last executing test programs: 4.73681952s ago: executing program 0 (id=2517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='workqueue_queue_work\x00', r2, 0x0, 0x8004}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket(0x15, 0x2, 0x22) io_setup(0x8, &(0x7f0000004200)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c6, 0x0, 0x0, 'queue1\x00', 0x200000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.469804639s ago: executing program 0 (id=2525): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = syz_io_uring_setup(0x433e, &(0x7f0000000280)={0x0, 0x4618, 0x10, 0x3, 0x84}, &(0x7f0000000040), &(0x7f0000000200)) io_uring_setup(0x786b, &(0x7f0000001340)={0x0, 0x6d75, 0x1, 0x1, 0x12f, 0x0, r3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) uname(&(0x7f0000000340)=""/4096) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="0203000313000000affeeb54fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013000200000029bd700006350000"], 0x98}, 0x1, 0x7}, 0x0) socket$kcm(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x8881) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x20000}, 0x18) syz_open_pts(r1, 0x4080) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 3.346328339s ago: executing program 3 (id=2526): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 3.100273098s ago: executing program 3 (id=2527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) tkill(0x0, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000a40)=[{r3, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000200), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92954b43", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r5, 0x0, 0x1034}, 0x18) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff17b0ba9dc72ca7"], 0x0) dup3(r6, r0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/13], 0x50) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000) 3.030860753s ago: executing program 0 (id=2528): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000700)='signal_deliver\x00', r0, 0x0, 0x7}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.926110051s ago: executing program 0 (id=2531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) 2.804499051s ago: executing program 4 (id=2534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='workqueue_queue_work\x00', r2, 0x0, 0x8004}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket(0x15, 0x2, 0x22) io_setup(0x8, &(0x7f0000004200)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c6, 0x0, 0x0, 'queue1\x00', 0x200000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.013622083s ago: executing program 3 (id=2537): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) read(r1, 0x0, 0x20) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x81, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mmc_request_done\x00'}, 0x18) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x92, @remote, 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000580)="1606bc7b5248e6d17725b0f5306a43c62bd29fb01319637cdd27296a0b75463a9158f3dead3ac0600962018d0c9f5e7b99cf43bfba95afb351b07ce28cc12d213d7b7ee91d62653fa17367b791e596f930e0216a7417cb8f74a6fb3411133ded9403da1ddd211767e0808b7c817ca0b90b40f1cea4fa70fcb8a610b154f5d67de48c28650bb929f3acaa4996ebfa7f3d7c12bae3cf3eb3cd3435071409da233be8a0835db46ef937a25a3c8331f7ebd5c3900aa71ed02b85651fa55eb336f7a32b4338e6f221e0700b6f03a861c15b7cf6f9822b002bdab94014a0ba4b89bd98dc62728b25be453a93387f1f4636101e20df79923443", 0xf6}, {&(0x7f00000007c0)="8df197db242e6ce99bcff72b1ae82ac555b5007d03d749ad8e5f78c9be0acabb18fc4563fb7ef548284888fb37accfaa478df49b8fc1e89789d7111ba0182fdeec4626e8cc957421402fe495fd7abea21c1c2ba27827929ce200310369a723d5148ea61a2309af6808baa2dd3751c2f69d685171931c2693932094d4c3e92c96f76a00be3bed111559d15f75561a56c9dad5c0966b748b38ffc8399f310eaa58683851b8a9f84b407623ff3c4b", 0xad}, {&(0x7f0000000940)="4d83e5875afdc6e1e66dfa9ca37ba9ad37de4b0adf13b77cf7371280b1dd4edb24e1c8e560ff9672954a62c507f6c9ad3c4d428268bd364c29037f55e0da5eca95dc82f9002ecf7ab8cdcabf7e03622634255887031ec40be4ad7e993de9245f4b864dd09f7f0a03be7cd498c54b91618051132259d52f03c022453662f2f4290f051c9a35ea9adb84f67b702f52bada26f8435cf57b696c1eb390d14a5a5aa4758c35fda0cc7ab056e1fd3d640d40e69618a432b56e3d99585d5279ea3b1e48860abe105eea358108b9cdbc41b42ee91f07", 0xd2}, {&(0x7f0000000a40)="ceae7e8772cdce9523f38f9885779f1cb786e158188bf524096b0646bc6181c48cb206b6e8e59b0470af1dc01fc9374fa3292c61e0971608da3f32ce8294f8c44891cabb034a1cb40b5c2938b35fc7aa981ef76ec6db0cf1ad95f4ebd636bebcdde4239bfb551beefba373f6d3383d01a53948070dd2be09ae0f94d2aae55d1c3b1670fe168138b9b5a6bd62b7565073d8e254158ccc4ec5c34e4305a93a83c843aa4d3ba46ff5793657006529b3d57ed5cb2886ec2270", 0xb7}, {&(0x7f0000000340)="08cac951a558cec7fd4d0f1c3ab669e5f35a463f796d149c48e5b1e8d36d0608e7950d675a2b0db6157f4e0c17268fd3959c", 0x32}, {&(0x7f0000000b00)="0aff1bccf8d0271184b5f63645cc6eba8f53335ec991b40569105f767614a20488a0653756988d6de7c402dfd5be6e443490d8c6113dae8970e2ac8823715edaa856299406e8ec4f422846c4ab6639ed40fe0b32e603bdce68cad0dd9b20f32815eadc25ea50d80e05e0a1549438729bb5bbad78c8cd3b3227487770c9ab6ca2324716e3ebd49a862999540bac488ce2364de5af6c064a1e8a95805c17b8313f5ae31dfdddf8b324", 0xa8}], 0x6, &(0x7f0000000bc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x21, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0xe}, @pad1, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x7}]}}}, @dstopts_2292={{0x180, 0x29, 0x4, {0x8, 0x2c, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0xda, "940a946ccae01372ff8061783ee20d4448892863c233ed8a6898bdc94ebb04dc46afb9a1614698a8a8de078e689497e85b26ed9fbab5e378541ef0432ddfcbe11f2678fd836c59464d06ed4dc0e6a4016c5a494954806c59bab5e7cf6c9a9e8f48fc6261562c52d0d07b14b9ced4f6aa79ae93ab17769bfc93181ddc274d9c71cbeb7c5ec34aa0aff2456c35702fd98cbbe65e517acc25db8be05729ed57e152f4cf7265c9c6514b97c0f3e3a197805bde1bfce972dd87d395330767ddf73f9ddf2d2d2ac80a197170e1501a18eb5e0ce92f13e26afa4bb1ead5"}, @ra={0x5, 0x2, 0xfffe}, @generic={0xf, 0x5f, "74dc0a817b96a775018a1140b95793b8e49df15031a9b9eff99290480ca67d9bbf47e3e739aae0c3305354b2d6bcc0525a26c0c76c45458dfcb11a2d3ea980c27ccc0e8ad6ce4dcbf9aad9b34b2904f066a06667718f036ddad9a6e284ec67"}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x1}]}}}], 0x208}, 0x40000) finit_module(r3, 0x0, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200000a050001000700000085ce194affa9e5b99d3e1d240446cb70ed872615efc0e0df0095ffb856e7f45d6a162086efeffea4a248f460fe259bab6c3bc139d9a27f1e11b7e9063a0afe1f3061ac6d28addb70553ef6138cae8021be9c05eaee23ff4c4fbbcf4142896f225d20cb47465acee5789d987145527df286971d46910715736ce95702108f334e42725f04e9fd7ea87cf4b415d227a4a192318f602aa9437f717283443138a05c9f882c8cd84458d89f96caea"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 1.816630558s ago: executing program 1 (id=2539): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.783963131s ago: executing program 1 (id=2540): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0], 0x1, 0x343, &(0x7f0000000bc0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.601357535s ago: executing program 1 (id=2542): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(r0, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) readv(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0xfff3}, {}, {0xa, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x8e, 0x1}, {0x5, 0xc0}}}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xf}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r6, &(0x7f0000000640)=[{&(0x7f0000000300)="3b997cb14adc5bc5894a75", 0xb}], 0x1) 1.505763302s ago: executing program 3 (id=2543): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) read(r1, 0x0, 0x20) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x81}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r2, 0x0, 0x7) 1.477761335s ago: executing program 2 (id=2544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x8528c000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100203, 0x20, 0xfffffffb, 0x0, 0x0, 0xec, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000002c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.460771926s ago: executing program 1 (id=2545): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000400)={0x2, 0xffffffffffff3fa3, 0x7, 0x0, 0x2, 0x0, [{0x0, 0x1, 0x8596, '\x00', 0x902}, {0x3, 0x5, 0x6, '\x00', 0xc00}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000740)={{0x7, 0x7}, 'port1\x00', 0x104, 0x1400, 0x7, 0x9, 0x1ff, 0x5, 0x1, 0x0, 0x4, 0x1c}) r5 = dup(r4) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x100000000000007, 0x8, 0x3}, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000006c0)={0x0, 0x8, 0x20}, 0xc) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x0) getdents64(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES64=r6, @ANYRESHEX=r1, @ANYRES64=r2], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = syz_io_uring_setup(0x7272, &(0x7f0000000b80)={0x0, 0x86e4, 0x2, 0x8, 0x1d9}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000cdee2cca841000cc51080b6dcc0dc5cbde0bf337000000000000000000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x10c000) 1.339375116s ago: executing program 4 (id=2546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000019180)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3e9}}, &(0x7f0000019140)='GPL\x00', 0x3, 0x0, 0x0, 0x549238f2346d9e55, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 1.263616482s ago: executing program 2 (id=2547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) tkill(0x0, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000a40)=[{r3, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000200), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92954b43", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r5, 0x0, 0x1034}, 0x18) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff17b0ba9dc72ca7"], 0x0) dup3(r6, r0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/13], 0x50) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000) 790.222208ms ago: executing program 4 (id=2548): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 749.952862ms ago: executing program 4 (id=2549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 724.896454ms ago: executing program 4 (id=2550): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0], 0x1, 0x343, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 582.079265ms ago: executing program 3 (id=2551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x115}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) readlink(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x94) 537.401718ms ago: executing program 1 (id=2552): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 443.579935ms ago: executing program 3 (id=2553): socket$kcm(0x10, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x145402, 0x1c3) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1, 0x1}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r7, r6, 0x0, 0xfffa83) 344.558223ms ago: executing program 1 (id=2554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) 314.493326ms ago: executing program 0 (id=2555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x115}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r8 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r8, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) readlink(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001740), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x94) 287.494478ms ago: executing program 2 (id=2556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 221.365443ms ago: executing program 2 (id=2557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x8528c000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x41, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100203, 0x20, 0xfffffffb, 0x0, 0x0, 0xec, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000002c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 158.943868ms ago: executing program 0 (id=2558): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x1, &(0x7f00006c6000/0x3000)=nil, &(0x7f00005e4000/0x3000)=nil, 0xffffdfffff800001, 0x0, 0x0, 0x10001, 0x0, 0x6c, 0x37, 0x24}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="14000000000000000000000002000000fcffffff000000001100000000000000000000000100000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbac1414bb0000000014000000000000000000000107000000440473d100000000"], 0x68}}], 0x1, 0x10048044) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xfd44) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) bind$qrtr(r7, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) 104.866472ms ago: executing program 2 (id=2559): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000340)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchmodat(r2, &(0x7f0000000000)='.\x00', 0xe0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7ff) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xbb010f8ef9d7393e) socket$xdp(0x2c, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xdb}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756575650000001c0002800600024000060000060001400003000006000340240000000900010073797a30000000000900020073797a32"], 0x84}}, 0x40) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = socket(0x27, 0x80000, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {}, {0xe, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) 38.713187ms ago: executing program 2 (id=2560): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 0s ago: executing program 4 (id=2561): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="08000000fe"], 0x755c00) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) write(r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r7}, 0x10) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$tipc(r8, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000200)=ANY=[@ANYBLOB='c 756'], 0x9e) socket$inet6_sctp(0xa, 0x5, 0x84) kernel console output (not intermixed with test programs): 1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55940df749 code=0x7ffc0000 [ 145.681108][ T29] audit: type=1326 audit(1765622067.933:11093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55940df749 code=0x7ffc0000 [ 145.681143][ T29] audit: type=1326 audit(1765622067.933:11094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.1.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55940df749 code=0x7ffc0000 [ 145.688214][ T8936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.701566][ T8936] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 145.726405][ T8936] EXT4-fs (loop3): Remounting filesystem read-only [ 145.726455][ T8936] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 145.928805][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.951241][ T8947] rdma_rxe: rxe_newlink: failed to add lo [ 146.261966][ T8958] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 146.278654][ T8958] SELinux: failed to load policy [ 146.622311][ T10] hid-generic 0000:0000:0000.0027: hidraw0: HID v8.00 Device [syz0] on syz0 [ 146.939956][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1784'. [ 147.140957][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 147.157415][ T1016] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.189017][ T8973] team0 (unregistering): Port device team_slave_0 removed [ 147.213945][ T8973] team0 (unregistering): Port device team_slave_1 removed [ 147.224196][ T8978] loop3: detected capacity change from 0 to 128 [ 147.282397][ T8980] loop4: detected capacity change from 0 to 1024 [ 147.305228][ T8980] EXT4-fs: Ignoring removed bh option [ 147.382529][ T8980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.420189][ T8980] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 147.478077][ T8980] EXT4-fs (loop4): Remounting filesystem read-only [ 147.515294][ T8992] loop0: detected capacity change from 0 to 2048 [ 147.523767][ T8980] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 147.575797][ T8997] loop3: detected capacity change from 0 to 164 [ 147.589408][ T8997] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.600122][ T8997] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.609953][ T5387] loop0: p1 < > p4 [ 147.626236][ T5387] loop0: p4 size 8388608 extends beyond EOD, truncated [ 147.634802][ T8997] Symlink component flag not implemented [ 147.635225][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.640515][ T8997] Symlink component flag not implemented [ 147.660119][ T8992] loop0: p1 < > p4 [ 147.664735][ T8992] loop0: p4 size 8388608 extends beyond EOD, truncated [ 147.688125][ T3008] loop0: p1 < > p4 [ 147.700476][ T3008] loop0: p4 size 8388608 extends beyond EOD, truncated [ 147.730810][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 147.809770][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 147.823827][ T9002] loop3: detected capacity change from 0 to 512 [ 147.850897][ T9002] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1793: bg 0: block 248: padding at end of block bitmap is not set [ 147.881297][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 147.923105][ T9002] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1793: Failed to acquire dquot type 1 [ 147.935156][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 148.011129][ T9002] EXT4-fs (loop3): 1 truncate cleaned up [ 148.150767][ T9002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.196749][ T9002] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.250339][ T9002] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 148.602754][ T9013] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1795'. [ 148.642369][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.703997][ T9017] rdma_rxe: rxe_newlink: failed to add lo [ 148.711032][ T9015] loop0: detected capacity change from 0 to 4096 [ 148.730407][ T9015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.746689][ T9015] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1797: corrupted inode contents [ 148.759496][ T9015] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.1797: mark_inode_dirty error [ 148.771278][ T9015] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1797: corrupted inode contents [ 148.814934][ T9015] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.1797: mark_inode_dirty error [ 148.833451][ T9017] loop3: detected capacity change from 0 to 8192 [ 148.843960][ T9015] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1797: corrupted inode contents [ 148.859095][ T9015] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.1797: mark_inode_dirty error [ 148.883857][ T8987] syz.1.1789 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 148.897424][ T8987] CPU: 0 UID: 0 PID: 8987 Comm: syz.1.1789 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.897460][ T8987] Tainted: [W]=WARN [ 148.897467][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.897482][ T8987] Call Trace: [ 148.897560][ T8987] [ 148.897572][ T8987] __dump_stack+0x1d/0x30 [ 148.897604][ T8987] dump_stack_lvl+0xe8/0x140 [ 148.897685][ T8987] dump_stack+0x15/0x1b [ 148.897741][ T8987] dump_header+0x81/0x240 [ 148.897767][ T8987] oom_kill_process+0x295/0x350 [ 148.897875][ T8987] out_of_memory+0x97b/0xb80 [ 148.897930][ T8987] try_charge_memcg+0x610/0xa10 [ 148.898040][ T8987] charge_memcg+0x51/0xc0 [ 148.898082][ T8987] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 148.898126][ T8987] __read_swap_cache_async+0x17b/0x2d0 [ 148.898168][ T8987] swap_cluster_readahead+0x262/0x3c0 [ 148.898300][ T8987] swapin_readahead+0xde/0x820 [ 148.898390][ T8987] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 148.898423][ T8987] ? __rcu_read_unlock+0x34/0x70 [ 148.898446][ T8987] ? __rcu_read_unlock+0x4f/0x70 [ 148.898468][ T8987] ? swap_cache_get_folio+0x277/0x280 [ 148.898501][ T8987] do_swap_page+0x2b4/0x21e0 [ 148.898539][ T8987] ? css_rstat_updated+0xb7/0x240 [ 148.898643][ T8987] ? __pfx_default_wake_function+0x10/0x10 [ 148.898690][ T8987] handle_mm_fault+0x9d8/0x2c60 [ 148.898733][ T8987] ? _raw_spin_lock+0x52/0xa0 [ 148.898760][ T8987] ? __pte_offset_map_lock+0x1d9/0x240 [ 148.898861][ T8987] __get_user_pages+0x1024/0x1ed0 [ 148.898904][ T8987] __mm_populate+0x243/0x3a0 [ 148.898943][ T8987] do_mlock+0x471/0x520 [ 148.899001][ T8987] ? xfd_validate_state+0x45/0xf0 [ 148.899063][ T8987] ? restore_fpregs_from_fpstate+0x61/0x120 [ 148.899092][ T8987] __x64_sys_mlock+0x36/0x50 [ 148.899118][ T8987] x64_sys_call+0x1794/0x3000 [ 148.899162][ T8987] do_syscall_64+0xd8/0x2a0 [ 148.899216][ T8987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.899262][ T8987] RIP: 0033:0x7f55940df749 [ 148.899284][ T8987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.899380][ T8987] RSP: 002b:00007f5592b26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 148.899407][ T8987] RAX: ffffffffffffffda RBX: 00007f5594336090 RCX: 00007f55940df749 [ 148.899421][ T8987] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 148.899435][ T8987] RBP: 00007f5594163f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.899448][ T8987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.899502][ T8987] R13: 00007f5594336128 R14: 00007f5594336090 R15: 00007ffcf86a4668 [ 148.899575][ T8987] [ 148.930343][ T9015] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.1797: corrupted inode contents [ 148.933813][ T8987] memory: usage 307196kB, limit 307200kB, failcnt 2396 [ 148.971070][ T9015] EXT4-fs error (device loop0): ext4_truncate:4635: inode #15: comm syz.0.1797: mark_inode_dirty error [ 148.974031][ T8987] memory+swap: usage 326380kB, limit 9007199254740988kB, failcnt 0 [ 148.974057][ T8987] kmem: usage 290692kB, limit 9007199254740988kB, failcnt 0 [ 148.985285][ T9015] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem [ 148.990001][ T8987] Memory cgroup stats for [ 149.075228][ T3321] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 149.078300][ T8987] /syz1: [ 149.083136][ T8987] cache 6615040 [ 149.083989][ T3321] FAT-fs (loop3): Filesystem has been set read-only [ 149.089835][ T8987] rss 10051584 [ 149.089847][ T8987] shmem 6606848 [ 149.089867][ T8987] mapped_file 0 [ 149.089876][ T8987] dirty 0 [ 149.089884][ T8987] writeback 0 [ 149.089893][ T8987] workingset_refault_anon 3095 [ 149.089904][ T8987] workingset_refault_file 950 [ 149.089938][ T8987] swap 19656704 [ 149.089948][ T8987] swapcached 212992 [ 149.089957][ T8987] pgpgin 227930 [ 149.089968][ T8987] pgpgout 223807 [ 149.265324][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.271232][ T8987] pgfault 230140 [ 149.271246][ T8987] pgmajfault 597 [ 149.271254][ T8987] inactive_anon 11689984 [ 149.271313][ T8987] active_anon 3072000 [ 149.271321][ T8987] inactive_file 16384 [ 149.271353][ T8987] active_file 0 [ 149.271400][ T8987] unevictable 1953792 [ 149.271410][ T8987] hierarchical_memory_limit 314572800 [ 149.271422][ T8987] hierarchical_memsw_limit 9223372036854771712 [ 149.271441][ T8987] total_cache 6615040 [ 149.271450][ T8987] total_rss 10051584 [ 149.271459][ T8987] total_shmem 6606848 [ 149.271518][ T8987] total_mapped_file 0 [ 149.271525][ T8987] total_dirty 0 [ 149.271533][ T8987] total_writeback 0 [ 149.271540][ T8987] total_workingset_refault_anon 3095 [ 149.271549][ T8987] total_workingset_refault_file 950 [ 149.271560][ T8987] total_swap 19656704 [ 149.271569][ T8987] total_swapcached 212992 [ 149.271578][ T8987] total_pgpgin 227930 [ 149.352237][ T3518] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.353767][ T8987] total_pgpgout 223807 [ 149.419622][ T8987] total_pgfault 230140 [ 149.423857][ T8987] total_pgmajfault 597 [ 149.427952][ T8987] total_inactive_anon 11689984 [ 149.432840][ T8987] total_active_anon 3072000 [ 149.437492][ T8987] total_inactive_file 16384 [ 149.442097][ T8987] total_active_file 0 [ 149.446404][ T8987] total_unevictable 1953792 [ 149.451019][ T8987] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1789,pid=8982,uid=0 [ 149.466433][ T8987] Memory cgroup out of memory: Killed process 8982 (syz.1.1789) total-vm:100388kB, anon-rss:10988kB, file-rss:26404kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 149.507703][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 149.554953][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 149.703408][ T9023] loop2: detected capacity change from 0 to 164 [ 149.732933][ T9027] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 149.750275][ T9023] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 149.761218][ T9023] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 149.772860][ T9027] SELinux: failed to load policy [ 149.777730][ T9023] Symlink component flag not implemented [ 149.785531][ T9023] Symlink component flag not implemented [ 149.911712][ T9037] loop2: detected capacity change from 0 to 256 [ 149.969479][ T9037] FAT-fs (loop2): Directory bread(block 64) failed [ 149.986045][ T9037] FAT-fs (loop2): Directory bread(block 65) failed [ 149.988765][ T9040] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1802'. [ 150.003403][ T9037] FAT-fs (loop2): Directory bread(block 66) failed [ 150.025143][ T9037] FAT-fs (loop2): Directory bread(block 67) failed [ 150.043054][ T9037] FAT-fs (loop2): Directory bread(block 68) failed [ 150.050036][ T9037] FAT-fs (loop2): Directory bread(block 69) failed [ 150.058441][ T9038] lo speed is unknown, defaulting to 1000 [ 150.089156][ T9037] FAT-fs (loop2): Directory bread(block 70) failed [ 150.206922][ T9038] lo speed is unknown, defaulting to 1000 [ 150.235155][ T9037] FAT-fs (loop2): Directory bread(block 71) failed [ 150.244388][ T9037] FAT-fs (loop2): Directory bread(block 72) failed [ 150.265212][ T9037] FAT-fs (loop2): Directory bread(block 73) failed [ 150.465044][ T9037] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 150.474200][ T9037] FAT-fs (loop2): Filesystem has been set read-only [ 150.481656][ T9037] bio_check_eod: 100 callbacks suppressed [ 150.481672][ T9037] syz.2.1805: attempt to access beyond end of device [ 150.481672][ T9037] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 150.519797][ T9037] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 150.556062][ T9037] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 150.576247][ T9037] syz.2.1805: attempt to access beyond end of device [ 150.576247][ T9037] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 150.714806][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 150.850414][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 150.885682][ T9052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.909405][ T9059] netlink: 'syz.4.1811': attribute type 4 has an invalid length. [ 150.931630][ T9052] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1809: corrupted inode contents [ 150.993507][ T9052] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.1809: mark_inode_dirty error [ 151.024595][ T9065] set_capacity_and_notify: 1 callbacks suppressed [ 151.024641][ T9065] loop0: detected capacity change from 0 to 1024 [ 151.063529][ T9052] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1809: corrupted inode contents [ 151.092042][ T9052] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.1809: mark_inode_dirty error [ 151.109816][ T9065] EXT4-fs: Ignoring removed bh option [ 151.135638][ T9052] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1809: corrupted inode contents [ 151.195881][ T9052] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.1809: mark_inode_dirty error [ 151.209403][ T9065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.244007][ T9052] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1809: corrupted inode contents [ 151.264717][ T9052] EXT4-fs error (device loop2): ext4_truncate:4635: inode #15: comm syz.2.1809: mark_inode_dirty error [ 151.266315][ T9065] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 151.276495][ T9052] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem [ 151.301964][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 151.301981][ T29] audit: type=1326 audit(1765622073.199:11376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbb31f749 code=0x7ffc0000 [ 151.357771][ T9065] EXT4-fs (loop0): Remounting filesystem read-only [ 151.364672][ T9065] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 151.388906][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.411464][ T29] audit: type=1326 audit(1765622073.236:11377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbb31f749 code=0x7ffc0000 [ 151.461409][ T9050] atomic_op ffff88812c9a3928 conn xmit_atomic 0000000000000000 [ 151.547555][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.602110][ T9072] lo speed is unknown, defaulting to 1000 [ 151.631591][ T3412] hid_parser_main: 80 callbacks suppressed [ 151.631614][ T3412] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 151.645629][ T3412] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 151.653485][ T3412] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 151.676267][ T29] audit: type=1326 audit(1765622073.545:11378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9073 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca8a4f749 code=0x7ffc0000 [ 151.721220][ T3412] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 151.728778][ T3412] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 151.736417][ T3412] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 151.744216][ T3412] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 151.751891][ T3412] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 151.761662][ T3412] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 151.769814][ T3412] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 151.785283][ T29] audit: type=1326 audit(1765622073.573:11379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9073 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbca8a4f749 code=0x7ffc0000 [ 151.808925][ T29] audit: type=1326 audit(1765622073.573:11380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9073 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca8a4f749 code=0x7ffc0000 [ 151.830444][ T9072] lo speed is unknown, defaulting to 1000 [ 151.833906][ T29] audit: type=1326 audit(1765622073.573:11381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9073 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca8a4f749 code=0x7ffc0000 [ 151.867728][ T29] audit: type=1326 audit(1765622073.573:11382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9073 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbca8a4f749 code=0x7ffc0000 [ 151.892259][ T29] audit: type=1326 audit(1765622073.573:11383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9073 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca8a4f749 code=0x7ffc0000 [ 151.916402][ T29] audit: type=1326 audit(1765622073.573:11384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9073 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca8a4f749 code=0x7ffc0000 [ 151.944982][ T29] audit: type=1326 audit(1765622073.573:11385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9073 comm="syz.0.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbca8a4f749 code=0x7ffc0000 [ 151.978587][ T3412] hid-generic 0000:0000:0000.0028: hidraw0: HID v8.00 Device [syz0] on syz0 [ 152.095394][ T9077] fido_id[9077]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.159021][ T9072] loop2: detected capacity change from 0 to 1024 [ 152.166532][ T9072] EXT4-fs: Ignoring removed orlov option [ 152.206946][ T9072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.260839][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.466271][ T9092] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 152.476238][ T9092] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 152.689719][ T9098] rdma_rxe: rxe_newlink: failed to add lo [ 152.794245][ T9098] loop2: detected capacity change from 0 to 8192 [ 152.839273][ T3316] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 152.848161][ T3316] FAT-fs (loop2): Filesystem has been set read-only [ 153.009812][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'. [ 153.329143][ T9124] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1829'. [ 153.347271][ T9123] lo speed is unknown, defaulting to 1000 [ 153.383970][ T9125] loop2: detected capacity change from 0 to 1024 [ 153.393136][ T9125] EXT4-fs: Ignoring removed orlov option [ 153.416989][ T9125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.471274][ T9123] lo speed is unknown, defaulting to 1000 [ 153.652141][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.235569][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1836'. [ 154.416767][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 154.430060][ T9149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1838'. [ 154.531532][ T9159] netlink: 'syz.1.1842': attribute type 21 has an invalid length. [ 154.540741][ T9159] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1842'. [ 154.619689][ T9161] loop2: detected capacity change from 0 to 164 [ 154.651268][ T9161] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.684964][ T9161] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.710584][ T9161] Symlink component flag not implemented [ 154.717741][ T9161] Symlink component flag not implemented [ 154.782020][ T9173] loop2: detected capacity change from 0 to 256 [ 154.818092][ T9173] FAT-fs (loop2): Directory bread(block 64) failed [ 154.828381][ T9174] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1847'. [ 154.834261][ T9173] FAT-fs (loop2): Directory bread(block 65) failed [ 154.847881][ T9173] FAT-fs (loop2): Directory bread(block 66) failed [ 154.855039][ T9173] FAT-fs (loop2): Directory bread(block 67) failed [ 154.862148][ T9173] FAT-fs (loop2): Directory bread(block 68) failed [ 154.869367][ T9173] FAT-fs (loop2): Directory bread(block 69) failed [ 154.878809][ T9173] FAT-fs (loop2): Directory bread(block 70) failed [ 154.894133][ T9173] FAT-fs (loop2): Directory bread(block 71) failed [ 154.901067][ T9173] FAT-fs (loop2): Directory bread(block 72) failed [ 154.909798][ T9173] FAT-fs (loop2): Directory bread(block 73) failed [ 154.963029][ T9173] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 154.972744][ T9173] FAT-fs (loop2): Filesystem has been set read-only [ 154.980542][ T9173] syz.2.1848: attempt to access beyond end of device [ 154.980542][ T9173] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 155.003191][ T9173] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 155.022860][ T9173] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 155.056905][ T9173] syz.2.1848: attempt to access beyond end of device [ 155.056905][ T9173] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 155.221160][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 155.489843][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 155.491548][ T9190] lo speed is unknown, defaulting to 1000 [ 155.501159][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1855'. [ 155.561267][ T9193] loop2: detected capacity change from 0 to 1024 [ 155.570400][ T9193] EXT4-fs: Ignoring removed orlov option [ 155.597606][ T9193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.717527][ T9190] lo speed is unknown, defaulting to 1000 [ 155.978308][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.140327][ T9215] loop2: detected capacity change from 0 to 2048 [ 156.192655][ T9215] loop2: p1 < > p4 [ 156.198501][ T9215] loop2: p4 size 8388608 extends beyond EOD, truncated [ 156.260863][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 156.690239][ T9229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9229 comm=syz.4.1867 [ 156.740836][ T9230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9230 comm=syz.4.1867 [ 156.840545][ T9232] syz1: rxe_newlink: already configured on lo [ 156.942068][ T9232] loop4: detected capacity change from 0 to 8192 [ 157.003028][ T3326] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 157.012242][ T3326] FAT-fs (loop4): Filesystem has been set read-only [ 157.177964][ T9241] loop0: detected capacity change from 0 to 256 [ 157.254121][ T9241] FAT-fs (loop0): Directory bread(block 64) failed [ 157.272339][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 157.272357][ T29] audit: type=1326 audit(1765622078.783:11707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 157.330907][ T9247] rdma_rxe: rxe_newlink: failed to add lo [ 157.334087][ T9241] FAT-fs (loop0): Directory bread(block 65) failed [ 157.373959][ T9241] FAT-fs (loop0): Directory bread(block 66) failed [ 157.397843][ T9241] FAT-fs (loop0): Directory bread(block 67) failed [ 157.418805][ T9250] loop4: detected capacity change from 0 to 1024 [ 157.419235][ T9241] FAT-fs (loop0): Directory bread(block 68) failed [ 157.440594][ T29] audit: type=1326 audit(1765622078.830:11708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 157.464939][ T29] audit: type=1326 audit(1765622078.830:11709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 157.484008][ T9250] EXT4-fs: Ignoring removed bh option [ 157.489453][ T29] audit: type=1326 audit(1765622078.830:11710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 157.536807][ T9241] FAT-fs (loop0): Directory bread(block 69) failed [ 157.544457][ T9241] FAT-fs (loop0): Directory bread(block 70) failed [ 157.552849][ T9250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.568870][ T9241] FAT-fs (loop0): Directory bread(block 71) failed [ 157.575814][ T9241] FAT-fs (loop0): Directory bread(block 72) failed [ 157.675782][ T9241] FAT-fs (loop0): Directory bread(block 73) failed [ 157.775639][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.855768][ T9266] loop0: detected capacity change from 0 to 512 [ 157.886713][ T9266] EXT4-fs: dax option not supported [ 158.123513][ T9279] loop4: detected capacity change from 0 to 1024 [ 158.148096][ T9279] EXT4-fs: Ignoring removed bh option [ 158.183301][ T9279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.243358][ T9279] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 158.306329][ T9279] EXT4-fs (loop4): Remounting filesystem read-only [ 158.335177][ T9279] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 158.459666][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.603029][ T29] audit: type=1326 audit(1765622080.009:11711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 158.630873][ T29] audit: type=1326 audit(1765622080.009:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 158.656900][ T29] audit: type=1326 audit(1765622080.009:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 158.686147][ T29] audit: type=1326 audit(1765622080.009:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 158.715008][ T29] audit: type=1326 audit(1765622080.009:11715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 158.738792][ T29] audit: type=1326 audit(1765622080.009:11716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 158.944395][ T9310] loop4: detected capacity change from 0 to 128 [ 158.964377][ T9314] loop2: detected capacity change from 0 to 1024 [ 159.026552][ T9314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.116228][ T9314] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 159.130025][ T9314] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.130025][ T9314] [ 159.142065][ T9314] EXT4-fs (loop2): Total free blocks count 0 [ 159.150047][ T9314] EXT4-fs (loop2): Free/Dirty block details [ 159.158401][ T9314] EXT4-fs (loop2): free_blocks=0 [ 159.164491][ T9314] EXT4-fs (loop2): dirty_blocks=0 [ 159.170813][ T9314] EXT4-fs (loop2): Block reservation details [ 159.177303][ T9314] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 159.196447][ T9324] loop0: detected capacity change from 0 to 1024 [ 159.222280][ T9324] EXT4-fs: Ignoring removed bh option [ 159.237525][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.269758][ T9324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.318591][ T9323] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 159.382986][ T9323] EXT4-fs (loop0): Remounting filesystem read-only [ 159.413489][ T9323] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 159.517656][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.888498][ T9360] loop0: detected capacity change from 0 to 128 [ 159.966980][ T9363] loop4: detected capacity change from 0 to 1024 [ 160.017831][ T9363] EXT4-fs: Ignoring removed bh option [ 160.104014][ T9363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.146751][ T9360] syz.0.1910: attempt to access beyond end of device [ 160.146751][ T9360] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 160.217586][ T9360] syz.0.1910: attempt to access beyond end of device [ 160.217586][ T9360] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 160.278739][ T12] kworker/u8:0: attempt to access beyond end of device [ 160.278739][ T12] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 160.324615][ T9360] syz.0.1910: attempt to access beyond end of device [ 160.324615][ T9360] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 160.355605][ T12] kworker/u8:0: attempt to access beyond end of device [ 160.355605][ T12] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 160.380411][ T9360] syz.0.1910: attempt to access beyond end of device [ 160.380411][ T9360] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 160.407745][ T12] kworker/u8:0: attempt to access beyond end of device [ 160.407745][ T12] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 160.426436][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.435823][ T9360] syz.0.1910: attempt to access beyond end of device [ 160.435823][ T9360] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 160.461600][ T12] kworker/u8:0: attempt to access beyond end of device [ 160.461600][ T12] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 160.495094][ T12] kworker/u8:0: attempt to access beyond end of device [ 160.495094][ T12] loop0: rw=1, sector=313, nr_sectors = 8 limit=128 [ 160.505137][ T9377] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 160.697872][ T9386] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 160.723854][ T9386] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 160.750924][ T9386] Symlink component flag not implemented [ 160.756695][ T9386] Symlink component flag not implemented [ 160.764516][ T9390] syz1: rxe_newlink: already configured on lo [ 160.967579][ T3412] hid_parser_main: 20 callbacks suppressed [ 160.967596][ T3412] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 160.970877][ T3326] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 160.973892][ T3412] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 160.981221][ T3326] FAT-fs (loop4): Filesystem has been set read-only [ 161.003462][ T3412] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 161.053845][ T3412] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 161.062227][ T3412] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 161.070198][ T3412] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 161.078429][ T3412] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 161.086397][ T3412] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 161.094517][ T3412] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 161.102562][ T3412] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 161.120886][ T3412] hid-generic 0000:0000:0000.0029: hidraw0: HID v8.00 Device [syz0] on syz0 [ 161.152076][ T9384] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.270787][ T9384] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.381372][ T9401] netlink: 'syz.3.1919': attribute type 1 has an invalid length. [ 161.511357][ T9428] rdma_rxe: rxe_newlink: failed to add lo [ 161.742742][ T9430] __nla_validate_parse: 5 callbacks suppressed [ 161.742828][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1938'. [ 161.765665][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.799755][ T9440] EXT4-fs: Ignoring removed bh option [ 161.865873][ T9451] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1942'. [ 161.900434][ T9450] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.922719][ T9450] EXT4-fs (loop3): 1 truncate cleaned up [ 162.036565][ T9462] EXT4-fs: dax option not supported [ 162.104171][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1951'. [ 162.167064][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1952'. [ 162.212120][ T9470] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 162.219724][ T9470] FAT-fs (loop3): Filesystem has been set read-only [ 162.232407][ T9470] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 162.249370][ T9470] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 162.263085][ T9470] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 162.272995][ T9470] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 162.308728][ T9477] set_capacity_and_notify: 8 callbacks suppressed [ 162.308750][ T9477] loop0: detected capacity change from 0 to 164 [ 162.318110][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 162.344517][ T9477] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 162.377036][ T9477] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 162.446988][ T9477] Symlink component flag not implemented [ 162.452682][ T9477] Symlink component flag not implemented [ 162.564028][ T9485] loop3: detected capacity change from 0 to 1024 [ 162.572534][ T9485] EXT4-fs: Ignoring removed bh option [ 162.618646][ T9487] loop0: detected capacity change from 0 to 1024 [ 162.644184][ T9487] EXT4-fs: Ignoring removed bh option [ 162.715142][ T9487] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 162.747630][ T29] kauditd_printk_skb: 725 callbacks suppressed [ 162.747648][ T29] audit: type=1326 audit(1765622083.909:12442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 162.778993][ T9487] EXT4-fs (loop0): Remounting filesystem read-only [ 162.788243][ T29] audit: type=1326 audit(1765622083.937:12443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 162.798895][ T9487] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 162.812181][ T29] audit: type=1326 audit(1765622083.947:12444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 162.840415][ T9504] rdma_rxe: rxe_newlink: failed to add lo [ 162.849794][ T29] audit: type=1326 audit(1765622083.947:12445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 162.865299][ T9505] loop4: detected capacity change from 0 to 128 [ 162.880383][ T29] audit: type=1326 audit(1765622083.947:12446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 162.911494][ T29] audit: type=1326 audit(1765622083.947:12447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 162.938109][ T29] audit: type=1326 audit(1765622083.947:12448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 162.964510][ T29] audit: type=1326 audit(1765622083.947:12449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 162.991393][ T29] audit: type=1326 audit(1765622083.947:12450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 163.019847][ T29] audit: type=1326 audit(1765622083.947:12451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.3.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 163.084241][ T9511] rdma_rxe: rxe_newlink: failed to add lo [ 163.135816][ T9517] serio: Serial port ptm0 [ 163.168730][ T9513] loop3: detected capacity change from 0 to 164 [ 163.189070][ T9513] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 163.243915][ T9513] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 163.279381][ T9513] Symlink component flag not implemented [ 163.285803][ T9513] Symlink component flag not implemented [ 163.350316][ T9524] lo speed is unknown, defaulting to 1000 [ 163.420970][ T9532] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1972'. [ 163.457218][ T9524] lo speed is unknown, defaulting to 1000 [ 163.483837][ T9535] loop2: detected capacity change from 0 to 512 [ 163.492255][ T9535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.528326][ T9535] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1974: invalid indirect mapped block 4294967295 (level 1) [ 163.556909][ T9535] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1974: invalid indirect mapped block 4294967295 (level 1) [ 163.578457][ T9535] EXT4-fs (loop2): 2 truncates cleaned up [ 163.597694][ T9531] loop0: detected capacity change from 0 to 1024 [ 163.604910][ T9531] EXT4-fs: Ignoring removed orlov option [ 163.634559][ T9535] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.2.1974: path /391/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 163.745928][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1980'. [ 163.756438][ T9553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.764435][ T9553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.786445][ T9553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.794739][ T9553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.869229][ T9560] loop4: detected capacity change from 0 to 164 [ 163.882578][ T9560] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 163.902957][ T9560] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 163.914226][ T9560] Symlink component flag not implemented [ 163.920939][ T9560] Symlink component flag not implemented [ 163.960446][ T9565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1985'. [ 164.002599][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1986'. [ 164.082405][ T9581] pim6reg: entered allmulticast mode [ 164.093104][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'. [ 164.105912][ T4243] hid-generic 0000:0000:0000.002A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 164.121964][ T9581] pim6reg: left allmulticast mode [ 164.160633][ T9584] fido_id[9584]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.180859][ T9585] loop0: detected capacity change from 0 to 512 [ 164.188756][ T9585] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.203070][ T9585] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1989: invalid indirect mapped block 4294967295 (level 1) [ 164.221603][ T9585] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1989: invalid indirect mapped block 4294967295 (level 1) [ 164.243900][ T9585] EXT4-fs (loop0): 2 truncates cleaned up [ 164.256900][ T9585] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.0.1989: path /336/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 164.440169][ T9599] loop2: detected capacity change from 0 to 4096 [ 164.699557][ T9621] rdma_rxe: rxe_newlink: failed to add lo [ 164.856877][ T3316] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 164.864994][ T3316] FAT-fs (loop2): Filesystem has been set read-only [ 164.932392][ T9630] lo speed is unknown, defaulting to 1000 [ 164.948919][ T9632] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 164.977649][ T9632] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 164.987228][ T9632] Symlink component flag not implemented [ 164.993026][ T9632] Symlink component flag not implemented [ 165.017239][ T9637] EXT4-fs: Ignoring removed orlov option [ 165.133305][ T9630] lo speed is unknown, defaulting to 1000 [ 165.179585][ T9651] serio: Serial port ptm0 [ 165.217047][ T9655] Invalid ELF header magic: != ELF [ 165.482900][ T9668] EXT4-fs: Ignoring removed bh option [ 165.766599][ T9686] FAT-fs (loop2): Directory bread(block 64) failed [ 165.797742][ T9686] FAT-fs (loop2): Directory bread(block 65) failed [ 165.837219][ T9686] FAT-fs (loop2): Directory bread(block 66) failed [ 165.882483][ T9686] FAT-fs (loop2): Directory bread(block 67) failed [ 165.894281][ T9686] FAT-fs (loop2): Directory bread(block 68) failed [ 165.901225][ T9686] FAT-fs (loop2): Directory bread(block 69) failed [ 165.940386][ T9686] FAT-fs (loop2): Directory bread(block 70) failed [ 165.958688][ T9686] FAT-fs (loop2): Directory bread(block 71) failed [ 166.005253][ T9686] FAT-fs (loop2): Directory bread(block 72) failed [ 166.012049][ T9686] FAT-fs (loop2): Directory bread(block 73) failed [ 166.077651][ T9686] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 166.086483][ T9686] FAT-fs (loop2): Filesystem has been set read-only [ 166.097562][ T9686] bio_check_eod: 28 callbacks suppressed [ 166.097579][ T9686] syz.2.2026: attempt to access beyond end of device [ 166.097579][ T9686] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 166.120041][ T9698] lo speed is unknown, defaulting to 1000 [ 166.157859][ T9686] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 166.197369][ T9698] lo speed is unknown, defaulting to 1000 [ 166.308932][ T9686] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 166.474557][ T9686] syz.2.2026: attempt to access beyond end of device [ 166.474557][ T9686] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 166.966763][ T9720] EXT4-fs: Ignoring removed bh option [ 167.075271][ T3316] EXT4-fs unmount: 27 callbacks suppressed [ 167.075289][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.400868][ T9728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.488957][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.646328][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.677040][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.700841][ T9739] set_capacity_and_notify: 10 callbacks suppressed [ 167.700859][ T9739] loop2: detected capacity change from 0 to 512 [ 167.757909][ T9739] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.829220][ T9744] lo speed is unknown, defaulting to 1000 [ 167.923578][ T9747] loop4: detected capacity change from 0 to 1024 [ 167.930557][ T9747] EXT4-fs: Ignoring removed orlov option [ 167.947874][ T9747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.020032][ T9739] lo speed is unknown, defaulting to 1000 [ 168.026201][ T9744] lo speed is unknown, defaulting to 1000 [ 168.184437][ T9739] lo speed is unknown, defaulting to 1000 [ 168.263630][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.461433][ T29] kauditd_printk_skb: 631 callbacks suppressed [ 168.461453][ T29] audit: type=1326 audit(1765622089.241:13083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 168.621421][ T29] audit: type=1326 audit(1765622089.241:13084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 168.644989][ T29] audit: type=1326 audit(1765622089.241:13085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 168.668785][ T29] audit: type=1326 audit(1765622089.241:13086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 168.692413][ T29] audit: type=1326 audit(1765622089.241:13087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 168.716065][ T29] audit: type=1326 audit(1765622089.241:13088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 168.739772][ T29] audit: type=1326 audit(1765622089.241:13089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 168.763502][ T29] audit: type=1326 audit(1765622089.241:13090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 168.787031][ T29] audit: type=1326 audit(1765622089.241:13091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 168.810643][ T29] audit: type=1326 audit(1765622089.250:13092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 169.074191][ T9773] __nla_validate_parse: 4 callbacks suppressed [ 169.074209][ T9773] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2054'. [ 169.190485][ T9775] loop3: detected capacity change from 0 to 4096 [ 169.200785][ T9763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2050'. [ 169.245139][ T9775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.320712][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.378459][ T9769] loop0: detected capacity change from 0 to 32768 [ 169.408097][ T9779] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 169.420091][ T3525] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 169.440546][ T3525] loop0: p1 start 460800 is beyond EOD, truncated [ 169.447310][ T3525] loop0: p2 size 83886080 extends beyond EOD, truncated [ 169.468386][ T9779] SELinux: failed to load policy [ 169.481117][ T9784] rdma_rxe: rxe_newlink: failed to add lo [ 169.505864][ T3525] loop0: p5 start 460800 is beyond EOD, truncated [ 169.512429][ T3525] loop0: p6 size 83886080 extends beyond EOD, truncated [ 169.532254][ T9769] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 169.537912][ T9769] loop0: p1 start 460800 is beyond EOD, truncated [ 169.544627][ T9769] loop0: p2 size 83886080 extends beyond EOD, truncated [ 169.570669][ T9787] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2057'. [ 169.583609][ T9769] loop0: p5 start 460800 is beyond EOD, truncated [ 169.590197][ T9769] loop0: p6 size 83886080 extends beyond EOD, truncated [ 169.758345][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 169.773705][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 169.785823][ T3610] udevd[3610]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 169.822334][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 169.822939][ T9802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2065'. [ 169.834675][ T3610] udevd[3610]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 169.844998][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 169.871088][ T9807] loop4: detected capacity change from 0 to 128 [ 170.231215][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'. [ 170.291485][ T9831] 9pnet_virtio: no channels available for device 127.0.0.1 [ 170.399028][ T9836] netlink: 'syz.1.2077': attribute type 4 has an invalid length. [ 170.418692][ T9838] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2079'. [ 170.468378][ T9841] loop0: detected capacity change from 0 to 512 [ 170.477666][ T9841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.502270][ T9841] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2078: invalid indirect mapped block 4294967295 (level 1) [ 170.517411][ T9841] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2078: invalid indirect mapped block 4294967295 (level 1) [ 170.543180][ T9841] EXT4-fs (loop0): 2 truncates cleaned up [ 170.551238][ T9841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.570155][ T9841] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.0.2078: path /348/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 170.601184][ T9849] loop3: detected capacity change from 0 to 1024 [ 170.608783][ T9849] EXT4-fs: Ignoring removed bh option [ 170.626034][ T9849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.690933][ T9856] loop2: detected capacity change from 0 to 2048 [ 170.742403][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.761640][ T3525] loop2: p1 < > p4 [ 170.770955][ T3525] loop2: p4 size 8388608 extends beyond EOD, truncated [ 170.784089][ T9856] loop2: p1 < > p4 [ 170.788739][ T9856] loop2: p4 size 8388608 extends beyond EOD, truncated [ 170.846233][ T9864] 9pnet_virtio: no channels available for device 127.0.0.1 [ 170.944582][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 170.981412][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 171.116682][ T9879] loop3: detected capacity change from 0 to 1024 [ 171.124899][ T9879] EXT4-fs: Ignoring removed bh option [ 171.138076][ T9879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.168150][ T9879] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 171.183307][ T9879] EXT4-fs (loop3): Remounting filesystem read-only [ 171.190047][ T9879] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 171.299920][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.350906][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.430150][ T9895] 9pnet_virtio: no channels available for device 127.0.0.1 [ 171.729064][ T9917] loop2: detected capacity change from 0 to 4096 [ 171.744389][ T9917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.770014][ T9924] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2109'. [ 171.920081][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.017251][ T9933] lo speed is unknown, defaulting to 1000 [ 172.039359][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2113'. [ 172.118173][ T9939] EXT4-fs: Ignoring removed orlov option [ 172.138058][ T9939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.185108][ T9933] lo speed is unknown, defaulting to 1000 [ 172.271126][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.395406][ T9953] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2118'. [ 172.809819][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2122'. [ 172.915547][ T9974] lo speed is unknown, defaulting to 1000 [ 172.925078][ T9971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.956218][ T9981] EXT4-fs: Ignoring removed orlov option [ 172.993633][ T9981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.013087][ T9974] lo speed is unknown, defaulting to 1000 [ 173.046839][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.097693][ T9986] set_capacity_and_notify: 3 callbacks suppressed [ 173.097708][ T9986] loop4: detected capacity change from 0 to 512 [ 173.122120][ T9986] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.186632][ T9986] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2131: invalid indirect mapped block 4294967295 (level 1) [ 173.201874][ T9986] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2131: invalid indirect mapped block 4294967295 (level 1) [ 173.217662][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.223933][ T9986] EXT4-fs (loop4): 2 truncates cleaned up [ 173.235785][ T9986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.279788][ T9986] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.4.2131: path /428/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 173.316988][T10001] loop2: detected capacity change from 0 to 2048 [ 173.323337][T10004] loop3: detected capacity change from 0 to 164 [ 173.350382][T10004] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 173.360088][ T3525] loop2: p1 < > p4 [ 173.365207][ T3525] loop2: p4 size 8388608 extends beyond EOD, truncated [ 173.375931][T10001] loop2: p1 < > p4 [ 173.383152][T10001] loop2: p4 size 8388608 extends beyond EOD, truncated [ 173.391183][T10004] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 173.406601][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.419316][T10004] Symlink component flag not implemented [ 173.425282][T10004] Symlink component flag not implemented [ 173.626313][T10016] loop4: detected capacity change from 0 to 4096 [ 173.643215][T10016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.685470][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.834604][ T29] kauditd_printk_skb: 1339 callbacks suppressed [ 173.834623][ T29] audit: type=1400 audit(1765622094.273:14432): avc: denied { prog_load } for pid=10022 comm="syz.1.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 173.860796][ T29] audit: type=1400 audit(1765622094.273:14433): avc: denied { bpf } for pid=10022 comm="syz.1.2144" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 173.909695][ T29] audit: type=1400 audit(1765622094.283:14434): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.934630][ T29] audit: type=1400 audit(1765622094.283:14435): avc: denied { open } for pid=3326 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.941876][T10026] lo speed is unknown, defaulting to 1000 [ 173.959124][ T29] audit: type=1400 audit(1765622094.283:14436): avc: denied { ioctl } for pid=3326 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.959199][ T29] audit: type=1400 audit(1765622094.320:14437): avc: denied { perfmon } for pid=10022 comm="syz.1.2144" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 173.970634][ T29] audit: type=1400 audit(1765622094.348:14438): avc: denied { prog_run } for pid=10010 comm="syz.3.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.125798][T10031] loop0: detected capacity change from 0 to 1024 [ 174.150794][T10032] loop4: detected capacity change from 0 to 1024 [ 174.158034][T10032] EXT4-fs: Ignoring removed orlov option [ 174.190607][ T29] audit: type=1400 audit(1765622094.489:14439): avc: denied { allowed } for pid=10025 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 174.210461][ T29] audit: type=1400 audit(1765622094.489:14440): avc: denied { create } for pid=10025 comm="syz.4.2145" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 174.232089][ T29] audit: type=1400 audit(1765622094.489:14441): avc: denied { map_create } for pid=10025 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.261005][T10026] lo speed is unknown, defaulting to 1000 [ 174.267635][T10031] EXT4-fs: Ignoring removed bh option [ 174.274643][T10032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.292424][T10031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.544947][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.555829][T10052] 9p: Bad value for 'rfdno' [ 174.587554][T10046] SELinux: failed to load policy [ 174.744136][T10069] __nla_validate_parse: 2 callbacks suppressed [ 174.744154][T10069] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2157'. [ 174.885617][T10081] loop4: detected capacity change from 0 to 2048 [ 174.963253][T10081] loop4: p1 < > p4 [ 174.979341][T10081] loop4: p4 size 8388608 extends beyond EOD, truncated [ 175.060080][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.226933][T10087] serio: Serial port ptm0 [ 175.300770][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 175.403211][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 175.850021][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2168'. [ 176.653429][T10125] netlink: 'syz.3.2174': attribute type 4 has an invalid length. [ 176.987762][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'. [ 177.581369][T10174] loop3: detected capacity change from 0 to 1024 [ 177.596782][ T7517] hid_parser_main: 50 callbacks suppressed [ 177.596801][ T7517] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 177.610310][ T7517] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 177.611225][T10174] EXT4-fs: Ignoring removed bh option [ 177.617803][ T7517] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 177.656603][T10171] loop4: detected capacity change from 0 to 4096 [ 177.688253][T10174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.688700][ T7517] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 177.708931][ T7517] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 177.716502][ T7517] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 177.723998][ T7517] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 177.731569][ T7517] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 177.739377][ T7517] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 177.746877][ T7517] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 177.825026][T10171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.869682][T10174] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 177.967462][T10174] EXT4-fs (loop3): Remounting filesystem read-only [ 177.976566][T10174] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 178.021457][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.053698][ T7517] hid-generic 0000:0000:0000.002B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 178.158444][T10184] fido_id[10184]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 178.175925][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.448507][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2202'. [ 178.462530][T10207] FAULT_INJECTION: forcing a failure. [ 178.462530][T10207] name failslab, interval 1, probability 0, space 0, times 0 [ 178.475580][T10207] CPU: 0 UID: 0 PID: 10207 Comm: syz.3.2203 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.475684][T10207] Tainted: [W]=WARN [ 178.475692][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.475743][T10207] Call Trace: [ 178.475750][T10207] [ 178.475815][T10207] __dump_stack+0x1d/0x30 [ 178.475925][T10207] dump_stack_lvl+0xe8/0x140 [ 178.475951][T10207] dump_stack+0x15/0x1b [ 178.476041][T10207] should_fail_ex+0x265/0x280 [ 178.476071][T10207] should_failslab+0x8c/0xb0 [ 178.476096][T10207] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 178.476122][T10207] ? __alloc_skb+0x324/0x4d0 [ 178.476221][T10207] __alloc_skb+0x324/0x4d0 [ 178.476242][T10207] ? __alloc_skb+0x24d/0x4d0 [ 178.476265][T10207] audit_log_start+0x3a0/0x720 [ 178.476362][T10207] ? kstrtouint+0x76/0xc0 [ 178.476385][T10207] audit_seccomp+0x48/0x100 [ 178.476419][T10207] ? __seccomp_filter+0x832/0x1260 [ 178.476450][T10207] __seccomp_filter+0x843/0x1260 [ 178.476485][T10207] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 178.476515][T10207] ? vfs_write+0x7e8/0x960 [ 178.476537][T10207] ? __cond_resched+0x4e/0x90 [ 178.476571][T10207] __secure_computing+0x82/0x150 [ 178.476614][T10207] syscall_trace_enter+0xcf/0x1e0 [ 178.476641][T10207] do_syscall_64+0xb2/0x2a0 [ 178.476684][T10207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.476706][T10207] RIP: 0033:0x7f98a3cbf749 [ 178.476803][T10207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.476821][T10207] RSP: 002b:00007f98a271f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 178.476941][T10207] RAX: ffffffffffffffda RBX: 00007f98a3f15fa0 RCX: 00007f98a3cbf749 [ 178.476957][T10207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 178.476973][T10207] RBP: 00007f98a271f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.476987][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.477074][T10207] R13: 00007f98a3f16038 R14: 00007f98a3f15fa0 R15: 00007ffc497f64f8 [ 178.477094][T10207] [ 178.736469][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2201'. [ 178.860459][ T9820] hid-generic 0000:0000:0000.002C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 178.938271][T10218] fido_id[10218]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 179.265637][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 179.265717][ T29] audit: type=1400 audit(1765622099.353:14882): avc: denied { setopt } for pid=10224 comm="syz.0.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.420478][ T29] audit: type=1326 audit(1765622099.493:14883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10231 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 179.444333][ T29] audit: type=1326 audit(1765622099.493:14884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10231 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 179.469282][ T29] audit: type=1326 audit(1765622099.493:14885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10231 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 179.493272][ T29] audit: type=1326 audit(1765622099.493:14886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10231 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 179.517245][ T29] audit: type=1326 audit(1765622099.493:14887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10231 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 179.541427][ T29] audit: type=1326 audit(1765622099.493:14888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10231 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 179.565630][ T29] audit: type=1326 audit(1765622099.493:14889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10231 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 179.589798][ T29] audit: type=1326 audit(1765622099.493:14890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10231 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 179.613699][ T29] audit: type=1326 audit(1765622099.493:14891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10231 comm="syz.3.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 179.764928][T10233] loop0: detected capacity change from 0 to 32768 [ 179.826274][ T3525] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 179.831905][ T3525] loop0: p1 start 460800 is beyond EOD, truncated [ 179.838476][ T3525] loop0: p2 size 83886080 extends beyond EOD, truncated [ 179.874686][ T3525] loop0: p5 start 460800 is beyond EOD, truncated [ 179.881216][ T3525] loop0: p6 size 83886080 extends beyond EOD, truncated [ 179.941488][T10233] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 179.947729][T10233] loop0: p1 start 460800 is beyond EOD, truncated [ 179.954352][T10233] loop0: p2 size 83886080 extends beyond EOD, truncated [ 179.967994][T10236] loop4: detected capacity change from 0 to 1024 [ 179.977478][T10236] EXT4-fs: Ignoring removed bh option [ 179.985566][T10233] loop0: p5 start 460800 is beyond EOD, truncated [ 179.992200][T10233] loop0: p6 size 83886080 extends beyond EOD, truncated [ 180.023275][T10236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.232045][ T3610] udevd[3610]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 180.244029][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 180.256300][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 180.294692][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 180.307544][ T3610] udevd[3610]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 180.330737][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 180.331753][T10240] SELinux: failed to load policy [ 180.526826][T10256] serio: Serial port ptm0 [ 180.540253][T10254] loop0: detected capacity change from 0 to 512 [ 180.565214][T10254] EXT4-fs: Ignoring removed i_version option [ 180.571331][T10254] EXT4-fs: Ignoring removed bh option [ 180.601677][T10254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.619442][T10254] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.683062][T10268] loop3: detected capacity change from 0 to 4096 [ 180.693247][T10268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.717416][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.754761][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.766552][T10271] loop2: detected capacity change from 0 to 164 [ 180.774916][T10271] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 180.878979][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.994474][T10295] serio: Serial port ptm0 [ 181.018561][T10298] lo speed is unknown, defaulting to 1000 [ 181.028403][T10299] syz1: rxe_newlink: already configured on lo [ 181.121162][T10299] loop4: detected capacity change from 0 to 8192 [ 181.197654][ T3326] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 181.205533][ T3326] FAT-fs (loop4): Filesystem has been set read-only [ 181.223661][T10298] lo speed is unknown, defaulting to 1000 [ 181.288830][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'. [ 181.293042][T10317] loop4: detected capacity change from 0 to 1024 [ 181.315795][T10317] EXT4-fs: Ignoring removed bh option [ 181.337809][T10317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.420959][T10319] loop3: detected capacity change from 0 to 4096 [ 181.434336][T10319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.507126][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.533549][T10331] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2246'. [ 181.569689][T10325] loop2: detected capacity change from 0 to 512 [ 181.571944][T10333] serio: Serial port ptm0 [ 181.603361][T10325] EXT4-fs (loop2): orphan cleanup on readonly fs [ 181.637785][T10325] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.2245: corrupted inode contents [ 181.677422][T10325] EXT4-fs (loop2): Remounting filesystem read-only [ 181.694499][T10325] EXT4-fs (loop2): 1 orphan inode deleted [ 181.710766][T10325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 181.759542][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.147154][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 182.234983][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.326601][T10369] loop4: detected capacity change from 0 to 2048 [ 182.442947][ T3525] loop4: p1 < > p4 [ 182.451651][ T3525] loop4: p4 size 8388608 extends beyond EOD, truncated [ 182.482552][T10369] loop4: p1 < > p4 [ 182.488261][T10369] loop4: p4 size 8388608 extends beyond EOD, truncated [ 182.594945][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 182.707645][T10394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.022001][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.155338][T10405] lo speed is unknown, defaulting to 1000 [ 183.173985][T10405] lo speed is unknown, defaulting to 1000 [ 183.203956][T10405] lo speed is unknown, defaulting to 1000 [ 183.221087][T10409] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 183.229488][T10409] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 183.289765][T10416] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2276'. [ 183.321201][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 183.344895][T10405] infiniband sz1: set active [ 183.349664][T10405] infiniband sz1: added lo [ 183.354206][ T9820] lo speed is unknown, defaulting to 1000 [ 183.411509][T10405] RDS/IB: sz1: added [ 183.436338][T10405] smc: adding ib device sz1 with port count 1 [ 183.443126][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2278'. [ 183.485959][T10405] smc: ib device sz1 port 1 has no pnetid [ 183.495680][ T9] lo speed is unknown, defaulting to 1000 [ 183.521654][T10427] EXT4-fs: Ignoring removed bh option [ 183.536756][T10405] lo speed is unknown, defaulting to 1000 [ 183.563154][T10427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.634370][T10405] lo speed is unknown, defaulting to 1000 [ 183.652459][T10427] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 183.697473][T10427] EXT4-fs (loop4): Remounting filesystem read-only [ 183.717763][T10427] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 183.753624][T10405] lo speed is unknown, defaulting to 1000 [ 183.795190][T10405] lo speed is unknown, defaulting to 1000 [ 183.835293][T10405] lo speed is unknown, defaulting to 1000 [ 183.883516][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.980113][T10436] serio: Serial port ptm0 [ 184.032082][ T3412] hid_parser_main: 50 callbacks suppressed [ 184.032107][ T3412] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 184.045619][ T3412] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 184.053132][ T3412] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 184.083283][ T3412] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 184.090736][ T3412] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 184.098246][ T3412] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 184.105860][ T3412] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 184.113359][ T3412] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 184.120996][ T3412] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 184.128525][ T3412] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 184.174169][ T3412] hid-generic 0000:0000:0000.002D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 184.178188][T10448] EXT4-fs: Ignoring removed i_version option [ 184.189868][T10448] EXT4-fs: Ignoring removed bh option [ 184.252378][T10453] fido_id[10453]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.282658][T10448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.306728][T10448] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.382732][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2289'. [ 184.405424][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.530822][ T9820] hid-generic 0000:0000:0000.002E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 184.549981][T10473] EXT4-fs: Ignoring removed i_version option [ 184.556227][T10473] EXT4-fs: Ignoring removed bh option [ 184.589566][ T23] hid-generic 0000:0000:0000.002F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 184.616755][ T29] kauditd_printk_skb: 962 callbacks suppressed [ 184.616772][ T29] audit: type=1326 audit(1765622104.366:15854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbb31f749 code=0x7ffc0000 [ 184.734857][T10480] fido_id[10480]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.768192][ T29] audit: type=1326 audit(1765622104.366:15855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbb31f749 code=0x7ffc0000 [ 184.792881][ T29] audit: type=1326 audit(1765622104.366:15856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7febbb31f749 code=0x7ffc0000 [ 184.816605][ T29] audit: type=1326 audit(1765622104.366:15857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbb31f749 code=0x7ffc0000 [ 184.840339][ T29] audit: type=1326 audit(1765622104.366:15858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 184.841432][T10473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.864140][ T29] audit: type=1326 audit(1765622104.366:15859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 184.864221][ T29] audit: type=1326 audit(1765622104.366:15860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 184.864257][ T29] audit: type=1326 audit(1765622104.376:15861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.3.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 184.924890][T10486] netlink: '+}[@': attribute type 1 has an invalid length. [ 184.924909][T10486] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 184.925642][T10473] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.948530][ T29] audit: type=1326 audit(1765622104.376:15862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febbb31f749 code=0x7ffc0000 [ 184.998057][ T29] audit: type=1326 audit(1765622104.376:15863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbb31f749 code=0x7ffc0000 [ 184.999988][T10490] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 185.031649][T10486] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR [ 185.046797][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.064961][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.099068][T10495] fido_id[10495]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 185.123108][T10490] SELinux: failed to load policy [ 185.177967][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.259646][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2305'. [ 185.319781][T10523] netlink: 'syz.0.2310': attribute type 3 has an invalid length. [ 185.335313][T10523] set_capacity_and_notify: 4 callbacks suppressed [ 185.335344][T10523] loop0: detected capacity change from 0 to 1024 [ 185.354491][T10523] EXT4-fs: inline encryption not supported [ 185.360569][T10523] EXT4-fs: Ignoring removed orlov option [ 185.368198][T10523] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 185.374049][T10529] loop2: detected capacity change from 0 to 2048 [ 185.398806][T10523] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c028, mo2=0002] [ 185.407048][T10523] System zones: 0-1, 3-12 [ 185.416215][T10523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.429646][T10529] loop2: p1 < > p4 [ 185.433309][T10523] EXT4-fs error (device loop0): ext4_lookup:1777: inode #2: comm syz.0.2310: bad inode number: 7 [ 185.444931][T10529] loop2: p4 size 8388608 extends beyond EOD, truncated [ 185.450146][T10523] EXT4-fs (loop0): Remounting filesystem read-only [ 185.457168][T10534] loop4: detected capacity change from 0 to 2048 [ 185.483232][ T3008] loop2: p1 < > p4 [ 185.488390][ T3008] loop2: p4 size 8388608 extends beyond EOD, truncated [ 185.509339][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 185.521204][ T5387] loop4: p1 < > p4 [ 185.530940][ T5387] loop4: p4 size 8388608 extends beyond EOD, truncated [ 185.541004][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.543111][T10534] loop4: p1 < > p4 [ 185.555599][T10534] loop4: p4 size 8388608 extends beyond EOD, truncated [ 185.606050][ T3613] udevd[3613]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 185.715349][T10542] SELinux: failed to load policy [ 185.752311][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 185.836891][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2320'. [ 186.037323][T10565] loop0: detected capacity change from 0 to 128 [ 186.308829][T10574] loop2: detected capacity change from 0 to 1024 [ 186.319192][T10574] EXT4-fs: Ignoring removed bh option [ 186.341326][T10574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.471792][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.522410][T10591] openvswitch: netlink: EtherType 0 is less than min 600 [ 186.530286][T10597] loop2: detected capacity change from 0 to 1024 [ 186.530612][T10591] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 186.544822][T10597] EXT4-fs: Ignoring removed bh option [ 186.582516][T10597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.608182][T10597] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 186.609070][T10605] loop4: detected capacity change from 0 to 128 [ 186.632199][T10597] EXT4-fs (loop2): Remounting filesystem read-only [ 186.639117][T10597] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 186.756629][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.896433][T10615] rdma_rxe: rxe_newlink: failed to add lo [ 186.992241][T10615] loop2: detected capacity change from 0 to 8192 [ 187.059763][T10619] lo speed is unknown, defaulting to 1000 [ 187.065948][T10624] loop3: detected capacity change from 0 to 1024 [ 187.072884][T10624] EXT4-fs: Ignoring removed orlov option [ 187.081000][ T3316] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 187.089274][ T3316] FAT-fs (loop2): Filesystem has been set read-only [ 187.099029][T10624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.200415][T10619] lo speed is unknown, defaulting to 1000 [ 187.206979][T10632] loop0: detected capacity change from 0 to 1024 [ 187.212876][T10619] lo speed is unknown, defaulting to 1000 [ 187.243612][T10632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.312164][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.353537][ T3525] loop2: p1 < > p4 [ 187.365628][ T3525] loop2: p4 size 8388608 extends beyond EOD, truncated [ 187.407216][T10644] loop2: p1 < > p4 [ 187.415722][T10644] loop2: p4 size 8388608 extends beyond EOD, truncated [ 187.440248][T10650] sz1: rxe_newlink: already configured on lo [ 187.456260][ T3008] loop2: p1 < > p4 [ 187.462227][ T3008] loop2: p4 size 8388608 extends beyond EOD, truncated [ 187.624291][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.670566][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 187.681441][T10659] rdma_rxe: rxe_newlink: failed to add lo [ 187.685535][ T3317] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 187.695093][ T3317] FAT-fs (loop0): Filesystem has been set read-only [ 187.768270][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 187.940118][T10666] SELinux: failed to load policy [ 187.965514][T10673] EXT4-fs: quotafile must be on filesystem root [ 187.995442][T10673] random: crng reseeded on system resumption [ 188.150364][T10684] __nla_validate_parse: 1 callbacks suppressed [ 188.150411][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 188.289629][T10694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.299417][T10694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.313367][T10694] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.423843][T10701] SELinux: failed to load policy [ 188.498591][T10704] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2378'. [ 188.612086][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'. [ 188.797128][T10725] loop3: p1 < > p4 [ 188.802331][T10725] loop3: p4 size 8388608 extends beyond EOD, truncated [ 188.892405][T10730] lo speed is unknown, defaulting to 1000 [ 188.933177][T10730] lo speed is unknown, defaulting to 1000 [ 188.943393][T10730] lo speed is unknown, defaulting to 1000 [ 189.752052][T10775] rdma_rxe: rxe_newlink: failed to add lo [ 189.914293][T10782] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2407'. [ 190.009784][T10785] rdma_rxe: rxe_newlink: failed to add lo [ 190.110738][ T29] kauditd_printk_skb: 1339 callbacks suppressed [ 190.110754][ T29] audit: type=1326 audit(1765622109.492:17203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 190.165377][T10789] EXT4-fs: Ignoring removed i_version option [ 190.171476][T10789] EXT4-fs: Ignoring removed bh option [ 190.182222][ T29] audit: type=1326 audit(1765622109.530:17204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 190.206648][ T29] audit: type=1326 audit(1765622109.530:17205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 190.230597][ T29] audit: type=1326 audit(1765622109.530:17206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 190.254735][ T29] audit: type=1326 audit(1765622109.530:17207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.3.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 190.278723][ T29] audit: type=1326 audit(1765622109.530:17208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 190.302639][ T29] audit: type=1326 audit(1765622109.530:17209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 190.326782][ T29] audit: type=1326 audit(1765622109.530:17210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 190.350519][ T29] audit: type=1326 audit(1765622109.530:17211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 190.374808][ T29] audit: type=1326 audit(1765622109.530:17212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98a3cbf749 code=0x7ffc0000 [ 190.414373][T10789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.444807][T10789] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.561810][T10804] lo speed is unknown, defaulting to 1000 [ 190.583813][T10807] EXT4-fs: Ignoring removed orlov option [ 190.636887][T10804] lo speed is unknown, defaulting to 1000 [ 190.643220][T10804] lo speed is unknown, defaulting to 1000 [ 190.902407][T10824] set_capacity_and_notify: 7 callbacks suppressed [ 190.902425][T10824] loop0: detected capacity change from 0 to 128 [ 190.935451][T10825] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2421'. [ 191.104402][T10831] lo speed is unknown, defaulting to 1000 [ 191.239077][T10831] lo speed is unknown, defaulting to 1000 [ 191.249255][T10831] lo speed is unknown, defaulting to 1000 [ 191.961346][T10858] rdma_rxe: rxe_newlink: failed to add lo [ 192.006871][T10862] loop4: detected capacity change from 0 to 1024 [ 192.052946][T10843] lo speed is unknown, defaulting to 1000 [ 192.082734][T10858] loop2: detected capacity change from 0 to 8192 [ 192.157090][T10843] lo speed is unknown, defaulting to 1000 [ 192.163446][T10843] lo speed is unknown, defaulting to 1000 [ 192.206579][ T295] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.274381][ T295] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.328933][ T295] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.373563][T10879] loop2: detected capacity change from 0 to 128 [ 192.381775][ T295] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.520621][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'. [ 192.553674][ T295] bridge_slave_1: left allmulticast mode [ 192.559411][ T295] bridge_slave_1: left promiscuous mode [ 192.565210][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.598513][ T295] bridge_slave_0: left allmulticast mode [ 192.604347][ T295] bridge_slave_0: left promiscuous mode [ 192.610372][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.682466][T10903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.693854][T10903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.735065][T10903] loop4: detected capacity change from 0 to 512 [ 192.774061][T10903] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 192.819889][T10917] rdma_rxe: rxe_newlink: failed to add lo [ 192.862145][T10917] loop3: detected capacity change from 0 to 8192 [ 192.876113][T10914] loop0: detected capacity change from 0 to 1024 [ 192.883043][T10914] EXT4-fs: Ignoring removed orlov option [ 193.075475][ T295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.085823][ T295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.096372][T10924] loop3: detected capacity change from 0 to 512 [ 193.096592][ T295] bond0 (unregistering): Released all slaves [ 193.105192][T10924] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.120626][T10924] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2452: invalid indirect mapped block 4294967295 (level 1) [ 193.127315][ T295] bond1 (unregistering): Released all slaves [ 193.142617][T10924] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2452: invalid indirect mapped block 4294967295 (level 1) [ 193.157747][T10924] EXT4-fs (loop3): 2 truncates cleaned up [ 193.169487][T10924] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.3.2452: path /454/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 193.182460][T10843] chnl_net:caif_netlink_parms(): no params data found [ 193.208037][T10900] lo speed is unknown, defaulting to 1000 [ 193.282626][T10900] lo speed is unknown, defaulting to 1000 [ 193.288883][T10843] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.296062][T10843] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.321577][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.330958][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.348115][T10843] bridge_slave_0: entered allmulticast mode [ 193.365488][T10938] loop2: detected capacity change from 0 to 512 [ 193.378651][T10843] bridge_slave_0: entered promiscuous mode [ 193.393254][T10938] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.417506][T10900] lo speed is unknown, defaulting to 1000 [ 193.425798][T10843] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.433059][T10843] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.447300][T10843] bridge_slave_1: entered allmulticast mode [ 193.454009][T10843] bridge_slave_1: entered promiscuous mode [ 193.484994][T10948] syz1: rxe_newlink: already configured on lo [ 193.509687][T10843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.544419][T10843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.559853][T10948] loop4: detected capacity change from 0 to 8192 [ 193.626892][ T295] hsr_slave_0: left promiscuous mode [ 193.639554][ T295] hsr_slave_1: left promiscuous mode [ 193.645621][ T3326] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 193.653519][ T3326] FAT-fs (loop4): Filesystem has been set read-only [ 193.675190][ T295] veth0_macvtap: left promiscuous mode [ 193.680750][ T295] veth1_vlan: left promiscuous mode [ 193.686365][ T295] veth0_vlan: left promiscuous mode [ 193.775027][T10966] EXT4-fs: Ignoring removed bh option [ 193.808254][ T295] team0 (unregistering): Port device team_slave_1 removed [ 193.823886][ T295] team0 (unregistering): Port device team_slave_0 removed [ 193.907060][T10843] team0: Port device team_slave_0 added [ 193.914719][T10843] team0: Port device team_slave_1 added [ 193.949754][T10843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.957192][T10843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.983296][T10843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.998558][T10843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.005586][T10843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.031735][T10843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.133949][T10843] hsr_slave_0: entered promiscuous mode [ 194.162554][T10843] hsr_slave_1: entered promiscuous mode [ 194.170581][T10843] debugfs: 'hsr0' already exists in 'hsr' [ 194.176404][T10843] Cannot create hsr debugfs directory [ 194.272409][T10975] lo speed is unknown, defaulting to 1000 [ 194.493791][T10975] lo speed is unknown, defaulting to 1000 [ 194.577721][T10999] SELinux: failed to load policy [ 194.594316][T10975] lo speed is unknown, defaulting to 1000 [ 194.984235][T10843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.993868][T10843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.003665][T10843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.014179][T10843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.172205][T10843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.236662][T10843] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.276699][ T2378] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.284216][ T2378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.409016][ T2378] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.416207][ T2378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.512935][ T29] kauditd_printk_skb: 895 callbacks suppressed [ 195.512955][ T29] audit: type=1326 audit(1765622114.553:18108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 195.621594][ T29] audit: type=1326 audit(1765622114.590:18109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 195.645592][ T29] audit: type=1326 audit(1765622114.590:18110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 195.669347][ T29] audit: type=1326 audit(1765622114.590:18111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 195.693157][ T29] audit: type=1326 audit(1765622114.590:18112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 195.716783][ T29] audit: type=1326 audit(1765622114.590:18113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 195.740631][ T29] audit: type=1326 audit(1765622114.590:18114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 195.764434][ T29] audit: type=1326 audit(1765622114.590:18115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 195.788841][ T29] audit: type=1326 audit(1765622114.590:18116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 195.812629][ T29] audit: type=1326 audit(1765622114.590:18117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f863996f749 code=0x7ffc0000 [ 195.869593][T10843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.049992][T11087] syz1: rxe_newlink: already configured on lo [ 196.097800][T10843] veth0_vlan: entered promiscuous mode [ 196.111938][T10843] veth1_vlan: entered promiscuous mode [ 196.149481][T10843] veth0_macvtap: entered promiscuous mode [ 196.164639][T10843] veth1_macvtap: entered promiscuous mode [ 196.178430][T10843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.202602][T10843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.227424][ T1599] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.236370][ T1599] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.285164][T11091] set_capacity_and_notify: 2 callbacks suppressed [ 196.285180][T11091] loop4: detected capacity change from 0 to 8192 [ 196.322414][ T1599] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.355586][T11091] /dev/loop4: Can't open blockdev [ 196.360723][ T1599] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.395085][T11105] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2431'. [ 196.479369][T11108] lo speed is unknown, defaulting to 1000 [ 196.584010][T11108] lo speed is unknown, defaulting to 1000 [ 196.624856][T11108] lo speed is unknown, defaulting to 1000 [ 197.277754][T11136] atomic_op ffff8881199e1928 conn xmit_atomic 0000000000000000 [ 197.292491][T11136] SELinux: security_context_str_to_sid () failed with errno=-22 [ 197.351055][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 197.528917][T11147] rdma_rxe: rxe_newlink: failed to add lo [ 197.655921][T11147] loop3: detected capacity change from 0 to 8192 [ 197.732813][ T3321] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 197.741449][ T3321] FAT-fs (loop3): Filesystem has been set read-only [ 197.813153][T11151] rdma_rxe: rxe_newlink: failed to add lo [ 197.941624][T11151] loop3: detected capacity change from 0 to 8192 [ 197.952956][T11153] loop4: detected capacity change from 0 to 512 [ 197.960373][T11153] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.134841][ T3321] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 198.142902][ T3321] FAT-fs (loop3): Filesystem has been set read-only [ 198.355886][T11155] sd 0:0:1:0: device reset [ 198.362920][T11158] loop3: detected capacity change from 0 to 2048 [ 198.450301][ T3525] loop3: p1 < > p4 [ 198.461235][ T3525] loop3: p4 size 8388608 extends beyond EOD, truncated [ 198.516503][T11158] loop3: p1 < > p4 [ 198.538599][T11158] loop3: p4 size 8388608 extends beyond EOD, truncated [ 198.805198][T11169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.835609][T11169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.864841][T11169] loop2: detected capacity change from 0 to 512 [ 198.891879][T11169] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.229077][T11177] rdma_rxe: rxe_newlink: failed to add lo [ 199.330437][T11177] loop3: detected capacity change from 0 to 8192 [ 199.423698][ T3321] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 199.431932][ T3321] FAT-fs (loop3): Filesystem has been set read-only [ 199.551785][T11186] rdma_rxe: rxe_newlink: failed to add lo [ 199.654792][T11191] loop3: detected capacity change from 0 to 2048 [ 199.664624][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2498'. [ 199.691621][T11191] loop3: p1 < > p4 [ 199.697288][T11191] loop3: p4 size 8388608 extends beyond EOD, truncated [ 199.766157][T11186] loop1: detected capacity change from 0 to 8192 [ 199.787696][T11197] loop2: detected capacity change from 0 to 512 [ 199.794712][T11197] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.856387][T10843] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 199.864604][T10843] FAT-fs (loop1): Filesystem has been set read-only [ 200.219964][ T3613] udevd[3613]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 200.247895][T11217] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.260919][T11215] lo speed is unknown, defaulting to 1000 [ 200.272662][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 200.289883][T11217] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2506: invalid indirect mapped block 4294967295 (level 1) [ 200.331843][T11220] EXT4-fs: Ignoring removed orlov option [ 200.354961][T11220] EXT4-fs mount: 13 callbacks suppressed [ 200.354980][T11220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.374780][T11217] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2506: invalid indirect mapped block 4294967295 (level 1) [ 200.482038][T11215] lo speed is unknown, defaulting to 1000 [ 200.488316][T11217] EXT4-fs (loop4): 2 truncates cleaned up [ 200.495043][T11217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.508135][T11215] lo speed is unknown, defaulting to 1000 [ 200.551809][T11217] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.4.2506: path /507/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 200.621345][T11216] lo speed is unknown, defaulting to 1000 [ 200.810244][T11216] lo speed is unknown, defaulting to 1000 [ 200.824754][T11216] lo speed is unknown, defaulting to 1000 [ 200.895859][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.909465][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 200.909496][ T29] audit: type=1326 audit(1765622119.604:18452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbca8a465e7 code=0x7ffc0000 [ 200.940223][ T29] audit: type=1326 audit(1765622119.604:18453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbca89eb829 code=0x7ffc0000 [ 200.982790][T11219] rdma_rxe: rxe_newlink: failed to add lo [ 201.047878][T10843] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 201.056001][T10843] FAT-fs (loop1): Filesystem has been set read-only [ 201.076090][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.101058][ T29] audit: type=1326 audit(1765622119.660:18454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbca8a465e7 code=0x7ffc0000 [ 201.125578][ T29] audit: type=1326 audit(1765622119.660:18455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbca89eb829 code=0x7ffc0000 [ 201.149991][ T29] audit: type=1326 audit(1765622119.660:18456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fbca8a4f749 code=0x7ffc0000 [ 201.165372][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2510'. [ 201.175240][ T29] audit: type=1326 audit(1765622119.660:18457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbca8a465e7 code=0x7ffc0000 [ 201.210654][ T29] audit: type=1326 audit(1765622119.660:18458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbca89eb829 code=0x7ffc0000 [ 201.235309][ T29] audit: type=1326 audit(1765622119.660:18459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fbca8a4f749 code=0x7ffc0000 [ 201.260332][ T29] audit: type=1326 audit(1765622119.679:18460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbca8a465e7 code=0x7ffc0000 [ 201.284792][ T29] audit: type=1326 audit(1765622119.679:18461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbca89eb829 code=0x7ffc0000 [ 201.359893][T11237] EXT4-fs: Ignoring removed bh option [ 201.448648][T11237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.457129][T11245] rdma_rxe: rxe_newlink: failed to add lo [ 201.542277][ T3321] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 201.550295][ T3321] FAT-fs (loop3): Filesystem has been set read-only [ 201.640294][T11237] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 201.734578][T11237] EXT4-fs (loop4): Remounting filesystem read-only [ 201.756673][T11237] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 201.893785][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.098280][T11261] set_capacity_and_notify: 6 callbacks suppressed [ 202.098299][T11261] loop4: detected capacity change from 0 to 4096 [ 202.151898][T11261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.201144][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 202.212247][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 202.212351][ T3317] Tainted: [W]=WARN [ 202.212358][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.212371][ T3317] Call Trace: [ 202.212377][ T3317] [ 202.212384][ T3317] __dump_stack+0x1d/0x30 [ 202.212418][ T3317] dump_stack_lvl+0xe8/0x140 [ 202.212444][ T3317] dump_stack+0x15/0x1b [ 202.212529][ T3317] dump_header+0x81/0x240 [ 202.212614][ T3317] oom_kill_process+0x295/0x350 [ 202.212644][ T3317] out_of_memory+0x97b/0xb80 [ 202.212693][ T3317] try_charge_memcg+0x610/0xa10 [ 202.212721][ T3317] charge_memcg+0x51/0xc0 [ 202.212757][ T3317] __mem_cgroup_charge+0x28/0xb0 [ 202.212873][ T3317] filemap_add_folio+0x111/0x360 [ 202.212902][ T3317] __filemap_get_folio_mpol+0x326/0x650 [ 202.212958][ T3317] filemap_fault+0x44d/0xb70 [ 202.212994][ T3317] __do_fault+0xbc/0x200 [ 202.213015][ T3317] handle_mm_fault+0xfab/0x2c60 [ 202.213074][ T3317] do_user_addr_fault+0x630/0x1080 [ 202.213118][ T3317] exc_page_fault+0x62/0xa0 [ 202.213154][ T3317] asm_exc_page_fault+0x26/0x30 [ 202.213212][ T3317] RIP: 0033:0x7fbca8925fd4 [ 202.213239][ T3317] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 202.213260][ T3317] RSP: 002b:00007ffefdbb2b80 EFLAGS: 00010206 [ 202.213277][ T3317] RAX: 0000001b33b24000 RBX: 000000000000045e RCX: 000000000002ee00 [ 202.213371][ T3317] RDX: 00000000063a4f90 RSI: 00007ffefdbb2c10 RDI: 0000000000000001 [ 202.213388][ T3317] RBP: 00007ffefdbb2bbc R08: 0000000017c1d022 R09: 7fffffffffffffff [ 202.213404][ T3317] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 202.213421][ T3317] R13: 00000000000927c0 R14: 000000000002eec9 R15: 00007ffefdbb2c10 [ 202.213471][ T3317] [ 202.400636][ T3317] memory: usage 307200kB, limit 307200kB, failcnt 14766 [ 202.407966][ T3317] memory+swap: usage 324152kB, limit 9007199254740988kB, failcnt 0 [ 202.416260][ T3317] kmem: usage 299712kB, limit 9007199254740988kB, failcnt 0 [ 202.423600][ T3317] Memory cgroup stats for /syz0: [ 202.459351][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.484827][ T3317] cache 167936 [ 202.488246][ T3317] rss 8441856 [ 202.491604][ T3317] shmem 0 [ 202.494549][ T3317] mapped_file 0 [ 202.498136][ T3317] dirty 0 [ 202.501121][ T3317] writeback 0 [ 202.504448][ T3317] workingset_refault_anon 5727 [ 202.509228][ T3317] workingset_refault_file 6737 [ 202.514024][ T3317] swap 17289216 [ 202.517931][ T3317] swapcached 40960 [ 202.521729][ T3317] pgpgin 232734 [ 202.525358][ T3317] pgpgout 230616 [ 202.529021][ T3317] pgfault 219270 [ 202.532594][ T3317] pgmajfault 1408 [ 202.536267][ T3317] inactive_anon 86016 [ 202.540264][ T3317] active_anon 0 [ 202.543912][ T3317] inactive_file 12288 [ 202.547993][ T3317] active_file 188416 [ 202.552148][ T3317] unevictable 8388608 [ 202.556181][ T3317] hierarchical_memory_limit 314572800 [ 202.561563][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 202.567885][ T3317] total_cache 167936 [ 202.571796][ T3317] total_rss 8441856 [ 202.576105][ T3317] total_shmem 0 [ 202.579607][ T3317] total_mapped_file 0 [ 202.583598][ T3317] total_dirty 0 [ 202.587143][ T3317] total_writeback 0 [ 202.591002][ T3317] total_workingset_refault_anon 5727 [ 202.596409][ T3317] total_workingset_refault_file 6737 [ 202.601749][ T3317] total_swap 17289216 [ 202.605732][ T3317] total_swapcached 40960 [ 202.610021][ T3317] total_pgpgin 232734 [ 202.614019][ T3317] total_pgpgout 230616 [ 202.618162][ T3317] total_pgfault 219270 [ 202.622314][ T3317] total_pgmajfault 1408 [ 202.626482][ T3317] total_inactive_anon 86016 [ 202.631032][ T3317] total_active_anon 0 [ 202.635026][ T3317] total_inactive_file 12288 [ 202.639547][ T3317] total_active_file 188416 [ 202.644043][ T3317] total_unevictable 8388608 [ 202.648560][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2517,pid=11252,uid=0 [ 202.663476][ T3317] Memory cgroup out of memory: Killed process 11252 (syz.0.2517) total-vm:96020kB, anon-rss:9456kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 202.723518][T11273] loop4: detected capacity change from 0 to 128 [ 203.104201][T11282] loop0: detected capacity change from 0 to 512 [ 203.119376][T11282] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.2525: iget: bad extra_isize 90 (inode size 256) [ 203.135094][T11282] EXT4-fs (loop0): Remounting filesystem read-only [ 203.156340][T11282] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 203.206258][T11282] EXT4-fs (loop0): 1 orphan inode deleted [ 203.261535][T11282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.381991][T11301] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2527'. [ 203.407069][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.585234][T11311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.613784][T11311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.639612][T11311] loop2: detected capacity change from 0 to 512 [ 203.654199][T11311] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 203.723009][T11313] lo speed is unknown, defaulting to 1000 [ 203.807149][T11313] lo speed is unknown, defaulting to 1000 [ 203.813480][T11313] lo speed is unknown, defaulting to 1000 [ 204.298896][T11322] SELinux: failed to load policy [ 204.491988][T11325] rdma_rxe: rxe_newlink: failed to add lo [ 204.647823][T11325] loop2: detected capacity change from 0 to 8192 [ 204.684183][T11335] loop1: detected capacity change from 0 to 512 [ 204.712512][ T3316] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 204.720528][ T3316] FAT-fs (loop2): Filesystem has been set read-only [ 204.729351][T11335] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.796374][T11337] rdma_rxe: rxe_newlink: failed to add lo [ 204.871013][T11337] loop2: detected capacity change from 0 to 8192 [ 204.963077][ T3316] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 204.971425][ T3316] FAT-fs (loop2): Filesystem has been set read-only [ 205.136398][T11343] loop1: detected capacity change from 0 to 512 [ 205.162256][T11343] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.192727][T11343] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2545: invalid indirect mapped block 4294967295 (level 1) [ 205.210361][T11343] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2545: invalid indirect mapped block 4294967295 (level 1) [ 205.236169][T11343] EXT4-fs (loop1): 2 truncates cleaned up [ 205.242659][T11343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.261371][T11343] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.2545: path /18/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 205.318652][T11352] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2547'. [ 205.730669][T11362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.740920][T11362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.752873][T11362] loop4: detected capacity change from 0 to 512 [ 205.764467][T11362] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 205.872786][T11364] rdma_rxe: rxe_newlink: failed to add lo [ 205.904985][T10843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.953274][T11364] loop3: detected capacity change from 0 to 8192 [ 206.000119][ T3321] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 206.008346][ T3321] FAT-fs (loop3): Filesystem has been set read-only [ 206.148344][T11369] loop3: p1 < > p4 [ 206.149512][T11374] sz1: rxe_newlink: already configured on lo [ 206.184965][T11369] loop3: p4 size 8388608 extends beyond EOD, truncated [ 206.238904][ T3008] loop3: p1 < > p4 [ 206.240385][T11377] lo speed is unknown, defaulting to 1000 [ 206.255996][ T3008] loop3: p4 size 8388608 extends beyond EOD, truncated [ 206.309727][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 206.311344][ T3317] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 206.327951][ T3317] FAT-fs (loop0): Filesystem has been set read-only [ 206.329864][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 206.360172][ T29] kauditd_printk_skb: 543 callbacks suppressed [ 206.360191][ T29] audit: type=1400 audit(1765622124.693:19005): avc: denied { create } for pid=11380 comm="syz.2.2559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 206.431670][T11377] lo speed is unknown, defaulting to 1000 [ 206.443001][ T3008] ================================================================== [ 206.451334][ T3008] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 206.458226][ T3008] [ 206.460575][ T3008] write to 0xffff8881021c9218 of 8 bytes by task 3326 on cpu 1: [ 206.468387][ T3008] inc_diskseq+0x2d/0x40 [ 206.472920][ T3008] disk_force_media_change+0x9e/0xe0 [ 206.478230][ T3008] lo_release+0x2cb/0x400 [ 206.482931][ T3008] bdev_release+0x373/0x3d0 [ 206.487743][ T3008] blkdev_release+0x15/0x20 [ 206.492724][ T3008] __fput+0x29b/0x650 [ 206.496843][ T3008] fput_close_sync+0xad/0x190 [ 206.501571][ T3008] __x64_sys_close+0x56/0xf0 [ 206.506208][ T3008] x64_sys_call+0x2c25/0x3000 [ 206.510981][ T3008] do_syscall_64+0xd8/0x2a0 [ 206.515523][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.521440][ T3008] [ 206.523841][ T3008] read to 0xffff8881021c9218 of 8 bytes by task 3008 on cpu 0: [ 206.531422][ T3008] block_uevent+0x31/0x50 [ 206.535793][ T3008] dev_uevent+0x375/0x400 [ 206.540163][ T3008] uevent_show+0x11a/0x200 [ 206.544612][ T3008] dev_attr_show+0x3f/0xa0 [ 206.549237][ T3008] sysfs_kf_seq_show+0x1a3/0x280 [ 206.554197][ T3008] kernfs_seq_show+0x82/0xa0 [ 206.558905][ T3008] seq_read_iter+0x31e/0x950 [ 206.563541][ T3008] kernfs_fop_read_iter+0xc1/0x330 [ 206.568707][ T3008] vfs_read+0x64c/0x770 [ 206.572972][ T3008] ksys_read+0xda/0x1a0 [ 206.577143][ T3008] __x64_sys_read+0x40/0x50 [ 206.581659][ T3008] x64_sys_call+0x2889/0x3000 [ 206.586355][ T3008] do_syscall_64+0xd8/0x2a0 [ 206.590886][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.596923][ T3008] [ 206.599458][ T3008] value changed: 0x00000000000004af -> 0x00000000000004b7 [ 206.607099][ T3008] [ 206.609541][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 206.615725][ T3008] CPU: 0 UID: 0 PID: 3008 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 206.626699][ T3008] Tainted: [W]=WARN [ 206.630514][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.640816][ T3008] ================================================================== [ 206.653674][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 206.664256][T11377] lo speed is unknown, defaulting to 1000 [ 206.760044][ T29] audit: type=1400 audit(1765622125.076:19006): avc: denied { create } for pid=11387 comm="syz.4.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.807130][T11386] SELinux: failed to load policy [ 206.817328][ T29] audit: type=1400 audit(1765622125.104:19007): avc: denied { bind } for pid=11387 comm="syz.4.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.839045][ T29] audit: type=1400 audit(1765622125.104:19008): avc: denied { write } for pid=11387 comm="syz.4.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1