown, defaulting to 1000 [ 225.267143][T10380] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 225.359534][T10382] loop3: detected capacity change from 0 to 512 [ 225.415287][T10382] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 225.423989][T10382] EXT4-fs (loop3): orphan cleanup on readonly fs [ 225.477283][T10382] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 225.489696][T10382] EXT4-fs (loop3): Remounting filesystem read-only [ 225.496538][T10382] EXT4-fs (loop3): 1 truncate cleaned up [ 225.502794][ T1921] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 225.513551][ T1921] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 225.708042][ T1921] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 225.820290][T10382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.833438][T10382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.908272][T10377] lo speed is unknown, defaulting to 1000 [ 225.945475][T10377] lo speed is unknown, defaulting to 1000 [ 225.951779][T10377] wg1 speed is unknown, defaulting to 1000 [ 226.094162][T10358] lo speed is unknown, defaulting to 1000 [ 226.313868][T10399] macvtap2: entered allmulticast mode [ 226.361595][T10358] lo speed is unknown, defaulting to 1000 [ 226.376974][T10358] wg1 speed is unknown, defaulting to 1000 [ 226.661713][T10411] loop2: detected capacity change from 0 to 1024 [ 226.688847][T10411] EXT4-fs: Ignoring removed orlov option [ 226.775313][T10414] loop0: detected capacity change from 0 to 512 [ 226.851774][T10414] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 226.860537][T10414] EXT4-fs (loop0): orphan cleanup on readonly fs [ 226.872737][T10414] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 226.884641][T10414] EXT4-fs (loop0): Remounting filesystem read-only [ 226.891354][T10414] EXT4-fs (loop0): 1 truncate cleaned up [ 226.898671][ T1649] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 226.909301][ T1649] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 226.922842][T10411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.118256][ T1649] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 227.230117][T10414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.243202][T10414] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.283571][T10412] lo speed is unknown, defaulting to 1000 [ 227.332491][T10412] lo speed is unknown, defaulting to 1000 [ 227.338795][T10412] wg1 speed is unknown, defaulting to 1000 [ 227.374657][T10423] pim6reg: entered allmulticast mode [ 227.484575][T10422] pim6reg: left allmulticast mode [ 227.598620][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.638831][T10436] macvtap3: entered allmulticast mode [ 227.662402][T10438] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1958'. [ 227.696824][T10434] lo speed is unknown, defaulting to 1000 [ 227.719577][T10444] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 227.805956][T10444] loop2: detected capacity change from 0 to 512 [ 227.830242][T10444] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.840203][T10444] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 227.865186][T10434] lo speed is unknown, defaulting to 1000 [ 227.875886][T10434] wg1 speed is unknown, defaulting to 1000 [ 227.948655][T10449] loop5: detected capacity change from 0 to 512 [ 227.986132][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1962'. [ 228.004358][T10450] siw: device registration error -23 [ 228.048991][T10449] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 228.057621][T10449] EXT4-fs (loop5): orphan cleanup on readonly fs [ 228.069926][T10449] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1961: corrupted inode contents [ 228.082429][T10449] EXT4-fs (loop5): Remounting filesystem read-only [ 228.089428][T10449] EXT4-fs (loop5): 1 truncate cleaned up [ 228.167802][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 228.167817][ T29] audit: type=1326 audit(1765084165.742:26198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.2.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ec13f749 code=0x7ffc0000 [ 228.220485][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 228.397078][ T29] audit: type=1326 audit(1765084165.792:26199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.2.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ec13f749 code=0x7ffc0000 [ 228.397254][ T1921] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 228.421113][ T29] audit: type=1326 audit(1765084165.792:26200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.2.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f72ec13f783 code=0x7ffc0000 [ 228.431501][ T1921] Quota error (device loop5): write_blk: dquota write failed [ 228.454933][ T29] audit: type=1326 audit(1765084165.792:26201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.2.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f72ec13f807 code=0x7ffc0000 [ 228.462395][ T1921] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 228.486071][ T29] audit: type=1326 audit(1765084165.792:26202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.2.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f72ec0f6bdd code=0x7ffc0000 [ 228.496076][ T1921] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 228.519970][ T29] audit: type=1326 audit(1765084165.792:26203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.2.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f72ec173e89 code=0x7ffc0000 [ 228.530968][ T1921] Quota error (device loop5): write_blk: dquota write failed [ 228.554552][ T29] audit: type=1326 audit(1765084165.792:26204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.2.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f72ec0f6c47 code=0x7ffc0000 [ 228.668642][T10459] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1966'. [ 228.687479][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 228.700049][T10461] loop0: detected capacity change from 0 to 512 [ 228.707103][T10461] EXT4-fs: Ignoring removed bh option [ 228.713466][T10461] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 228.722616][T10461] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 228.731279][ T1921] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 228.742934][T10449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.755933][T10449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.770030][T10461] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 228.801865][T10446] lo speed is unknown, defaulting to 1000 [ 228.810629][T10461] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 228.822838][T10465] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 228.829434][T10465] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 228.837712][T10465] vhci_hcd vhci_hcd.0: Device attached [ 228.878842][T10471] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1968'. [ 228.885478][T10446] lo speed is unknown, defaulting to 1000 [ 228.894198][T10446] wg1 speed is unknown, defaulting to 1000 [ 228.895928][T10461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.919964][T10466] vhci_hcd: connection closed [ 228.920188][ T2038] vhci_hcd: stop threads [ 228.929292][ T2038] vhci_hcd: release socket [ 228.933757][ T2038] vhci_hcd: disconnect device [ 228.959606][T10461] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 229.059096][T10461] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.111872][T10481] tipc: Enabling of bearer rejected, already enabled [ 229.123929][T10461] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.141284][T10480] loop2: detected capacity change from 0 to 1024 [ 229.155149][T10480] EXT4-fs: Ignoring removed orlov option [ 229.186326][T10480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.203168][T10461] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.263143][T10461] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.372082][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.404598][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.515404][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.535766][T10485] macvtap3: entered allmulticast mode [ 229.755276][T10479] pim6reg: entered allmulticast mode [ 229.776061][ T61] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.796753][T10486] pim6reg: left allmulticast mode [ 229.812578][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.960322][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.176727][T10511] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 230.183425][T10511] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 230.191717][T10511] vhci_hcd vhci_hcd.0: Device attached [ 230.205805][T10512] vhci_hcd: connection closed [ 230.206019][ T8021] vhci_hcd: stop threads [ 230.215082][ T8021] vhci_hcd: release socket [ 230.219508][ T8021] vhci_hcd: disconnect device [ 230.417042][T10524] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1987'. [ 230.708727][T10546] siw: device registration error -23 [ 230.723034][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1998'. [ 230.723594][T10545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1996'. [ 230.928572][T10565] x_tables: duplicate underflow at hook 2 [ 230.949070][T10565] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 230.975425][T10565] loop1: detected capacity change from 0 to 1024 [ 230.983738][T10565] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 230.994722][T10565] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 231.005670][T10565] JBD2: no valid journal superblock found [ 231.011630][T10565] EXT4-fs (loop1): Could not load journal inode [ 231.037305][T10561] lo speed is unknown, defaulting to 1000 [ 231.100321][T10565] lo speed is unknown, defaulting to 1000 [ 231.106628][T10561] lo speed is unknown, defaulting to 1000 [ 231.113971][T10561] wg1 speed is unknown, defaulting to 1000 [ 231.153162][T10565] lo speed is unknown, defaulting to 1000 [ 231.162097][T10565] wg1 speed is unknown, defaulting to 1000 [ 231.230438][T10578] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 231.236990][T10578] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 231.245264][T10578] vhci_hcd vhci_hcd.0: Device attached [ 231.265758][T10579] vhci_hcd: connection closed [ 231.265985][ T8020] vhci_hcd: stop threads [ 231.274976][ T8020] vhci_hcd: release socket [ 231.279456][ T8020] vhci_hcd: disconnect device [ 231.368378][T10588] loop1: detected capacity change from 0 to 512 [ 231.377256][T10588] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 231.406557][T10588] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 231.414932][T10588] EXT4-fs (loop1): failed to initialize system zone (-117) [ 231.433940][T10588] EXT4-fs (loop1): mount failed [ 231.688656][T10597] loop5: detected capacity change from 0 to 512 [ 231.701777][T10597] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 231.791370][T10599] loop0: detected capacity change from 0 to 2048 [ 231.827491][T10599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.862868][T10599] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.2015: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 231.881503][T10599] EXT4-fs (loop0): Remounting filesystem read-only [ 231.951325][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.973174][T10613] 9pnet_fd: Insufficient options for proto=fd [ 232.011889][T10616] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2022'. [ 232.089971][T10618] lo speed is unknown, defaulting to 1000 [ 232.132014][T10618] lo speed is unknown, defaulting to 1000 [ 232.138399][T10618] wg1 speed is unknown, defaulting to 1000 [ 232.246595][T10618] lo speed is unknown, defaulting to 1000 [ 232.268879][T10618] lo speed is unknown, defaulting to 1000 [ 232.283039][T10618] lo speed is unknown, defaulting to 1000 [ 232.292832][T10618] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 232.309215][T10618] lo speed is unknown, defaulting to 1000 [ 232.316853][T10618] lo speed is unknown, defaulting to 1000 [ 232.339454][T10618] lo speed is unknown, defaulting to 1000 [ 232.346013][T10618] lo speed is unknown, defaulting to 1000 [ 232.354137][T10618] lo speed is unknown, defaulting to 1000 [ 232.608767][T10629] lo speed is unknown, defaulting to 1000 [ 232.667938][T10629] lo speed is unknown, defaulting to 1000 [ 232.684094][T10629] wg1 speed is unknown, defaulting to 1000 [ 232.698161][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2026'. [ 232.707420][T10629] lo speed is unknown, defaulting to 1000 [ 232.774994][T10637] lo speed is unknown, defaulting to 1000 [ 232.825169][T10642] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 232.832149][T10642] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 232.840410][T10642] vhci_hcd vhci_hcd.0: Device attached [ 232.846879][T10637] lo speed is unknown, defaulting to 1000 [ 232.852900][T10646] vhci_hcd: connection closed [ 232.853091][ T61] vhci_hcd: stop threads [ 232.862348][ T61] vhci_hcd: release socket [ 232.866780][ T61] vhci_hcd: disconnect device [ 232.868608][T10649] loop5: detected capacity change from 0 to 164 [ 232.880344][T10637] wg1 speed is unknown, defaulting to 1000 [ 232.890147][T10637] lo speed is unknown, defaulting to 1000 [ 232.948017][T10653] loop5: detected capacity change from 0 to 512 [ 232.990706][T10653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.014150][T10658] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 233.023485][T10653] ext4 filesystem being mounted at /178/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.036283][T10658] netlink: 64 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 233.066852][T10658] loop3: detected capacity change from 0 to 512 [ 233.084730][T10653] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2033'. [ 233.108545][T10658] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.118546][T10658] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 233.143501][ T7693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.208152][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 233.208170][ T29] audit: type=1326 audit(1765084170.782:26546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.3.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 233.238833][ T29] audit: type=1326 audit(1765084170.802:26547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.3.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 233.239192][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2034'. [ 233.262496][ T29] audit: type=1326 audit(1765084170.812:26548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.3.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 233.262531][ T29] audit: type=1326 audit(1765084170.812:26549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.3.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 233.319995][ T29] audit: type=1326 audit(1765084170.812:26550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.3.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 233.344141][ T29] audit: type=1326 audit(1765084170.812:26551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.3.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 233.367941][ T29] audit: type=1326 audit(1765084170.812:26552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.3.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 233.391661][ T29] audit: type=1326 audit(1765084170.812:26553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.3.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 233.415309][ T29] audit: type=1326 audit(1765084170.812:26554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.3.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 233.466176][ T29] audit: type=1326 audit(1765084171.042:26555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10657 comm="syz.3.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff760bdf749 code=0x7ffc0000 [ 233.491231][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'. [ 233.595778][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'. [ 233.595799][T10674] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2040'. [ 233.595885][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'. [ 233.842037][T10681] macvtap2: entered allmulticast mode [ 234.072336][T10688] macvtap2: entered allmulticast mode [ 234.183991][T10694] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 234.184013][T10694] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 234.184047][T10694] vhci_hcd vhci_hcd.0: Device attached [ 234.194713][T10695] vhci_hcd: connection closed [ 234.195343][ T61] vhci_hcd: stop threads [ 234.195356][ T61] vhci_hcd: release socket [ 234.195366][ T61] vhci_hcd: disconnect device [ 234.485339][T10702] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2049'. [ 234.486156][T10702] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2049'. [ 234.716562][T10712] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 234.731831][T10712] loop0: detected capacity change from 0 to 512 [ 234.739429][T10712] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 234.749437][T10712] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 234.842893][T10690] loop5: detected capacity change from 0 to 8192 [ 234.884459][ T2038] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.905486][ T2038] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.931209][ T2038] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.942163][ T2038] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.955047][T10722] hugetlbfs: syz.3.2058 (10722): Using mlock ulimits for SHM_HUGETLB is obsolete [ 234.991158][T10726] loop5: detected capacity change from 0 to 512 [ 234.998258][T10726] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 235.008323][T10726] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 235.089654][T10729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.114671][T10729] bond1 (unregistering): Released all slaves [ 235.713383][T10742] EXT4-fs: Ignoring removed bh option [ 235.724705][T10742] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 235.733894][T10742] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 235.764167][T10742] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 235.774141][T10742] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 235.784742][T10742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.802223][T10742] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 235.818531][T10742] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.871513][T10753] tipc: Enabling of bearer rejected, already enabled [ 235.882612][T10742] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.932254][T10759] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 235.957666][T10742] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.967735][T10759] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 235.977808][T10759] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 235.987398][T10765] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 235.994042][T10765] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 236.002295][T10765] vhci_hcd vhci_hcd.0: Device attached [ 236.014233][T10766] vhci_hcd: connection closed [ 236.014427][ T52] vhci_hcd: stop threads [ 236.023514][ T52] vhci_hcd: release socket [ 236.027943][ T52] vhci_hcd: disconnect device [ 236.033747][T10742] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.089925][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.101562][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.112860][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.124377][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.146095][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.446165][T10783] siw: device registration error -23 [ 236.582134][T10793] set_capacity_and_notify: 2 callbacks suppressed [ 236.582154][T10793] loop2: detected capacity change from 0 to 512 [ 236.600796][T10793] EXT4-fs: Ignoring removed bh option [ 236.609739][T10793] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.618945][T10793] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 236.622338][T10796] loop0: detected capacity change from 0 to 512 [ 236.649125][T10793] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 236.659173][T10793] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 236.668451][T10793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.697467][T10796] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.711906][T10793] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 236.730621][T10793] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.743934][T10796] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2083: Allocating blocks 41-42 which overlap fs metadata [ 236.758608][T10796] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2083: Allocating blocks 41-42 which overlap fs metadata [ 236.773396][T10796] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2083: Failed to acquire dquot type 1 [ 236.787573][T10796] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 236.823945][T10802] tipc: Enabling of bearer rejected, already enabled [ 236.867838][T10804] lo speed is unknown, defaulting to 1000 [ 236.957899][T10804] lo speed is unknown, defaulting to 1000 [ 236.968487][T10804] wg1 speed is unknown, defaulting to 1000 [ 236.975079][T10804] lo speed is unknown, defaulting to 1000 [ 237.114561][T10796] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2083: corrupted inode contents [ 237.168158][T10793] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.193167][T10796] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2083: mark_inode_dirty error [ 237.314704][T10796] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2083: corrupted inode contents [ 237.327050][T10796] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2083: mark_inode_dirty error [ 237.339984][T10793] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.351385][T10796] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2083: corrupted inode contents [ 237.360608][T10810] loop5: detected capacity change from 0 to 4096 [ 237.370572][T10796] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 237.383687][T10810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.414916][T10793] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.473738][T10796] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2083: corrupted inode contents [ 237.538078][T10796] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2083: mark_inode_dirty error [ 237.557686][T10810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.576492][T10796] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 237.601885][T10796] EXT4-fs (loop0): 1 truncate cleaned up [ 237.627270][ T1921] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.648995][ T1921] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.666480][T10796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.682705][ T1921] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.705055][ T1921] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.705309][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.804370][T10830] __nla_validate_parse: 19 callbacks suppressed [ 237.804391][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 237.804412][T10830] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2094'. [ 237.804441][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 237.896904][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.930918][T10842] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.995003][T10842] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.061285][ T7693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.094335][T10842] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.123842][T10842] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.199480][T10878] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2104'. [ 238.495792][T10895] loop5: detected capacity change from 0 to 4096 [ 238.503841][T10895] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 238.503872][T10895] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 238.559402][ T4216] udevd[4216]: incorrect ext4 checksum on /dev/loop5 [ 238.692774][T10903] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 238.692805][T10903] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 238.692854][T10903] vhci_hcd vhci_hcd.0: Device attached [ 238.742631][T10906] lo speed is unknown, defaulting to 1000 [ 238.801739][T10906] lo speed is unknown, defaulting to 1000 [ 238.819408][T10906] wg1 speed is unknown, defaulting to 1000 [ 238.829485][T10906] lo speed is unknown, defaulting to 1000 [ 239.052970][ T3509] usb 4-1: SetAddress Request (15) to port 0 [ 239.063672][ T3509] usb 4-1: new SuperSpeed USB device number 15 using vhci_hcd [ 239.085413][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2118'. [ 239.129922][T10917] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2118'. [ 239.132042][T10919] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2119'. [ 239.139272][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2118'. [ 239.307730][T10905] vhci_hcd: connection reset by peer [ 239.321176][ T1921] vhci_hcd: stop threads [ 239.325478][ T1921] vhci_hcd: release socket [ 239.329929][ T1921] vhci_hcd: disconnect device [ 239.511240][ T29] kauditd_printk_skb: 1899 callbacks suppressed [ 239.511279][ T29] audit: type=1326 audit(1765084178.096:28451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.0.2122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7aab57f749 code=0x0 [ 240.072724][T10941] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 240.322434][ T29] audit: type=1400 audit(1765084178.906:28452): avc: denied { ioctl } for pid=10948 comm="syz.5.2131" path="socket:[32197]" dev="sockfs" ino=32197 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.557292][T10965] loop1: detected capacity change from 0 to 164 [ 240.568011][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2138'. [ 240.591395][T10963] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2137'. [ 240.613952][ T29] audit: type=1326 audit(1765084179.186:28453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.1.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 240.637771][ T29] audit: type=1326 audit(1765084179.186:28454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.1.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 240.661750][ T29] audit: type=1326 audit(1765084179.186:28455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.1.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 240.685406][ T29] audit: type=1326 audit(1765084179.186:28456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.1.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 240.685485][ T29] audit: type=1326 audit(1765084179.186:28457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.1.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 240.685513][ T29] audit: type=1326 audit(1765084179.186:28458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.1.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 240.685569][ T29] audit: type=1326 audit(1765084179.186:28459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.1.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 240.780273][ T29] audit: type=1326 audit(1765084179.186:28460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.1.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2e0de2f749 code=0x7ffc0000 [ 240.807701][T10973] siw: device registration error -23 [ 241.201098][T10984] loop5: detected capacity change from 0 to 512 [ 241.227670][T10984] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 241.236400][T10984] EXT4-fs (loop5): orphan cleanup on readonly fs [ 241.248695][T10984] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 241.261547][T10984] EXT4-fs (loop5): Remounting filesystem read-only [ 241.268640][T10984] EXT4-fs (loop5): 1 truncate cleaned up [ 241.275746][ T61] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 241.286345][ T61] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 241.382858][ T61] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 241.467265][T10984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.481450][T10984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.718224][T10982] lo speed is unknown, defaulting to 1000 [ 241.784761][T10982] lo speed is unknown, defaulting to 1000 [ 241.791027][T10982] wg1 speed is unknown, defaulting to 1000 [ 241.797086][T10982] lo speed is unknown, defaulting to 1000 [ 241.828182][ T61] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.891060][ T61] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.899365][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.908000][T10983] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 241.914546][T10983] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 241.923026][T10983] vhci_hcd vhci_hcd.0: Device attached [ 241.987320][T10993] vhci_hcd: connection closed [ 241.987510][ T8020] vhci_hcd: stop threads [ 241.996658][ T8020] vhci_hcd: release socket [ 242.001193][ T8020] vhci_hcd: disconnect device [ 242.007954][ T61] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.469034][T11011] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 242.499616][T11011] loop5: detected capacity change from 0 to 512 [ 242.506880][T11011] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 242.516846][T11011] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 242.861845][T11030] loop0: detected capacity change from 0 to 4096 [ 242.878144][T11030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.919575][T11030] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.409624][T11066] __nla_validate_parse: 7 callbacks suppressed [ 243.409642][T11066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2161'. [ 243.560603][T11074] lo speed is unknown, defaulting to 1000 [ 243.615092][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.632995][T11074] lo speed is unknown, defaulting to 1000 [ 243.633381][T11074] wg1 speed is unknown, defaulting to 1000 [ 243.633707][T11074] lo speed is unknown, defaulting to 1000 [ 243.855012][T11099] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 243.855043][T11099] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 243.855079][T11099] vhci_hcd vhci_hcd.0: Device attached [ 243.863901][T11100] vhci_hcd: connection closed [ 243.864554][ T8021] vhci_hcd: stop threads [ 243.864567][ T8021] vhci_hcd: release socket [ 243.864577][ T8021] vhci_hcd: disconnect device [ 243.879322][T11103] ================================================================== [ 243.879356][T11103] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 243.879394][T11103] [ 243.879402][T11103] write to 0xffff88810d483648 of 8 bytes by task 11079 on cpu 1: [ 243.879421][T11103] release_task+0x6f9/0xb70 [ 243.879446][T11103] wait_consider_task+0x114a/0x1660 [ 243.879475][T11103] __do_wait+0xfa/0x510 [ 243.879501][T11103] do_wait+0xb7/0x250 [ 243.879526][T11103] kernel_wait4+0x16b/0x1e0 [ 243.879553][T11103] __x64_sys_wait4+0x91/0x120 [ 243.879579][T11103] x64_sys_call+0x28ec/0x3000 [ 243.879606][T11103] do_syscall_64+0xd8/0x2a0 [ 243.879636][T11103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.879660][T11103] [ 243.879667][T11103] read to 0xffff88810d483180 of 3264 bytes by task 11103 on cpu 0: [ 243.879685][T11103] memcpy_and_pad+0x48/0x80 [ 243.879718][T11103] arch_dup_task_struct+0x2c/0x40 [ 243.879747][T11103] dup_task_struct+0x6e/0x8e0 [ 243.879768][T11103] copy_process+0x37d/0x1ef0 [ 243.879789][T11103] kernel_clone+0x16c/0x5c0 [ 243.879811][T11103] __se_sys_clone3+0x1c2/0x200 [ 243.879835][T11103] __x64_sys_clone3+0x31/0x40 [ 243.879858][T11103] x64_sys_call+0x2c0f/0x3000 [ 243.879881][T11103] do_syscall_64+0xd8/0x2a0 [ 243.879906][T11103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.879928][T11103] [ 243.879932][T11103] Reported by Kernel Concurrency Sanitizer on: [ 243.879945][T11103] CPU: 0 UID: 0 PID: 11103 Comm: syz.0.2167 Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.879969][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.879980][T11103] ================================================================== [ 243.948125][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 243.948153][T11109] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2168'. [ 243.948170][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 243.997445][T11117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2170'. [ 244.040440][T11123] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 244.081840][T11123] netlink: 64 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 244.084842][T11123] loop0: detected capacity change from 0 to 512 [ 244.085654][T11123] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 244.085730][T11123] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 244.139526][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2171'. [ 244.140062][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2171'. [ 244.150942][ T3509] usb 4-1: device descriptor read/8, error -110 [ 244.260981][ T3509] usb 4-1: new SuperSpeed USB device number 15 using vhci_hcd [ 244.280921][ T3509] usb 4-1: enqueue for inactive port 0 [ 244.280981][ T3509] usb 4-1: enqueue for inactive port 0 [ 244.281062][ T3509] usb 4-1: enqueue for inactive port 0 [ 244.521060][ T29] kauditd_printk_skb: 916 callbacks suppressed [ 244.521080][ T29] audit: type=1326 audit(1765084183.106:29371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7aab5b2005 code=0x7ffc0000 [ 244.522259][ T29] audit: type=1326 audit(1765084183.106:29372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7aab5b2005 code=0x7ffc0000 [ 244.523406][ T29] audit: type=1326 audit(1765084183.106:29373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7aab5b2005 code=0x7ffc0000 [ 244.524468][ T29] audit: type=1326 audit(1765084183.106:29374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7aab5b2005 code=0x7ffc0000 [ 244.534758][ T29] audit: type=1326 audit(1765084183.106:29375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7aab5b2005 code=0x7ffc0000 [ 244.534783][ T29] audit: type=1326 audit(1765084183.106:29376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7aab5b2005 code=0x7ffc0000 [ 244.534804][ T29] audit: type=1326 audit(1765084183.106:29377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7aab5b2005 code=0x7ffc0000 [ 244.534893][ T29] audit: type=1326 audit(1765084183.106:29378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7aab5b2005 code=0x7ffc0000 [ 244.534921][ T29] audit: type=1326 audit(1765084183.106:29379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7aab5b2005 code=0x7ffc0000 [ 244.534949][ T29] audit: type=1326 audit(1765084183.116:29380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11122 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7aab5b2005 code=0x7ffc0000 [ 245.321436][ T3509] usb usb4-port1: attempt power cycle [ 247.141357][ T3509] usb usb4-port1: unable to enumerate USB device