last executing test programs: 2m40.61112329s ago: executing program 1 (id=206): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$cgroup2(0x0, &(0x7f0000000180)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000280), 0x801, &(0x7f0000000340)={[{@memory_hugetlb_accounting}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x20000000002}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2m40.561432355s ago: executing program 1 (id=207): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) socket(0x2, 0x80805, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 2m39.967297364s ago: executing program 1 (id=216): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl=@unspec, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x99, 0x80, 0x9, 0x3, 0x11, "ef9de1f2a807e13962ff38ad58c51ad3c1e462"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x44080) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 2m39.912329309s ago: executing program 1 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000001240), 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) fremovexattr(r2, &(0x7f0000001380)=@random={'os2.', '*\x00'}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) name_to_handle_at(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB='('], &(0x7f00000001c0), 0x1200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r4, 0x0, 0x6}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x2, 0x80000, 0x0, 'queue1\x00', 0x401}) pipe2(&(0x7f0000001cc0), 0x80000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x2000c042) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000240)={{0x8, 0x7}, {0x7, 0x8}, 0x6, 0x2, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 2m39.821727628s ago: executing program 1 (id=218): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) preadv(r0, &(0x7f00000015c0), 0x0, 0x0, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000001c0)='./file1/file2\x00', 0x1a4a438, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0xb, 0x0, &(0x7f00000000c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x2) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r2, &(0x7f0000002480)=[{}], 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x1}, 0x18) semop(r2, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 2m39.448478755s ago: executing program 1 (id=221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0x7], 0x0, 0x0, 0x1}}, 0x40) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) creat(&(0x7f00000000c0)='./file0\x00', 0x48) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f00000041c0)={[{@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10}}, {@fat=@quiet}, {@fat=@nfs_nostale_ro}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@dots}, {@nodots}, {@fat=@check_normal}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@showexec}, {@dots}, {@fat=@sys_immutable}]}, 0x1, 0x24c, &(0x7f0000000500)="$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") 2m39.405015439s ago: executing program 32 (id=221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0x7], 0x0, 0x0, 0x1}}, 0x40) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) creat(&(0x7f00000000c0)='./file0\x00', 0x48) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f00000041c0)={[{@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10}}, {@fat=@quiet}, {@fat=@nfs_nostale_ro}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@dots}, {@nodots}, {@fat=@check_normal}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@showexec}, {@dots}, {@fat=@sys_immutable}]}, 0x1, 0x24c, &(0x7f0000000500)="$eJzs3cFqE1EUBuCTNm2n3di1uBhw01VR3yBIBHFAiMxCVw5UN60IKcjoKo/RZ+gj+RhZdTeiE0xMg6BMO0nm+yDMIT8Xzt3kZnFu8v7Rp/Ozz5cfq+9XkSRp9CMmcRNxHDuxG7XewrMX+7FoEgDAphmNikHbPdCg3q13DiOi2IuIg1tRfn1PXQEAAAAAAAAAANCwf5n/3zH/DwBbwfz/9huPB8XR7Pvbn8z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO25qaoH1V9ebfcHADTP+Q8A3eP8B4Ducf4DQPe8efvu1SDLhqM0TSKmkzIv8/pZ5y9eZsMn6S/H81XTssz3ZnU2fFrn6XJ+NFv/bGW+HyeP6/xn9vx1tpQfxNldbx4AAAAAAAAAAAAAAAAAAADWxGn628L9/l5E7Nb56ap8Wq74fYCl+/v9eNi/t20AAAAAAAAAAAAAAAAAAADARrv8+u28uLj4MN644vrk6ssatLGVxWH8x6ok1qN5RSNF259MAAAAAAAAAAAAAAAAAADQPfNLv213AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADtmf///90Vbe8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6IYfAQAA//+BtY57") 2m35.767302209s ago: executing program 3 (id=258): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$cgroup2(0x0, &(0x7f0000000180)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000280), 0x801, &(0x7f0000000340)={[{@memory_hugetlb_accounting}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x20000000002}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2m35.659245919s ago: executing program 3 (id=261): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) close(r1) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) 2m34.960071609s ago: executing program 3 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x83d00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$pokeuser(0x6, r0, 0x6, 0x6) r6 = fcntl$dupfd(r4, 0x0, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'], 0x50) r7 = io_uring_setup(0x3054, &(0x7f0000000080)={0x0, 0x6d33, 0x0, 0x0, 0x3fffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, 0x0) recvmsg$unix(r6, &(0x7f0000000740)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000640)=""/202, 0xca}], 0x1, &(0x7f0000000580)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}, 0x40010001) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="feffffff00000000008df6000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 2m34.084857675s ago: executing program 3 (id=277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001640)={{{@in6=@local, @in=@multicast1}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000001600)=0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa95058, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) lstat(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) mmap(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x3000007, 0x50, 0xffffffffffffffff, 0xc3395000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r6, &(0x7f0000000680)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1) dup3(r8, r7, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)=@in6={0xa, 0x4e22, 0xba3b, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x800000000000001}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0xd8}, 0x20004001) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000001840)=@sg0, r4, &(0x7f0000001800)) 2m33.93656616s ago: executing program 3 (id=278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="000088a8", 0x4, 0x14000b01, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0x80, 0x6, @broadcast}, 0x14) (async) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) (async) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) unshare(0xa000000) 2m33.824687661s ago: executing program 3 (id=280): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x28) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 2m33.791258294s ago: executing program 33 (id=280): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x28) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 4.560366729s ago: executing program 2 (id=2935): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 4.340790851s ago: executing program 2 (id=2938): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x804) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000006", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r4, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001200)=""/147, 0x93}], 0x2) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r5 = syz_open_pts(r4, 0x42) r6 = dup3(r5, r4, 0x0) write$UHID_INPUT(r6, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone3(&(0x7f00000005c0)={0x200000, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) modify_ldt$read(0x0, &(0x7f00000004c0)=""/232, 0xe8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000300)=0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000340)=""/19, 0x13}], 0x3}, 0x42) 4.140841601s ago: executing program 2 (id=2942): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) inotify_rm_watch(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) socket(0x10, 0xa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 4.122707563s ago: executing program 2 (id=2943): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="24040000", @ANYRES16=r2, @ANYBLOB="8b33200000190002000015"], 0x424}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 4.05142337s ago: executing program 2 (id=2944): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000089a19007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0003000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYRESOCT=r1, @ANYRES8=0x0, @ANYRES16=r0, @ANYRES8, @ANYRES16=0x0], 0x64}}, 0x4040804) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = gettid() r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6}) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") chmod(&(0x7f0000000000)='./file0\x00', 0x60) write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[], 0x53) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_delete(r0) symlink(&(0x7f00000003c0)='./file0/file0/..\x00', &(0x7f0000000240)='./file1\x00') r3 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0/..\x00', &(0x7f0000000480)={0x18000, 0x150, 0x4}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000380)=']-:@@#\x00', &(0x7f0000000400)='./file0/file0/..\x00', r4) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x5d, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x11, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x2010000, &(0x7f0000000700)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x11, 0x8, &(0x7f0000001e00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r7, 0xfffff000, 0x3900, 0x1, 0x0, 0xe00) io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 2.33058121s ago: executing program 0 (id=2963): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb35020c118fdc2ee, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000980)={0xfffffffa, 0x80}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, 0x0) 2.32609621s ago: executing program 6 (id=2964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) brk(0x200000ffc000) 2.239923809s ago: executing program 6 (id=2965): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0xfffffffe, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfdef) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r3, 0x80000001, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) r5 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffffffff}, @TCA_TBF_PBURST={0x8, 0x7, 0xa0b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x10, 0x6, 0x81, 0x4}, {0xb5, 0x2, 0x986, 0x0, 0xf7, 0x7a}, 0xfffffffd, 0x5, 0x1318}}]}}]}, 0x68}}, 0x44080) 2.218061351s ago: executing program 0 (id=2966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdef, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4000c00) 2.187546414s ago: executing program 5 (id=2967): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x804) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r3, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001200)=""/147, 0x93}], 0x2) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r4 = syz_open_pts(r3, 0x42) r5 = dup3(r4, r3, 0x0) write$UHID_INPUT(r5, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_set_self_attr(0x0, 0x0, 0x65, 0x0) syz_clone3(&(0x7f00000005c0)={0x200000, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) modify_ldt$read(0x0, &(0x7f00000004c0)=""/232, 0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000300)=0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000340)=""/19, 0x13}], 0x3}, 0x42) 2.084217994s ago: executing program 5 (id=2968): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000003c0)={0x1, &(0x7f0000000600)=[{0xffff, 0x9, 0x1}]}) 2.033920019s ago: executing program 4 (id=2970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./bus/file0\x00', 0x6480, &(0x7f0000000340)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@sb={'sb', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {}, {@errors_continue}, {@norecovery}], [{@smackfsroot={'smackfsroot', 0x3d, 'debug_want_extra_isize'}}, {@dont_hash}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") syz_read_part_table(0x1051, &(0x7f0000001080)="$eJzsz82JwlAUBeATZuaRzMC4sYds3FqK7WhasA1Xru1NlJdn7EBE+L7NuYf3Aze8V9/i2GI8Z5v9ujyPv26rOa/jb23J4VK6qY3VX37a8J2hRrf09Hk8/Z//KZsk01BvLEp2p5fvBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf4B4AAP//3rYJTg==") 1.706463791s ago: executing program 6 (id=2971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./bus/file0\x00', 0x6480, &(0x7f0000000340)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@sb={'sb', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {}, {@errors_continue}, {@norecovery}], [{@smackfsroot={'smackfsroot', 0x3d, 'debug_want_extra_isize'}}, {@dont_hash}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") syz_read_part_table(0x1051, &(0x7f0000001080)="$eJzsz82JwlAUBeATZuaRzMC4sYds3FqK7WhasA1Xru1NlJdn7EBE+L7NuYf3Aze8V9/i2GI8Z5v9ujyPv26rOa/jb23J4VK6qY3VX37a8J2hRrf09Hk8/Z//KZsk01BvLEp2p5fvBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf4B4AAP//3rYJTg==") 1.403020241s ago: executing program 4 (id=2972): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="24040000", @ANYRES16=r2, @ANYBLOB="8b33200000190002000015"], 0x424}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1.291715532s ago: executing program 0 (id=2973): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) syz_read_part_table(0x1050, &(0x7f0000000b80)="$eJzszzGqAjEUhtH/PWbIiI37sLfXVlsrN2FvYetGXJurkJEYQV2AiHBOlY/cBG74qr9k8qwxyVAPfZL/8j46fY31dV+SxWG8yzC24eUs59U8NXa1N+1+OPbp2sPL9vHDqXTlo6sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwM+4BQAA///qiBUU") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000500)=0xfffffffe, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) futex(&(0x7f0000000140)=0x1, 0x6, 0x6, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x8c97b000) futex(&(0x7f0000000040)=0x1, 0x1, 0x2, 0x0, 0x0, 0x1) setresuid(0xee00, 0xee00, 0x0) unshare(0x28000600) socket$inet6(0xa, 0x2, 0x0) 1.206031131s ago: executing program 5 (id=2974): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYRESOCT=r1, @ANYRES8=0x0, @ANYRES16=r0, @ANYRES8, @ANYRES16=0x0], 0x64}}, 0x4040804) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = gettid() r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6}) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") chmod(&(0x7f0000000000)='./file0\x00', 0x60) write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[], 0x53) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.203529321s ago: executing program 4 (id=2975): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f00000014c0)}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\x00\x00\b\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000380)='|', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x4}, 0x1c) sendto$inet6(r3, &(0x7f0000000100)='c', 0x1, 0x28011, &(0x7f0000000200)={0xa, 0x4e20, 0xdc3c, @local, 0x1}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x16360, 0x20}, &(0x7f0000000080)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.020822759s ago: executing program 6 (id=2976): gettid() timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_delete(r0) symlink(&(0x7f00000003c0)='./file0/file0/..\x00', &(0x7f0000000240)='./file1\x00') r3 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0/..\x00', &(0x7f0000000480)={0x18000, 0x150, 0x4}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000380)=']-:@@#\x00', &(0x7f0000000400)='./file0/file0/..\x00', r4) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x5d, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x11, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x2010000, &(0x7f0000000700)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x11, 0x8, &(0x7f0000001e00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r7, 0xfffff000, 0x3900, 0x1, 0x0, 0xe00) io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.018329239s ago: executing program 4 (id=2977): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYRESOCT=r1, @ANYRES8=0x0, @ANYRES16=r0, @ANYRES8, @ANYRES16=0x0], 0x64}}, 0x4040804) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = gettid() r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6}) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") chmod(&(0x7f0000000000)='./file0\x00', 0x60) write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[], 0x53) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5}) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x60) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[], 0x53) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) inotify_rm_watch(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) socket(0x10, 0xa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) gettid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 307.04093ms ago: executing program 0 (id=2982): r0 = socket$inet_udp(0x2, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) mlockall(0x3) 268.831734ms ago: executing program 5 (id=2983): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="24040000", @ANYRES16=r2, @ANYBLOB="8b33200000190002000015"], 0x424}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 221.823938ms ago: executing program 5 (id=2984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000003c0)={0x1, &(0x7f0000000600)=[{0xffff, 0x9, 0x1}]}) 68.614313ms ago: executing program 6 (id=2985): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="24040000", @ANYRES16=r2, @ANYBLOB="8b33200000190002000015"], 0x424}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 0s ago: executing program 6 (id=2986): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) socket(0x2, 0x80805, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) close(r1) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) kernel console output (not intermixed with test programs): e=0x7ffc0000 [ 161.582617][ T29] audit: type=1326 audit(1761029460.022:34593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9895 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb15887b099 code=0x7ffc0000 [ 161.606657][ T29] audit: type=1326 audit(1761029460.022:34594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9895 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 161.631539][ T29] audit: type=1326 audit(1761029460.052:34595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9895 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1588d5e67 code=0x7ffc0000 [ 161.656000][ T29] audit: type=1326 audit(1761029460.052:34596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9895 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb15887b099 code=0x7ffc0000 [ 161.681139][ T29] audit: type=1326 audit(1761029460.052:34597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9895 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 161.705413][ T29] audit: type=1326 audit(1761029460.062:34598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9895 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb1588d5e67 code=0x7ffc0000 [ 161.774906][ T4482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.146747][ T9951] loop5: detected capacity change from 0 to 128 [ 162.689341][ T9991] netlink: 'syz.4.2164': attribute type 13 has an invalid length. [ 163.029773][T10002] xt_CT: No such helper "pptp" [ 163.162448][T10007] loop5: detected capacity change from 0 to 8192 [ 163.169861][T10013] loop0: detected capacity change from 0 to 1024 [ 163.187451][T10013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.208239][T10013] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: comm syz.0.2176: inode #808464432: comm syz.0.2176: iget: illegal inode # [ 163.246904][T10013] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2176: error while reading EA inode 808464432 err=-117 [ 163.282651][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.714857][T10085] SELinux: failed to load policy [ 163.816409][T10093] SELinux: failed to load policy [ 163.890077][T10097] loop4: detected capacity change from 0 to 512 [ 163.910500][T10097] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.940075][T10097] EXT4-fs (loop4): 1 orphan inode deleted [ 163.945969][T10097] EXT4-fs (loop4): 1 truncate cleaned up [ 163.953893][T10097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.970533][T10097] EXT4-fs (loop4): shut down requested (0) [ 163.980522][T10097] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 163.991100][T10097] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 164.029826][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.034898][T10103] loop5: detected capacity change from 0 to 512 [ 164.048557][T10103] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2186: error while reading EA inode 32 err=-116 [ 164.063470][T10103] EXT4-fs (loop5): Remounting filesystem read-only [ 164.078981][T10103] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 164.089327][T10103] EXT4-fs (loop5): 1 orphan inode deleted [ 164.095931][T10103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.121763][T10108] loop6: detected capacity change from 0 to 512 [ 164.128778][T10108] EXT4-fs: Ignoring removed bh option [ 164.150186][T10108] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.159800][T10108] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 164.161345][T10110] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2189'. [ 164.178342][ T4207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.178579][T10108] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 164.208981][T10108] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 164.218274][T10108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.261994][T10108] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 164.305505][T10115] xt_CT: No such helper "pptp" [ 164.323148][ T4482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.375430][T10113] loop5: detected capacity change from 0 to 8192 [ 164.637089][T10141] SELinux: failed to load policy [ 164.754621][T10145] loop2: detected capacity change from 0 to 512 [ 164.761544][T10145] EXT4-fs: Ignoring removed bh option [ 164.783749][T10145] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.792963][T10145] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 164.802842][T10145] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 164.823525][T10149] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2204'. [ 164.842429][T10145] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 164.851147][T10145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.886594][T10145] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 164.914121][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.966492][T10155] xt_CT: No such helper "pptp" [ 165.009947][T10161] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2209'. [ 165.090116][T10167] loop2: detected capacity change from 0 to 128 [ 165.208237][T10171] SELinux: failed to load policy [ 165.239478][T10174] loop5: detected capacity change from 0 to 512 [ 165.334861][T10174] loop5: detected capacity change from 0 to 8192 [ 165.386253][T10181] SELinux: failed to load policy [ 165.410276][ T3612] loop5: p1 < > p2 < p5 p6 > p3 p4 [ 165.415790][ T3612] loop5: partition table partially beyond EOD, truncated [ 165.443627][ T3612] loop5: p1 start 67108864 is beyond EOD, truncated [ 165.451785][ T3612] loop5: p3 start 100859904 is beyond EOD, truncated [ 165.458583][ T3612] loop5: p4 size 393216 extends beyond EOD, truncated [ 165.476360][T10190] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2221'. [ 165.487430][T10191] loop4: detected capacity change from 0 to 512 [ 165.494576][ T3612] loop5: p5 start 100859904 is beyond EOD, truncated [ 165.501472][ T3612] loop5: p6 size 393216 extends beyond EOD, truncated [ 165.509632][T10191] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.527371][T10191] EXT4-fs (loop4): 1 orphan inode deleted [ 165.533393][T10191] EXT4-fs (loop4): 1 truncate cleaned up [ 165.540942][T10174] loop5: p1 < > p2 < p5 p6 > p3 p4 [ 165.546333][T10174] loop5: partition table partially beyond EOD, truncated [ 165.559629][T10191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.582257][T10174] loop5: p1 start 67108864 is beyond EOD, truncated [ 165.592120][T10174] loop5: p3 start 100859904 is beyond EOD, truncated [ 165.599153][T10174] loop5: p4 size 393216 extends beyond EOD, truncated [ 165.611723][T10191] EXT4-fs (loop4): shut down requested (0) [ 165.626762][T10191] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 165.639035][T10174] loop5: p5 start 100859904 is beyond EOD, truncated [ 165.646011][T10174] loop5: p6 size 393216 extends beyond EOD, truncated [ 165.661795][T10191] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 165.720498][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.778736][T10196] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2225'. [ 165.808656][T10198] loop4: detected capacity change from 0 to 1024 [ 165.833471][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 165.834441][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 165.854631][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 165.882273][T10198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.943411][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 165.943750][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 165.966080][T10198] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.2224: inode #808464432: comm syz.4.2224: iget: illegal inode # [ 165.982058][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 166.008789][T10194] loop0: detected capacity change from 0 to 8192 [ 166.045863][T10198] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2224: error while reading EA inode 808464432 err=-117 [ 166.172876][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.427980][T10232] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2236'. [ 166.483648][ T29] kauditd_printk_skb: 747 callbacks suppressed [ 166.483667][ T29] audit: type=1326 audit(1761029465.032:35346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10230 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 166.545618][T10131] loop6: detected capacity change from 0 to 512 [ 166.552073][ T29] audit: type=1326 audit(1761029465.062:35347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bab115e67 code=0x7ffc0000 [ 166.576955][ T29] audit: type=1326 audit(1761029465.062:35348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bab0bb099 code=0x7ffc0000 [ 166.601592][ T29] audit: type=1326 audit(1761029465.062:35349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9bab11efc9 code=0x7ffc0000 [ 166.626340][ T29] audit: type=1326 audit(1761029465.072:35350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10230 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 166.649227][ T29] audit: type=1326 audit(1761029465.072:35351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10230 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 166.673261][ T29] audit: type=1326 audit(1761029465.072:35352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10230 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 166.696201][ T29] audit: type=1326 audit(1761029465.072:35353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10230 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 166.720326][ T29] audit: type=1326 audit(1761029465.072:35354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10230 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 166.744558][ T29] audit: type=1326 audit(1761029465.072:35355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10230 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb1588dda7f code=0x7ffc0000 [ 166.822404][T10131] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2194: bg 0: block 248: padding at end of block bitmap is not set [ 166.910960][T10131] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2194: Failed to acquire dquot type 1 [ 166.954287][T10131] EXT4-fs (loop6): 1 truncate cleaned up [ 166.968825][T10131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.011665][T10131] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.172023][T10258] loop5: detected capacity change from 0 to 512 [ 167.185382][T10261] SELinux: failed to load policy [ 167.192287][T10264] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 167.222874][T10258] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2244: error while reading EA inode 32 err=-116 [ 167.235771][T10264] SELinux: failed to load policy [ 167.339452][T10258] EXT4-fs (loop5): Remounting filesystem read-only [ 167.369839][T10258] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 167.387415][T10258] EXT4-fs (loop5): 1 orphan inode deleted [ 167.393715][T10258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.396511][ T4482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.415257][T10258] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.510166][T10282] xt_CT: No such helper "pptp" [ 167.533642][T10286] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2255'. [ 167.596698][T10291] loop4: detected capacity change from 0 to 512 [ 167.607921][T10291] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.622493][T10293] loop2: detected capacity change from 0 to 512 [ 167.630761][T10291] EXT4-fs (loop4): 1 orphan inode deleted [ 167.636759][T10291] EXT4-fs (loop4): 1 truncate cleaned up [ 167.663693][T10291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.679634][T10296] loop6: detected capacity change from 0 to 1024 [ 167.748634][T10296] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.774596][T10291] EXT4-fs (loop4): shut down requested (0) [ 167.798611][T10291] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 167.815496][T10291] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 167.824678][T10293] loop2: detected capacity change from 0 to 8192 [ 167.879690][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.903446][T10293] loop2: p1 < > p2 < p5 p6 > p3 p4 [ 167.909056][T10293] loop2: partition table partially beyond EOD, truncated [ 167.917333][T10304] SELinux: failed to load policy [ 167.926903][T10293] loop2: p1 start 67108864 is beyond EOD, truncated [ 167.935842][T10293] loop2: p3 start 100859904 is beyond EOD, truncated [ 167.942905][T10293] loop2: p4 size 393216 extends beyond EOD, truncated [ 167.953033][T10293] loop2: p5 start 100859904 is beyond EOD, truncated [ 167.959896][T10293] loop2: p6 size 393216 extends beyond EOD, truncated [ 168.077078][T10314] xt_CT: No such helper "pptp" [ 168.107029][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 168.119537][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 168.131301][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 168.175620][T10327] loop4: detected capacity change from 0 to 512 [ 168.187042][T10327] EXT4-fs: Ignoring removed bh option [ 168.194855][T10327] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.204396][T10327] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 168.235924][T10332] netlink: 'syz.2.2270': attribute type 13 has an invalid length. [ 168.236934][T10327] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 168.261686][T10327] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 168.272183][T10327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.348046][T10327] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 168.385452][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.495562][T10344] loop0: detected capacity change from 0 to 512 [ 168.510317][T10344] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2275: error while reading EA inode 32 err=-116 [ 168.532178][T10344] EXT4-fs (loop0): Remounting filesystem read-only [ 168.547381][T10344] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 168.573285][T10344] EXT4-fs (loop0): 1 orphan inode deleted [ 168.590425][T10344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.677313][T10344] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.696738][T10349] loop5: detected capacity change from 0 to 512 [ 168.717473][ T4482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.726324][T10356] loop4: detected capacity change from 0 to 512 [ 168.730389][T10349] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2278: error while reading EA inode 32 err=-116 [ 168.751843][T10356] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2280: error while reading EA inode 32 err=-116 [ 168.765749][T10356] EXT4-fs (loop4): Remounting filesystem read-only [ 168.772336][T10356] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 168.783256][T10356] EXT4-fs (loop4): 1 orphan inode deleted [ 168.794394][T10349] EXT4-fs (loop5): Remounting filesystem read-only [ 168.818407][T10356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.837846][T10349] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 168.848968][T10349] EXT4-fs (loop5): 1 orphan inode deleted [ 168.855862][T10349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.857442][T10362] loop6: detected capacity change from 0 to 512 [ 168.916198][T10362] loop6: detected capacity change from 0 to 8192 [ 168.972557][T10362] loop6: p1 < > p2 < p5 p6 > p3 p4 [ 168.977834][T10362] loop6: partition table partially beyond EOD, truncated [ 168.980691][T10364] xt_CT: No such helper "pptp" [ 168.991289][T10362] loop6: p1 start 67108864 is beyond EOD, truncated [ 169.001603][T10362] loop6: p3 start 100859904 is beyond EOD, truncated [ 169.008373][T10362] loop6: p4 size 393216 extends beyond EOD, truncated [ 169.020780][T10362] loop6: p5 start 100859904 is beyond EOD, truncated [ 169.027744][T10362] loop6: p6 size 393216 extends beyond EOD, truncated [ 169.048487][ T3004] loop6: p1 < > p2 < p5 p6 > p3 p4 [ 169.054908][ T3004] loop6: partition table partially beyond EOD, truncated [ 169.063336][ T3004] loop6: p1 start 67108864 is beyond EOD, truncated [ 169.071106][ T3004] loop6: p3 start 100859904 is beyond EOD, truncated [ 169.078042][ T3004] loop6: p4 size 393216 extends beyond EOD, truncated [ 169.086247][ T3004] loop6: p5 start 100859904 is beyond EOD, truncated [ 169.093052][ T3004] loop6: p6 size 393216 extends beyond EOD, truncated [ 169.213117][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 169.306392][ T4207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.429700][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.600578][T10397] SELinux: failed to load policy [ 169.693362][T10411] SELinux: failed to load policy [ 169.812052][T10421] loop0: detected capacity change from 0 to 8192 [ 169.854399][T10414] loop2: detected capacity change from 0 to 512 [ 169.869337][T10414] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2299: error while reading EA inode 32 err=-116 [ 169.900317][T10414] EXT4-fs (loop2): Remounting filesystem read-only [ 169.911288][T10414] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 169.922509][T10414] EXT4-fs (loop2): 1 orphan inode deleted [ 169.928795][T10414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.942654][T10414] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.056769][T10434] loop5: detected capacity change from 0 to 1024 [ 170.085410][T10434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.173328][T10443] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2312'. [ 170.590440][T10461] SELinux: failed to load policy [ 170.745620][T10471] SELinux: failed to load policy [ 170.942794][T10493] netlink: 'syz.0.2329': attribute type 13 has an invalid length. [ 171.023044][T10485] loop4: detected capacity change from 0 to 8192 [ 171.080259][ T4207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.117264][T10498] SELinux: failed to load policy [ 171.226170][T10509] loop6: detected capacity change from 0 to 512 [ 171.232979][T10509] EXT4-fs: Ignoring removed bh option [ 171.240969][T10509] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.250821][T10509] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 171.266491][T10509] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 171.276982][T10509] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 171.286460][T10509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.304821][T10509] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 171.326733][ T4482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.576331][ T29] kauditd_printk_skb: 2069 callbacks suppressed [ 171.576348][ T29] audit: type=1326 audit(1761029470.122:37423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bab11efc9 code=0x7ffc0000 [ 171.645754][ T29] audit: type=1326 audit(1761029470.162:37424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9bab11efc9 code=0x7ffc0000 [ 171.671029][ T29] audit: type=1326 audit(1761029470.162:37425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bab11efc9 code=0x7ffc0000 [ 171.695763][ T29] audit: type=1326 audit(1761029470.162:37426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bab11efc9 code=0x7ffc0000 [ 171.757966][ T29] audit: type=1326 audit(1761029470.302:37427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.0.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7722efc9 code=0x7ffc0000 [ 171.843318][ T29] audit: type=1326 audit(1761029470.302:37428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.0.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7722efc9 code=0x7ffc0000 [ 171.867587][ T29] audit: type=1326 audit(1761029470.342:37429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.0.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4c7722efc9 code=0x7ffc0000 [ 171.891530][ T29] audit: type=1326 audit(1761029470.342:37430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.0.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7722efc9 code=0x7ffc0000 [ 171.916677][ T29] audit: type=1326 audit(1761029470.342:37431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.0.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7722efc9 code=0x7ffc0000 [ 171.940862][ T29] audit: type=1326 audit(1761029470.342:37432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.0.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f4c7722efc9 code=0x7ffc0000 [ 172.263060][T10556] netlink: 'syz.4.2356': attribute type 13 has an invalid length. [ 172.378901][T10558] loop6: detected capacity change from 0 to 8192 [ 172.672519][T10565] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2361'. [ 172.826710][T10569] loop5: detected capacity change from 0 to 512 [ 172.839442][T10569] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2362: error while reading EA inode 32 err=-116 [ 172.859334][T10569] EXT4-fs (loop5): Remounting filesystem read-only [ 172.866512][T10569] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 172.877711][T10569] EXT4-fs (loop5): 1 orphan inode deleted [ 172.883987][T10569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.897597][T10569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.016571][T10576] SELinux: failed to load policy [ 173.038071][T10581] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2365'. [ 173.165207][T10598] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2372'. [ 173.185277][T10601] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2375'. [ 173.255458][T10603] loop0: detected capacity change from 0 to 512 [ 173.273244][T10603] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2374: error while reading EA inode 32 err=-116 [ 173.286190][T10603] EXT4-fs (loop0): Remounting filesystem read-only [ 173.292890][T10603] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 173.296840][T10609] SELinux: failed to load policy [ 173.308916][T10603] EXT4-fs (loop0): 1 orphan inode deleted [ 173.315458][T10603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.359835][T10617] netlink: 'syz.2.2376': attribute type 13 has an invalid length. [ 173.475745][T10622] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.2382'. [ 173.486096][T10622] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2382'. [ 173.571996][T10636] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2388'. [ 173.591709][T10638] netlink: 'syz.6.2386': attribute type 13 has an invalid length. [ 173.592732][T10637] loop4: detected capacity change from 0 to 512 [ 173.612469][T10641] loop5: detected capacity change from 0 to 512 [ 173.621295][T10637] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2387: error while reading EA inode 32 err=-116 [ 173.634107][T10637] EXT4-fs (loop4): Remounting filesystem read-only [ 173.641009][T10637] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 173.652205][T10637] EXT4-fs (loop4): 1 orphan inode deleted [ 173.655617][T10641] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 173.659274][T10637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.678244][T10641] EXT4-fs (loop5): 1 orphan inode deleted [ 173.687516][T10641] EXT4-fs (loop5): 1 truncate cleaned up [ 173.694048][T10641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.714537][T10641] EXT4-fs (loop5): shut down requested (0) [ 173.725038][T10641] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 173.734573][T10641] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 173.756976][ T4207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.996447][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.390349][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.685136][T10700] loop4: detected capacity change from 0 to 512 [ 174.709897][T10700] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2413: error while reading EA inode 32 err=-116 [ 174.731073][T10700] EXT4-fs (loop4): Remounting filesystem read-only [ 174.737971][T10700] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 174.748871][T10700] EXT4-fs (loop4): 1 orphan inode deleted [ 174.755844][T10700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.771262][T10700] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.899759][T10725] loop2: detected capacity change from 0 to 8192 [ 175.373519][T10733] loop0: detected capacity change from 0 to 1024 [ 175.404892][T10733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.531215][T10741] SELinux: failed to load policy [ 175.557878][T10743] loop5: detected capacity change from 0 to 512 [ 175.565912][T10743] EXT4-fs: Ignoring removed bh option [ 175.573097][T10743] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.582418][T10743] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 175.608731][T10743] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 175.646527][T10743] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 175.656819][T10743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.690794][T10743] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 175.753367][ T4207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.830441][T10754] loop2: detected capacity change from 0 to 512 [ 175.945644][T10754] loop2: detected capacity change from 0 to 8192 [ 176.000076][ T3611] loop2: p1 < > p2 < p5 p6 > p3 p4 [ 176.005708][ T3611] loop2: partition table partially beyond EOD, truncated [ 176.055900][ T3611] loop2: p1 start 67108864 is beyond EOD, truncated [ 176.086152][ T3611] loop2: p3 start 100859904 is beyond EOD, truncated [ 176.093176][ T3611] loop2: p4 size 393216 extends beyond EOD, truncated [ 176.123323][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.136204][ T3611] loop2: p5 start 100859904 is beyond EOD, truncated [ 176.143242][ T3611] loop2: p6 size 393216 extends beyond EOD, truncated [ 176.147709][T10773] loop4: detected capacity change from 0 to 512 [ 176.160516][T10772] loop5: detected capacity change from 0 to 512 [ 176.196251][T10754] loop2: p1 < > p2 < p5 p6 > p3 p4 [ 176.196409][T10772] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2438: error while reading EA inode 32 err=-116 [ 176.201636][T10754] loop2: partition table partially beyond EOD, truncated [ 176.220657][T10772] EXT4-fs (loop5): Remounting filesystem read-only [ 176.227883][T10772] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 176.238683][T10772] EXT4-fs (loop5): 1 orphan inode deleted [ 176.247748][T10772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.264382][T10772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.275088][T10773] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2437: error while reading EA inode 32 err=-116 [ 176.295485][T10754] loop2: p1 start 67108864 is beyond EOD, truncated [ 176.305922][T10754] loop2: p3 start 100859904 is beyond EOD, truncated [ 176.313528][T10754] loop2: p4 size 393216 extends beyond EOD, truncated [ 176.326432][T10773] EXT4-fs (loop4): Remounting filesystem read-only [ 176.358621][T10773] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 176.365102][T10781] netlink: 1040 bytes leftover after parsing attributes in process `syz.0.2441'. [ 176.369233][T10754] loop2: p5 start 100859904 is beyond EOD, truncated [ 176.385497][T10754] loop2: p6 size 393216 extends beyond EOD, truncated [ 176.397305][T10773] EXT4-fs (loop4): 1 orphan inode deleted [ 176.412825][T10773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.433010][T10773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.530530][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 176.530933][T10790] netlink: 'syz.0.2442': attribute type 13 has an invalid length. [ 176.544734][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 176.550829][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 176.588767][T10792] loop2: detected capacity change from 0 to 1024 [ 176.595451][ T29] kauditd_printk_skb: 948 callbacks suppressed [ 176.595467][ T29] audit: type=1326 audit(1761029475.132:38381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26ab9b5e67 code=0x7ffc0000 [ 176.626502][ T29] audit: type=1326 audit(1761029475.132:38382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26ab95b099 code=0x7ffc0000 [ 176.650807][ T29] audit: type=1326 audit(1761029475.132:38383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f26ab9befc9 code=0x7ffc0000 [ 176.658465][T10792] EXT4-fs (loop2): bad geometry: first data block 393216 is beyond end of filesystem (512) [ 176.675610][ T29] audit: type=1326 audit(1761029475.132:38384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26ab9b5e67 code=0x7ffc0000 [ 176.709084][ T29] audit: type=1326 audit(1761029475.132:38385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26ab95b099 code=0x7ffc0000 [ 176.734013][ T29] audit: type=1326 audit(1761029475.132:38386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f26ab9befc9 code=0x7ffc0000 [ 176.761280][ T29] audit: type=1326 audit(1761029475.152:38387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26ab9b5e67 code=0x7ffc0000 [ 176.786484][ T29] audit: type=1326 audit(1761029475.152:38388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26ab95b099 code=0x7ffc0000 [ 176.811012][ T29] audit: type=1326 audit(1761029475.152:38389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f26ab9befc9 code=0x7ffc0000 [ 176.824967][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 176.835322][ T29] audit: type=1326 audit(1761029475.152:38390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26ab9b5e67 code=0x7ffc0000 [ 176.847674][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 176.885508][T10794] loop6: detected capacity change from 0 to 512 [ 176.892762][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 176.927614][T10794] EXT4-fs: Ignoring removed bh option [ 176.972281][T10794] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.982626][T10794] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 177.008358][T10805] loop5: detected capacity change from 0 to 1024 [ 177.017757][T10794] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 177.059824][T10805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.100017][T10794] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 177.120327][T10794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.122430][T10816] netlink: 1040 bytes leftover after parsing attributes in process `syz.2.2454'. [ 177.185748][T10794] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 177.194191][T10821] SELinux: failed to load policy [ 177.308685][ T4482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.349476][T10831] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2460'. [ 177.423724][T10835] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 177.623977][T10853] SELinux: failed to load policy [ 177.711209][ T4207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.965631][T10878] loop0: detected capacity change from 0 to 8192 [ 178.031250][T10884] netlink: 'syz.5.2479': attribute type 13 has an invalid length. [ 178.055281][T10886] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.2481'. [ 178.265991][T10907] loop2: detected capacity change from 0 to 512 [ 178.294934][T10907] EXT4-fs: Ignoring removed bh option [ 178.311267][T10909] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2491'. [ 178.323175][T10907] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.333242][T10907] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 178.382951][T10907] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 178.401004][T10907] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 178.412195][T10907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.427594][T10907] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 178.449873][T10916] netlink: 'syz.6.2492': attribute type 13 has an invalid length. [ 178.459082][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.577869][T10926] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2499'. [ 178.812987][T10945] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2506'. [ 178.839140][T10942] loop2: detected capacity change from 0 to 512 [ 178.852696][T10942] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2503: error while reading EA inode 32 err=-116 [ 178.860758][T10947] SELinux: failed to load policy [ 178.941123][T10942] EXT4-fs (loop2): Remounting filesystem read-only [ 178.948274][T10942] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 178.958799][T10942] EXT4-fs (loop2): 1 orphan inode deleted [ 178.970186][T10942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.194098][T10979] loop6: detected capacity change from 0 to 512 [ 179.241979][T10982] netlink: 'syz.0.2517': attribute type 13 has an invalid length. [ 179.282860][T10979] loop6: detected capacity change from 0 to 8192 [ 179.332252][ T3611] loop6: p1 < > p2 < p5 p6 > p3 p4 [ 179.337625][ T3611] loop6: partition table partially beyond EOD, truncated [ 179.354413][ T3611] loop6: p1 start 67108864 is beyond EOD, truncated [ 179.412833][T10985] netlink: 'syz.4.2519': attribute type 13 has an invalid length. [ 179.534643][ T3611] loop6: p3 start 100859904 is beyond EOD, truncated [ 179.541510][ T3611] loop6: p4 size 393216 extends beyond EOD, truncated [ 179.730252][ T3611] loop6: p5 start 100859904 is beyond EOD, truncated [ 179.737257][ T3611] loop6: p6 size 393216 extends beyond EOD, truncated [ 179.751139][T10979] loop6: p1 < > p2 < p5 p6 > p3 p4 [ 179.756703][T10979] loop6: partition table partially beyond EOD, truncated [ 179.772470][T10979] loop6: p1 start 67108864 is beyond EOD, truncated [ 179.780090][T10979] loop6: p3 start 100859904 is beyond EOD, truncated [ 179.787160][T10979] loop6: p4 size 393216 extends beyond EOD, truncated [ 179.803498][T10979] loop6: p5 start 100859904 is beyond EOD, truncated [ 179.810348][T10979] loop6: p6 size 393216 extends beyond EOD, truncated [ 179.851834][T10995] loop2: detected capacity change from 0 to 512 [ 179.900755][T10995] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2522: error while reading EA inode 32 err=-116 [ 179.991882][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 179.999184][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 180.015916][T10995] EXT4-fs (loop2): Remounting filesystem read-only [ 180.016477][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 180.031615][T10995] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 180.077192][T10995] EXT4-fs (loop2): 1 orphan inode deleted [ 180.080510][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 180.680147][T11020] loop0: detected capacity change from 0 to 512 [ 180.720648][T11020] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2531: error while reading EA inode 32 err=-116 [ 180.747696][T11029] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2535'. [ 180.775656][T11020] EXT4-fs (loop0): Remounting filesystem read-only [ 180.782557][T11020] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 180.825963][T11020] EXT4-fs (loop0): 1 orphan inode deleted [ 180.877317][T11036] loop5: detected capacity change from 0 to 8192 [ 180.925023][T11040] loop4: detected capacity change from 0 to 1024 [ 181.127212][T11048] netlink: 'syz.4.2539': attribute type 13 has an invalid length. [ 181.254007][T11059] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2546'. [ 181.297930][T11059] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2546'. [ 181.367927][T11067] loop6: detected capacity change from 0 to 512 [ 181.481196][T11067] loop6: detected capacity change from 0 to 8192 [ 181.533462][T11067] loop6: p1 < > p2 < p5 p6 > p3 p4 [ 181.538787][T11067] loop6: partition table partially beyond EOD, truncated [ 181.559297][T11067] loop6: p1 start 67108864 is beyond EOD, truncated [ 181.567583][T11067] loop6: p3 start 100859904 is beyond EOD, truncated [ 181.574474][T11067] loop6: p4 size 393216 extends beyond EOD, truncated [ 181.584872][T11067] loop6: p5 start 100859904 is beyond EOD, truncated [ 181.591728][T11067] loop6: p6 size 393216 extends beyond EOD, truncated [ 181.606075][ T29] kauditd_printk_skb: 1888 callbacks suppressed [ 181.606110][ T29] audit: type=1326 audit(1761029480.152:40279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.6.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fef1784d6ba code=0x7ffc0000 [ 181.645794][ T29] audit: type=1326 audit(1761029480.152:40280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.6.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fef1784d6ba code=0x7ffc0000 [ 181.671035][ T29] audit: type=1326 audit(1761029480.152:40281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.6.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fef1784e547 code=0x7ffc0000 [ 181.686680][T11071] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2550'. [ 181.696284][ T29] audit: type=1326 audit(1761029480.152:40282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.6.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fef1784d6ba code=0x7ffc0000 [ 181.729609][ T29] audit: type=1326 audit(1761029480.152:40283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.6.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fef1784d6ba code=0x7ffc0000 [ 181.754222][ T29] audit: type=1326 audit(1761029480.152:40284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.6.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fef1784e547 code=0x7ffc0000 [ 181.779100][ T29] audit: type=1326 audit(1761029480.152:40285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.6.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fef1784d6ba code=0x7ffc0000 [ 181.803749][ T29] audit: type=1326 audit(1761029480.152:40286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.6.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fef1784d6ba code=0x7ffc0000 [ 181.827582][ T29] audit: type=1326 audit(1761029480.152:40287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.6.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fef1784e547 code=0x7ffc0000 [ 181.827614][ T29] audit: type=1326 audit(1761029480.152:40288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.6.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fef1784d6ba code=0x7ffc0000 [ 182.004914][T11085] loop6: detected capacity change from 0 to 512 [ 182.027647][T11085] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.080117][T11082] loop4: detected capacity change from 0 to 512 [ 182.093670][T11085] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2555: Failed to acquire dquot type 0 [ 182.106614][T11085] EXT4-fs (loop6): Remounting filesystem read-only [ 182.130100][T11096] loop5: detected capacity change from 0 to 8192 [ 182.146133][T11082] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2552: error while reading EA inode 32 err=-116 [ 182.229347][T11082] EXT4-fs (loop4): Remounting filesystem read-only [ 182.257672][T11082] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 182.293840][T11106] loop6: detected capacity change from 0 to 512 [ 182.308412][T11106] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 182.321016][T11082] EXT4-fs (loop4): 1 orphan inode deleted [ 182.337906][T11106] EXT4-fs (loop6): 1 orphan inode deleted [ 182.344914][T11106] EXT4-fs (loop6): 1 truncate cleaned up [ 182.369368][T11115] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2565'. [ 182.404351][T11106] EXT4-fs (loop6): shut down requested (0) [ 182.414459][T11118] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2566'. [ 182.416681][T11106] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 182.444728][T11106] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 182.482525][T11122] xt_hashlimit: max too large, truncated to 1048576 [ 182.562562][T11127] loop6: detected capacity change from 0 to 512 [ 182.574799][T11127] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2569: error while reading EA inode 32 err=-116 [ 182.588573][T11127] EXT4-fs (loop6): Remounting filesystem read-only [ 182.595665][T11127] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 182.605959][T11127] EXT4-fs (loop6): 1 orphan inode deleted [ 183.058148][T11152] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2578'. [ 183.081745][T11154] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 183.161998][T11159] SELinux: failed to load policy [ 183.298313][T11167] loop4: detected capacity change from 0 to 512 [ 183.324979][T11167] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2582: error while reading EA inode 32 err=-116 [ 183.349520][T11167] EXT4-fs (loop4): Remounting filesystem read-only [ 183.366643][T11167] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 183.378090][T11167] EXT4-fs (loop4): 1 orphan inode deleted [ 183.505969][T11188] FAULT_INJECTION: forcing a failure. [ 183.505969][T11188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.519402][T11188] CPU: 1 UID: 0 PID: 11188 Comm: syz.6.2589 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.519436][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.519452][T11188] Call Trace: [ 183.519461][T11188] [ 183.519471][T11188] __dump_stack+0x1d/0x30 [ 183.519520][T11188] dump_stack_lvl+0xe8/0x140 [ 183.519610][T11188] dump_stack+0x15/0x1b [ 183.519644][T11188] should_fail_ex+0x265/0x280 [ 183.519681][T11188] should_fail+0xb/0x20 [ 183.519748][T11188] should_fail_usercopy+0x1a/0x20 [ 183.519779][T11188] _copy_from_user+0x1c/0xb0 [ 183.519800][T11188] copy_from_sockptr+0x5e/0xa0 [ 183.519915][T11188] packet_setsockopt+0x7c1/0xfd0 [ 183.519945][T11188] ? __pfx_packet_setsockopt+0x10/0x10 [ 183.519983][T11188] __sys_setsockopt+0x184/0x200 [ 183.520051][T11188] __x64_sys_setsockopt+0x64/0x80 [ 183.520087][T11188] x64_sys_call+0x20ec/0x3000 [ 183.520199][T11188] do_syscall_64+0xd2/0x200 [ 183.520294][T11188] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 183.520320][T11188] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 183.520348][T11188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.520368][T11188] RIP: 0033:0x7fef1784efc9 [ 183.520395][T11188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.520454][T11188] RSP: 002b:00007fef162af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.520478][T11188] RAX: ffffffffffffffda RBX: 00007fef17aa5fa0 RCX: 00007fef1784efc9 [ 183.520491][T11188] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004 [ 183.520566][T11188] RBP: 00007fef162af090 R08: 000000000000001c R09: 0000000000000000 [ 183.520581][T11188] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 183.520598][T11188] R13: 00007fef17aa6038 R14: 00007fef17aa5fa0 R15: 00007ffecc0dd4a8 [ 183.520621][T11188] [ 183.708546][T11189] netlink: 'syz.0.2586': attribute type 13 has an invalid length. [ 183.743479][T11193] loop2: detected capacity change from 0 to 512 [ 183.752626][T11193] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 183.764266][T11193] EXT4-fs (loop2): 1 orphan inode deleted [ 183.770041][T11193] EXT4-fs (loop2): 1 truncate cleaned up [ 183.778274][T11193] EXT4-fs (loop2): shut down requested (0) [ 183.788215][T11193] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 183.797334][T11193] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 183.830704][T11200] sctp: [Deprecated]: syz.2.2594 (pid 11200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.830704][T11200] Use struct sctp_sack_info instead [ 183.848027][T11201] SELinux: policydb version 2071621972 does not match my version range 15-35 [ 183.857232][T11201] SELinux: failed to load policy [ 183.882211][T11203] loop2: detected capacity change from 0 to 2048 [ 183.923128][ T3611] Alternate GPT is invalid, using primary GPT. [ 183.929666][ T3611] loop2: p1 p2 p3 [ 183.939808][T11203] Alternate GPT is invalid, using primary GPT. [ 183.946374][T11203] loop2: p1 p2 p3 [ 183.961450][ T3004] Alternate GPT is invalid, using primary GPT. [ 183.968824][ T3004] loop2: p1 p2 p3 [ 184.020406][T11212] loop5: detected capacity change from 0 to 1024 [ 184.027888][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 184.053538][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 184.056863][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 184.064957][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 184.093450][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 184.135454][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 184.160433][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 184.267532][T11234] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 184.290334][T11236] loop0: detected capacity change from 0 to 128 [ 184.399994][T11247] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.2610'. [ 184.532834][T11251] netlink: 'syz.4.2611': attribute type 13 has an invalid length. [ 184.662131][T11255] loop6: detected capacity change from 0 to 512 [ 184.669027][T11255] EXT4-fs: Ignoring removed bh option [ 184.675715][T11255] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.686970][T11255] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 184.696156][T11255] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 184.706646][T11255] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 184.720248][T11255] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 184.885056][T11260] loop6: detected capacity change from 0 to 512 [ 184.907040][T11260] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2614: error while reading EA inode 32 err=-116 [ 184.920516][T11260] EXT4-fs (loop6): Remounting filesystem read-only [ 184.928155][T11260] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 184.938600][T11260] EXT4-fs (loop6): 1 orphan inode deleted [ 185.042347][T11275] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2619'. [ 185.219407][T11288] loop5: detected capacity change from 0 to 512 [ 185.228071][T11288] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 185.246803][T11288] EXT4-fs (loop5): 1 orphan inode deleted [ 185.254070][T11288] EXT4-fs (loop5): 1 truncate cleaned up [ 185.274320][T11288] EXT4-fs (loop5): shut down requested (0) [ 185.306342][T11288] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 185.321919][T11288] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 185.448751][T11296] loop2: detected capacity change from 0 to 512 [ 185.480817][T11312] loop5: detected capacity change from 0 to 128 [ 185.530894][T11315] netlink: 'syz.4.2632': attribute type 13 has an invalid length. [ 185.552010][T11314] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2634'. [ 185.563146][T11296] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2627: error while reading EA inode 32 err=-116 [ 185.576042][T11296] EXT4-fs (loop2): Remounting filesystem read-only [ 185.583881][T11296] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 185.594693][T11296] EXT4-fs (loop2): 1 orphan inode deleted [ 185.689281][T11322] loop0: detected capacity change from 0 to 8192 [ 186.099625][T11329] loop2: detected capacity change from 0 to 512 [ 186.109315][T11329] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.122375][T11329] EXT4-fs (loop2): 1 orphan inode deleted [ 186.128155][T11329] EXT4-fs (loop2): 1 truncate cleaned up [ 186.137082][T11329] EXT4-fs (loop2): shut down requested (0) [ 186.148150][T11329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 186.157319][T11329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 186.305278][T11339] loop5: detected capacity change from 0 to 512 [ 186.312561][T11339] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 186.327278][T11339] EXT4-fs (loop5): 1 orphan inode deleted [ 186.333603][T11339] EXT4-fs (loop5): 1 truncate cleaned up [ 186.340183][T11342] netlink: 'syz.2.2640': attribute type 13 has an invalid length. [ 186.343265][T11339] EXT4-fs (loop5): shut down requested (0) [ 186.359406][T11339] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 186.368681][T11339] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 186.573448][T11353] loop0: detected capacity change from 0 to 512 [ 186.580426][T11353] EXT4-fs: Ignoring removed bh option [ 186.600758][T11353] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.610566][T11353] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 186.611932][ T29] kauditd_printk_skb: 1324 callbacks suppressed [ 186.611952][ T29] audit: type=1326 audit(1761029485.162:41611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26ab9f1885 code=0x7ffc0000 [ 186.621232][T11353] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 186.661572][ T29] audit: type=1326 audit(1761029485.162:41612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f26ab9befc9 code=0x7ffc0000 [ 186.665485][T11353] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 186.685847][ T29] audit: type=1326 audit(1761029485.172:41613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26ab9f1885 code=0x7ffc0000 [ 186.685891][ T29] audit: type=1326 audit(1761029485.192:41614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26ab9f1885 code=0x7ffc0000 [ 186.686012][ T29] audit: type=1326 audit(1761029485.202:41615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26ab9f1885 code=0x7ffc0000 [ 186.686042][ T29] audit: type=1326 audit(1761029485.202:41616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f26ab9befc9 code=0x7ffc0000 [ 186.686240][ T29] audit: type=1326 audit(1761029485.202:41617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26ab9f1885 code=0x7ffc0000 [ 186.686814][ T29] audit: type=1326 audit(1761029485.212:41618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26ab9f1885 code=0x7ffc0000 [ 186.842231][ T29] audit: type=1326 audit(1761029485.232:41619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f26ab9befc9 code=0x7ffc0000 [ 186.866785][T11353] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 186.867485][ T29] audit: type=1326 audit(1761029485.242:41620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.4.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26ab9f1885 code=0x7ffc0000 [ 186.960869][T11371] netlink: 'syz.6.2651': attribute type 13 has an invalid length. [ 186.972423][T11370] netlink: 1040 bytes leftover after parsing attributes in process `syz.0.2654'. [ 186.979056][T11368] loop5: detected capacity change from 0 to 8192 [ 187.310014][T11387] loop4: detected capacity change from 0 to 512 [ 187.319711][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2660'. [ 187.329009][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2660'. [ 187.338815][T11390] macvlan0: entered allmulticast mode [ 187.341278][T11387] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2659: error while reading EA inode 32 err=-116 [ 187.345858][T11390] veth1_vlan: entered allmulticast mode [ 187.364717][T11387] EXT4-fs (loop4): Remounting filesystem read-only [ 187.371371][T11387] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 187.383193][T11387] EXT4-fs (loop4): 1 orphan inode deleted [ 188.118426][T11425] SELinux: failed to load policy [ 188.238343][T11439] loop5: detected capacity change from 0 to 8192 [ 188.286731][T11442] loop2: detected capacity change from 0 to 512 [ 188.327237][T11442] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2675: error while reading EA inode 32 err=-116 [ 188.347856][T11442] EXT4-fs (loop2): Remounting filesystem read-only [ 188.355077][T11442] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 188.374536][T11442] EXT4-fs (loop2): 1 orphan inode deleted [ 188.386449][T11454] loop0: detected capacity change from 0 to 512 [ 188.466898][T11454] loop0: detected capacity change from 0 to 8192 [ 188.512453][ T3612] loop0: p1 < > p2 < p5 p6 > p3 p4 [ 188.517729][ T3612] loop0: partition table partially beyond EOD, truncated [ 188.525139][ T3612] loop0: p1 start 67108864 is beyond EOD, truncated [ 188.544527][ T3612] loop0: p3 start 100859904 is beyond EOD, truncated [ 188.551632][ T3612] loop0: p4 size 393216 extends beyond EOD, truncated [ 188.563797][ T3612] loop0: p5 start 100859904 is beyond EOD, truncated [ 188.570642][ T3612] loop0: p6 size 393216 extends beyond EOD, truncated [ 188.584355][T11454] loop0: p1 < > p2 < p5 p6 > p3 p4 [ 188.589608][T11454] loop0: partition table partially beyond EOD, truncated [ 188.609396][T11467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.616511][T11454] loop0: p1 start 67108864 is beyond EOD, truncated [ 188.623869][T11467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.629972][T11454] loop0: p3 start 100859904 is beyond EOD, truncated [ 188.640454][T11454] loop0: p4 size 393216 extends beyond EOD, truncated [ 188.640547][T11464] loop4: detected capacity change from 0 to 512 [ 188.649498][T11454] loop0: p5 start 100859904 is beyond EOD, truncated [ 188.660918][T11454] loop0: p6 size 393216 extends beyond EOD, truncated [ 188.670882][T11464] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2687: error while reading EA inode 32 err=-116 [ 188.687151][T11464] EXT4-fs (loop4): Remounting filesystem read-only [ 188.694655][T11464] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 188.707926][T11464] EXT4-fs (loop4): 1 orphan inode deleted [ 188.758158][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 188.758525][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 188.771316][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 188.834397][T11476] loop0: detected capacity change from 0 to 128 [ 189.117326][T11481] loop2: detected capacity change from 0 to 512 [ 189.129000][T11481] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2692: error while reading EA inode 32 err=-116 [ 189.171804][T11481] EXT4-fs (loop2): Remounting filesystem read-only [ 189.178777][T11481] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 189.195073][T11481] EXT4-fs (loop2): 1 orphan inode deleted [ 189.205954][T11492] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2696'. [ 189.305625][T11496] loop5: detected capacity change from 0 to 8192 [ 189.385513][T11504] loop4: detected capacity change from 0 to 512 [ 189.398489][T11504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.423574][T11504] EXT4-fs (loop4): 1 orphan inode deleted [ 189.429400][T11504] EXT4-fs (loop4): 1 truncate cleaned up [ 189.439306][T11504] EXT4-fs (loop4): shut down requested (0) [ 189.449629][T11504] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 189.459682][T11504] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 189.767095][T11517] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 189.794338][T11515] loop0: detected capacity change from 0 to 8192 [ 189.917321][T11523] loop2: detected capacity change from 0 to 512 [ 189.930885][T11523] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2706: error while reading EA inode 32 err=-116 [ 189.944085][T11523] EXT4-fs (loop2): Remounting filesystem read-only [ 189.950963][T11523] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 189.961797][T11523] EXT4-fs (loop2): 1 orphan inode deleted [ 189.997133][T11529] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2707'. [ 190.034010][T11531] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2708'. [ 190.094694][T11537] loop4: detected capacity change from 0 to 512 [ 190.102428][T11537] EXT4-fs: Ignoring removed bh option [ 190.113382][T11537] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.122630][T11537] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 190.140884][T11537] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 190.151694][T11537] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 190.164344][T11537] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 190.271856][T11541] loop2: detected capacity change from 0 to 512 [ 190.282957][T11541] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2710: error while reading EA inode 32 err=-116 [ 190.305630][T11541] EXT4-fs (loop2): Remounting filesystem read-only [ 190.312832][T11541] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 190.331077][T11541] EXT4-fs (loop2): 1 orphan inode deleted [ 190.362238][T11561] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 190.410025][T11557] loop6: detected capacity change from 0 to 512 [ 190.419562][T11557] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2714: error while reading EA inode 32 err=-116 [ 190.433301][T11557] EXT4-fs (loop6): Remounting filesystem read-only [ 190.440778][T11557] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 190.452691][T11557] EXT4-fs (loop6): 1 orphan inode deleted [ 190.598794][T11578] netlink: 'syz.5.2721': attribute type 13 has an invalid length. [ 190.608767][T11577] loop4: detected capacity change from 0 to 8192 [ 190.655137][T11580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2723'. [ 190.670273][T11580] IPv6: NLM_F_REPLACE set, but no existing node found! [ 190.972431][T11584] loop2: detected capacity change from 0 to 8192 [ 191.116160][T11591] loop6: detected capacity change from 0 to 512 [ 191.124358][T11591] EXT4-fs: Ignoring removed bh option [ 191.130808][T11591] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.140183][T11591] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 191.149492][T11591] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 191.159623][T11591] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 191.171932][T11591] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 191.363645][T11601] loop6: detected capacity change from 0 to 512 [ 191.389235][T11601] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2731: error while reading EA inode 32 err=-116 [ 191.402413][T11601] EXT4-fs (loop6): Remounting filesystem read-only [ 191.428566][T11601] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 191.465947][T11601] EXT4-fs (loop6): 1 orphan inode deleted [ 191.473976][T11610] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2733'. [ 191.502437][T11601] EXT4-fs mount: 55 callbacks suppressed [ 191.502460][T11601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.550106][ T4482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.624207][ T29] kauditd_printk_skb: 2379 callbacks suppressed [ 191.624230][ T29] audit: type=1326 audit(1761029490.172:44000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11618 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 191.655875][ T29] audit: type=1326 audit(1761029490.172:44001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11618 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 191.680421][ T29] audit: type=1326 audit(1761029490.172:44002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11618 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 191.728310][T11627] loop5: detected capacity change from 0 to 512 [ 191.752664][T11627] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2738: error while reading EA inode 32 err=-116 [ 191.765567][T11626] loop6: detected capacity change from 0 to 512 [ 191.773459][ T29] audit: type=1326 audit(1761029490.172:44003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11618 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 191.798330][ T29] audit: type=1326 audit(1761029490.172:44004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11621 comm="syz.6.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1784efc9 code=0x7ffc0000 [ 191.823180][ T29] audit: type=1326 audit(1761029490.172:44005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11621 comm="syz.6.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1784efc9 code=0x7ffc0000 [ 191.847172][ T29] audit: type=1326 audit(1761029490.172:44006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11621 comm="syz.6.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1784efc9 code=0x7ffc0000 [ 191.871779][ T29] audit: type=1326 audit(1761029490.172:44007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11621 comm="syz.6.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1784efc9 code=0x7ffc0000 [ 191.895619][ T29] audit: type=1326 audit(1761029490.172:44008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11621 comm="syz.6.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fef1784efc9 code=0x7ffc0000 [ 191.920456][ T29] audit: type=1326 audit(1761029490.172:44009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11621 comm="syz.6.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1784efc9 code=0x7ffc0000 [ 191.920615][T11626] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2736: error while reading EA inode 32 err=-116 [ 191.972457][T11627] EXT4-fs (loop5): Remounting filesystem read-only [ 191.979275][T11627] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 191.996028][T11626] EXT4-fs (loop6): Remounting filesystem read-only [ 191.996278][T11627] EXT4-fs (loop5): 1 orphan inode deleted [ 192.006629][T11626] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 192.009973][T11627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.034329][T11626] EXT4-fs (loop6): 1 orphan inode deleted [ 192.040488][T11626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.053548][T11626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.111057][T11643] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 192.127820][T11644] netlink: 'syz.4.2743': attribute type 13 has an invalid length. [ 192.463486][ T4207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.606142][T11656] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2748'. [ 192.681259][T11660] loop5: detected capacity change from 0 to 512 [ 192.762176][T11660] loop5: detected capacity change from 0 to 8192 [ 192.824217][T11660] loop5: p1 < > p2 < p5 p6 > p3 p4 [ 192.829609][T11660] loop5: partition table partially beyond EOD, truncated [ 192.841013][T11660] loop5: p1 start 67108864 is beyond EOD, truncated [ 192.848781][T11660] loop5: p3 start 100859904 is beyond EOD, truncated [ 192.855837][T11660] loop5: p4 size 393216 extends beyond EOD, truncated [ 192.863416][T11660] loop5: p5 start 100859904 is beyond EOD, truncated [ 192.870327][T11660] loop5: p6 size 393216 extends beyond EOD, truncated [ 192.923188][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 192.925100][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 192.944541][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 192.969740][T11676] syzkaller1: entered promiscuous mode [ 192.975330][T11676] syzkaller1: entered allmulticast mode [ 193.135922][T11681] loop2: detected capacity change from 0 to 512 [ 193.163071][T11681] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2757: error while reading EA inode 32 err=-116 [ 193.178865][T11681] EXT4-fs (loop2): Remounting filesystem read-only [ 193.195399][T11681] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 193.207205][T11681] EXT4-fs (loop2): 1 orphan inode deleted [ 193.212138][T11690] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2760'. [ 193.213499][T11681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.235704][T11681] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.327505][T11698] loop4: detected capacity change from 0 to 512 [ 193.340315][T11698] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.360506][T11698] EXT4-fs (loop4): 1 orphan inode deleted [ 193.366529][T11698] EXT4-fs (loop4): 1 truncate cleaned up [ 193.372766][T11698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.388872][T11698] EXT4-fs (loop4): shut down requested (0) [ 193.399319][T11698] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 193.408668][T11698] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 193.429711][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.592965][T11711] netlink: 'syz.4.2766': attribute type 13 has an invalid length. [ 193.803097][T11721] loop5: detected capacity change from 0 to 512 [ 193.813597][T11721] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 193.867315][T11721] EXT4-fs (loop5): 1 orphan inode deleted [ 193.873919][T11721] EXT4-fs (loop5): 1 truncate cleaned up [ 193.883595][T11721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.901125][T11721] EXT4-fs (loop5): shut down requested (0) [ 193.912506][T11721] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 193.922670][T11721] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 193.947229][ T4207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.976254][T11733] loop2: detected capacity change from 0 to 128 [ 194.006811][T11737] loop6: detected capacity change from 0 to 512 [ 194.047281][T11737] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2774: error while reading EA inode 32 err=-116 [ 194.065162][T11737] EXT4-fs (loop6): Remounting filesystem read-only [ 194.074654][T11737] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 194.085171][T11737] EXT4-fs (loop6): 1 orphan inode deleted [ 194.091440][T11744] loop5: detected capacity change from 0 to 512 [ 194.099775][T11744] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 194.114112][T11737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.134249][T11744] EXT4-fs (loop5): 1 orphan inode deleted [ 194.140044][T11744] EXT4-fs (loop5): 1 truncate cleaned up [ 194.146423][T11744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.167774][T11744] EXT4-fs (loop5): shut down requested (0) [ 194.177578][T11744] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 194.187909][T11744] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 194.209543][ T4207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.219226][T11749] loop0: detected capacity change from 0 to 8192 [ 194.337181][T11753] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2784'. [ 194.395234][T11758] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.2786'. [ 194.561473][T11766] loop4: detected capacity change from 0 to 512 [ 194.573201][T11766] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2789: error while reading EA inode 32 err=-116 [ 194.590155][T11766] EXT4-fs (loop4): Remounting filesystem read-only [ 194.597231][T11766] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 194.607629][T11766] EXT4-fs (loop4): 1 orphan inode deleted [ 194.614861][T11766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.628140][T11766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.753635][ T4482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.787977][T11771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.797932][T11771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.886652][T11775] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 195.097081][T11782] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2795'. [ 195.394847][T11798] loop6: detected capacity change from 0 to 128 [ 195.803276][T11816] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2807'. [ 195.841081][T11818] loop2: detected capacity change from 0 to 512 [ 195.848958][T11818] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 195.860514][T11818] EXT4-fs (loop2): 1 orphan inode deleted [ 195.866558][T11818] EXT4-fs (loop2): 1 truncate cleaned up [ 195.873418][T11818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.887523][T11818] EXT4-fs (loop2): shut down requested (0) [ 195.896972][T11818] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 195.906779][T11818] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 195.926966][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.043436][T11823] loop2: detected capacity change from 0 to 512 [ 196.058736][T11823] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2809: error while reading EA inode 32 err=-116 [ 196.074333][T11823] EXT4-fs (loop2): Remounting filesystem read-only [ 196.081250][T11823] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 196.091579][T11823] EXT4-fs (loop2): 1 orphan inode deleted [ 196.097853][T11823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.114060][T11823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.329917][T11842] loop0: detected capacity change from 0 to 512 [ 196.340123][T11844] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 196.359308][T11842] EXT4-fs: Ignoring removed bh option [ 196.382897][T11842] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.392308][T11842] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 196.403043][T11842] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 196.413152][T11842] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 196.422372][T11842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.439868][T11842] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 196.465555][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.498770][T11849] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2818'. [ 196.632833][T11856] netlink: 'syz.5.2819': attribute type 13 has an invalid length. [ 196.641314][ T29] kauditd_printk_skb: 2873 callbacks suppressed [ 196.641327][ T29] audit: type=1326 audit(1761029495.182:46883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11820 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bab115e67 code=0x7ffc0000 [ 196.672371][ T29] audit: type=1326 audit(1761029495.182:46884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11820 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bab0bb099 code=0x7ffc0000 [ 196.696592][ T29] audit: type=1326 audit(1761029495.182:46885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11820 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9bab11efc9 code=0x7ffc0000 [ 196.703380][T11857] netlink: 'syz.0.2820': attribute type 13 has an invalid length. [ 196.723336][ T29] audit: type=1326 audit(1761029495.242:46886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11820 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bab115e67 code=0x7ffc0000 [ 196.754029][ T29] audit: type=1326 audit(1761029495.242:46887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11820 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bab0bb099 code=0x7ffc0000 [ 196.778047][ T29] audit: type=1326 audit(1761029495.242:46888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11820 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9bab11efc9 code=0x7ffc0000 [ 196.802055][ T29] audit: type=1326 audit(1761029495.272:46889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11820 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bab115e67 code=0x7ffc0000 [ 196.802217][T11857] veth1_vlan: left allmulticast mode [ 196.826270][ T29] audit: type=1326 audit(1761029495.272:46890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11820 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bab0bb099 code=0x7ffc0000 [ 196.826310][ T29] audit: type=1326 audit(1761029495.272:46891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11820 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9bab11efc9 code=0x7ffc0000 [ 196.826345][ T29] audit: type=1326 audit(1761029495.272:46892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11820 comm="syz.2.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bab115e67 code=0x7ffc0000 [ 196.953705][T11861] loop2: detected capacity change from 0 to 512 [ 196.971068][T11861] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2822: error while reading EA inode 32 err=-116 [ 196.985119][T11861] EXT4-fs (loop2): Remounting filesystem read-only [ 196.993186][T11861] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 197.003938][T11861] EXT4-fs (loop2): 1 orphan inode deleted [ 197.010317][T11861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.035646][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.154134][T11871] loop2: detected capacity change from 0 to 128 [ 197.302123][T11882] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2830'. [ 197.437907][T11893] loop4: detected capacity change from 0 to 512 [ 197.491334][T11893] loop4: detected capacity change from 0 to 8192 [ 197.502878][T11894] loop5: detected capacity change from 0 to 512 [ 197.517122][T11894] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2832: error while reading EA inode 32 err=-116 [ 197.531196][T11894] EXT4-fs (loop5): Remounting filesystem read-only [ 197.544579][T11894] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 197.546222][T11893] loop4: p1 < > p2 < p5 p6 > p3 p4 [ 197.555154][T11894] EXT4-fs (loop5): 1 orphan inode deleted [ 197.560079][T11893] loop4: partition table partially beyond EOD, truncated [ 197.567226][T11894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.585851][T11893] loop4: p1 start 67108864 is beyond EOD, truncated [ 197.594155][T11894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.615602][T11893] loop4: p3 start 100859904 is beyond EOD, truncated [ 197.623249][T11893] loop4: p4 size 393216 extends beyond EOD, truncated [ 197.662517][T11893] loop4: p5 start 100859904 is beyond EOD, truncated [ 197.669285][T11893] loop4: p6 size 393216 extends beyond EOD, truncated [ 197.783170][T11917] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2842'. [ 197.814636][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 197.825642][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 197.833507][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 197.918462][T11927] loop4: detected capacity change from 0 to 8192 [ 197.932116][T11931] netlink: 'syz.0.2844': attribute type 13 has an invalid length. [ 198.041851][T11934] loop2: detected capacity change from 0 to 8192 [ 198.357493][T11942] loop5: detected capacity change from 0 to 512 [ 198.367593][T11942] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2850: error while reading EA inode 32 err=-116 [ 198.380557][T11942] EXT4-fs (loop5): Remounting filesystem read-only [ 198.387809][T11942] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 198.398367][T11942] EXT4-fs (loop5): 1 orphan inode deleted [ 198.405231][T11942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.418433][T11942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.940014][T11962] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2857'. [ 199.137039][T11965] loop2: detected capacity change from 0 to 512 [ 199.199206][T11965] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2856: error while reading EA inode 32 err=-116 [ 199.277980][T11965] EXT4-fs (loop2): Remounting filesystem read-only [ 199.314718][T11965] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 199.357762][T11965] EXT4-fs (loop2): 1 orphan inode deleted [ 199.372790][T11965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.390936][T11965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.565534][T12003] loop5: detected capacity change from 0 to 512 [ 199.578381][T12003] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2866: error while reading EA inode 32 err=-116 [ 199.598194][T12003] EXT4-fs (loop5): Remounting filesystem read-only [ 199.605248][T12003] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 199.610512][T12008] netlink: 'syz.6.2869': attribute type 13 has an invalid length. [ 199.615961][T12003] EXT4-fs (loop5): 1 orphan inode deleted [ 199.616512][T12003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.642970][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.852707][T12016] loop4: detected capacity change from 0 to 512 [ 199.896875][T12016] loop4: detected capacity change from 0 to 8192 [ 199.912605][T12019] loop2: detected capacity change from 0 to 512 [ 199.922582][T12019] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2873: error while reading EA inode 32 err=-116 [ 199.935330][ T3611] loop4: p1 < > p2 < p5 p6 > p3 p4 [ 199.936033][T12019] EXT4-fs (loop2): Remounting filesystem read-only [ 199.940626][ T3611] loop4: partition table partially beyond EOD, truncated [ 199.949195][T12019] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 199.955145][ T3611] loop4: p1 start 67108864 is beyond EOD, truncated [ 199.965209][T12019] EXT4-fs (loop2): 1 orphan inode deleted [ 199.965755][T12019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.975104][ T3611] loop4: p3 start 100859904 is beyond EOD, truncated [ 199.998672][ T3611] loop4: p4 size 393216 extends beyond EOD, truncated [ 200.006305][ T3611] loop4: p5 start 100859904 is beyond EOD, truncated [ 200.013140][ T3611] loop4: p6 size 393216 extends beyond EOD, truncated [ 200.023431][T12016] loop4: p1 < > p2 < p5 p6 > p3 p4 [ 200.028857][T12016] loop4: partition table partially beyond EOD, truncated [ 200.036301][T12016] loop4: p1 start 67108864 is beyond EOD, truncated [ 200.044225][T12016] loop4: p3 start 100859904 is beyond EOD, truncated [ 200.051700][T12016] loop4: p4 size 393216 extends beyond EOD, truncated [ 200.060395][T12016] loop4: p5 start 100859904 is beyond EOD, truncated [ 200.067194][T12016] loop4: p6 size 393216 extends beyond EOD, truncated [ 200.123230][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 200.125031][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 200.139508][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 200.160622][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 200.161345][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 200.174624][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 200.202234][T12027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.211145][T12027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.318075][T12029] loop5: detected capacity change from 0 to 512 [ 200.325318][T12029] EXT4-fs: Ignoring removed bh option [ 200.332247][T12029] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.342707][T12029] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 200.357419][T12029] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 200.367692][T12029] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 200.378480][T12029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.403648][T12029] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 200.439972][T12037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 200.466442][ T4207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.551073][T12042] loop0: detected capacity change from 0 to 512 [ 200.567497][T12042] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2880: error while reading EA inode 32 err=-116 [ 200.580568][T12042] EXT4-fs (loop0): Remounting filesystem read-only [ 200.587661][T12042] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 200.598898][T12048] netlink: 'syz.5.2882': attribute type 13 has an invalid length. [ 200.607562][T12042] EXT4-fs (loop0): 1 orphan inode deleted [ 200.614080][T12042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.627664][T12042] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.684042][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.769334][T12055] cgroup: fork rejected by pids controller in /syz2 [ 200.855165][T12055] loop2: detected capacity change from 0 to 512 [ 200.889688][T12055] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2883: error while reading EA inode 32 err=-116 [ 200.904568][T12055] EXT4-fs (loop2): Remounting filesystem read-only [ 200.912886][T12055] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 200.924423][T12055] EXT4-fs (loop2): 1 orphan inode deleted [ 200.931059][T12055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.946149][T12055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.446348][T12071] loop0: detected capacity change from 0 to 512 [ 201.460451][T12071] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2885: error while reading EA inode 32 err=-116 [ 201.474725][T12071] EXT4-fs (loop0): Remounting filesystem read-only [ 201.481727][T12071] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 201.492988][T12071] EXT4-fs (loop0): 1 orphan inode deleted [ 201.499424][T12071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.520007][T12080] netlink: 'syz.6.2889': attribute type 13 has an invalid length. [ 201.524877][T12071] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.642072][ T29] kauditd_printk_skb: 1931 callbacks suppressed [ 201.642093][ T29] audit: type=1326 audit(1761029500.182:48824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.5.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb158911885 code=0x7ffc0000 [ 201.680429][ T29] audit: type=1326 audit(1761029500.192:48825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.5.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb158911885 code=0x7ffc0000 [ 201.704374][ T29] audit: type=1326 audit(1761029500.192:48826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c77225e67 code=0x7ffc0000 [ 201.728686][ T29] audit: type=1326 audit(1761029500.192:48827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c771cb099 code=0x7ffc0000 [ 201.734849][T12092] loop2: detected capacity change from 0 to 512 [ 201.752631][ T29] audit: type=1326 audit(1761029500.192:48828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4c7722efc9 code=0x7ffc0000 [ 201.752672][ T29] audit: type=1326 audit(1761029500.192:48829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.5.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb158911885 code=0x7ffc0000 [ 201.752706][ T29] audit: type=1326 audit(1761029500.192:48830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.5.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb158911885 code=0x7ffc0000 [ 201.752775][ T29] audit: type=1326 audit(1761029500.192:48831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.5.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb1588defc9 code=0x7ffc0000 [ 201.752805][ T29] audit: type=1326 audit(1761029500.192:48832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.5.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb158911885 code=0x7ffc0000 [ 201.752907][ T29] audit: type=1326 audit(1761029500.192:48833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12073 comm="syz.5.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb158911885 code=0x7ffc0000 [ 201.885291][T12097] loop4: detected capacity change from 0 to 512 [ 201.913182][T12092] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.926890][T12097] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2894: error while reading EA inode 32 err=-116 [ 201.955035][T12097] EXT4-fs (loop4): Remounting filesystem read-only [ 201.955401][T12092] EXT4-fs (loop2): 1 orphan inode deleted [ 201.968201][T12092] EXT4-fs (loop2): 1 truncate cleaned up [ 201.969550][T12097] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 201.976422][T12092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.987283][T12097] EXT4-fs (loop4): 1 orphan inode deleted [ 202.003397][T12097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.016107][T12092] EXT4-fs (loop2): shut down requested (0) [ 202.027662][T12092] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 202.037260][T12092] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 202.060387][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.129654][T12105] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 202.307251][T12119] loop5: detected capacity change from 0 to 512 [ 202.315290][T12119] EXT4-fs: Ignoring removed bh option [ 202.333028][T12119] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.342239][T12119] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 202.352730][T12119] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 202.362442][T12119] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 202.372018][T12119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.426217][T12119] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 202.642994][ T4207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.653582][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.709111][T12131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.719714][T12131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.743689][T12132] loop4: detected capacity change from 0 to 8192 [ 203.261324][T12145] netlink: 1040 bytes leftover after parsing attributes in process `syz.5.2912'. [ 203.394274][T12150] loop5: detected capacity change from 0 to 512 [ 203.409370][T12150] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 203.462125][T12150] EXT4-fs (loop5): 1 orphan inode deleted [ 203.467967][T12150] EXT4-fs (loop5): 1 truncate cleaned up [ 203.486340][T12146] loop6: detected capacity change from 0 to 512 [ 203.494612][T12150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.531361][T12150] EXT4-fs (loop5): shut down requested (0) [ 203.586383][T12150] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 203.595948][T12146] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2911: error while reading EA inode 32 err=-116 [ 203.649894][T12150] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 203.702485][T12146] EXT4-fs (loop6): Remounting filesystem read-only [ 203.709063][T12146] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 203.722274][T12152] chnl_net:caif_netlink_parms(): no params data found [ 203.744439][ T4207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.786494][T12146] EXT4-fs (loop6): 1 orphan inode deleted [ 203.808317][T12146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.852332][T12152] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.859526][T12152] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.871078][T12152] bridge_slave_0: entered allmulticast mode [ 203.904734][T12152] bridge_slave_0: entered promiscuous mode [ 203.922106][T12152] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.929596][T12152] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.935658][T12146] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.937759][T12152] bridge_slave_1: entered allmulticast mode [ 203.963693][T12152] bridge_slave_1: entered promiscuous mode [ 204.423443][T12152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.434938][T12152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.460994][T12152] team0: Port device team_slave_0 added [ 204.469859][T12152] team0: Port device team_slave_1 added [ 204.491380][T12152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.498509][T12152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.524847][T12152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.539848][T12152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.546974][T12152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.573468][T12152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.627785][T12152] hsr_slave_0: entered promiscuous mode [ 204.634197][T12152] hsr_slave_1: entered promiscuous mode [ 204.640588][T12152] debugfs: 'hsr0' already exists in 'hsr' [ 204.646681][T12152] Cannot create hsr debugfs directory [ 204.766768][T10058] bridge_slave_1: left allmulticast mode [ 204.772488][T10058] bridge_slave_1: left promiscuous mode [ 204.778242][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.066781][T10058] bridge_slave_0: left allmulticast mode [ 205.072529][T10058] bridge_slave_0: left promiscuous mode [ 205.078322][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.119480][T12316] netlink: 'syz.4.2927': attribute type 13 has an invalid length. [ 205.216612][T10058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.238023][T10058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.339380][T10058] bond0 (unregistering): Released all slaves [ 205.378834][T10058] tipc: Left network mode [ 205.401655][T10058] hsr_slave_0: left promiscuous mode [ 205.417020][T10058] hsr_slave_1: left promiscuous mode [ 205.431990][T10058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.441860][T10058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.467198][T12336] loop5: detected capacity change from 0 to 512 [ 205.505141][T12336] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2932: error while reading EA inode 32 err=-116 [ 205.524525][T10058] team0 (unregistering): Port device team_slave_1 removed [ 205.534035][T12336] EXT4-fs (loop5): Remounting filesystem read-only [ 205.541103][T12339] loop2: detected capacity change from 0 to 8192 [ 205.544450][T12336] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 205.550384][T10058] team0 (unregistering): Port device team_slave_0 removed [ 205.564309][T12336] EXT4-fs (loop5): 1 orphan inode deleted [ 205.588491][T12336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.603154][T12336] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.895910][T12572] loop2: detected capacity change from 0 to 512 [ 205.907372][T12572] EXT4-fs: Ignoring removed bh option [ 205.922360][T12152] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.924933][T12572] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.939166][T12572] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 205.950202][T12152] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.962818][T12152] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.973134][T12577] SELinux: Context Ü is not valid (left unmapped). [ 205.985429][T12572] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 205.987583][T12152] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.012573][T12572] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 206.022076][T12572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.028741][T12581] loop6: detected capacity change from 0 to 512 [ 206.041212][T12581] EXT4-fs: Ignoring removed bh option [ 206.050468][T12572] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 206.060865][T12581] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 206.070302][T12581] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 206.088339][T12581] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 206.112677][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.122399][T12581] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 206.152839][T12581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.157922][T12152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.189482][T12581] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 206.249887][T12651] loop5: detected capacity change from 0 to 128 [ 206.267690][T12152] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.296513][T10058] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.303825][T10058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.312996][ T4482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.344178][T10069] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.351347][T10069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.373446][T12715] netlink: 1040 bytes leftover after parsing attributes in process `syz.2.2943'. [ 206.478270][T12152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.554884][T12836] netlink: 'syz.6.2945': attribute type 13 has an invalid length. [ 206.562669][T12152] veth0_vlan: entered promiscuous mode [ 206.575526][T12152] veth1_vlan: entered promiscuous mode [ 206.592835][T12839] netlink: 'syz.4.2946': attribute type 13 has an invalid length. [ 206.600447][T12152] veth0_macvtap: entered promiscuous mode [ 206.609668][T12152] veth1_macvtap: entered promiscuous mode [ 206.621777][T12152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.633873][T12152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.645943][T10058] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.664771][T10058] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.678928][ T29] kauditd_printk_skb: 1839 callbacks suppressed [ 206.678945][ T29] audit: type=1400 audit(1761029505.222:50673): avc: denied { mount } for pid=12152 comm="syz-executor" name="/" dev="gadgetfs" ino=4019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 206.689670][T10058] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.770040][T10058] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.802813][ T29] audit: type=1326 audit(1761029505.342:50674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.0.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee7aefc9 code=0x7ffc0000 [ 206.827156][ T29] audit: type=1326 audit(1761029505.342:50675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.0.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f77ee7aefc9 code=0x7ffc0000 [ 206.851008][ T29] audit: type=1326 audit(1761029505.342:50676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.0.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee7aefc9 code=0x7ffc0000 [ 206.874899][ T29] audit: type=1326 audit(1761029505.342:50677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.0.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f77ee7aefc9 code=0x7ffc0000 [ 206.899288][ T29] audit: type=1326 audit(1761029505.342:50678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.0.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee7aefc9 code=0x7ffc0000 [ 206.923199][ T29] audit: type=1326 audit(1761029505.342:50679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.0.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f77ee7aefc9 code=0x7ffc0000 [ 206.946949][ T29] audit: type=1326 audit(1761029505.352:50680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12946 comm="syz.0.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77ee7e1885 code=0x7ffc0000 [ 206.970747][ T29] audit: type=1326 audit(1761029505.352:50681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.0.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee7aefc9 code=0x7ffc0000 [ 206.995056][ T29] audit: type=1326 audit(1761029505.352:50682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.0.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee7aefc9 code=0x7ffc0000 [ 207.258997][T12967] loop0: detected capacity change from 0 to 8192 [ 207.270922][T12950] chnl_net:caif_netlink_parms(): no params data found [ 207.333585][T12975] loop6: detected capacity change from 0 to 512 [ 207.382913][T12979] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2958'. [ 207.448524][T12950] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.456496][T12950] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.464278][T12975] loop6: detected capacity change from 0 to 8192 [ 207.464484][T12950] bridge_slave_0: entered allmulticast mode [ 207.478691][T12950] bridge_slave_0: entered promiscuous mode [ 207.486705][T12950] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.494218][T12950] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.503726][T12950] bridge_slave_1: entered allmulticast mode [ 207.510417][T12950] bridge_slave_1: entered promiscuous mode [ 207.522179][T12975] loop6: p1 < > p2 < p5 p6 > p3 p4 [ 207.527644][T12975] loop6: partition table partially beyond EOD, truncated [ 207.540220][T12975] loop6: p1 start 67108864 is beyond EOD, truncated [ 207.557859][T12950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.567812][T12975] loop6: p3 start 100859904 is beyond EOD, truncated [ 207.575397][T12975] loop6: p4 size 393216 extends beyond EOD, truncated [ 207.587616][T12950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.598615][T12975] loop6: p5 start 100859904 is beyond EOD, truncated [ 207.606225][T12975] loop6: p6 size 393216 extends beyond EOD, truncated [ 207.622402][T12950] team0: Port device team_slave_0 added [ 207.638600][T12950] team0: Port device team_slave_1 added [ 207.715117][T12992] loop6: detected capacity change from 0 to 512 [ 207.716255][T12950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.728755][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.755214][T12950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.768318][T12950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.775550][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.798584][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 207.801865][T12950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.838220][T12992] loop6: detected capacity change from 0 to 8192 [ 207.913089][ T3611] loop6: p1 < > p2 < p5 p6 > p3 p4 [ 207.918467][ T3611] loop6: partition table partially beyond EOD, truncated [ 207.931135][ T3611] loop6: p1 start 67108864 is beyond EOD, truncated [ 207.941928][T12950] hsr_slave_0: entered promiscuous mode [ 207.948523][T12950] hsr_slave_1: entered promiscuous mode [ 207.956242][ T3611] loop6: p3 start 100859904 is beyond EOD, truncated [ 207.963082][ T3611] loop6: p4 size 393216 extends beyond EOD, truncated [ 207.971040][T12950] debugfs: 'hsr0' already exists in 'hsr' [ 207.976878][T12950] Cannot create hsr debugfs directory [ 207.986303][T10048] bridge_slave_1: left allmulticast mode [ 207.992101][T10048] bridge_slave_1: left promiscuous mode [ 207.997928][T10048] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.008509][ T3611] loop6: p5 start 100859904 is beyond EOD, truncated [ 208.016039][ T3611] loop6: p6 size 393216 extends beyond EOD, truncated [ 208.030787][T12992] loop6: p1 < > p2 < p5 p6 > p3 p4 [ 208.036071][T12992] loop6: partition table partially beyond EOD, truncated [ 208.044245][T10048] bridge_slave_0: left allmulticast mode [ 208.048318][T12992] loop6: p1 start 67108864 is beyond EOD, truncated [ 208.050028][T10048] bridge_slave_0: left promiscuous mode [ 208.050170][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.058332][T12992] loop6: p3 start 100859904 is beyond EOD, truncated [ 208.069895][T12992] loop6: p4 size 393216 extends beyond EOD, truncated [ 208.071129][T12992] loop6: p5 start 100859904 is beyond EOD, truncated [ 208.090866][T12992] loop6: p6 size 393216 extends beyond EOD, truncated [ 208.167465][T10048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.188149][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 208.192260][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 208.214917][T10048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.239489][T10048] bond0 (unregistering): Released all slaves [ 208.260746][T12993] cgroup: fork rejected by pids controller in /syz4 [ 208.260796][T10048] bond1 (unregistering): Released all slaves [ 208.310916][T10048] bond2 (unregistering): Released all slaves [ 208.320954][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 208.320954][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 208.322812][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 208.417702][T10048] tipc: Left network mode [ 208.430837][T13117] netlink: 'syz.0.2966': attribute type 13 has an invalid length. [ 208.459861][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 208.460173][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 208.471370][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 208.508171][T13117] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.515538][T13117] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.521681][T13119] loop4: detected capacity change from 0 to 512 [ 208.618085][T13117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.638359][T13117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.647056][T13119] loop4: detected capacity change from 0 to 8192 [ 208.702649][ T3611] loop4: p1 < > p2 < p5 p6 > p3 p4 [ 208.707988][ T3611] loop4: partition table partially beyond EOD, truncated [ 208.761548][T10048] hsr_slave_0: left promiscuous mode [ 208.766734][ T3611] loop4: p1 start 67108864 is beyond EOD, truncated [ 208.775506][ T3611] loop4: p3 start 100859904 is beyond EOD, truncated [ 208.785614][ T3611] loop4: p4 size 393216 extends beyond EOD, truncated [ 208.794241][T10048] hsr_slave_1: left promiscuous mode [ 208.794453][ T3611] loop4: p5 start 100859904 is beyond EOD, truncated [ 208.812096][ T3611] loop4: p6 size 393216 extends beyond EOD, truncated [ 208.813057][T10048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.858096][T10048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.900574][T13134] loop6: detected capacity change from 0 to 512 [ 208.917578][T13119] loop4: p1 < > p2 < p5 p6 > p3 p4 [ 208.923228][T13119] loop4: partition table partially beyond EOD, truncated [ 208.942201][T13119] loop4: p1 start 67108864 is beyond EOD, truncated [ 208.962839][T13119] loop4: p3 start 100859904 is beyond EOD, truncated [ 208.969766][T13119] loop4: p4 size 393216 extends beyond EOD, truncated [ 208.984595][T13134] loop6: detected capacity change from 0 to 8192 [ 208.993273][T13119] loop4: p5 start 100859904 is beyond EOD, truncated [ 209.000262][T13119] loop4: p6 size 393216 extends beyond EOD, truncated [ 209.007797][T10048] team0 (unregistering): Port device team_slave_1 removed [ 209.018043][T10048] team0 (unregistering): Port device team_slave_0 removed [ 209.036341][T13134] loop6: p1 < > p2 < p5 p6 > p3 p4 [ 209.041668][T13134] loop6: partition table partially beyond EOD, truncated [ 209.073574][T13134] loop6: p1 start 67108864 is beyond EOD, truncated [ 209.084858][T10058] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.094820][T13134] loop6: p3 start 100859904 is beyond EOD, truncated [ 209.102525][T13134] loop6: p4 size 393216 extends beyond EOD, truncated [ 209.134985][T13136] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.2972'. [ 209.150571][T10058] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.160443][T13134] loop6: p5 start 100859904 is beyond EOD, truncated [ 209.168323][T13134] loop6: p6 size 393216 extends beyond EOD, truncated [ 209.227960][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 209.228421][T13138] loop0: detected capacity change from 0 to 8192 [ 209.247838][T10058] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.277976][T13141] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2975'. [ 209.291126][T10058] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.307899][ T3004] loop6: p1 < > p2 < p5 p6 > p3 p4 [ 209.313224][ T3004] loop6: partition table partially beyond EOD, truncated [ 209.321037][ T3004] loop6: p1 start 67108864 is beyond EOD, truncated [ 209.328678][ T3004] loop6: p3 start 100859904 is beyond EOD, truncated [ 209.335677][ T3004] loop6: p4 size 393216 extends beyond EOD, truncated [ 209.348186][ T3004] loop6: p5 start 100859904 is beyond EOD, truncated [ 209.355177][ T3004] loop6: p6 size 393216 extends beyond EOD, truncated [ 209.547971][T12950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.558500][T12950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.574697][T12950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.584373][T12950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.603195][T13149] loop5: detected capacity change from 0 to 512 [ 209.641093][T13149] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2974: error while reading EA inode 32 err=-116 [ 209.690901][T12950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.702797][T13149] EXT4-fs (loop5): Remounting filesystem read-only [ 209.714112][T12950] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.730700][T10048] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.737963][T10048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.760411][T13149] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 209.872806][T10048] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.880054][T10048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.898922][T13149] EXT4-fs (loop5): 1 orphan inode deleted [ 209.914382][T13149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.957152][T13149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.970506][T12950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.989500][T13407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.999354][T13407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.115172][T12950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.213077][T13427] netlink: 1040 bytes leftover after parsing attributes in process `syz.5.2983'. [ 210.272888][T12950] veth0_vlan: entered promiscuous mode [ 210.345104][T12950] veth1_vlan: entered promiscuous mode [ 210.377578][T12950] veth0_macvtap: entered promiscuous mode [ 210.399514][T12950] veth1_macvtap: entered promiscuous mode [ 210.407357][T13435] netlink: 1040 bytes leftover after parsing attributes in process `syz.6.2985'. [ 210.427546][T12950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.452088][T12950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.478364][T10048] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.496813][T10048] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.514672][T13437] ================================================================== [ 210.522877][T13437] BUG: KCSAN: data-race in n_tty_receive_char / n_tty_write [ 210.530581][T13437] [ 210.533038][T13437] write to 0xffffc900045ad028 of 8 bytes by task 383 on cpu 0: [ 210.540610][T13437] n_tty_receive_char+0x437/0x6a0 [ 210.545704][T13437] n_tty_receive_buf_standard+0x473/0x2f10 [ 210.551545][T13437] n_tty_receive_buf_common+0x805/0xbe0 [ 210.557639][T13437] n_tty_receive_buf2+0x33/0x40 [ 210.562537][T13437] tty_ldisc_receive_buf+0x66/0xf0 [ 210.567958][T13437] tty_port_default_receive_buf+0x59/0x90 [ 210.573754][T13437] flush_to_ldisc+0x148/0x340 [ 210.578486][T13437] process_scheduled_works+0x4ce/0x9d0 [ 210.584053][T13437] worker_thread+0x582/0x770 [ 210.588701][T13437] kthread+0x489/0x510 [ 210.592831][T13437] ret_from_fork+0x122/0x1b0 [ 210.597453][T13437] ret_from_fork_asm+0x1a/0x30 [ 210.602513][T13437] [ 210.604903][T13437] read to 0xffffc900045ad028 of 8 bytes by task 13437 on cpu 1: [ 210.612570][T13437] n_tty_write+0x14f/0xb40 [ 210.617020][T13437] file_tty_write+0x378/0x690 [ 210.621759][T13437] tty_write+0x25/0x30 [ 210.626185][T13437] iter_file_splice_write+0x666/0xa60 [ 210.631786][T13437] direct_splice_actor+0x156/0x2a0 [ 210.637056][T13437] splice_direct_to_actor+0x312/0x680 [ 210.642473][T13437] do_splice_direct+0xda/0x150 [ 210.647271][T13437] do_sendfile+0x380/0x650 [ 210.651707][T13437] __x64_sys_sendfile64+0x105/0x150 [ 210.657101][T13437] x64_sys_call+0x2bb4/0x3000 [ 210.661820][T13437] do_syscall_64+0xd2/0x200 [ 210.666359][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.672446][T13437] [ 210.674800][T13437] value changed: 0x0000000000000017 -> 0x0000000000000034 [ 210.681946][T13437] [ 210.684278][T13437] Reported by Kernel Concurrency Sanitizer on: [ 210.690803][T13437] CPU: 1 UID: 0 PID: 13437 Comm: syz.6.2986 Not tainted syzkaller #0 PREEMPT(voluntary) [ 210.700627][T13437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.710829][T13437] ================================================================== [ 210.793266][T10048] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.802991][T10048] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0