last executing test programs: 5.132402784s ago: executing program 3 (id=340): openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r4}, 0x14) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 5.040651145s ago: executing program 1 (id=341): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) ioctl$TCSETSW2(r3, 0x541e, &(0x7f0000000280)={0x2, 0x0, 0x0, 0xf1a8, 0x0, "1a96947d01000000000000008a81ca1e1238ec"}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) close(r6) 4.473848834s ago: executing program 3 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001804000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4.439442724s ago: executing program 2 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001804000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4.199748548s ago: executing program 0 (id=345): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000001f40)=""/4095, 0x26, 0xfff, 0x8}, 0x28) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/197, 0xc5}], 0x1, 0x73, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/67, 0x43}], 0x1, 0x8000, 0x7f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791048000000000071000c000000000095000300", @ANYRES64=r1], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x32, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x1c0800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000300)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @exit], &(0x7f00000000c0)='GPL\x00', 0x3}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) lseek(r5, 0xa, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xaad6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000817}, 0x80d0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_clone3(&(0x7f0000000880)={0x808c0080, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 4.134512039s ago: executing program 0 (id=347): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='sessionid\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1ff, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) set_tid_address(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/25, 0x19}, 0x5}], 0x1, 0x40008060, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000780)=ANY=[]}, 0x78) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_io_uring_setup(0x2e3b, &(0x7f0000000080)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f0000000140), &(0x7f0000000300)) 4.07843336s ago: executing program 1 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioprio_get$pid(0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.806745664s ago: executing program 4 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r3) umount2(&(0x7f0000000040)='.\x00', 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000200)={0x1}) fcntl$lock(r6, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 3.800146784s ago: executing program 1 (id=351): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3a1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3.753689595s ago: executing program 1 (id=352): r0 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x5000) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x1) flock(r4, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0xb23, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000004, 0x2ffffffff}, 0x1904, 0x0, 0x1, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) close_range(r5, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRES8=r6], 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x17, &(0x7f0000000000)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ldst={0x2, 0x0, 0x1, 0xa, 0xa, 0xffffffffffffffff, 0x8}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7}, @ldst={0x2, 0x0, 0x0, 0x6, 0x2, 0x6, 0x10}], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000100)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xa, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[r2, r2, r2], &(0x7f0000000200)=[{0x1, 0x2, 0xf, 0x1}, {0x2, 0x3, 0xd, 0x4}, {0x5, 0x1, 0xd, 0x1}, {0x0, 0x8, 0x3, 0x1}, {0x1, 0x2, 0x0, 0x9}, {0x2, 0x5, 0x9, 0x6}], 0x10, 0x1}, 0x94) 3.507385938s ago: executing program 3 (id=353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001804000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.485629559s ago: executing program 2 (id=354): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x2, &(0x7f0000000240)=[{0x7f, 0x8, 0x2, 0x7}, {0xfffa, 0x6, 0xc9, 0x3}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x4, 0x0, 0x7ffffffffffffffe, 0x38db0863, 0x0, 0x0, 0xd, 0x9d}) creat(&(0x7f0000000200)='./bus\x00', 0x11e) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], 0x0, 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) setgid(0x0) 2.840588418s ago: executing program 2 (id=355): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) setgid(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r4, &(0x7f0000000080)='./mnt\x00', r4, &(0x7f0000000100)='./mnt\x00') unlinkat(r4, &(0x7f00000000c0)='./mnt\x00', 0x200) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0xc, {{0xa, 0x2, 0x0, @mcast2}}, {{0xa, 0x4e21, 0x10008100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40000}}}, 0x108) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.754641879s ago: executing program 4 (id=356): r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000800)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}], [{@permit_directio}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfsdef}, {@smackfsroot={'smackfsroot', 0x3d, '^@\x8e\xdb\x19('}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',[[$}*:'}}, {@appraise_type}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00') ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRESOCT=0x0, @ANYRES32=r3], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_get$pid(0x2, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000000c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112920000000000bf200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x7}, 0x94) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 2.476216613s ago: executing program 2 (id=357): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtaction={0x2aa8, 0x30, 0x1, 0x70bd29, 0x25dfdbff, {}, [{0x2a94, 0x1, [@m_pedit={0x2a90, 0x1a, 0x0, 0x0, {{0xa}, {0x2a64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5f7, 0x8b60, 0x5, 0x101, 0x88}, 0x65, 0x6}, [{0xfff, 0x6, 0x3, 0x7, 0x5, 0xa92}, {0x65a, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x8, 0x8001, 0x2, 0x1, 0x9}, {0x10, 0x7, 0xfffff000, 0x6f30, 0xf}, {0x7, 0x9, 0x4, 0x1caece98, 0xf, 0xefcf}, {0x48a0, 0xb, 0x200, 0x9, 0x7f, 0x7}, {0x1, 0x7, 0x81, 0x800, 0x4, 0x3}, {0x6, 0x9e, 0x4, 0x400, 0x8}, {0x4, 0x8, 0x3, 0xa, 0x5, 0xa99c}, {0x4, 0xfc, 0x8, 0x7, 0x5}, {0x5, 0x2, 0x7, 0xffffc8e1, 0x35a59efd, 0x400}, {0x6, 0x5, 0x4, 0xfffffff7, 0x1739, 0xffffff00}, {0x6, 0x9, 0x4, 0x7ff, 0x2, 0x7}, {0x7ff, 0xfffffffb, 0x0, 0x8, 0x22e8, 0x80}, {0x1, 0x9, 0xf, 0x7f2b, 0x5, 0x2}, {0x1, 0x6, 0x3, 0xfff, 0xf19, 0x4}, {0x9, 0x80000001, 0x3, 0xa124, 0xb6, 0x2}, {0x401, 0x1, 0x5, 0x8, 0x485, 0x4}, {0x8001, 0x5, 0x0, 0xfffffc00, 0x1, 0x9}, {0x12fb, 0x9, 0x8, 0x10f, 0x0, 0x3}, {0xfffffff8, 0x1, 0x1, 0x2, 0x1, 0x6}, {0x5, 0x8, 0x8, 0x0, 0xfffffffb, 0x9}, {0x0, 0x8, 0x9, 0x6, 0x3, 0x97}, {0x813, 0x5d8, 0x8, 0x8, 0x9, 0x1}, {0x4, 0x9, 0x8, 0x4, 0x2, 0x1}, {0x1, 0x0, 0x7fff, 0xfffffff8, 0x4, 0xfffffff0}, {0xe79, 0x7, 0x7ff, 0x5, 0x0, 0x5}, {0xc2d7, 0x400, 0x6, 0x5, 0x0, 0x2}, {0xfffffffd, 0x2, 0x5, 0xfc, 0xfffffff5, 0xfffffc00}, {0x5, 0xfff, 0x1524, 0x0, 0x7, 0xfff}, {0x6, 0x0, 0x155c, 0x7, 0x7}, {0x2, 0x1, 0xfffffff7, 0x5, 0xfffffff7, 0x7fff}, {0x2, 0x6d48, 0x1, 0x8, 0xf, 0x7}, {0x1, 0x4, 0x7341, 0xd, 0x8936}, {0x1, 0x5, 0x1, 0x3, 0xa0, 0xb285}, {0x7fffffff, 0x0, 0x4, 0xbb, 0x8, 0xfffffff8}, {0x2, 0x5, 0x6, 0x1, 0x9}, {0x8, 0x4, 0x30, 0x200, 0x2, 0x7}, {0x3, 0x3ff, 0xe, 0x0, 0xafbe, 0x3c0a}, {0x80000000, 0x3, 0x1, 0x1, 0x891f, 0x4}, {0x9, 0x80000000, 0x74, 0x9, 0x1, 0x99}, {0x9, 0x1, 0x0, 0x10001, 0x3ff, 0x7fff}, {0x9, 0xffff, 0x5ef7, 0x5, 0x3, 0x6}, {0x5, 0x19, 0x0, 0x0, 0x401, 0x500000}, {0x2, 0x1, 0x9, 0x489a, 0x2, 0xb}, {0x80000000, 0x0, 0x4, 0x4, 0x5, 0x1}, {0x0, 0x4, 0x2, 0x5, 0x3, 0x8f}, {0xffffffff, 0x45, 0xffff, 0x7, 0x5, 0x9}, {0x1, 0x0, 0x401, 0x4, 0xa32, 0x401c}, {0x5, 0x1000, 0xfffffff9, 0x1b00000, 0x0, 0xd7}, {0xbfb1, 0x2, 0x2, 0xcb3, 0x6f8, 0x7}, {0x3, 0xe70, 0xd1d, 0x4, 0x4, 0x5}, {0xc7, 0x5, 0x5, 0x9, 0x3, 0x7}, {0x34, 0x88, 0x1e97d19c, 0x2, 0x8, 0x40}, {0x11a5, 0x1, 0x10000, 0x3, 0x3, 0x1ff}, {0x8, 0x6, 0x5, 0x3, 0x1e3e4ead, 0x80000001}, {0x401, 0x6, 0x1, 0x4, 0x2, 0x4}, {0x9, 0x71cfabe7, 0x5, 0x4, 0x8, 0x9}, {0xa, 0xffff, 0x4, 0xf, 0x80, 0x9}, {0xa17, 0x1, 0x5, 0x7, 0x300000, 0xb9}, {0x5, 0x1, 0x0, 0x3, 0x9, 0x6}, {0x1, 0x2, 0xead, 0x4, 0x4, 0x3}, {0x6, 0xffffffff, 0x9, 0x7, 0xe8, 0xb76}, {0x7, 0xe, 0x2, 0xac, 0x10001, 0x5a4}, {0x1, 0x0, 0x9, 0x3, 0x7ff, 0x100}, {0x9, 0x1, 0xfffffe01, 0x8, 0x8, 0x6}, {0x10000, 0x2, 0x8, 0x0, 0x9, 0x940}, {0x21db, 0x4, 0x40000000, 0xa1, 0x96, 0x7}, {0x581ba20a, 0x9, 0x0, 0x83, 0x4, 0x4}, {0xd, 0xe3, 0x0, 0x19c3, 0x6, 0xffffffff}, {0x7ff, 0xe00000, 0x2, 0x6, 0x5d, 0x6}, {0xfff, 0x0, 0x4, 0xfffffbff, 0x3, 0x2}, {0x9f, 0x5, 0x10, 0x280000, 0x800, 0x4}, {0xf, 0x80000001, 0xffffffb2, 0x2b, 0x5, 0x2}, {0x6, 0x8, 0x7, 0x6e6, 0xe9}, {0x10000, 0xfffffff8, 0xb78, 0x4, 0x4, 0x6}, {0x1, 0xfffffffb, 0x3ff, 0x1, 0xade, 0x7ff}, {0x6, 0x2, 0xfffffff7, 0x7, 0x2, 0x7f}, {0x6, 0xf590, 0x80, 0x1, 0x8001, 0x4}, {0x6, 0x2, 0x480, 0x79, 0x9, 0x6}, {0x1, 0x3d40, 0x7, 0x46d, 0x8, 0xd}, {0x7, 0x2, 0x1, 0x9, 0x84c4, 0x9}, {0x2756, 0x400, 0x4, 0x2, 0x0, 0x1}, {0xffffffff, 0xe, 0x1, 0xa8, 0x2, 0x7fffffff}, {0x2, 0x1, 0x3, 0x3, 0x4, 0x9}, {0x3b7, 0x3, 0x2, 0x7, 0x2, 0x8}, {0x5, 0x8001, 0x81, 0x56, 0x9, 0x7}, {0x1, 0x0, 0x7ff, 0x3, 0x8, 0x3}, {0x2e73, 0x1f, 0xdb72, 0x7c365bee, 0x8, 0x3}, {0x8001, 0x5, 0x6, 0x7, 0x1, 0x9}, {0xffff2508, 0x2, 0x101, 0x100, 0x0, 0x6}, {0x38f5, 0xffff8000, 0x81, 0x9, 0x7, 0x8}, {0x7, 0x9, 0x9, 0x80000001, 0x3ff, 0x101}, {0x413d22a0, 0x1, 0xb65c, 0x7, 0x81, 0x4}, {0xa, 0x95, 0x101, 0x4, 0x0, 0x5}, {0x1ff, 0x20, 0x8, 0x5592, 0x9, 0x100}, {0x4, 0x9, 0x81, 0xfffffff8, 0x7, 0xe86}, {0x3, 0x6, 0xd, 0x1, 0x4, 0x3}, {0xe, 0x9958, 0x81, 0xfffffff0, 0x1, 0x5}, {0x0, 0x7, 0xfffff07c, 0x845, 0xfff}, {0x0, 0xfffffff9, 0x6, 0x8, 0x5, 0x5}, {0x4, 0x7, 0x9, 0x330a, 0x4, 0x8}, {0x30f0a026, 0x8, 0x4, 0x7, 0x6, 0xff}, {0x7, 0x0, 0x3800000, 0x8, 0x4cc0c7e8, 0x3}, {0xb1, 0x2, 0x98, 0x8001, 0x80000001, 0x1}, {0x200, 0x9, 0xfffffffb, 0x7, 0x800, 0x8}, {0x6, 0xe, 0x23, 0xf, 0xd9, 0x5}, {0x400, 0x9, 0x100, 0x8, 0x100}, {0x0, 0x0, 0xe, 0x0, 0x4, 0x7b}, {0x92e, 0x400, 0xffffff01, 0x2d, 0xc07, 0x400}, {0x4, 0x4, 0xc76, 0x7, 0x8, 0x558b}, {0x4, 0x9, 0x2bc, 0xa0, 0x3ff, 0x2}, {0x6, 0x1, 0x5, 0x2, 0x7, 0x7f}, {0x3, 0x49a, 0x2, 0x2, 0x4, 0x10}, {0x2, 0x7, 0x9, 0x5, 0x6}, {0x63f024bb, 0xa0, 0x5, 0x3, 0x8, 0x7b}, {0x1, 0x10001, 0x81, 0x9, 0x5, 0x7}, {0x5, 0x1ff, 0x1, 0x7, 0x8000, 0xa457}, {0xc, 0x9, 0xffffff00, 0x605, 0x0, 0x774}, {0x4, 0x5, 0x8, 0x400, 0x5d85, 0x9}, {0x4, 0x2, 0x10001, 0x7, 0x0, 0x10000}, {0x9, 0x2, 0x9, 0x9, 0x1, 0x79f}, {0x6, 0x8, 0x1, 0x2, 0x0, 0xffff8001}, {0x100, 0x9, 0x4, 0x8, 0x7, 0xd2f}, {0xfffffeff, 0x4, 0x30, 0x2a, 0x6, 0x2}, {0x5, 0x3, 0x0, 0x35, 0x9, 0x9e}, {0x9, 0x5, 0xe2, 0x5, 0x0, 0x1}, {0x4, 0xa, 0x0, 0x3, 0x8}], [{0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0xbd8a62aa819b833a}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x4}, {0x4}, {0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x6, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x4, 0x1}, {0x5}, {0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x60acfaa94dc96dc1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x6}, {0x3, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0xa}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x9293fc9a996600a2, 0x1}, {0x3}, {0x4}, {0x5}, {0x4}, {0x2}, {0x5}, {0x7}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x7}, {}, {0x7}, {0x5}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1ff, 0x100, 0x10000000, 0x55, 0x8000}, 0x9, 0x7}, [{0xdd, 0xffff9bcb, 0x0, 0x8, 0x40}, {0x10, 0x400, 0x1, 0x89, 0xe, 0xf}, {0x9, 0xbc, 0x15, 0x3, 0x23b0, 0x4}, {0x3, 0x3, 0x6, 0x80000001, 0x4, 0x236}, {0x4, 0x1, 0xb3, 0x4, 0x2, 0x101}, {0x5, 0x6, 0xfe2a, 0x2, 0x4d8, 0x6}, {0x6, 0x3, 0x2, 0x9, 0x6, 0x8}, {0xfff, 0x9, 0x9, 0x5, 0x3, 0x8001}, {0x0, 0x7, 0xfff, 0x8b9, 0x6, 0x7}, {0x80000001, 0x6, 0xfffff75c, 0x2262, 0x80, 0x4}, {0xfffffffa, 0xa, 0x7f, 0x8, 0x7, 0x2}, {0x8, 0x2, 0x80000001, 0x1, 0x1, 0x1}, {0xffff, 0x9, 0x1, 0xb, 0x2, 0xff}, {0xffffffff, 0x6, 0x3, 0xffffffff, 0x200}, {0x101, 0x5, 0x6, 0x4, 0xfffffffa, 0x7}, {0x0, 0x80, 0x71d3, 0x459, 0x6, 0xfffffffc}, {0x81, 0x3d7, 0x2, 0x9, 0x4, 0x5}, {0xfffffffc, 0x0, 0x6, 0x1000, 0x4, 0x1000}, {0x1, 0xdf7, 0x0, 0x3, 0x80, 0x3}, {0x5, 0xb, 0x47, 0x3, 0x7, 0x9}, {0xb2ac, 0xebe, 0x7df, 0xfffff001, 0x80, 0x539e}, {0x3, 0x10000, 0x7ff, 0xc4, 0x9, 0x7b1a}, {0x6, 0x9, 0x5cb, 0xfffffff9, 0x33c3, 0xfff}, {0x5, 0xffff9448, 0x8001, 0x7, 0x0, 0x471f83e2}, {0x7f7, 0xcba, 0x100, 0x3, 0xd, 0x5}, {0x6, 0x0, 0xffff, 0x3, 0x40, 0x946}, {0xf535, 0x10000, 0x2, 0x7, 0x6, 0x8000}, {0xffffff7b, 0x8, 0x2, 0x90000000, 0xfa, 0x2}, {0x6, 0x3, 0xc, 0x3, 0x5}, {0x2, 0x2, 0x548fb84d, 0xfffffffb, 0x9, 0x2}, {0x4, 0x0, 0x6, 0xe5, 0x80000000, 0x4}, {0xc2, 0x7ff, 0xb, 0x0, 0x4, 0x66}, {0x7, 0x30b, 0xfffffffe, 0x21, 0x5, 0x1}, {0x3f, 0x9, 0xffff, 0xffff, 0x3, 0x1}, {0x0, 0x0, 0xffff, 0x5, 0x5, 0x9ed9}, {0xffffffff, 0x8, 0x9, 0x6, 0x1, 0x2}, {0x8, 0x4, 0x17b3, 0x3, 0x4, 0x2e}, {0x3, 0x6, 0xfa, 0x2, 0x2, 0x6}, {0x2, 0x5, 0x3, 0x9, 0x63c9, 0xf5c}, {0x3, 0xffff, 0xae2c, 0xfffffffc, 0x9, 0x5}, {0x4, 0x3, 0x6, 0x4, 0xd4c, 0x9a}, {0x1, 0x4f, 0x10001, 0x3, 0x9, 0x6}, {0x6, 0x75, 0x8, 0x2, 0x101, 0x7}, {0x0, 0x4f, 0xff, 0x3, 0xc4a6, 0x2}, {0x6, 0x32000000, 0xff, 0x1000, 0x2, 0xffffffff}, {0x0, 0x6, 0x7, 0x6, 0x5, 0x1}, {0x6, 0x9, 0xffff, 0x6, 0x1, 0xb4}, {0x0, 0x1, 0xfbd1, 0x8, 0x5, 0x3}, {0x0, 0x200000, 0x7ff, 0x6, 0x6, 0xfffffffe}, {0x3, 0x8, 0x3, 0x3, 0x8, 0x5}, {0xfffffffb, 0xfff, 0xf, 0x2, 0x1, 0x4}, {0x6, 0x7f, 0x4, 0x4, 0x5, 0x10001}, {0x7, 0x6, 0xffffffff, 0x80000001, 0x400, 0x10001}, {0x100, 0x401, 0x9, 0xfffffffd, 0x4, 0x3}, {0x2, 0xfad, 0xa, 0x2, 0x7f, 0xa}, {0xa, 0x1, 0x7, 0x0, 0x21f, 0x2}, {0x1d2, 0x6, 0xd, 0x6, 0x9, 0x9}, {0x0, 0xfffffffb, 0x1, 0x7ff, 0xb52, 0x3}, {0x80000001, 0x101, 0x5, 0x7, 0x1000, 0xbc78}, {0x6, 0x8, 0x6, 0x3, 0x2, 0x3}, {0x7, 0xd, 0x0, 0xfffffffc, 0x7fff, 0xffff}, {0xca9, 0x7f, 0x5, 0x3, 0x9, 0xffffffff}, {0x4, 0x2, 0x101, 0x8, 0x6, 0xe6}, {0x9, 0xfffffac5, 0x0, 0x7, 0x8, 0x8000}, {0x1, 0x7, 0x1, 0x0, 0xcc, 0xff}, {0x400, 0xc, 0x7, 0x3, 0x100, 0x8}, {0x8001, 0x2e, 0x4, 0x400, 0x3, 0x800}, {0x5, 0x2, 0xe9, 0x7, 0xc}, {0x7ff, 0x5, 0x0, 0x5, 0x800, 0x1ff}, {0x1, 0x3, 0x9, 0x3ff, 0x4026944d, 0x9}, {0x8, 0x1, 0x4, 0x0, 0x8, 0x3}, {0x9, 0x4, 0x10000, 0x1, 0x3, 0x2}, {0x4, 0x7, 0x10000, 0x6, 0x297, 0xff}, {0x0, 0x1000, 0x4, 0x7, 0x10001}, {0x5, 0xbde, 0x5, 0x2cd78ace, 0x3, 0x8}, {0x1, 0xc6, 0x800, 0x5, 0x6, 0x40}, {0x1d47, 0x0, 0x1, 0x5, 0xffffffff, 0x11c}, {0x1, 0x162, 0xc86, 0x4, 0x2, 0x3}, {0x98f, 0x6, 0xecfd, 0x40, 0xf28, 0x7ff}, {0x5, 0x6, 0x5, 0x8, 0x2, 0x401}, {0x6, 0x40, 0x40, 0x9, 0xfffff503, 0x5f0a8000}, {0xf50c, 0x2655, 0x7f, 0x1c, 0x3, 0x9}, {0x0, 0x80, 0x4, 0x6, 0x1e7072c6, 0x1cf000}, {0xfffffff7, 0x5, 0x3ff, 0x9, 0x30}, {0xbbe5, 0x3ff, 0x7, 0x0, 0x400, 0x100}, {0x2, 0x9, 0x4, 0xec, 0x8, 0x80000001}, {0x1, 0x2, 0xd40b8fe7, 0xfb29, 0x2, 0x1d65b554}, {0x3b1b2cfe, 0x4, 0xa6, 0xc0000000, 0x401, 0xfffffff1}, {0x0, 0x7ff, 0x0, 0xffffffc0, 0x7fff800, 0x7}, {0xd, 0x5, 0x6, 0x5, 0x0, 0x10000}, {0x0, 0x6, 0x1, 0x4, 0x4, 0x4}, {0x4, 0xf0, 0x9, 0xfffffffe, 0x5}, {0x8001, 0x2ded, 0x6, 0x6, 0x7, 0x2}, {0x179, 0x2, 0xfffffffe, 0x200, 0x10000, 0x5}, {0x1, 0x1, 0x2, 0xf1e, 0x4, 0xfb6d}, {0x1, 0x6102, 0xd02, 0x5, 0xf5b, 0xf}, {0xf58, 0x3, 0x6, 0xe, 0x9, 0xffff}, {0x0, 0x9, 0x8, 0x0, 0x9}, {0x10, 0x3, 0x4, 0xa, 0xfffffff9, 0x9}, {0x6, 0x62, 0x3f3, 0x80000001, 0x5, 0x4}, {0x4, 0x81, 0x23, 0x2, 0x6, 0xff}, {0xc, 0x10, 0x7, 0x8, 0x4, 0x10001}, {0x4, 0x559ed72d, 0xcac, 0x0, 0x2, 0xffff}, {0x6, 0xe1, 0x100, 0x401, 0x200, 0x9}, {0x3a6f6741, 0xe6a4, 0x9, 0x5, 0x1, 0x4}, {0x8000, 0x6, 0x19, 0x400, 0x2, 0x8}, {0x6469c0e4, 0x0, 0x10000, 0x7, 0x0, 0x5}, {0x0, 0x9, 0x0, 0xfffffeff, 0x0, 0x3}, {0x200, 0x80, 0xa, 0x4, 0x7ca}, {0x5f, 0x3ff, 0x3ff, 0x489733aa, 0xcc, 0x10000}, {0x5, 0xba, 0x6, 0x1, 0x6, 0x10}, {0x1, 0xc, 0x7, 0x1ff, 0x53, 0x3}, {0x6, 0x2, 0xc, 0x2, 0x7f, 0x9}, {0xf0, 0x81, 0xfffffff7, 0x3, 0x3, 0x80000001}, {0xf5b, 0x7e, 0xb, 0x4, 0x9, 0x4}, {0x2f, 0x1, 0xffff491c, 0x9, 0xfffff8ec, 0x6bca}, {0x8001, 0x8, 0x3, 0x6, 0x8, 0xf}, {0x1, 0x7, 0x9, 0x2, 0xfffffffd, 0xffffffff}, {0xffff, 0x400, 0xb, 0x5, 0x8, 0xa}, {0x8001, 0x8, 0xbe, 0x6, 0x9, 0xffff7fff}, {0x5c, 0x0, 0x3b, 0x2, 0x6, 0xff}, {0x0, 0x6, 0x100, 0x1ff, 0x7fffffff, 0x8}, {0x8, 0x0, 0x8, 0xfffffff7, 0x10001, 0x722c}, {0x3f, 0x8, 0x4, 0x1, 0x7f, 0x1000}, {0x7, 0x2, 0x7, 0x8248, 0x64, 0xc}, {0x2, 0x1, 0x4, 0x0, 0x100, 0xc46a}, {0x1b0, 0x4, 0x8bdb, 0x7, 0x5, 0x1}, {0x0, 0x8981864, 0x90000, 0x3, 0x6, 0x2}], [{0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x5, 0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x3}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x4a04d0d0d040c9a}, {0x1, 0x1}, {0x3}, {}, {}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x1}, {0x4}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {}, {0x7}, {0x2}, {}, {0x4, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x3, 0x7f}, 0x1, 0x2}, [{0x1, 0x5, 0x4, 0x2, 0x9, 0x3e341d61}, {0x42, 0xfffffffd, 0x8, 0x0, 0xea, 0x68000000}, {0xa8, 0x1d2, 0xe8a, 0x7d, 0x17eb, 0xb0}, {0x2, 0x100, 0x4, 0x7, 0x5}, {0x9103, 0x4, 0x5, 0x0, 0xfffff728, 0xc}, {0x3, 0x401, 0x8c, 0x6, 0x4, 0x369}, {0x4c92, 0x9, 0x2, 0x7, 0xfe07, 0x5}, {0x8f31, 0x6, 0x2, 0x101, 0x0, 0x20000}, {0xffffffff, 0x0, 0x7f, 0xf18, 0x9, 0x7}, {0x4, 0x3, 0x2e, 0x7fffffff, 0x3, 0x7}, {0x0, 0x0, 0xfffffffd, 0xfffff6ff, 0x6, 0x38000}, {0xc6a, 0x0, 0xffffff83, 0xe6ca, 0x9, 0xc}, {0xc, 0x7, 0x2, 0xfffffdfe, 0x8001, 0x8001}, {0x3f8, 0x5d0, 0x40, 0x0, 0x8, 0x7e04}, {0x3ff, 0xfffffffe, 0x8, 0x643, 0x7, 0x4a}, {0x81, 0x6, 0x6, 0x1ff, 0x100, 0x20000000}, {0x3ff, 0x3, 0x200, 0xf33d, 0x9, 0x5}, {0x81, 0x1, 0x7ff, 0xefc8, 0x0, 0x5}, {0x7fffffff, 0x6, 0x2, 0xba4, 0x6, 0x1}, {0x2, 0x38, 0x1, 0x80000001, 0x7fff, 0x1}, {0x7, 0x6, 0x101, 0x4, 0x6, 0xe57}, {0x6, 0x2, 0x401, 0x6, 0x5, 0x1}, {0x7, 0x9, 0x9, 0x2, 0xfffffff9}, {0xf21, 0x7fffffff, 0xfffffffb, 0xc, 0x2, 0x1}, {0x5, 0x1, 0x6, 0x8, 0xffff8000, 0x3}, {0x3, 0x4, 0x7, 0x3, 0x5, 0x8}, {0xffffff01, 0x7, 0x3, 0x7, 0xfff, 0x6}, {0x81, 0x6, 0x3, 0x2, 0x9, 0x3}, {0x2, 0x8, 0xda, 0x6, 0x7, 0x3}, {0x6, 0x8, 0xf86, 0x10, 0x3f, 0x7}, {0x7fffffff, 0x0, 0x81, 0x200, 0x1, 0x604}, {0x7fff, 0x0, 0x80000001, 0x68f7e38f, 0x2, 0x6}, {0xf46, 0xe, 0x6, 0x0, 0xae, 0xff}, {0xfffffffb, 0x80, 0x3, 0x9c, 0x6, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x9, 0xffffffff}, {0xc, 0x4dd0, 0x8001, 0x3, 0x0, 0x5}, {0x1, 0xffffffff, 0x2, 0xe, 0xac, 0x2}, {0x3a5b, 0x5, 0x5, 0x5, 0x7f, 0x7}, {0x1, 0x9, 0x7fffffff, 0x0, 0x2, 0x7}, {0x8, 0x7ff, 0x1, 0x7ff, 0x7dbd, 0x4ec0}, {0x7, 0x1, 0xffffffff, 0x0, 0x40, 0x5}, {0x1, 0x0, 0x6094, 0x0, 0x3}, {0xfff, 0x5, 0x80, 0x8, 0x7, 0x1}, {0x6, 0x8001, 0x1, 0x100, 0xf8ab, 0x6}, {0x4a, 0x5, 0x0, 0x8d7e, 0x1, 0x400}, {0xf, 0x7f, 0x1, 0x7fffffff, 0xc, 0x101}, {0xff, 0x81, 0x7, 0x4, 0x917, 0x6}, {0x6, 0x1fe00000, 0x3, 0x4, 0x3, 0xa0000000}, {0xa77d, 0xfffffff9, 0x8}, {0x403, 0x5, 0x1, 0x2, 0x8, 0x10001}, {0xd, 0x401, 0xf, 0x7f, 0x15e4, 0x9}, {0xfffffffc, 0x5, 0x5, 0xfffffca9, 0x90, 0x3}, {0xf4, 0x2, 0x4, 0x4, 0x2, 0x8a4a}, {0x3, 0x6, 0x4, 0x8, 0x7, 0x1}, {0x1ff, 0x6, 0x7fffffff, 0x60, 0x3, 0xe}, {0x7, 0x993b, 0x400, 0x10000, 0x3, 0xe}, {0x7, 0x6, 0x1, 0xfff, 0xffffffff, 0x3ffc}, {0x7, 0x10000, 0x2, 0x80000000, 0x0, 0xffff}, {0xffffffff, 0xf, 0x5, 0x4, 0xd5, 0x9}, {0x7ff, 0xae96, 0x3, 0x6, 0x3, 0x1}, {0x4, 0x2, 0x8, 0x5, 0xf424, 0x5}, {0x9, 0x5, 0xade7, 0x9, 0x2, 0x5}, {0x6, 0x4, 0x1, 0xb1e, 0x0, 0x2}, {0x6, 0xd, 0x1, 0x80, 0x5, 0xc75}, {0xf, 0x9, 0x1, 0x3e989c97, 0xfffffffe, 0x5}, {0x200, 0xdc, 0x5, 0x8000, 0x1000, 0x5}, {0x2, 0x200, 0x7, 0x8, 0x1ff, 0x3}, {0xc0, 0x1, 0x5, 0x52, 0x7, 0xfffffff8}, {0xff, 0x2, 0x10001, 0x0, 0x2, 0xffffff00}, {0x4, 0xed, 0xfffffff9, 0x1307, 0x2, 0x1}, {0x0, 0x0, 0xb, 0x6, 0x6, 0x80000000}, {0xb623, 0x10000, 0x1, 0x8, 0x6, 0x8}, {0x4, 0x9, 0xe7, 0x2, 0x40, 0x401}, {0x4, 0x8001, 0x5, 0x97c, 0xfffffffe, 0x7}, {0x0, 0x2, 0x4, 0x7, 0x80000001, 0xfffffff7}, {0x1, 0x8, 0x4, 0x865, 0x2, 0x7}, {0x6, 0x3, 0x5d, 0x8e816326, 0xc, 0x6}, {0x5, 0xee6c, 0x2, 0x5, 0x40, 0x101}, {0x2, 0xfffffff9, 0xd, 0x66, 0x5, 0x9}, {0x4, 0xfffffff8, 0x3, 0x6, 0x4, 0x5}, {0x1, 0xdd, 0x6, 0x9, 0x80000001, 0x8818518a}, {0x7, 0x1, 0xff, 0x7fff, 0x8, 0x6}, {0x9, 0x9d, 0x2, 0x9, 0x7b7fb9f0, 0x9}, {0x30, 0x7, 0x3, 0x100000, 0x8, 0xfffffe01}, {0xfffffffe, 0x6, 0x40, 0x0, 0xfffff5a2, 0x401}, {0x1, 0x100, 0x5, 0x3, 0x7, 0x7}, {0x1, 0x800, 0x3, 0x40, 0x5, 0xc}, {0x3, 0x3ff, 0x4, 0x7, 0x9, 0xd}, {0x1, 0x401, 0x9, 0x2, 0x7, 0x6}, {0x3, 0x7, 0x3, 0x1, 0x10001, 0x9}, {0x2, 0x7fff, 0x9, 0x9, 0xb}, {0x7, 0x7, 0x2, 0x0, 0x5, 0x1}, {0x9, 0x8, 0x7, 0x6, 0x7, 0x5}, {0x9, 0x7, 0x1, 0x2, 0x1, 0x80}, {0x9, 0x7f, 0x5, 0x5, 0xeb, 0x5}, {0x3, 0x1, 0x8000, 0x5, 0x8, 0x3}, {0x1, 0x5a1c, 0x8001, 0x7ebe, 0x4cf72505, 0xcd}, {0x0, 0x6, 0x6, 0x5, 0x1ff0, 0x10001}, {0xe, 0x1, 0x3, 0x2, 0x9, 0x100}, {0x5, 0x7ff, 0x3, 0x80, 0x200, 0x4}, {0x4, 0x6, 0x1ff, 0x3ff, 0x20000000, 0x8}, {0x31b, 0x8001, 0xe, 0x1, 0x3, 0x8}, {0x6, 0x2, 0x5, 0xb, 0x1, 0x8}, {0xf, 0x6, 0x98a, 0x3, 0x1, 0x3}, {0x5276, 0x366, 0x5, 0x44, 0x0, 0x5cd0}, {0x80000001, 0x8, 0x2, 0x24c, 0x7, 0x1000}, {0x1, 0x2, 0x6, 0x2, 0x5}, {0x5, 0x5, 0x80, 0x1, 0x5, 0x401}, {0x1, 0x5cf, 0xa, 0x2, 0x3, 0x8}, {0x800, 0x4, 0x2, 0x1, 0xc0, 0xfffffffa}, {0x7, 0x3ff, 0x200, 0x0, 0x2, 0x5}, {0xffffffff, 0x7, 0xf, 0x0, 0x8, 0x3}, {0x3, 0xb2b2, 0x194f9bf4, 0x87a4, 0xaab7, 0x7}, {0x7, 0x9, 0xa8e, 0x7, 0x60670000, 0x7}, {0x40, 0x10000, 0x4, 0x2, 0x0, 0x1}, {0x5, 0x9, 0xffffff7f, 0x7, 0x3}, {0x8e5, 0x1, 0xa, 0x28, 0x9, 0x80000001}, {0x3, 0x80000001, 0xe225, 0xd, 0x8, 0x9}, {0x29d, 0x401, 0xffffffff, 0xfff, 0xfded, 0x8}, {0xfffffbff, 0xe, 0x0, 0xffffff81, 0x8, 0xfffffffe}, {0xed6, 0x3, 0x5, 0x259c, 0x9, 0x3}, {0xfffffbff, 0x7f, 0x400, 0xfffffff9, 0x0, 0x1}, {0x0, 0x7ff, 0x40, 0xcd, 0x6, 0x8}, {0x6, 0x6, 0x1, 0x9, 0x61, 0xffffffff}, {0x6, 0x8, 0x0, 0x4, 0x5, 0x6}, {0x8000, 0xff, 0x516, 0x0, 0x2371, 0xffff}, {0x8, 0x1, 0x6, 0x9, 0x101, 0x86}, {0x5, 0x8, 0x186, 0x1, 0x101, 0x80000000}], [{0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0xd171415e8ad05f3d}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x3}, {0x6}, {0x4}, {0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4}, {}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2aa8}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="301000003b0007010100000000000000017c00000400fc8018100180"], 0x1030}}, 0x4c000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r1], 0x20}}, 0x0) 2.475665593s ago: executing program 4 (id=358): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYRES8], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000003e000701fcfbbb92d5dbdf250150fa5e080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1a, 0x2, 0x7f, 0x7, 0x60, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000004aa50000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) symlink(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) brk(0x20001000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.474636093s ago: executing program 3 (id=359): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) ioctl$TCSETSW2(r3, 0x541e, &(0x7f0000000280)={0x2, 0x0, 0x0, 0xf1a8, 0x0, "1a96947d01000000000000008a81ca1e1238ec"}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) close(r6) 2.474292873s ago: executing program 1 (id=367): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9ff9010018000400000b00000005000000070000000200000061610008000000000085d1000000000000000000000000000000000000000091a835c2908fc281774e7adb0b40decb22a052dd5ef82c4e01654ab14a932e2bf89dad6af12afb7b3bd29de3daed0d3d7c6251dbff79ac223e97bc67ce9a03f323d5d13140a2791c4df485db05c60f4189dea981cac64571053432125f33d2a84349984e50f5"], 0x0, 0x37}, 0x28) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r7}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) 1.579606877s ago: executing program 3 (id=360): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioperm(0x8, 0x9, 0x5a) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) socket$pppl2tp(0x18, 0x1, 0x1) inotify_init1(0x800) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x406, r1) setsockopt$inet_mtu(r6, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.579125157s ago: executing program 4 (id=361): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x18) setreuid(0x0, 0xee01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 1.575388717s ago: executing program 0 (id=371): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x2, &(0x7f0000000240)=[{0x7f, 0x8, 0x2, 0x7}, {0xfffa, 0x6, 0xc9, 0x3}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x4, 0x0, 0x7ffffffffffffffe, 0x38db0863, 0x0, 0x0, 0xd, 0x9d}) creat(&(0x7f0000000200)='./bus\x00', 0x11e) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) setgid(0x0) 1.574687277s ago: executing program 1 (id=372): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) unshare(0x2a020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) lsm_get_self_attr(0x67, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.570138897s ago: executing program 2 (id=373): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) ioctl$TCSETSW2(r3, 0x541e, &(0x7f0000000280)={0x2, 0x0, 0x0, 0xf1a8, 0x0, "1a96947d01000000000000008a81ca1e1238ec"}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) close(r6) 1.516940148s ago: executing program 4 (id=362): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x10000, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x2, 0x4000, @fd_index=0x7, 0x8, 0x0, 0x0, 0xe3fb5ce23b73035f, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20042, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000c80)={0x4e00, 0xefe, 0xff, 0x6, 0x18, "487e165f601203c5689e8741869e1d06409c78"}) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffe69, &(0x7f0000000040)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c0000001fb791643a5ee4b11602b2a10c11ce1b25d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a92307f00000e9703000000000000000000000000129ae100"/216, 0xd8}], 0x1}, 0x8040150) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x25, 0x4, @thr={&(0x7f0000000100), 0x0}}, 0x0) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x1) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000500)={0x6, {{0x2, 0xfff9, @multicast2}}, 0x0, 0x6, [{{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @multicast1}}]}, 0x390) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) 968.341506ms ago: executing program 0 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setregid(0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/274, 0x112}, {&(0x7f0000000f00)=""/4097, 0x1001}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000880)=""/138, 0x8a}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000b40)=""/30, 0x1e}, {0x0}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f00000009c0)=""/264, 0x108}], 0x9}, 0x1008}], 0x1, 0x43, 0x0) timer_create(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, {0x1, @link_local}, 0x4, {0x2, 0x0, @multicast2}, 'lo\x00'}) acct(0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000480)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) socket$inet6(0xa, 0x800, 0x180103) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1008082, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e0, &(0x7f00000011c0)="$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") syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 762.264619ms ago: executing program 3 (id=364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001804000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 613.335471ms ago: executing program 0 (id=365): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001480)={0x2, &(0x7f0000000240)=[{0x7f, 0x8, 0x2, 0x7}, {0xfffa, 0x6, 0xc9, 0x3}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x4, 0x0, 0x7ffffffffffffffe, 0x38db0863, 0x0, 0x0, 0xd, 0x9d}) creat(&(0x7f0000000200)='./bus\x00', 0x11e) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) setgid(0x0) 408.922664ms ago: executing program 4 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="25032abd7000fcdbdf25130000000400"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957eff13d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a"], 0x208}, 0x8000) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) 224.425877ms ago: executing program 0 (id=368): ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, 0x0, &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b708738af0ff00000000bfa100000000000007010000f8fbffffbfa400000000000007040000f0ffffffb70200000800000018230000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRESHEX, @ANYRES16], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)='blkio.bfq.io_service_bytes\x00', 0xfffffffffffffffa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r5, @ANYBLOB="10a8ffe0fd241418fa5d7b9eac25d4554555cc08f05225e1a88622fb4089342547f50869f71a144a118ca1d76e45e50ec2dc2b93b47648229d527f38123a92df82677b26ff25cba22a1c71991f791351e53c493c04d1ac198088979d5c4fa6922c03dbff3a12e09cd39d44f2d1cec8815b5c3f14ea80b97b5c5641cb3b30a6900b90f84cedf65f811e0825907d59f4adacd46dcb0bc70087f941bd5eb943492783844ef08c6a1c1139fb664c6d1d7677fecc8c5a238287563147a67e5e6504ce"], 0x28}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 0s ago: executing program 2 (id=369): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000828be053200b703000000000055320dec2932de580a0e5104dbcfa224f197c5a8b40b4c7a4d9566988ce3764ed38e047f66d67378675176bc65b843d73458a8a141e9de17958a9b7bd7d8e0c4aad4543527ea9dafa0ee3dc8804f07b45df7fb67b07655ac27b6a8d9ea5e4128d04d2842a1a4e914bcd6ff02a3da9b00000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r3, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x2, {0x3}}) tkill(r2, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000000)={0x1, 0x2, 0x0, 'queue0\x00', 0x3}) dup(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000200000002c00128009000100626f6e64000000001c0002800500010005000000050006000500000008001c00"], 0x4c}, 0x1, 0x0, 0x0, 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) fallocate(r6, 0x0, 0x2000000, 0x2c2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xd8, 0xdd, &(0x7f0000000300)="70b89cd599ce63baec6c8f516fb7277b3d2a3bd41408bf27bb6bbc4363d11879cb1a8e9d847cfcfd0cbbc573bc29d1c78d02384fa9d39b6dcc4c6f54767874e83f4d04e39685c821134dde845fc39c280c49cc07a09116092533acd87736471098a951f422512ae59b0816d900f0e954e0b14928a8941e4434dbd6cbece18b08122ff214ab1982554e9a89a68adb8c057fe35a2e5a130848647d899e3c4225fefb1b972a9794fcabc7f984ce68114def69c901bd7075a8bd3ae9077746f051565e9194043dc150180857fa16d030d4b49c17a02e5f13d182", &(0x7f0000000400)=""/221, 0x400, 0x0, 0x7e, 0x8d, &(0x7f0000000200)="84ed2ec7e541b13fc532fe93e2b526db852988d37360b39c40d94ee6f4f37c96ea35c24847c574e98e83a1ff04f0b00a40edf01f62766854e0d749880f33708e60dadb4ecb1df52cf1f4deae27fac3db97cdfdb5c9bee6c2ddc9b270d0c4d3ae06e129cc52f2f18167c6eea75d2d641a8bd184468237b8e0cc85eb79d319", &(0x7f0000000500)="a0ac86fbab1b6e51a8bd1befe75d6875cae12c9b2cabbdb37497616f5925f69fd6f26a564cb2680ad6b46b30c00323fed209331543bc0dd0157d9e7d1527185476497e215587d48f9a19ea6c2396ea2230353a51fa176722ad35b034914b7c964681fc5241ae2821705e390d012a4fd806ff199c8e2a744271af0e869d940efb65b12889f111fbb72e86a8ab52", 0x7, 0x0, 0xffffff01}, 0x50) kernel console output (not intermixed with test programs): d [ 37.282296][ T3313] team0: Port device team_slave_1 added [ 37.290579][ T3306] hsr_slave_0: entered promiscuous mode [ 37.296498][ T3306] hsr_slave_1: entered promiscuous mode [ 37.308252][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.315338][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.341463][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.353338][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.360330][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.386303][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.420828][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.427831][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.453846][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.477392][ T3310] hsr_slave_0: entered promiscuous mode [ 37.483399][ T3310] hsr_slave_1: entered promiscuous mode [ 37.489406][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.496977][ T3310] Cannot create hsr debugfs directory [ 37.507612][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.514650][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.540624][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.553543][ T3308] hsr_slave_0: entered promiscuous mode [ 37.559615][ T3308] hsr_slave_1: entered promiscuous mode [ 37.565946][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.573635][ T3308] Cannot create hsr debugfs directory [ 37.602908][ T3314] hsr_slave_0: entered promiscuous mode [ 37.608966][ T3314] hsr_slave_1: entered promiscuous mode [ 37.614982][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.622640][ T3314] Cannot create hsr debugfs directory [ 37.665091][ T3313] hsr_slave_0: entered promiscuous mode [ 37.671494][ T3313] hsr_slave_1: entered promiscuous mode [ 37.677367][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.685079][ T3313] Cannot create hsr debugfs directory [ 37.866504][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.876296][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.890678][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.903710][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.918975][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.929089][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.938014][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.959092][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.972588][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.982776][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.992048][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.002162][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.051404][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.071351][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.088425][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.098967][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.134871][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.143874][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.153522][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.162283][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.175763][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.195728][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.206714][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.226640][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.238434][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.252840][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.263794][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.270916][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.280191][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.287313][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.296398][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.303656][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.320749][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.327909][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.348908][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.356141][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.381481][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.388679][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.403804][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.431302][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.441901][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.469641][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.497401][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.504588][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.514532][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.521798][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.545516][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.577109][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.597887][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.628832][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.636078][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.663154][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.674596][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.681841][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.714183][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.749946][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.852925][ T3310] veth0_vlan: entered promiscuous mode [ 38.867853][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.892241][ T3310] veth1_vlan: entered promiscuous mode [ 38.916607][ T3308] veth0_vlan: entered promiscuous mode [ 38.927471][ T3306] veth0_vlan: entered promiscuous mode [ 38.938974][ T3308] veth1_vlan: entered promiscuous mode [ 38.957846][ T3306] veth1_vlan: entered promiscuous mode [ 38.978181][ T3310] veth0_macvtap: entered promiscuous mode [ 38.993320][ T3310] veth1_macvtap: entered promiscuous mode [ 39.000918][ T3314] veth0_vlan: entered promiscuous mode [ 39.009730][ T3306] veth0_macvtap: entered promiscuous mode [ 39.022357][ T3306] veth1_macvtap: entered promiscuous mode [ 39.030034][ T3308] veth0_macvtap: entered promiscuous mode [ 39.045993][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.056851][ T3308] veth1_macvtap: entered promiscuous mode [ 39.066815][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.074568][ T3313] veth0_vlan: entered promiscuous mode [ 39.085631][ T3314] veth1_vlan: entered promiscuous mode [ 39.094541][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.104456][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.114815][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.123466][ T3310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.132327][ T3310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.141198][ T3310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.149942][ T3310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.160613][ T3313] veth1_vlan: entered promiscuous mode [ 39.174296][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.183106][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.191972][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.200713][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.215193][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.231517][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.240328][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.249100][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.257814][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.280313][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 39.280328][ T29] audit: type=1400 audit(1750881767.092:81): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.kjB3Q3/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.281297][ T3313] veth0_macvtap: entered promiscuous mode [ 39.286359][ T29] audit: type=1400 audit(1750881767.092:82): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.314612][ T3313] veth1_macvtap: entered promiscuous mode [ 39.354795][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.360333][ T29] audit: type=1400 audit(1750881767.122:83): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.kjB3Q3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.363208][ T3314] veth0_macvtap: entered promiscuous mode [ 39.387259][ T29] audit: type=1400 audit(1750881767.122:84): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.414871][ T29] audit: type=1400 audit(1750881767.122:85): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.kjB3Q3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.416398][ T3314] veth1_macvtap: entered promiscuous mode [ 39.441510][ T29] audit: type=1400 audit(1750881767.122:86): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.kjB3Q3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.474643][ T29] audit: type=1400 audit(1750881767.142:87): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.494165][ T29] audit: type=1400 audit(1750881767.152:88): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.516965][ T29] audit: type=1400 audit(1750881767.152:89): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=4431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.542409][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.563445][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.581879][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.584648][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.591531][ T29] audit: type=1400 audit(1750881767.372:90): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.597133][ T3401] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.642131][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.650692][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.659537][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.668328][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.668545][ T3476] loop1: detected capacity change from 0 to 1024 [ 39.677155][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.698660][ T3476] EXT4-fs: test_dummy_encryption option not supported [ 39.707155][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.716085][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.725329][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.734534][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.745380][ T3479] fido_id[3479]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.842580][ T3483] loop4: detected capacity change from 0 to 512 [ 39.855625][ T3486] loop0: detected capacity change from 0 to 164 [ 39.870321][ T3491] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.882068][ T3483] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.895255][ T3483] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.909302][ T3486] ISOFS: unable to read i-node block [ 39.910835][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.914711][ T3486] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 39.945536][ T3490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 39.971008][ T3494] netlink: zone id is out of range [ 39.976182][ T3494] netlink: zone id is out of range [ 39.981429][ T3494] netlink: zone id is out of range [ 39.986644][ T3494] netlink: zone id is out of range [ 39.987756][ T3486] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 39.991899][ T3494] netlink: zone id is out of range [ 40.006975][ T3494] netlink: zone id is out of range [ 40.012175][ T3494] netlink: zone id is out of range [ 40.017304][ T3494] netlink: zone id is out of range [ 40.022507][ T3494] netlink: zone id is out of range [ 40.028902][ T3483] EXT4-fs (loop4): 1 truncate cleaned up [ 40.038012][ T3483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.055704][ T3498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=3498 comm=syz.0.1 [ 40.747645][ T3486] syz.0.1 (3486) used greatest stack depth: 10880 bytes left [ 40.905103][ T3508] loop0: detected capacity change from 0 to 512 [ 40.943239][ T3508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.982969][ T3508] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.069704][ T3508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3508 comm=syz.0.8 [ 41.145113][ T3483] syz.4.5 (3483) used greatest stack depth: 5904 bytes left [ 41.159129][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.164860][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.209515][ C1] hrtimer: interrupt took 36391 ns [ 41.225737][ T3518] loop0: detected capacity change from 0 to 1024 [ 41.244695][ T3518] ext4: Unknown parameter 'noacl' [ 41.244821][ T3515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10'. [ 41.271049][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.278544][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.292959][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.300467][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.322133][ T3519] syz.4.10 uses obsolete (PF_INET,SOCK_PACKET) [ 41.831309][ T3533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15'. [ 41.873068][ T3533] random: crng reseeded on system resumption [ 41.885277][ T3536] loop1: detected capacity change from 0 to 1024 [ 41.899453][ T3536] ======================================================= [ 41.899453][ T3536] WARNING: The mand mount option has been deprecated and [ 41.899453][ T3536] and is ignored by this kernel. Remove the mand [ 41.899453][ T3536] option from the mount to silence this warning. [ 41.899453][ T3536] ======================================================= [ 41.995586][ T3313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 42.006722][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 42.006749][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.006764][ T3313] Call Trace: [ 42.006772][ T3313] [ 42.006782][ T3313] __dump_stack+0x1d/0x30 [ 42.006945][ T3313] dump_stack_lvl+0xe8/0x140 [ 42.006964][ T3313] dump_stack+0x15/0x1b [ 42.006984][ T3313] dump_header+0x81/0x220 [ 42.007025][ T3313] oom_kill_process+0x334/0x3f0 [ 42.007058][ T3313] out_of_memory+0x979/0xb80 [ 42.007130][ T3313] try_charge_memcg+0x5e6/0x9e0 [ 42.007158][ T3313] charge_memcg+0x51/0xc0 [ 42.007189][ T3313] __mem_cgroup_charge+0x28/0xb0 [ 42.007256][ T3313] filemap_add_folio+0x4e/0x1b0 [ 42.007287][ T3313] __filemap_get_folio+0x31e/0x6b0 [ 42.007393][ T3313] filemap_fault+0x41d/0xb40 [ 42.007428][ T3313] __do_fault+0xb9/0x200 [ 42.007512][ T3313] handle_mm_fault+0xf78/0x2be0 [ 42.007541][ T3313] ? mas_walk+0xf2/0x120 [ 42.007575][ T3313] do_user_addr_fault+0x636/0x1090 [ 42.007615][ T3313] exc_page_fault+0x62/0xa0 [ 42.007731][ T3313] asm_exc_page_fault+0x26/0x30 [ 42.007755][ T3313] RIP: 0033:0x7f9868215974 [ 42.007780][ T3313] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 28 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 fd e7 00 48 01 d1 [ 42.007801][ T3313] RSP: 002b:00007ffedfa0c620 EFLAGS: 00010206 [ 42.007820][ T3313] RAX: 0000001b32420000 RBX: 0000000000000009 RCX: 000000000000a028 [ 42.007832][ T3313] RDX: 000000000eaceddd RSI: 00007ffedfa0c6b0 RDI: 0000000000000001 [ 42.007888][ T3313] RBP: 00007ffedfa0c65c R08: 0000000037fb8c23 R09: 7fffffffffffffff [ 42.007904][ T3313] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 42.007919][ T3313] R13: 00000000000927c0 R14: 000000000000a1f0 R15: 00007ffedfa0c6b0 [ 42.007943][ T3313] [ 42.007951][ T3313] memory: usage 307200kB, limit 307200kB, failcnt 354 [ 42.112106][ T3536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.112191][ T3536] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.116700][ T3313] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 42.116719][ T3313] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 42.239810][ T3313] Memory cgroup stats for /syz3: [ 42.241515][ T3313] cache 0 [ 42.249611][ T3313] rss 4096 [ 42.252656][ T3313] shmem 0 [ 42.255597][ T3313] mapped_file 0 [ 42.259136][ T3313] dirty 0 [ 42.262158][ T3313] writeback 0 [ 42.265475][ T3313] workingset_refault_anon 69 [ 42.270112][ T3313] workingset_refault_file 99 [ 42.274738][ T3313] swap 204800 [ 42.278050][ T3313] swapcached 16384 [ 42.281905][ T3313] pgpgin 3295 [ 42.285291][ T3313] pgpgout 3291 [ 42.288718][ T3313] pgfault 3277 [ 42.292229][ T3313] pgmajfault 48 [ 42.295711][ T3313] inactive_anon 4096 [ 42.299656][ T3313] active_anon 12288 [ 42.303487][ T3313] inactive_file 0 [ 42.307202][ T3313] active_file 0 [ 42.310710][ T3313] unevictable 0 [ 42.314291][ T3313] hierarchical_memory_limit 314572800 [ 42.319703][ T3313] hierarchical_memsw_limit 9223372036854771712 [ 42.325889][ T3313] total_cache 0 [ 42.329404][ T3313] total_rss 4096 [ 42.332971][ T3313] total_shmem 0 [ 42.336442][ T3313] total_mapped_file 0 [ 42.340472][ T3313] total_dirty 0 [ 42.343949][ T3313] total_writeback 0 [ 42.347893][ T3313] total_workingset_refault_anon 69 [ 42.353110][ T3313] total_workingset_refault_file 99 [ 42.358247][ T3313] total_swap 204800 [ 42.362146][ T3313] total_swapcached 16384 [ 42.366419][ T3313] total_pgpgin 3295 [ 42.370284][ T3313] total_pgpgout 3291 [ 42.374201][ T3313] total_pgfault 3277 [ 42.378122][ T3313] total_pgmajfault 48 [ 42.382240][ T3313] total_inactive_anon 4096 [ 42.386690][ T3313] total_active_anon 12288 [ 42.391147][ T3313] total_inactive_file 0 [ 42.395371][ T3313] total_active_file 0 [ 42.399422][ T3313] total_unevictable 0 [ 42.403423][ T3313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9,pid=3511,uid=0 [ 42.417971][ T3313] Memory cgroup out of memory: Killed process 3511 (syz.3.9) total-vm:98048kB, anon-rss:932kB, file-rss:26412kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 42.782314][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.198135][ T3566] sd 0:0:1:0: device reset [ 43.210222][ T3566] loop2: detected capacity change from 0 to 256 [ 43.221283][ T3566] FAT-fs (loop2): bogus number of FAT sectors [ 43.227429][ T3566] FAT-fs (loop2): Can't find a valid FAT filesystem [ 43.341321][ T3581] IPv6: Can't replace route, no match found [ 43.353494][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 43.420785][ T3588] loop2: detected capacity change from 0 to 164 [ 43.430551][ T3588] rock: directory entry would overflow storage [ 43.436815][ T3588] rock: sig=0x66, size=4, remaining=3 [ 43.458339][ T3588] rock: directory entry would overflow storage [ 43.464917][ T3588] rock: sig=0x66, size=4, remaining=3 [ 43.910182][ T3621] loop0: detected capacity change from 0 to 1024 [ 43.917676][ T3621] EXT4-fs: Ignoring removed nobh option [ 43.923487][ T3621] EXT4-fs: Ignoring removed bh option [ 43.930718][ T3622] netlink: 5 bytes leftover after parsing attributes in process `syz.1.32'. [ 43.952183][ T3621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.972480][ T3621] EXT4-fs (loop0): shut down requested (0) [ 44.053260][ T3629] Zero length message leads to an empty skb [ 44.237956][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.286342][ T3634] loop3: detected capacity change from 0 to 512 [ 44.294119][ T29] kauditd_printk_skb: 745 callbacks suppressed [ 44.294133][ T29] audit: type=1400 audit(1750881772.102:836): avc: denied { connect } for pid=3632 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.335661][ T29] audit: type=1400 audit(1750881772.102:837): avc: denied { name_connect } for pid=3632 comm="syz.0.36" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 44.349097][ T3634] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 44.357788][ T29] audit: type=1400 audit(1750881772.132:838): avc: denied { shutdown } for pid=3632 comm="syz.0.36" lport=56633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.368013][ T3636] loop1: detected capacity change from 0 to 2048 [ 44.386687][ T29] audit: type=1400 audit(1750881772.132:839): avc: denied { getopt } for pid=3632 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.447397][ T3637] loop0: detected capacity change from 0 to 512 [ 44.454431][ T3637] ext4: Unknown parameter 'hash' [ 44.504605][ T29] audit: type=1400 audit(1750881772.202:840): avc: denied { read write } for pid=3632 comm="syz.0.36" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 44.529294][ T29] audit: type=1400 audit(1750881772.202:841): avc: denied { ioctl open } for pid=3632 comm="syz.0.36" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 44.564982][ T3636] EXT4-fs (loop1): failed to initialize system zone (-117) [ 44.565016][ T3636] EXT4-fs (loop1): mount failed [ 44.567425][ T3634] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 44.575580][ T29] audit: type=1326 audit(1750881772.382:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.2.38" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f614415e929 code=0x0 [ 44.591257][ T3634] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #11: comm syz.3.35: corrupted inode contents [ 44.603337][ T3634] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #11: comm syz.3.35: mark_inode_dirty error [ 44.634844][ T3649] netlink: 3 bytes leftover after parsing attributes in process `syz.4.39'. [ 44.634914][ T3649] 0ªX¹¦À: renamed from caif0 [ 44.635730][ T3634] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.35: invalid indirect mapped block 1 (level 1) [ 44.636217][ T3634] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #11: comm syz.3.35: corrupted inode contents [ 44.636389][ T3634] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 44.638210][ T3634] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #11: comm syz.3.35: corrupted inode contents [ 44.638478][ T3634] EXT4-fs error (device loop3): ext4_truncate:4597: inode #11: comm syz.3.35: mark_inode_dirty error [ 44.642769][ T3656] mmap: syz.2.38 (3656) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.651084][ T3649] 0ªX¹¦À: entered allmulticast mode [ 44.673592][ T29] audit: type=1400 audit(1750881772.462:843): avc: denied { read } for pid=3648 comm="syz.4.39" dev="nsfs" ino=4026532476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.673622][ T29] audit: type=1400 audit(1750881772.462:844): avc: denied { open } for pid=3648 comm="syz.4.39" path="net:[4026532476]" dev="nsfs" ino=4026532476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.677736][ T3634] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 44.679925][ T3634] EXT4-fs (loop3): 1 truncate cleaned up [ 44.680519][ T3634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.839352][ T29] audit: type=1400 audit(1750881772.652:845): avc: denied { kexec_image_load } for pid=3667 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 45.043362][ T3662] loop1: detected capacity change from 0 to 8192 [ 45.120515][ T3298] loop1: p1 p4 < > [ 45.124625][ T3298] loop1: p1 start 4261412864 is beyond EOD, truncated [ 45.135847][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.148329][ T3662] loop1: p1 p4 < > [ 45.152823][ T3662] loop1: p1 start 4261412864 is beyond EOD, truncated [ 45.162631][ T3673] loop4: detected capacity change from 0 to 8192 [ 45.240238][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 45.323479][ T3695] loop3: detected capacity change from 0 to 512 [ 45.330353][ T3695] EXT4-fs: Ignoring removed oldalloc option [ 45.340834][ T3695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.461209][ T3695] EXT4-fs (loop3): orphan cleanup on readonly fs [ 45.468706][ T3695] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.43: Failed to acquire dquot type 1 [ 45.482017][ T3695] EXT4-fs (loop3): 1 truncate cleaned up [ 45.489082][ T3695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.632863][ T3700] lo speed is unknown, defaulting to 1000 [ 45.681091][ T3700] lo speed is unknown, defaulting to 1000 [ 45.743977][ T3700] lo speed is unknown, defaulting to 1000 [ 45.787537][ T3700] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.895429][ T3700] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 46.023581][ T3712] tipc: Started in network mode [ 46.028582][ T3712] tipc: Node identity c2d946106f99, cluster identity 4711 [ 46.035966][ T3712] tipc: Enabled bearer , priority 0 [ 46.245998][ T3700] lo speed is unknown, defaulting to 1000 [ 46.291628][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 46.322143][ T3700] lo speed is unknown, defaulting to 1000 [ 46.328270][ T3700] lo speed is unknown, defaulting to 1000 [ 46.388406][ T3700] lo speed is unknown, defaulting to 1000 [ 46.438438][ T3721] syzkaller0: entered promiscuous mode [ 46.444034][ T3721] syzkaller0: entered allmulticast mode [ 46.501856][ T3721] tipc: Resetting bearer [ 46.507825][ T3700] lo speed is unknown, defaulting to 1000 [ 46.514360][ T3726] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 46.514360][ T3726] The task syz.0.49 (3726) triggered the difference, watch for misbehavior. [ 46.575327][ T3711] tipc: Resetting bearer [ 46.614382][ T3730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 46.623789][ T3730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 46.851940][ T3729] loop4: detected capacity change from 0 to 1764 [ 46.895263][ T3711] tipc: Disabling bearer [ 47.054736][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.071831][ T3737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 47.113714][ T3740] netlink: 'syz.3.53': attribute type 10 has an invalid length. [ 47.121768][ T3740] veth0_vlan: entered allmulticast mode [ 47.136558][ T3740] veth0_vlan: left promiscuous mode [ 47.156886][ T3740] veth0_vlan: entered promiscuous mode [ 47.168410][ T3740] team0: Device veth0_vlan failed to register rx_handler [ 47.182475][ T3744] rdma_op ffff8881195fa980 conn xmit_rdma 0000000000000000 [ 47.193613][ T3737] bond0: (slave bond_slave_0): Releasing backup interface [ 47.223502][ T3748] loop2: detected capacity change from 0 to 512 [ 47.232092][ T3748] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.244560][ T3748] EXT4-fs (loop2): 1 truncate cleaned up [ 47.251036][ T3748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.294377][ T3752] vhci_hcd: invalid port number 96 [ 47.299630][ T3752] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 47.316178][ T3751] gtp0: entered promiscuous mode [ 47.321224][ T3751] gtp0: entered allmulticast mode [ 47.338767][ T3754] veth0: entered promiscuous mode [ 47.359886][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 47.424560][ T3756] loop4: detected capacity change from 0 to 1024 [ 47.540080][ T3756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.622500][ T3756] netlink: 'syz.4.60': attribute type 4 has an invalid length. [ 47.644665][ T3765] netlink: 14 bytes leftover after parsing attributes in process `syz.3.62'. [ 47.662335][ T3756] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 47.674922][ T3756] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.674922][ T3756] [ 47.684647][ T3756] EXT4-fs (loop4): Total free blocks count 0 [ 47.690705][ T3756] EXT4-fs (loop4): Free/Dirty block details [ 47.696681][ T3756] EXT4-fs (loop4): free_blocks=0 [ 47.701682][ T3756] EXT4-fs (loop4): dirty_blocks=0 [ 47.706763][ T3756] EXT4-fs (loop4): Block reservation details [ 47.712883][ T3756] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 47.821115][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.838025][ T3765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.860787][ T3765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.881642][ T3765] bond0 (unregistering): Released all slaves [ 48.010225][ T3770] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 48.085930][ T3772] lo speed is unknown, defaulting to 1000 [ 48.133095][ T3777] lo speed is unknown, defaulting to 1000 [ 48.553504][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.562173][ T3803] netlink: 32 bytes leftover after parsing attributes in process `syz.3.66'. [ 48.654396][ T3814] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.802047][ T3814] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.980662][ T3821] lo speed is unknown, defaulting to 1000 [ 49.971049][ T3814] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.058795][ T3824] lo speed is unknown, defaulting to 1000 [ 50.148505][ T3828] lo speed is unknown, defaulting to 1000 [ 50.383879][ T3814] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.458610][ T3831] loop4: detected capacity change from 0 to 1024 [ 50.556702][ T3814] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.566048][ T3831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.647962][ T3814] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.678025][ T3831] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.728690][ T3814] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.826261][ T3814] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.176214][ T3835] net_ratelimit: 76 callbacks suppressed [ 51.176230][ T3835] netlink: zone id is out of range [ 51.211411][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 51.211499][ T29] audit: type=1326 audit(1750881779.022:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 51.240981][ T29] audit: type=1326 audit(1750881779.022:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 51.388010][ T3835] netlink: zone id is out of range [ 51.405966][ T3839] loop1: detected capacity change from 0 to 1024 [ 51.435390][ T3835] netlink: zone id is out of range [ 51.452095][ T3839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.537532][ T3839] netlink: 'syz.1.74': attribute type 4 has an invalid length. [ 51.549418][ T3835] netlink: zone id is out of range [ 51.554587][ T3835] netlink: zone id is out of range [ 51.572271][ T3839] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 51.584636][ T3839] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.584636][ T3839] [ 51.594322][ T3839] EXT4-fs (loop1): Total free blocks count 0 [ 51.600450][ T3839] EXT4-fs (loop1): Free/Dirty block details [ 51.606378][ T3839] EXT4-fs (loop1): free_blocks=0 [ 51.612352][ T3839] EXT4-fs (loop1): dirty_blocks=0 [ 51.617404][ T3839] EXT4-fs (loop1): Block reservation details [ 51.624009][ T3839] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 51.659127][ T3835] netlink: zone id is out of range [ 51.680133][ T3835] netlink: zone id is out of range [ 51.688489][ T3835] netlink: zone id is out of range [ 51.694455][ T3835] netlink: zone id is out of range [ 51.712835][ T3835] netlink: zone id is out of range [ 51.720926][ T3847] 9pnet_fd: Insufficient options for proto=fd [ 51.738010][ T3847] audit: audit_backlog=65 > audit_backlog_limit=64 [ 51.744705][ T3847] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 51.752433][ T3847] audit: backlog limit exceeded [ 51.762725][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.790833][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.801789][ T29] audit: type=1326 audit(1750881779.112:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 51.825410][ T29] audit: type=1326 audit(1750881779.112:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 51.848734][ T29] audit: type=1326 audit(1750881779.112:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 51.872036][ T29] audit: type=1326 audit(1750881779.112:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 51.895370][ T29] audit: type=1326 audit(1750881779.112:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 51.922064][ T3848] loop2: detected capacity change from 0 to 512 [ 51.953319][ T3848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.966312][ T3848] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.097990][ T3856] loop1: detected capacity change from 0 to 512 [ 52.106459][ T3856] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.122232][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.134770][ T3852] rdma_op ffff888118fd8180 conn xmit_rdma 0000000000000000 [ 52.145480][ T3856] EXT4-fs (loop1): 1 truncate cleaned up [ 52.201750][ T3856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.318608][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 52.430593][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 52.441593][ T3876] loop3: detected capacity change from 0 to 512 [ 52.452190][ T3873] loop4: detected capacity change from 0 to 512 [ 52.471717][ T3874] lo speed is unknown, defaulting to 1000 [ 52.531487][ T3873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.604472][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 52.622381][ T3876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.656045][ T3873] EXT4-fs (loop4): 1 truncate cleaned up [ 52.670071][ T3876] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.688102][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 52.727289][ T3873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.744594][ T3874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 52.757125][ T3876] capability: warning: `syz.3.85' uses deprecated v2 capabilities in a way that may be insecure [ 52.781792][ T3874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.84'. [ 52.810326][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.860676][ T3873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.880612][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 52.892079][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 53.002752][ T3888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 53.005330][ T3890] loop2: detected capacity change from 0 to 128 [ 53.021933][ T3888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 53.108352][ T3890] syz.2.87: attempt to access beyond end of device [ 53.108352][ T3890] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 53.148538][ T3894] lo speed is unknown, defaulting to 1000 [ 53.149323][ T3890] syz.2.87: attempt to access beyond end of device [ 53.149323][ T3890] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 53.466641][ T3908] capability: warning: `syz.4.89' uses 32-bit capabilities (legacy support in use) [ 53.478516][ T3872] syz.1.78 (3872) used greatest stack depth: 5880 bytes left [ 53.717562][ T3890] syz.2.87: attempt to access beyond end of device [ 53.717562][ T3890] loop2: rw=2049, sector=153, nr_sectors = 32 limit=128 [ 53.736306][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.746492][ T3890] syz.2.87: attempt to access beyond end of device [ 53.746492][ T3890] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 53.777774][ T3911] lo speed is unknown, defaulting to 1000 [ 54.025314][ T3890] syz.2.87: attempt to access beyond end of device [ 54.025314][ T3890] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 54.223895][ T3914] loop4: detected capacity change from 0 to 512 [ 54.500239][ T3890] syz.2.87: attempt to access beyond end of device [ 54.500239][ T3890] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 54.545775][ T3914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.558424][ T3890] syz.2.87: attempt to access beyond end of device [ 54.558424][ T3890] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 54.558709][ T3914] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.666846][ T3890] syz.2.87: attempt to access beyond end of device [ 54.666846][ T3890] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 54.704769][ T3890] syz.2.87: attempt to access beyond end of device [ 54.704769][ T3890] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 54.739904][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.797881][ T3890] syz.2.87: attempt to access beyond end of device [ 54.797881][ T3890] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 55.060059][ T3947] loop4: detected capacity change from 0 to 512 [ 55.112869][ T3947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.153106][ T3947] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.357435][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.448732][ T3970] loop2: detected capacity change from 0 to 512 [ 55.509264][ T3971] lo speed is unknown, defaulting to 1000 [ 55.714251][ T3970] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 55.855123][ T3976] xt_hashlimit: max too large, truncated to 1048576 [ 55.873266][ T3978] loop4: detected capacity change from 0 to 128 [ 55.897902][ T3974] lo speed is unknown, defaulting to 1000 [ 55.912763][ T3970] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 55.946427][ T3982] loop1: detected capacity change from 0 to 512 [ 56.013273][ T3982] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.035310][ T3982] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.102: bad orphan inode 13 [ 56.047745][ T3970] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #11: comm syz.2.97: corrupted inode contents [ 56.066455][ T3982] ext4_test_bit(bit=12, block=18) = 1 [ 56.072125][ T3982] is_bad_inode(inode)=0 [ 56.076303][ T3982] NEXT_ORPHAN(inode)=2130706432 [ 56.081207][ T3982] max_ino=32 [ 56.084426][ T3982] i_nlink=1 [ 56.101117][ T3970] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #11: comm syz.2.97: mark_inode_dirty error [ 56.116106][ T3982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.128865][ T3970] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.97: invalid indirect mapped block 1 (level 1) [ 56.142454][ T3970] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #11: comm syz.2.97: corrupted inode contents [ 56.168378][ T3974] lo speed is unknown, defaulting to 1000 [ 56.172999][ T3970] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 56.182825][ T3982] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 56.196668][ T3970] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #11: comm syz.2.97: corrupted inode contents [ 56.212859][ T3970] EXT4-fs error (device loop2): ext4_truncate:4597: inode #11: comm syz.2.97: mark_inode_dirty error [ 56.224225][ T3970] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 56.239051][ T3982] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.102: bg 0: block 248: padding at end of block bitmap is not set [ 56.263399][ T3970] EXT4-fs (loop2): 1 truncate cleaned up [ 56.267686][ T3982] __quota_error: 629 callbacks suppressed [ 56.267705][ T3982] Quota error (device loop1): write_blk: dquota write failed [ 56.270910][ T3970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.274875][ T3982] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 56.304753][ T3982] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.102: Failed to acquire dquot type 1 [ 56.334177][ T3982] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.357263][ T3990] loop4: detected capacity change from 0 to 2048 [ 56.381841][ T3990] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.460313][ T3990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.498740][ T29] audit: type=1326 audit(1750881784.302:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 56.533353][ T3990] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.103: bg 0: block 234: padding at end of block bitmap is not set [ 56.551581][ T29] audit: type=1400 audit(1750881784.342:1688): avc: denied { ioctl } for pid=3989 comm="syz.4.103" path="/21/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.574167][ T29] audit: type=1400 audit(1750881784.342:1689): avc: denied { read } for pid=3989 comm="syz.4.103" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.595830][ T29] audit: type=1326 audit(1750881784.332:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 56.620979][ T3990] EXT4-fs (loop4): Remounting filesystem read-only [ 56.642515][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.670423][ T29] audit: type=1326 audit(1750881784.472:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3999 comm="syz.2.105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f614415e929 code=0x0 [ 56.702275][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.720637][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.763372][ T4001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.776248][ T29] audit: type=1400 audit(1750881784.572:1691): avc: denied { ioctl } for pid=3999 comm="+}[@" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.806218][ T4001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.825602][ T4007] loop3: detected capacity change from 0 to 1024 [ 56.839490][ T4010] loop1: detected capacity change from 0 to 128 [ 56.841472][ T4007] EXT4-fs: Ignoring removed nobh option [ 56.851492][ T29] audit: type=1326 audit(1750881784.642:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 56.851619][ T29] audit: type=1326 audit(1750881784.642:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 56.898727][ T4007] EXT4-fs: Ignoring removed bh option [ 57.007854][ T4007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.026895][ T4018] loop4: detected capacity change from 0 to 512 [ 57.051888][ T4007] EXT4-fs (loop3): shut down requested (0) [ 57.081679][ T4018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.094536][ T4018] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.116573][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.221394][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.234796][ T4025] loop3: detected capacity change from 0 to 128 [ 57.271458][ T4025] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.307900][ T4025] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.353472][ T4029] loop4: detected capacity change from 0 to 164 [ 57.380080][ T4029] process 'syz.4.112' launched '/dev/fd/3' with NULL argv: empty string added [ 57.465477][ T4031] loop4: detected capacity change from 0 to 764 [ 57.482706][ T4031] rock: directory entry would overflow storage [ 57.488913][ T4031] rock: sig=0x4654, size=5, remaining=4 [ 57.497644][ T4031] tipc: Started in network mode [ 57.502677][ T4031] tipc: Node identity 4, cluster identity 4711 [ 57.508881][ T4031] tipc: Node number set to 4 [ 57.514941][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.544729][ T4033] __nla_validate_parse: 6 callbacks suppressed [ 57.544748][ T4033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.115'. [ 57.925197][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 57.935807][ T4044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'. [ 58.491956][ T4048] loop1: detected capacity change from 0 to 128 [ 58.504030][ T4048] 9pnet_fd: Insufficient options for proto=fd [ 58.510850][ T4048] 9pnet_fd: Insufficient options for proto=fd [ 58.517830][ T4048] netdevsim netdevsim1: Direct firmware load for À failed with error -2 [ 58.561361][ T4050] xt_hashlimit: max too large, truncated to 1048576 [ 58.636537][ T4056] binfmt_misc: register: failed to install interpreter file ./file2 [ 58.722087][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 58.742743][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 58.945268][ T4063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 58.979157][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.986606][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.066374][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.073931][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.194747][ T4067] loop4: detected capacity change from 0 to 512 [ 59.206510][ T4067] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.227630][ T4067] EXT4-fs (loop4): 1 truncate cleaned up [ 59.234382][ T4067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.267150][ T4067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.469722][ T4088] loop3: detected capacity change from 0 to 764 [ 59.491662][ T4088] rock: directory entry would overflow storage [ 59.497933][ T4088] rock: sig=0x4654, size=5, remaining=4 [ 59.511650][ T4091] loop4: detected capacity change from 0 to 512 [ 59.517281][ T4088] tipc: Started in network mode [ 59.523132][ T4088] tipc: Node identity 4, cluster identity 4711 [ 59.529417][ T4088] tipc: Node number set to 4 [ 59.541884][ T4091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.554694][ T4091] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.602160][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.624792][ T4101] loop3: detected capacity change from 0 to 512 [ 59.631792][ T4101] EXT4-fs: Ignoring removed bh option [ 59.648259][ T4101] EXT4-fs: Mount option(s) incompatible with ext3 [ 59.732075][ T4110] net_ratelimit: 41 callbacks suppressed [ 59.732093][ T4110] openvswitch: netlink: Message has 6 unknown bytes. [ 59.750379][ T4111] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.134'. [ 59.768422][ T4105] lo speed is unknown, defaulting to 1000 [ 59.811298][ T4111] loop3: detected capacity change from 0 to 1024 [ 59.835058][ T4111] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.846090][ T4111] EXT4-fs (loop3): group descriptors corrupted! [ 59.914030][ T4111] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 60.110161][ T4140] loop2: detected capacity change from 0 to 512 [ 60.121670][ T4140] EXT4-fs: Mount option(s) incompatible with ext2 [ 60.225364][ T4146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 60.235444][ T4146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'. [ 60.244708][ T4146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 60.271506][ T4143] loop2: detected capacity change from 0 to 512 [ 60.281362][ T4143] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.290209][ T4146] netlink: 'syz.3.143': attribute type 6 has an invalid length. [ 60.300278][ T4151] smc: net device bond0 applied user defined pnetid SYZ0 [ 60.307562][ T4143] EXT4-fs (loop2): failed to initialize system zone (-117) [ 60.315520][ T4151] smc: net device bond0 erased user defined pnetid SYZ0 [ 60.338042][ T4152] loop3: detected capacity change from 0 to 1024 [ 60.346860][ T4151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4151 comm=syz.0.145 [ 60.360904][ T4143] EXT4-fs (loop2): mount failed [ 60.551219][ T4160] loop3: detected capacity change from 0 to 128 [ 60.556966][ T4159] loop2: detected capacity change from 0 to 128 [ 60.565940][ T4160] bio_check_eod: 148 callbacks suppressed [ 60.565956][ T4160] syz.3.147: attempt to access beyond end of device [ 60.565956][ T4160] loop3: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 60.599135][ T4160] syz.3.147: attempt to access beyond end of device [ 60.599135][ T4160] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 60.644317][ T4159] syz.2.149: attempt to access beyond end of device [ 60.644317][ T4159] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 60.666857][ T4159] syz.2.149: attempt to access beyond end of device [ 60.666857][ T4159] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 60.684745][ T4162] team0 (unregistering): Port device team_slave_0 removed [ 60.695858][ T4162] team0 (unregistering): Port device team_slave_1 removed [ 60.735141][ T4163] syz.3.147: attempt to access beyond end of device [ 60.735141][ T4163] loop3: rw=2049, sector=153, nr_sectors = 32 limit=128 [ 60.750497][ T4163] syz.3.147: attempt to access beyond end of device [ 60.750497][ T4163] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 60.775949][ T4163] syz.3.147: attempt to access beyond end of device [ 60.775949][ T4163] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 60.795543][ T4163] syz.3.147: attempt to access beyond end of device [ 60.795543][ T4163] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 60.810801][ T4159] syz.2.149: attempt to access beyond end of device [ 60.810801][ T4159] loop2: rw=2049, sector=153, nr_sectors = 32 limit=128 [ 60.819544][ T4163] syz.3.147: attempt to access beyond end of device [ 60.819544][ T4163] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 60.890418][ T4176] netlink: 'syz.4.152': attribute type 10 has an invalid length. [ 60.942190][ T4180] loop4: detected capacity change from 0 to 128 [ 61.007412][ T4184] loop2: detected capacity change from 0 to 128 [ 61.020839][ T4184] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.057604][ T4184] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.201675][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.273421][ T29] kauditd_printk_skb: 1259 callbacks suppressed [ 61.273438][ T29] audit: type=1326 audit(1750881789.082:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb60ef558e7 code=0x7ffc0000 [ 61.303076][ T29] audit: type=1326 audit(1750881789.082:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98683358e7 code=0x7ffc0000 [ 61.326509][ T29] audit: type=1326 audit(1750881789.082:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98682dab19 code=0x7ffc0000 [ 61.349886][ T29] audit: type=1326 audit(1750881789.082:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb60eefab19 code=0x7ffc0000 [ 61.373321][ T29] audit: type=1326 audit(1750881789.082:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 61.396705][ T29] audit: type=1326 audit(1750881789.082:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60ef5e929 code=0x7ffc0000 [ 61.420145][ T29] audit: type=1326 audit(1750881789.082:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc8148258e7 code=0x7ffc0000 [ 61.443475][ T29] audit: type=1326 audit(1750881789.082:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc8147cab19 code=0x7ffc0000 [ 61.466812][ T29] audit: type=1326 audit(1750881789.082:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 61.490106][ T29] audit: type=1326 audit(1750881789.092:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98683358e7 code=0x7ffc0000 [ 61.551192][ T4204] netlink: 'syz.2.163': attribute type 4 has an invalid length. [ 61.646092][ T4211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.684914][ T4211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.733493][ T4216] loop3: detected capacity change from 0 to 128 [ 61.744923][ T4211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.812546][ T4211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.874554][ T4211] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.908255][ T4211] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.922368][ T4211] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.937107][ T4211] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.986048][ T4226] loop4: detected capacity change from 0 to 512 [ 62.134927][ T4226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.154221][ T4226] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.277082][ T4241] netlink: '+}[@': attribute type 27 has an invalid length. [ 62.314552][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.326784][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.334137][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.347468][ T4246] loop4: detected capacity change from 0 to 128 [ 62.424988][ T4241] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.434953][ T4241] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.444063][ T4241] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.453182][ T4241] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.540320][ T4250] loop1: detected capacity change from 0 to 128 [ 62.852319][ T4260] __nla_validate_parse: 5 callbacks suppressed [ 62.852456][ T4260] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.178'. [ 62.927585][ T4269] loop2: detected capacity change from 0 to 512 [ 62.954446][ T4269] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.179: Parent and EA inode have the same ino 15 [ 62.991355][ T4269] EXT4-fs (loop2): 1 orphan inode deleted [ 62.998470][ T4269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.016313][ T4269] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.179: deleted inode referenced: 15 [ 63.070425][ T4269] netlink: 830 bytes leftover after parsing attributes in process `syz.2.179'. [ 63.100146][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.151499][ T4326] loop2: detected capacity change from 0 to 164 [ 63.167225][ T4326] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.191928][ T4326] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.291991][ T4330] loop4: detected capacity change from 0 to 1024 [ 63.335623][ T4330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.372475][ T4334] loop2: detected capacity change from 0 to 764 [ 63.404759][ T4334] rock: directory entry would overflow storage [ 63.411072][ T4334] rock: sig=0x4654, size=5, remaining=4 [ 63.435891][ T4334] tipc: Cannot configure node identity twice [ 63.444820][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.623589][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.647758][ T2996] udevd[2996]: worker [3298] terminated by signal 33 (Unknown signal 33) [ 63.656357][ T3394] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.677402][ T4342] loop2: detected capacity change from 0 to 1024 [ 63.690410][ T2996] udevd[2996]: worker [3298] failed while handling '/devices/virtual/misc/uhid/0000:0000:0000.0002/hidraw/hidraw0' [ 63.696528][ T4342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.721748][ T4347] program syz.1.187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.736338][ T4347] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 63.754013][ T4342] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.776960][ T4345] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 63.788253][ T4342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.794581][ T4352] loop3: detected capacity change from 0 to 1024 [ 63.811203][ T4350] loop4: detected capacity change from 0 to 164 [ 63.824315][ T4350] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.847529][ T4352] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 63.848933][ T4350] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.858619][ T4352] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 63.885627][ T4350] Symlink component flag not implemented [ 63.892611][ T4350] Symlink component flag not implemented [ 63.894689][ T4352] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 63.906614][ T4350] Symlink component flag not implemented (7) [ 63.915150][ T4350] Symlink component flag not implemented (116) [ 63.940549][ T4350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'. [ 63.944229][ T4357] lo speed is unknown, defaulting to 1000 [ 63.958661][ T4352] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm syz.3.189: unexpected bad inode w/o EXT4_IGET_BAD [ 63.972703][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.992353][ T4352] EXT4-fs (loop3): no journal found [ 63.997661][ T4352] EXT4-fs (loop3): can't get journal size [ 64.023640][ T4362] loop4: detected capacity change from 0 to 164 [ 64.034111][ T4352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.076773][ T4359] lo speed is unknown, defaulting to 1000 [ 64.137132][ T4352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.613987][ T4374] loop1: detected capacity change from 0 to 128 [ 64.742965][ T4365] loop2: detected capacity change from 0 to 128 [ 65.177604][ T4390] netlink: 96 bytes leftover after parsing attributes in process `syz.3.201'. [ 65.217972][ T4392] lo speed is unknown, defaulting to 1000 [ 65.631541][ T4304] bio_check_eod: 300 callbacks suppressed [ 65.631560][ T4304] kworker/u8:47: attempt to access beyond end of device [ 65.631560][ T4304] loop1: rw=1, sector=313, nr_sectors = 8 limit=128 [ 65.745239][ T4399] lo speed is unknown, defaulting to 1000 [ 65.833631][ T4417] tipc: New replicast peer: 255.255.255.255 [ 65.840879][ T4417] tipc: Enabled bearer , priority 10 [ 65.847961][ T4417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 65.858197][ T4417] tipc: Disabling bearer [ 65.867704][ T4416] loop1: detected capacity change from 0 to 1024 [ 65.881192][ T4420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.901032][ T4416] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.918854][ T4416] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.206: Failed to acquire dquot type 0 [ 65.950989][ T4420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.005069][ T4416] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 66.021241][ T4425] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 66.025906][ T4416] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.206: corrupted inode contents [ 66.029216][ T4425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.210'. [ 66.039897][ T4425] dummy0: entered promiscuous mode [ 66.063978][ T4416] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #13: comm syz.1.206: mark_inode_dirty error [ 66.085276][ T4425] bridge0: port 3(dummy0) entered blocking state [ 66.091745][ T4425] bridge0: port 3(dummy0) entered disabled state [ 66.097159][ T4416] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.206: corrupted inode contents [ 66.103861][ T4425] dummy0: entered allmulticast mode [ 66.126642][ T4439] loop3: detected capacity change from 0 to 512 [ 66.133800][ T4416] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.206: mark_inode_dirty error [ 66.137277][ T4425] bridge0: port 3(dummy0) entered blocking state [ 66.151531][ T4425] bridge0: port 3(dummy0) entered forwarding state [ 66.151537][ T4441] netlink: 'syz.4.211': attribute type 39 has an invalid length. [ 66.161136][ T4416] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.206: corrupted inode contents [ 66.185440][ T4416] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 66.196134][ T4416] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #13: comm syz.1.206: corrupted inode contents [ 66.213440][ T4439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.218028][ T4416] EXT4-fs error (device loop1): ext4_truncate:4597: inode #13: comm syz.1.206: mark_inode_dirty error [ 66.227407][ T4439] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.250534][ T4416] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 66.272820][ T4416] EXT4-fs (loop1): 1 truncate cleaned up [ 66.280317][ T4416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.294501][ T29] kauditd_printk_skb: 1813 callbacks suppressed [ 66.294522][ T29] audit: type=1326 audit(1750881794.102:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 66.325136][ T29] audit: type=1326 audit(1750881794.102:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 66.349207][ T29] audit: type=1326 audit(1750881794.102:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 66.372721][ T29] audit: type=1326 audit(1750881794.102:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 66.396692][ T29] audit: type=1326 audit(1750881794.102:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 66.420020][ T29] audit: type=1326 audit(1750881794.102:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 66.443438][ T29] audit: type=1326 audit(1750881794.102:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 66.466997][ T29] audit: type=1326 audit(1750881794.102:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 66.490483][ T29] audit: type=1326 audit(1750881794.102:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 66.513986][ T29] audit: type=1326 audit(1750881794.102:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 66.561807][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.642227][ T4477] loop4: detected capacity change from 0 to 512 [ 66.662714][ T4477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.698349][ T4477] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.723773][ T4477] netlink: '+}[@': attribute type 12 has an invalid length. [ 66.757405][ T4488] loop3: detected capacity change from 0 to 128 [ 66.772418][ T4489] netlink: 'syz.1.215': attribute type 10 has an invalid length. [ 66.783145][ T4489] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.859748][ T4492] batadv_slave_1: entered promiscuous mode [ 66.868740][ T4499] netlink: 'syz.0.218': attribute type 10 has an invalid length. [ 66.884022][ T4488] syz.3.216: attempt to access beyond end of device [ 66.884022][ T4488] loop3: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 66.911643][ T4499] team0 (unregistering): Port device team_slave_0 removed [ 66.920149][ T4488] syz.3.216: attempt to access beyond end of device [ 66.920149][ T4488] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 66.952778][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 66.976824][ T4499] team0 (unregistering): Port device team_slave_1 removed [ 66.990472][ T4491] batadv_slave_1: left promiscuous mode [ 67.294798][ T4488] syz.3.216: attempt to access beyond end of device [ 67.294798][ T4488] loop3: rw=2049, sector=153, nr_sectors = 32 limit=128 [ 67.310586][ T4488] syz.3.216: attempt to access beyond end of device [ 67.310586][ T4488] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 67.333739][ T4545] loop1: detected capacity change from 0 to 512 [ 67.333975][ T4488] syz.3.216: attempt to access beyond end of device [ 67.333975][ T4488] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 67.363888][ T4488] syz.3.216: attempt to access beyond end of device [ 67.363888][ T4488] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 67.384150][ T4545] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.392590][ T4488] syz.3.216: attempt to access beyond end of device [ 67.392590][ T4488] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 67.410590][ T4488] syz.3.216: attempt to access beyond end of device [ 67.410590][ T4488] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 67.425315][ T4488] syz.3.216: attempt to access beyond end of device [ 67.425315][ T4488] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 67.562369][ T4563] netlink: 'syz.1.224': attribute type 4 has an invalid length. [ 67.574144][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 67.661838][ T4571] loop1: detected capacity change from 0 to 512 [ 67.826707][ T4571] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.225: Parent and EA inode have the same ino 15 [ 67.844710][ T4571] EXT4-fs (loop1): 1 orphan inode deleted [ 67.853339][ T4571] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.225: deleted inode referenced: 15 [ 68.629840][ T4587] lo speed is unknown, defaulting to 1000 [ 68.994503][ T4615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 69.009585][ T4613] loop3: detected capacity change from 0 to 164 [ 69.017990][ T4571] netlink: 830 bytes leftover after parsing attributes in process `syz.1.225'. [ 69.052696][ T4613] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.083469][ T4620] loop1: detected capacity change from 0 to 764 [ 69.093739][ T4613] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.112836][ T4613] Symlink component flag not implemented [ 69.118621][ T4613] Symlink component flag not implemented [ 69.133496][ T4615] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.133673][ T4613] Symlink component flag not implemented (7) [ 69.151246][ T4613] Symlink component flag not implemented (116) [ 69.157732][ T4620] rock: directory entry would overflow storage [ 69.164145][ T4620] rock: sig=0x4654, size=5, remaining=4 [ 69.170788][ T4622] loop4: detected capacity change from 0 to 2048 [ 69.173961][ T4618] batadv_slave_1: entered promiscuous mode [ 69.189258][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 69.214834][ T4620] tipc: Started in network mode [ 69.219782][ T4620] tipc: Node identity 4, cluster identity 4711 [ 69.225993][ T4620] tipc: Node number set to 4 [ 69.243121][ T4624] team0 (unregistering): Port device team_slave_0 removed [ 69.253663][ T4624] team0 (unregistering): Port device team_slave_1 removed [ 69.293885][ T4626] netlink: 'syz.1.234': attribute type 2 has an invalid length. [ 69.344874][ T4617] batadv_slave_1: left promiscuous mode [ 69.355818][ T4629] loop4: detected capacity change from 0 to 256 [ 69.377042][ T4629] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 69.386210][ T4629] FAT-fs (loop4): bogus number of directory entries (1) [ 69.393274][ T4629] FAT-fs (loop4): Can't find a valid FAT filesystem [ 69.446258][ T4634] loop2: detected capacity change from 0 to 128 [ 69.457564][ T4635] netlink: 'syz.3.236': attribute type 4 has an invalid length. [ 69.479848][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 69.514207][ T4639] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 69.520790][ T4639] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.529885][ T4639] vhci_hcd vhci_hcd.0: Device attached [ 69.547364][ T4643] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.653897][ T4643] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.684383][ T4640] usbip_core: unknown command [ 69.689269][ T4640] vhci_hcd: unknown pdu 0 [ 69.693648][ T4640] usbip_core: unknown command [ 69.702578][ T4310] vhci_hcd: stop threads [ 69.706900][ T4310] vhci_hcd: release socket [ 69.711409][ T4310] vhci_hcd: disconnect device [ 69.716338][ T3394] vhci_hcd: vhci_device speed not set [ 69.745463][ T4643] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.795121][ T4652] openvswitch: netlink: Message has 6 unknown bytes. [ 69.847853][ T4654] loop3: detected capacity change from 0 to 512 [ 69.871558][ T4654] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.891094][ T4643] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.904215][ T4654] netlink: '+}[@': attribute type 12 has an invalid length. [ 69.961372][ T4643] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.980573][ T4643] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.996106][ T4643] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.999426][ T4662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.247'. [ 70.012473][ T4643] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.038857][ T4660] lo speed is unknown, defaulting to 1000 [ 70.275924][ T4669] netlink: 'syz.3.250': attribute type 10 has an invalid length. [ 70.284644][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 70.486785][ T4678] loop2: detected capacity change from 0 to 128 [ 70.559745][ T4681] loop4: detected capacity change from 0 to 512 [ 70.570188][ T4681] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.698271][ T4681] EXT4-fs mount: 8 callbacks suppressed [ 70.698287][ T4681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.716709][ T4681] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.729260][ T4681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.771897][ T4682] bio_check_eod: 213 callbacks suppressed [ 70.771916][ T4682] syz.2.253: attempt to access beyond end of device [ 70.771916][ T4682] loop2: rw=2049, sector=153, nr_sectors = 32 limit=128 [ 70.939532][ T4682] syz.2.253: attempt to access beyond end of device [ 70.939532][ T4682] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 71.349404][ T29] kauditd_printk_skb: 889 callbacks suppressed [ 71.349469][ T29] audit: type=1326 audit(1750881799.162:5673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 71.516493][ T29] audit: type=1326 audit(1750881799.192:5674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 71.540013][ T29] audit: type=1326 audit(1750881799.202:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 71.563553][ T29] audit: type=1326 audit(1750881799.202:5676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 71.587004][ T29] audit: type=1326 audit(1750881799.202:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 71.610548][ T29] audit: type=1326 audit(1750881799.202:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 71.634019][ T29] audit: type=1326 audit(1750881799.202:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 71.657384][ T29] audit: type=1326 audit(1750881799.202:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 71.680752][ T29] audit: type=1326 audit(1750881799.202:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 71.704251][ T29] audit: type=1326 audit(1750881799.202:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4697 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 72.073007][ T4707] loop3: detected capacity change from 0 to 164 [ 72.109259][ T4707] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 72.128965][ T4707] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 72.163080][ T4709] veth1_to_bond: entered allmulticast mode [ 72.188547][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 72.236332][ T4709] bond0: (slave bond_slave_1): Releasing backup interface [ 72.389324][ T4709] veth1_to_bond (unregistering): left allmulticast mode [ 72.557796][ T4717] loop1: detected capacity change from 0 to 512 [ 72.567615][ T4723] loop4: detected capacity change from 0 to 128 [ 72.581975][ T4723] syz.4.264: attempt to access beyond end of device [ 72.581975][ T4723] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 72.596458][ T4723] syz.4.264: attempt to access beyond end of device [ 72.596458][ T4723] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 72.613344][ T4717] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 72.629561][ T4717] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 72.664517][ T4717] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #11: comm syz.1.259: corrupted inode contents [ 72.696464][ T4717] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #11: comm syz.1.259: mark_inode_dirty error [ 72.710952][ T4717] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.259: invalid indirect mapped block 1 (level 1) [ 72.774546][ T4732] netlink: 14 bytes leftover after parsing attributes in process `syz.0.265'. [ 72.780745][ T4717] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #11: comm syz.1.259: corrupted inode contents [ 72.801014][ T4717] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 72.811413][ T4732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.816473][ T4717] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #11: comm syz.1.259: corrupted inode contents [ 72.834471][ T4717] EXT4-fs error (device loop1): ext4_truncate:4597: inode #11: comm syz.1.259: mark_inode_dirty error [ 72.836174][ T4732] bond0 (unregistering): Released all slaves [ 72.847638][ T4717] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 72.864556][ T4717] EXT4-fs (loop1): 1 truncate cleaned up [ 72.910403][ T4717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.942154][ T4746] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.958703][ T4729] syz.4.264: attempt to access beyond end of device [ 72.958703][ T4729] loop4: rw=2049, sector=153, nr_sectors = 32 limit=128 [ 72.974628][ T4729] syz.4.264: attempt to access beyond end of device [ 72.974628][ T4729] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 72.991196][ T4729] syz.4.264: attempt to access beyond end of device [ 72.991196][ T4729] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 73.018404][ T4729] syz.4.264: attempt to access beyond end of device [ 73.018404][ T4729] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 73.043733][ T4746] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.050358][ T4729] syz.4.264: attempt to access beyond end of device [ 73.050358][ T4729] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 73.071914][ T4729] syz.4.264: attempt to access beyond end of device [ 73.071914][ T4729] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 73.115690][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.151421][ T4746] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.186186][ T4758] netlink: 'syz.2.268': attribute type 39 has an invalid length. [ 73.216334][ T4746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.336721][ T4746] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.349711][ T4746] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.361672][ T4746] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.373805][ T4746] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.433579][ T4769] netlink: 'syz.2.270': attribute type 10 has an invalid length. [ 73.446511][ T4769] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 73.475288][ T4778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.492056][ T4778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.535395][ T4787] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.898631][ T4829] loop2: detected capacity change from 0 to 512 [ 73.907190][ T4829] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.921442][ T4829] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.273: corrupted xattr entries [ 73.934333][ T4829] EXT4-fs (loop2): Remounting filesystem read-only [ 73.942106][ T4829] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.956549][ T4829] EXT4-fs (loop2): 1 truncate cleaned up [ 73.963951][ T4829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.983907][ T4839] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 73.995253][ T4829] IPVS: stopping master sync thread 4839 ... [ 74.053806][ T4850] netlink: 'syz.2.273': attribute type 21 has an invalid length. [ 74.061696][ T4850] netlink: 176 bytes leftover after parsing attributes in process `syz.2.273'. [ 74.395700][ T4901] openvswitch: netlink: Message has 6 unknown bytes. [ 74.540612][ T4912] loop4: detected capacity change from 0 to 512 [ 74.562560][ T4912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.576965][ T4912] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.786927][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.817414][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 74.843635][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 74.959817][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 74.985294][ T4928] lo speed is unknown, defaulting to 1000 [ 75.070925][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 75.121508][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.122426][ T4936] smc: net device bond0 applied user defined pnetid SYZ0 [ 75.170755][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 75.181689][ T4936] smc: net device bond0 erased user defined pnetid SYZ0 [ 75.193614][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 75.221364][ T4936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4936 comm=syz.2.277 [ 75.300500][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 75.322040][ T4945] loop2: detected capacity change from 0 to 2048 [ 75.326052][ T4928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 75.354896][ T4945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.381584][ T4948] loop4: detected capacity change from 0 to 512 [ 75.399693][ T4947] loop3: detected capacity change from 0 to 512 [ 75.428980][ T4947] EXT4-fs (loop3): too many log groups per flexible block group [ 75.438649][ T4947] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 75.478912][ T4947] EXT4-fs (loop3): mount failed [ 75.493768][ T4948] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 75.524642][ T4948] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 75.541485][ T4948] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #11: comm syz.4.278: corrupted inode contents [ 75.554063][ T4948] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #11: comm syz.4.278: mark_inode_dirty error [ 75.566517][ T4948] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.278: invalid indirect mapped block 1 (level 1) [ 75.581192][ T4948] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #11: comm syz.4.278: corrupted inode contents [ 75.593767][ T4948] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 75.603323][ T4948] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #11: comm syz.4.278: corrupted inode contents [ 75.615922][ T4948] EXT4-fs error (device loop4): ext4_truncate:4597: inode #11: comm syz.4.278: mark_inode_dirty error [ 75.628199][ T4948] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 75.637805][ T4948] EXT4-fs (loop4): 1 truncate cleaned up [ 75.645329][ T4948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.717109][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.750560][ T4947] xt_hashlimit: size too large, truncated to 1048576 [ 75.793303][ T4961] lo speed is unknown, defaulting to 1000 [ 75.802153][ T4964] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.286'. [ 75.839556][ T4960] IPv4: Oversized IP packet from 127.202.26.0 [ 75.911672][ T4956] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 75.926817][ T4956] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 75.939232][ T4956] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.939232][ T4956] [ 75.948891][ T4956] EXT4-fs (loop2): Total free blocks count 0 [ 75.954952][ T4956] EXT4-fs (loop2): Free/Dirty block details [ 75.960885][ T4956] EXT4-fs (loop2): free_blocks=2415919504 [ 75.962668][ T4969] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 75.966619][ T4956] EXT4-fs (loop2): dirty_blocks=16 [ 75.966637][ T4956] EXT4-fs (loop2): Block reservation details [ 75.966726][ T4956] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 76.476830][ T4977] lo speed is unknown, defaulting to 1000 [ 77.398155][ T4983] lo speed is unknown, defaulting to 1000 [ 77.670557][ T29] kauditd_printk_skb: 865 callbacks suppressed [ 77.670571][ T29] audit: type=1326 audit(1750881805.482:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 77.702651][ T4990] loop1: detected capacity change from 0 to 128 [ 77.770249][ T4990] bio_check_eod: 102 callbacks suppressed [ 77.770270][ T4990] syz.1.292: attempt to access beyond end of device [ 77.770270][ T4990] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 77.798772][ T4992] loop4: detected capacity change from 0 to 512 [ 77.829333][ T29] audit: type=1326 audit(1750881805.512:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 77.852738][ T29] audit: type=1326 audit(1750881805.512:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 77.876104][ T29] audit: type=1326 audit(1750881805.512:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 77.899523][ T29] audit: type=1326 audit(1750881805.512:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 77.922857][ T29] audit: type=1326 audit(1750881805.512:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 77.946216][ T29] audit: type=1326 audit(1750881805.512:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 77.969588][ T29] audit: type=1326 audit(1750881805.512:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 77.992824][ T29] audit: type=1326 audit(1750881805.512:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 78.016202][ T29] audit: type=1326 audit(1750881805.512:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 78.051491][ T4990] syz.1.292: attempt to access beyond end of device [ 78.051491][ T4990] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 78.264234][ T4992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.289554][ T4990] syz.1.292: attempt to access beyond end of device [ 78.289554][ T4990] loop1: rw=2049, sector=153, nr_sectors = 16 limit=128 [ 78.292988][ T4998] loop3: detected capacity change from 0 to 512 [ 78.312631][ T4992] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.339560][ T4998] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.351374][ T4998] EXT4-fs (loop3): 1 truncate cleaned up [ 78.357379][ T4998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.383747][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.329180][ T5017] lo speed is unknown, defaulting to 1000 [ 81.514384][ T5023] loop1: detected capacity change from 0 to 128 [ 81.585250][ T5023] syz.1.300: attempt to access beyond end of device [ 81.585250][ T5023] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 81.603534][ T5027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.638896][ T5027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.670235][ T5023] syz.1.300: attempt to access beyond end of device [ 81.670235][ T5023] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 81.836712][ T5023] syz.1.300: attempt to access beyond end of device [ 81.836712][ T5023] loop1: rw=2049, sector=153, nr_sectors = 32 limit=128 [ 81.882497][ T5023] syz.1.300: attempt to access beyond end of device [ 81.882497][ T5023] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 81.922448][ T5023] syz.1.300: attempt to access beyond end of device [ 81.922448][ T5023] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 81.973795][ T5023] syz.1.300: attempt to access beyond end of device [ 81.973795][ T5023] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 82.031136][ T5023] syz.1.300: attempt to access beyond end of device [ 82.031136][ T5023] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 82.070878][ T5051] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.121395][ T5054] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 82.127966][ T5054] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 82.131252][ T5057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.136628][ T5054] vhci_hcd vhci_hcd.0: Device attached [ 82.157684][ T5057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.171494][ T5051] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.238298][ T5055] usbip_core: unknown command [ 82.244354][ T5055] vhci_hcd: unknown pdu 0 [ 82.248809][ T5055] usbip_core: unknown command [ 82.267429][ T4271] vhci_hcd: stop threads [ 82.271779][ T4271] vhci_hcd: release socket [ 82.276308][ T4271] vhci_hcd: disconnect device [ 82.287316][ T5051] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.332467][ T4256] vhci_hcd: vhci_device speed not set [ 82.338635][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.353406][ T5051] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.540411][ T5086] __nla_validate_parse: 2 callbacks suppressed [ 82.540429][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 82.569881][ T5086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.577382][ T5086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.595207][ T5086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.602863][ T5086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.749422][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 82.759655][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 83.130566][ T5125] loop3: detected capacity change from 0 to 128 [ 83.170994][ T5125] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 83.238934][ T5128] lo speed is unknown, defaulting to 1000 [ 83.416149][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 83.416163][ T29] audit: type=1326 audit(1750881811.222:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 83.451560][ T5137] loop1: detected capacity change from 0 to 128 [ 83.460510][ T29] audit: type=1326 audit(1750881811.262:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 83.485078][ T29] audit: type=1326 audit(1750881811.262:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 83.509536][ T29] audit: type=1326 audit(1750881811.262:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 83.525453][ T5137] bio_check_eod: 27 callbacks suppressed [ 83.525508][ T5137] syz.1.308: attempt to access beyond end of device [ 83.525508][ T5137] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 83.534162][ T29] audit: type=1326 audit(1750881811.262:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 83.553997][ T5137] syz.1.308: attempt to access beyond end of device [ 83.553997][ T5137] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 83.577652][ T29] audit: type=1326 audit(1750881811.262:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 83.615371][ T29] audit: type=1326 audit(1750881811.262:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 83.639792][ T29] audit: type=1326 audit(1750881811.262:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc81482e929 code=0x7ffc0000 [ 83.664306][ T29] audit: type=1326 audit(1750881811.262:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc81482e963 code=0x7ffc0000 [ 83.688555][ T29] audit: type=1326 audit(1750881811.262:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc81482d3df code=0x7ffc0000 [ 83.721434][ T5051] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.742672][ T5051] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.765968][ T5149] syz.1.308: attempt to access beyond end of device [ 83.765968][ T5149] loop1: rw=2049, sector=153, nr_sectors = 32 limit=128 [ 83.793098][ T5051] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.800522][ T5149] syz.1.308: attempt to access beyond end of device [ 83.800522][ T5149] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 83.815529][ T5051] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.829306][ T5149] syz.1.308: attempt to access beyond end of device [ 83.829306][ T5149] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 83.877101][ T5149] syz.1.308: attempt to access beyond end of device [ 83.877101][ T5149] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 83.910701][ T5149] syz.1.308: attempt to access beyond end of device [ 83.910701][ T5149] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 83.938360][ T5149] syz.1.308: attempt to access beyond end of device [ 83.938360][ T5149] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 83.953223][ T5149] syz.1.308: attempt to access beyond end of device [ 83.953223][ T5149] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 83.967268][ T5149] syz.1.308: attempt to access beyond end of device [ 83.967268][ T5149] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 84.028421][ T5163] loop2: detected capacity change from 0 to 512 [ 84.230470][ T5163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.244404][ T5163] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.301299][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.355971][ T5194] loop1: detected capacity change from 0 to 512 [ 84.373732][ T5194] EXT4-fs (loop1): 1 orphan inode deleted [ 84.381138][ T5192] loop2: detected capacity change from 0 to 256 [ 84.390695][ T5194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.410521][ T4267] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 1 [ 84.441992][ T5192] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.466950][ T5194] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.487732][ T5192] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 84.496462][ T5192] FAT-fs (loop2): Filesystem has been set read-only [ 84.526171][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.672592][ T5208] netlink: 'syz.0.317': attribute type 21 has an invalid length. [ 84.698611][ T5210] tmpfs: Unknown parameter '01777777777777777777777' [ 84.751371][ T5216] loop2: detected capacity change from 0 to 1024 [ 84.758391][ T5216] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 84.769325][ T5216] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 84.780548][ T5216] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 84.792971][ T5216] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.318: unexpected bad inode w/o EXT4_IGET_BAD [ 84.808903][ T5216] EXT4-fs (loop2): no journal found [ 84.815328][ T5216] EXT4-fs (loop2): can't get journal size [ 84.893175][ T5223] lo speed is unknown, defaulting to 1000 [ 84.936781][ T5220] netlink: 240 bytes leftover after parsing attributes in process `syz.0.319'. [ 85.020156][ T5216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.051574][ T5216] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.131189][ T5222] loop4: detected capacity change from 0 to 256 [ 85.131837][ T5222] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 85.207842][ T5218] lo speed is unknown, defaulting to 1000 [ 85.268050][ T5231] loop2: detected capacity change from 0 to 512 [ 85.292005][ T5231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.306629][ T5231] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.360160][ T5236] netlink: 32 bytes leftover after parsing attributes in process `syz.0.324'. [ 85.387719][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.572367][ T5249] loop2: detected capacity change from 0 to 1024 [ 85.604959][ T5249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.664745][ T5254] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 85.671347][ T5254] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.677267][ T5259] 9pnet_fd: Insufficient options for proto=fd [ 85.693940][ T5254] vhci_hcd vhci_hcd.0: Device attached [ 85.695205][ T5249] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.327: Allocating blocks 449-513 which overlap fs metadata [ 85.827087][ T5255] usbip_core: unknown command [ 85.831875][ T5255] vhci_hcd: unknown pdu 0 [ 85.837202][ T5255] usbip_core: unknown command [ 85.866227][ T59] vhci_hcd: stop threads [ 85.871630][ T59] vhci_hcd: release socket [ 85.876124][ T59] vhci_hcd: disconnect device [ 85.891644][ T5249] SELinux: syz.2.327 (5249) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.219731][ T5248] EXT4-fs (loop2): pa ffff88810056a2a0: logic 48, phys. 177, len 21 [ 86.228750][ T5248] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 86.381552][ T5266] loop4: detected capacity change from 0 to 128 [ 86.408504][ T4256] vhci_hcd: vhci_device speed not set [ 86.419494][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.601799][ T5281] loop3: detected capacity change from 0 to 512 [ 86.642088][ T5281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.660611][ T5281] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.741372][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.782930][ T5295] random: crng reseeded on system resumption [ 86.940120][ T5304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.341'. [ 87.045376][ T5306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 87.056996][ T5306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 87.456216][ T5311] loop3: detected capacity change from 0 to 128 [ 87.495585][ T5313] loop2: detected capacity change from 0 to 128 [ 87.504906][ T5309] pim6reg: entered allmulticast mode [ 87.515463][ T5314] pim6reg: left allmulticast mode [ 87.558156][ T5309] loop4: detected capacity change from 0 to 512 [ 87.569378][ T5309] EXT4-fs: Ignoring removed bh option [ 87.576084][ T5309] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.801264][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 87.811516][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.818960][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.837589][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.845200][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.024726][ T5334] loop4: detected capacity change from 0 to 128 [ 88.506292][ T29] kauditd_printk_skb: 1368 callbacks suppressed [ 88.506310][ T29] audit: type=1326 audit(1750881816.312:8049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 88.560603][ T5349] loop3: detected capacity change from 0 to 128 [ 88.588209][ T5348] loop2: detected capacity change from 0 to 512 [ 88.661437][ T5349] bio_check_eod: 112 callbacks suppressed [ 88.661458][ T5349] syz.3.353: attempt to access beyond end of device [ 88.661458][ T5349] loop3: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 88.751376][ T29] audit: type=1326 audit(1750881816.352:8050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614415e929 code=0x7ffc0000 [ 88.755520][ T5349] syz.3.353: attempt to access beyond end of device [ 88.755520][ T5349] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 88.774876][ T29] audit: type=1326 audit(1750881816.352:8051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 88.774912][ T29] audit: type=1326 audit(1750881816.352:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 88.774959][ T29] audit: type=1326 audit(1750881816.352:8053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 88.774990][ T29] audit: type=1326 audit(1750881816.352:8054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 88.775069][ T29] audit: type=1326 audit(1750881816.352:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 88.775102][ T29] audit: type=1326 audit(1750881816.352:8056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 88.775133][ T29] audit: type=1326 audit(1750881816.352:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 88.775222][ T29] audit: type=1326 audit(1750881816.352:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5347 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986833e929 code=0x7ffc0000 [ 88.807720][ T5348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.934788][ T5349] syz.3.353: attempt to access beyond end of device [ 88.934788][ T5349] loop3: rw=2049, sector=153, nr_sectors = 32 limit=128 [ 88.954235][ T5348] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.028625][ T5349] syz.3.353: attempt to access beyond end of device [ 89.028625][ T5349] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 89.050571][ T5349] syz.3.353: attempt to access beyond end of device [ 89.050571][ T5349] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 89.065235][ T5349] syz.3.353: attempt to access beyond end of device [ 89.065235][ T5349] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 89.081290][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.091815][ T5349] syz.3.353: attempt to access beyond end of device [ 89.091815][ T5349] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 89.107073][ T5349] syz.3.353: attempt to access beyond end of device [ 89.107073][ T5349] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 89.121200][ T5349] syz.3.353: attempt to access beyond end of device [ 89.121200][ T5349] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 89.135204][ T5349] syz.3.353: attempt to access beyond end of device [ 89.135204][ T5349] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 89.163435][ T5355] loop4: detected capacity change from 0 to 512 [ 89.177872][ T5355] ext4: Unknown parameter 'permit_directio' [ 89.193947][ T5357] netlink: 'syz.2.355': attribute type 27 has an invalid length. [ 89.211605][ T5355] loop4: detected capacity change from 0 to 512 [ 89.220608][ T5355] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.232876][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.240253][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.253379][ T5355] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 89.261621][ T5355] System zones: 0-2, 18-18, 34-34 [ 89.267985][ T5355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.280976][ T5355] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.309080][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.318866][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.320028][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.355028][ T5357] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.364714][ T5357] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.374223][ T5357] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.383673][ T5357] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.458565][ T5368] netlink: 32 bytes leftover after parsing attributes in process `syz.3.359'. [ 89.471501][ T5367] loop2: detected capacity change from 0 to 1024 [ 89.501942][ T5367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.537884][ T5367] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.552007][ T5373] vhci_hcd: invalid port number 96 [ 89.557239][ T5373] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 89.746140][ T5375] netlink: zone id is out of range [ 89.759256][ T5375] netlink: zone id is out of range [ 89.764436][ T5375] netlink: zone id is out of range [ 89.769862][ T5375] netlink: zone id is out of range [ 89.775008][ T5375] netlink: zone id is out of range [ 89.780427][ T5375] netlink: zone id is out of range [ 89.785581][ T5375] netlink: zone id is out of range [ 89.790863][ T5375] netlink: zone id is out of range [ 89.796141][ T5375] netlink: zone id is out of range [ 89.801554][ T5375] netlink: zone id is out of range [ 89.921501][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.347219][ T5383] loop1: detected capacity change from 0 to 512 [ 90.358374][ T5383] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.382622][ T5381] loop0: detected capacity change from 0 to 512 [ 90.403417][ T5383] EXT4-fs (loop1): 1 truncate cleaned up [ 90.410033][ T5383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.434159][ T5394] netlink: 32 bytes leftover after parsing attributes in process `syz.2.373'. [ 90.514439][ T5381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.555422][ T5381] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.608916][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 90.621213][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 90.937937][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.092172][ T5407] loop0: detected capacity change from 0 to 1024 [ 91.092635][ T5407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.094684][ T3414] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.100676][ T3414] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.106673][ T5407] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.191286][ T5413] loop3: detected capacity change from 0 to 128 [ 91.201394][ T5407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.293984][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.394651][ T5420] loop0: detected capacity change from 0 to 512 [ 91.435431][ T5420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.464297][ T5420] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.681452][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.016983][ T5427] loop0: detected capacity change from 0 to 8192 [ 92.026020][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.081797][ T5431] loop2: detected capacity change from 0 to 128 [ 92.103994][ T5431] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 92.187980][ T4292] ================================================================== [ 92.196106][ T4292] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 92.204388][ T4292] [ 92.206735][ T4292] write to 0xffff888136c68498 of 2 bytes by task 5434 on cpu 1: [ 92.214406][ T4292] fat16_ent_put+0x28/0x60 [ 92.218862][ T4292] fat_ent_write+0x6c/0xe0 [ 92.223315][ T4292] fat_chain_add+0x15b/0x3f0 [ 92.227951][ T4292] fat_get_block+0x46c/0x5e0 [ 92.232585][ T4292] __block_write_begin_int+0x400/0xf90 [ 92.238099][ T4292] cont_write_begin+0x5fc/0x970 [ 92.242978][ T4292] fat_write_begin+0x4f/0xe0 [ 92.247607][ T4292] generic_perform_write+0x181/0x490 [ 92.252920][ T4292] __generic_file_write_iter+0x9e/0x120 [ 92.258499][ T4292] generic_file_write_iter+0x8d/0x2f0 [ 92.263905][ T4292] aio_write+0x2e5/0x410 [ 92.268171][ T4292] io_submit_one+0xacd/0x11d0 [ 92.272852][ T4292] __se_sys_io_submit+0xfb/0x280 [ 92.277801][ T4292] __x64_sys_io_submit+0x43/0x50 [ 92.282773][ T4292] x64_sys_call+0xfc4/0x2fb0 [ 92.287406][ T4292] do_syscall_64+0xd2/0x200 [ 92.291945][ T4292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.297876][ T4292] [ 92.300228][ T4292] read to 0xffff888136c68400 of 512 bytes by task 4292 on cpu 0: [ 92.307984][ T4292] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 92.313917][ T4292] generic_perform_write+0x2c2/0x490 [ 92.319237][ T4292] shmem_file_write_iter+0xc5/0xf0 [ 92.324396][ T4292] lo_rw_aio+0x6ea/0x7a0 [ 92.324436][ T4292] loop_process_work+0x52d/0xa60 [ 92.333723][ T4292] loop_workfn+0x31/0x40 [ 92.337992][ T4292] process_scheduled_works+0x4ce/0x9d0 [ 92.343478][ T4292] worker_thread+0x582/0x770 [ 92.348091][ T4292] kthread+0x486/0x510 [ 92.352176][ T4292] ret_from_fork+0xda/0x150 [ 92.356696][ T4292] ret_from_fork_asm+0x1a/0x30 [ 92.361475][ T4292] [ 92.363807][ T4292] Reported by Kernel Concurrency Sanitizer on: [ 92.369980][ T4292] CPU: 0 UID: 0 PID: 4292 Comm: kworker/u8:36 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 92.382667][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.392737][ T4292] Workqueue: loop0 loop_workfn [ 92.397533][ T4292] ==================================================================