last executing test programs: 3m23.901109106s ago: executing program 3 (id=254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000080000000000008000001d8500000007000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000300)={r1, r2+60000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r8, 0x0, 0x4, &(0x7f0000000040)="4d0910bc996c301c8107070400", 0xd) poll(&(0x7f0000b2c000)=[{r7}], 0x2c, 0xffffffffffbffff8) r9 = dup2(r6, r7) fcntl$setown(r6, 0x8, r5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x780, 0x1, 0x3, 0x6, {{0x1c, 0x4, 0x1, 0x2, 0x70, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, {[@timestamp={0x44, 0x8, 0x84, 0x0, 0x5, [0x1]}, @lsrr={0x83, 0x7, 0x79, [@local]}, @lsrr={0x83, 0xb, 0x4e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @noop, @lsrr={0x83, 0x1b, 0x5d, [@loopback, @rand_addr=0x64010102, @multicast1, @private=0xa010101, @loopback, @loopback]}, @timestamp={0x44, 0x24, 0x5a, 0x0, 0x6, [0x3, 0x7f, 0x9, 0x7, 0x7f, 0x4, 0x5f24, 0x16a5]}]}}}}}) tkill(r5, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000ac0)='qdisc_enqueue\x00', r3, 0x0, 0x80000000}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r10, 0x0, 0x9}, 0x18) add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000440), 0x8}, 0x4c58, 0x0, 0x2, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6952}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m23.828537078s ago: executing program 3 (id=257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x13, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r3) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x3, 0x4) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x1a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 3m23.724934299s ago: executing program 3 (id=261): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2a020400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="52cf94c8101981d23180b9ce0926970d489377c46e8256c27be420b05b63352e6d74b57e79601feeec0b03e8246d108a55a08a714988eb67ab1cc54cb4988bb5c267224e67755d4970da1913d40068529ef28d9f515cd9e82548a2", @ANYRESHEX, @ANYBLOB=',k']) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000040)=0x3ff, 0x4) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aae100"], 0x5000) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x3d, 0x81, 0x0, 0x0, 0x0, 0x5, 0x62020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x3}, 0x410a, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYRES64=r5, @ANYRES64=r0, @ANYRESOCT=r2, @ANYRES8=r3, @ANYRES64=r4, @ANYRESDEC=r2, @ANYRES8=r1, @ANYRESDEC=r0], 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) socket(0x10, 0x8000000803, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r8 = socket$inet_sctp(0x2, 0x5, 0x84) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x3, 0xf, 0x20c, 0x6, 0x40a000, 0x401, 0x4, 0x6}, &(0x7f00000001c0)=0x20) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) 3m22.880700201s ago: executing program 3 (id=267): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x45d, &(0x7f0000000a00)="$eJzs3M9vFFUcAPDvTLtFBGxF/MEPtYrGxh8tBVQOHtBo4gETEz3osWkLQRZqaE2EEAVj8GSMiXfj0X/Bk16M8WTiVe+GhBgugKc1sztDd5fdpV12u9X9fJKB92be9L3vvnnbN/N2G8DQmsz+SSK2R8QfETFeyzYWmKz9d+Pahfmb1y7MJ1GpvPN3Ui13/dqF+aJocd62PDOVRqSfJ7G3Rb3L586fmiuXF8/m+ZmV0x/OLJ87/8LJ03MnFk8snjl45MjhQ7Mvv3TwxZ7EmbXp+p5PlvbtfvP9r9869mVD/E1x9Mhkp4NPVyo9rm6wdtSlk9EBNoR1GYmIrLtK1fE/HiOx2nnj8cZnA20c0FeVSqWyrf3hixXgfyyJxrwhD8Oi+EWf3f8WW/Mk4Gj/ph8Dd/XV2g1QFveNfKsdGY00L1Nqur/tpcmIeO/iP99mW/TnOQQAQIMfs/nP863mf2k8VFfuvnxtaCIi7o+InRHxQETsiogHI6plH46IR9ZZf/Miye3zn/RKV4GtUTb/eyVf22qc/xWzv5gYyXM7qvGXkuMny4sH8tdkKkpbsvxshzp+ev33r9odq5//ZVtWfzEXzNtxZXRL4zkLcytzdxNzvauXIvaMtoo/ubUSkETE7ojY02UdJ5/9fl+7Y3eOv4MerDNVvot4ptb/F6Mp/kLSeX1y5p4oLx6YKa6K2/362+W329V/V/H3QNb/97a8/m/FP5HUr9cur7+Oy39+0faeptvrfyx5t5oey/d9PLeycnY2Yiw5Vmt0/f6Dq+cW+aJ8Fv/U/tbjf2esvhJ7IyK7iB+NiMci4vG87U9ExJMRsb9D/L+89tQH3cffX1n8C6v9f/TO/b+aGIvmPa0TI6d+/qGh0onb4r/Zuf8PV1NT+Z61vP+tpV3dXc0AAADw35NGxPZI0ulb6TSdnq59Xn5XRFpeWl557vjSR2cWat8RmIhIiydd43XPQ2fz2/pa/lJE1D5aUBw/lD83/mZkazU/Pb9UXhh08DDktrUZ/5m/RgbdOqDvfF8LhpfxD8PL+IfhZfzD8Gox/rcOoh3Axmv1+//TAbQD2HhN49+yHwwR9/8wvIx/GF7GPwyl5a1x5y/Jd0wUP6nL0wecKN76ev+To7Sus7ZshldjXf2ebopmbNpEaROOi+JvGq2l8Ma/FwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTDvwEAAP//7hXV/g==") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 3m22.632331005s ago: executing program 3 (id=269): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4839fb68893e9ec6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000feffffffffb6290000000000007b41fda41ed55875edd84db38af8ff00000000bfa2000000522a1031f7894c4d016a4300000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700bb4d9f9077a56ec6e37c000200", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) r2 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$eJzs281qE1EYxvGnH9ov20Sr1VbEF93oZmjjFYTSghhQaiN+gDC1Ew2ZJiUTKhGx3bn1LoTi0p0g3kA3XoELd9247EIc6UxskzaiFXRs8/9tzhvOPOGcnDPhLGY2775aKhUCp+DW1N1l6pX6tSWl1a0exboabXdUH1ezNV0dzX26cPve/RvZXG5mzmw2O38tY2YjF98/ff7m0ofa0J23I+/6tJF+uPkl83ljbGN889v8k2JgxcDKlZq5tlCp1NwF37PFYlByzG75nht4ViwHXrWlv+BXlpfr5pYXhweXq14QmFuuW8mrW61itWrd3MdusWyO49jwoPAr+fW5OTeb9Cjwd1WrWXda0sS+nvx6IgMCAACJanP+X+P83yk4/3eC7fP/g8b924rzPwAAAAAAAAAAAAAAAAAAAAAAh8FWGKbCMEz9aI9J0Rs+YePzgKRBSUOSTkgaljQiKSUpLemkpFOSRiWdlnRG0piks5LOSRpv+q6k54r9kln/gSSnjCbc/52N9e9sTS/u9ktLL1fyK/m4jfuzBRXly9OkUvoarWVDXM9ez81MWiSt80urjfzqSr6nNT+l1PaGaZefivPWmu+L9t1OPqPU9gZrl8+0zffryuWmvKOUPj5SRb4Woz25m38xZTZ9M7cnPxFdd9Q5tqPt+jnOz/rj/AH2x57ft1cTvcnOHVJQf1Zyfd+rUlAcheK1/othHP4i6X8m/Au7i570SAAAAAAAAAAAAAAAAAAAB/GnTwiGq3H+dy5Oeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOz1PQAA//+5gF2o") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r3, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x3500, 0x5dd8, 0xfffffffd, 0x0, 0x5, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20000600) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = dup(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x4, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0xe0}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m22.384321249s ago: executing program 3 (id=276): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1500010000000000000000007721f5438b20ffdf0300000008000900", @ANYBLOB="0822803065"], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x4000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="180000001600156f25bd7000000004fd0500c80a7b855c6ff191d717f4bd555957a777e26707ca10bdd5b48aef003000726fdce7c971d99046cddec08fb65262d11828e50f636966b12a", @ANYRES32=0x0], 0x18}}, 0x8054) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000500)='afs\x00', 0x1062010, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) 3m22.348761639s ago: executing program 32 (id=276): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1500010000000000000000007721f5438b20ffdf0300000008000900", @ANYBLOB="0822803065"], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x4000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="180000001600156f25bd7000000004fd0500c80a7b855c6ff191d717f4bd555957a777e26707ca10bdd5b48aef003000726fdce7c971d99046cddec08fb65262d11828e50f636966b12a", @ANYRES32=0x0], 0x18}}, 0x8054) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000500)='afs\x00', 0x1062010, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) 5.41071797s ago: executing program 0 (id=2621): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200d49bd2b272ea736a0000060056ff5924"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x54583}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = semget$private(0x0, 0x6, 0x0) semop(r5, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4, 0x4, 0x1800}], 0x2) semctl$GETZCNT(r5, 0x0, 0xf, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1, 0x99, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x5972, 0x2, 0x0, 0x257}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000000000000060027000500000008001d0009000000080001000600000005001900020000000c002000070000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0xffffffff80000000, 0x0, 0x5b) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) clock_getres(0x4, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2800007, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=mixed,utf8=0,iocharset=cp860,shortname=mixed,uni_xlate=1,uni_xlate=0,nonumtail=0,shortname=mixed,iocharset=cp437,shortname=winnt,rodir,shortname=mixed,uid=', @ANYRESHEX=0x0, @ANYBLOB=',shortname\a\x00in95,shortname=mixed,umask=00000000000000000000010,shortname=mixed,\x00'], 0x25, 0x34f, &(0x7f0000000840)="$eJzs3T9sG2UUAPDnXhKnESUekCqYDBsSqpogBpgSVUWqyABFFv8WLJryJzaVYmEpDHG8gComEAsSTGwdYOyMGBBiY2ClSKiAWOhWqRGHbJ/tc+xQZ3Boxe83RE/v+9597y6n3CVKvrzeiq1L83H51q2bsbhYiLm1c2txuxClOBFJ9OzFRB8tTM4DAPe422kaf6U9d5/9yVI/8uwHgPtX9/n/5qlhoniE4qsPzKIlAGDGpvz+//mJ2SszawsAmKGx5/9jI8MHfsw/N/idAADg/vXiK68+t74RcbFcXoyof9isNCvxzHB8/XK8HbXYjLOxHPsRvReF3ttC5+OzFzbOny13/FaKSqeiWYmot5qV3pvCetKtL8ZKLEcpq08H9UmnfqVbX46IvVZ3/agXmpX5WMrW/3kpNmM1luOhsfqICxvnV8vZASr1fn0roh2L/ZPo9H8mluPHN+JK1OJSdGqH/e+ulMvn0o2R+ua1YnceAAAAAAAAAAAAAAAAAAAAAADMwpnyQGmw/01abzU/uHhwQmlkf5xKbzjbH6jd2x8oLfZ357maHNwfaHR/nmZlLk78p2cOAAAAAAAAAAAAAAAAAAAA947GzkJUa7XN7cbO+1v5oJXLvPv9V9+ejP7QXFb6TjKsiiw5cpz+xNyRkxgskQ7K02RkThYkEf3Je9Vr1wcd5+cUB2cxVt4JimNDhaynaq126tFfP59U9Xcn2Otmkhi7LKNBIVs/N1R/sJNYjIj9w6oOD1bvMudGmqaHle9+Nl4VhYi5OHIbUwTf3Xzr4Scbp5/qZr7JNn14/Inll258+uUfW9VatHtXplZb2G7sp1McudPr+FCSu38K2XUuTLgTJgftYaa93dipJj/9+fIjH/9wYHIy+f5J85n3Dl/r64OZhV5QiCj1L8K/tTo/4eafHLx2Z3D3Hv0Td/qLter13V9+n7Yq90XCRh0AAAAAAAAAAAAAAAAAAHAscn8rfgRPvzC7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+A3//38uaI9lpgnutGJ8qLi53Th08ZPHeqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyP/RMAAP//rShzCQ==") r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) 4.312700736s ago: executing program 0 (id=2629): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x400000000000000, 0x400000000000001}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000540)="c4a23d0643b9c463791624233ac4e1cd6a3846a900000000660f7ed238c46191c4e3ad6ad00d92db8876efa1efa12eb22d233333f30fa7d0", 0x18000000, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000580)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc058, &(0x7f0000000700)=ANY=[], 0x44, 0x30c, &(0x7f0000000200)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x1000000, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 3.356034381s ago: executing program 0 (id=2637): r0 = syz_usb_connect(0x2, 0x64, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x70a, 0x100, 0x8, 0x0, 0x1}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000", @ANYRESOCT=r0, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 2.914252127s ago: executing program 5 (id=2641): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000108500000609ed7463245a5dfb724130f1d76700000095760a0b1898c53dfa542c46de27bb9099b3fee6e70770f2079e5ea5741a60ecccc8c9c8c65f97e4fd1b83a332ca7948ed702cefc8d34406124942c5a5d29bcd81073da08c4b6461144bd0e5aa9b69bfb725f147a8538de25b0b0c12cb3cacc698162b394a59d8"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000600)) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x10) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000000140)) 2.806458359s ago: executing program 1 (id=2642): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1500010000000000000000007721f5438b20ffdf0300000008000900", @ANYBLOB="0822803065"], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x4000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="180000001600156f25bd7000000004fd0500c80a7b855c6ff191d717f4bd555957a777e26707ca10bdd5b48aef003000726fdce7c971d99046cddec08fb65262d11828e50f636966b12a", @ANYRES32=0x0], 0x18}}, 0x8054) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000500)='afs\x00', 0x1062010, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) 2.72439664s ago: executing program 1 (id=2644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) capget(&(0x7f0000000240)={0x20080522}, 0x0) 2.677113791s ago: executing program 1 (id=2645): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth0\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71017170000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (fail_nth: 4) 2.375106575s ago: executing program 1 (id=2647): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r5], 0x28}, 0x0, 0x800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r6, 0x20, &(0x7f00000005c0)={&(0x7f0000000440)=""/159, 0x9f, 0x0, &(0x7f0000000500)=""/137, 0x89}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x15, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000030000000000000003000000186900000300000000000000050000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000b10007010000f8ffffffb702000008105d00b7030000090000008500000006000000950000000000000087d3197bc0093916869cbbd166188e84129e5dfbade78f9beb21caaf9628466f8bdbdd6beeabf4ab554ae8"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001400)=""/4096, 0x41100, 0x74, '\x00', 0x0, @fallback=0x5a, r7, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r8, r7, 0x1, &(0x7f0000000640)=[r7], &(0x7f0000000680)=[{0x3, 0x3, 0x1, 0x9}], 0x10, 0x4, @void, @value}, 0x94) tee(r6, r3, 0x6, 0x0) r9 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x307a80) r10 = socket$isdn(0x22, 0x3, 0x22) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$IMCLEAR_L2(r10, 0x80044946, &(0x7f0000000380)=0xffffff91) mq_timedreceive(r9, &(0x7f00000001c0)=""/139, 0x8b, 0x4, &(0x7f0000000280)={0x0, 0x3938700}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r11, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r10], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x18) munlockall() r13 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2.02853993s ago: executing program 5 (id=2651): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r5 = accept4(r3, 0x0, &(0x7f0000000080), 0x80800) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000000c0)=[r1, r5, r2, r1, r0, r2, r3], 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000240)={0xe, {{0xa, 0x4e22, 0x8001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xdab}}, 0x1, 0x2, [{{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10}}]}, 0x190) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.966104521s ago: executing program 5 (id=2652): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)=""/259, 0x103}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfe, 0x10000, 0x0, 0x12000, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x4, 0x5, 0x3, 0x7, @void, @value, @value=r6}, 0x50) 1.948353471s ago: executing program 1 (id=2653): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2a020400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="52cf94c8101981d23180b9ce0926970d489377c46e8256c27be420b05b63352e6d74b57e79601feeec0b03e8246d108a55a08a714988eb67ab1cc54cb4988bb5c267224e67755d4970da1913d4006852", @ANYRESHEX, @ANYBLOB=',k']) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000040)=0x3ff, 0x4) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aae100"], 0x5000) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x3d, 0x81, 0x0, 0x0, 0x0, 0x5, 0x62020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x3}, 0x410a, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYRES64=r5, @ANYRES64=r0, @ANYRESOCT=r2, @ANYRES8=r3, @ANYRES64=r4, @ANYRESDEC=r2, @ANYRES8=r1, @ANYRESDEC=r0], 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) socket(0x10, 0x8000000803, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r10 = socket$inet_sctp(0x2, 0x5, 0x84) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x3, 0xf, 0x20c, 0x6, 0x40a000, 0x401, 0x4, 0x6}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000240)={r8, 0x9}, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) 1.438298159s ago: executing program 2 (id=2656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) capget(&(0x7f0000000240)={0x20080522}, 0x0) 1.36112084s ago: executing program 2 (id=2657): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') uname(&(0x7f0000000040)=""/208) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000580), 0x1, 0x564, &(0x7f0000002f80)="$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") uname(&(0x7f00000002c0)=""/106) 1.331117331s ago: executing program 4 (id=2658): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000740)={r2}) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x7c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x60}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1.308190151s ago: executing program 4 (id=2659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r2, 0x4, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) getdents(r2, 0x0, 0x48) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) finit_module(0xffffffffffffffff, 0x0, 0x3) 1.252891832s ago: executing program 2 (id=2660): syz_read_part_table(0x5fa, &(0x7f00000017c0)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x111e, &(0x7f0000003100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0xd, 0x6, "1e49b3", 0x10e8, 0x3a, 0xff, @empty, @mcast2, {[@routing={0x16, 0x0, 0x2, 0x2}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x67}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1, 0x0, 'N'}, {0x5, 0x4, "685bd6da5de266fb15b124506805d8ed38cca088df735ebc98fe9cedcac59ba90c9f06"}, {0x18, 0x9, "ad1cabf76b11f3893d3f51c4a76aeefa56766087ef75aa9453ec42a0e04a27c0b98673d88f9274c38cf41a5b954231d2018eebdd3dd7ab7420c8d3b2bd1838f9901c1287852e4ff9a1"}, {0x1f, 0x1fb, "b65774fbb6b041d2b1ba904272b37f9371d87a6d8181c879ccb92455f2f99f0f057f8ffaf002db6365b5c22c4a44a16995a1feea7ea5aca40e0f8c25d20c16a7d8fdc94c87488742d1f2700fb345e39d0b71f3a4d8bd0ff4ca8f1d22791cf3000cfeaaa46c619a6bd0305869c1459c11e0cb5e36c5772d63e3174a4943dad339d617539ae7ef001cc78d5f09dd64e3ea1268876cb58fdf6a535a1dea31de984fa418ad5b4aa688f5f5d02b66fa22fb75de55824521124fc487f8491b0a434a5719d87bf9b63fd5a89b09e37d02763424bf634a0014b16c60c4520cd9537f5c9ac22ad6752cd8ab145b09e592cb0ed2443db21c69a9d935cf71da4524498b125097b683443bf095e1746217c17b0ba9907c5295bec2e7cf76c58fb06617a5f51366e348aff2db12aebcc99a390d2b34b0eacc68b46c5d4435879447b9e6103216133f9fdc77e2292792b5a4db0aa5458b6d97d4830582b056db8420e570a1d61e9e5a8c4bd0809b5395ca4c86b19137d7dac15f0db235fa117adacb4a3d24fa93d62cc321191e40929854690805d94147039b3eb312ba808866eee47bd854e5925c91b07516c54abe4c34f6e3bf061c62a78f06764986e2429ec521e9b354c25b04d9df9d8730c13399f21cda3a114fe8e1c3bda03db78d970cb9538aa06ad20bfe1c46b0fc2a6390b02d57e4c78c4bfc22a19d3531c5d6470225ce813bd7aed8326b640f9afc86517a69455717d3c951a15b5ded3336470c41fc528c6b0f5f96d31c32e0e583a055ea9e1f42dada32ea2ec2798ae0c5dca19a9a0771e5814bfd849d8981ed66ee61470f197608dfb267048420aa12b5d2bc7c0e0ee2060865fce2e1938b34475461106bc69398f03547f718c80dcd98fa680cb91f3f7f50a13c576abb4f0f8e985fc63d06158fdf8e8f35d51741c7c6c24fa125793b141c811944cde7c6fb9afd517bd7fd98c0bbf2f1035036893325b9144e69576fffb3072960523473d8e4f1b272f62fe22e5065a3276210a414b494a44ae43c60b50e4b2600355da58f3dd454256cc231ee8455e4748689fb3fdb94b6ebcd1789c25fdbf015d0fce8dbbabbcb172e8bc8a3364d8c2db4b08522eac10e4ac4844f9b622be22a1d54132c09dfe31525795403a0341ffa1d1d479252e365a7f67873c23775f4140537a6638bd938aa802cd37fb7c589afa006325a22355f3b8d3463021a2f491e88c85c9ba896471e94cf89eeaf99e14e789f567203be1af0c1d1de398e039c2b3fc8bae8df47b731a6f32c6ab4008b08bf1e28ad53c320f30ef6ed26c1f5a1ced5b18e23f1ed5504460084e05aa7eeb11950ed48abf0d8d59bbd6e3a97da904c909c060ace784edf9af00801378be1eabf5fe7a8d2f66c8d3d416d0729e43ccfea8429c354462df9b4ec4139f7554ec23fe870600fc63b4309e89a85d316b27624fc9fc18a9ae1ebe1b1d68fdfc183801c46466ebefc599139173f1d669251660d5137b6e31d5b01679fbe61ea4a0da6e8bd92cbbaa1eb9d69af1abfd6ac333c40cd1971f5e39492ffdb3fff0d349795b23a696b3ad3dc5d780167aa2d90f7f413b0a02ee174b0c880e54b37cc6cd1a57b76fc92e2b4d84470213b994e456cfe815885d91358a8b90f03acb96b78315ea4caa87fc580e1513917d8aeb6b1842892410c8f9bb40b300d85feccd829fa26ef7fc443f6ad6a641228078d465689cf45a584349d0c00439c2e555e6fdfd2a9149d699e04378508ffda7058a273e24ba60f6f754031bda99453d04c95b81912e62c4bef86a4e85272ef015dba119a1ba905e30a5d61411341a2a95677c51a02adae2fc57a9ee84a4351b18a970922d5b48f1e2b60716f4fc01b468f8309b9b476b266ec4a87683f3dc755cdac114a42048d4dcfa00fc6585f9b9d9e15ba20b9c53c0df506acce62aa899e9fdbfe4968929b15232705ea0be940a59ef8babeaca599d28bf0f0be744dd080ad63af96effa8fa30571c6c9febdc524dccd6d3f891bc8ebd7bd79009f3182c5e42e5f8d36954a2e3459fd2a627d0c978f743f61252fc49c2fc5fbf09864708719fc224782ef4c1b6cda3eccfe349c17b62628a5026f9b1787f3b7fdc2157b67e4620c0a1172ce8648e6bb692cfb2c4424592e7ca26acfbdc3386025cba0817a92413787efc374503cdddba82e52f7d05c05a9c2b46c974d8ffb3536ddd0afdc41300811aa9eb3b8fe3ec97e823b4b52e81579f3e2359c37f021ccfead912d226f74bfd9a438a075bb3277811c2b7f004c23fbd3892b74ed5c96db52d041fa2071b5c73144b564fd978fe798b01381187d615f7e66aed80ad42080962323285e0c304a21cbfedd4fb5a84bf125140c316bf770557fad8c5b5da65d6333add785fa8800a97f57353ae0bb520b007a7082d318c6f54071feb56807365ba363e5b7c51f6c3375d6d0f37da375c3707eafa75385cec7c3f8ebdefe20b3823d1f703565fc9326265bf5752be09b700cc5c235d35c946aaedc1a4e4cc9c70ca244d3dafbd6de570ee3775e5878449032509f4d53bc3b5d776f88b846e94740bb575a8416b38f780759f0cceb9cfb79d30b250e4c2002b226480852bc35c4d27d5daba4f55bf8c59af1a5117822de769201627ab8288dd1c0d18390fc5f1ac9f40c2dddbb5dbe177c8f0f7f4bbdd8ef9372eb509836d0cadff3e52a78367732db01c40bb086833433f6cd036a458fd0573f69b8e116eafe987e64c99a3d118a2fec69d9dd7c42b3590cfa5cfb6d6cb6c3ce4a769bb5a8ba6ebc652a408d89b5b68918105dd2622f87dc8722dc6df24144e40984af80dd18d90ea85be36e62e91040fe5d0a021cbdc1539bf050c4eab14003444c03d23b1c42ef46cd33a4e03aa28f8ba66333eaca00f80a4fa749f42a8aafdc634e3b370386d37fa6235368ddf5a2d8b8497504be4cc38af49385b64674576f10aa3f5891e8a37178bfa299be8f4e730a70582a1424f4cf5038779ef0ceaaa1cffd23d89a3069af684ad847aa16147bf4bbefaf7d953521c06ed708491cebdc89e26420728314dc9e7a80f4b5bf434f2c81a1487a6992abe36842b4fa6d2754ad21297a656acf2dbe2537443d618562d92ca1ef8f3738f420fb11be2db6aeedb5fcd84fccdecefa57f2d7bf3cf7bdefbc2b63e7ed6fd3b9fcb9282639c837a19671bd51c8dd60e65b425d0416646d4215b5faa1a916b65e5e032f5f88fe1c7269547b589b6a4eaef996ae271d5e17893fd4037bbb74782a278885b0e0b513115fbf2a282b3bffae7257dda5978d7066a182ba6facd956c7fd499817d95ba44a2c3e173dc7b737a288154707f366e48dd40c3d657fecde189d585b13a6835183466704c3d8f13f431b1a00844135a1849da6db7ae67ea7c707e18e697afbb661ceb1f74c26ec1dee68aab518c3a1766ff33c71dd27cc73e0c73b76f9c8c0e5519c4c83536ec371e467182c14325719cb490919ee14570fe1a5e004aed73ec3ff1a01ba73b060bac9f07f16dbb23ae48ca813baf0cc5bed4e4515cac753afe20e87f2fb2dc6e054fd3132315a023b8d42521df5f185beab6451a0d12e5c56ce25242b9ff839287b7ff89c14b98e7567f650e6972eb1a865aaaa660265ebeca98e24f47dbdea77d9a26ab4123a6669ce236f31215aaf07c2218be0491fe97b97f4162160d348bb82b1aa6bac82281a5901552f5ad5fe1b5327f34cfff848f6aa3090a7485aa86f32ab4c413896b6360ff8e77a51cfc3d1fb8fea650e2a0ff01104d3d8dddf01bafe4dea5b496b5e1dd36eab44b5b699ea761281ed60fc8c1b108719329502c5cb3deca06ad434881634efc1f47798786392c21cdfb61de2dcf9e8c96ce1b31e7d06782b7e28aec4ebb9b8bb09b13708e5817b37c88760f79d166d6e0d332c73e0388cc8c6097f8696ff0f8f283a7697598b376673e72cc8298f3a647b975a5c54ec698988e50f8fe1b8a752c51b2f2f721c9b7a0a5b42703d631df22935630d80a2bc9d82263f5ca8db65b987dc6a2dbd31d65c93db4c039d0b64952c83ea3710ee1e63e8e5608457bdacaa10c30ae9fe19e1b5dacb3480458cc356d088f63f4dca4cbea1741d575f7fe905932304cf20995a34d1f1194bc9486eb712a27c0bc37f6ee6c80aa6b77f57b3878e478ab95781fb96837322c6036700acc3817d6dd08cfe27c9f5536271a8e594579814efa3e3da44fb7e7bb8da9a7b56c6b75089b8a6aedc1d63f8528461978fa5e7c832c5450e5abae8a2a97b4d886ab356d82326d3e925ede04b016e0d0aaadfea5bf9e6c100c73fbfd2406ce79b5b127ca93a083df35093881984e1f5d8437d6aacb26c3692498d36bc4d53e1d2a80c38cb8fea3b0c1b91e50e7c54c90b30ac1902bffacee8d1674979ef3fb66358b5b5a34b82bb62098eeedd8791e05d818a1e08a9e3743fbf351641b6527ce1d84a09fc32647d117eca9359aae83bdca9eeff399ea4f774b3c1065f0901eea4de82510d7ca8c3040e460c588219edb8a0d86c5284cee40b4f30e8f4214e746dd4e86190453c092c6743069b3c2005bd3007988098c0f87f4b27c13d490da2388cdcb24183224f301c7c9234b1c7d282f5a8957b2184479113eb4773e86389346f6c85e98230133069a32547bf7de9f8cc1f69efc2993955d785e96d6612f6273d3fe2b02636d3626b9c7348e9755ba990d3aaf50ccdcb5ad307b06af57dcabe4525318929b9e56111713cfba8070c9ddc594441b0106673d4a3f1ddac93c1381963d98ce3f88797aedbe7d00fef4f458c932c4dfcd7ba22d5f0bab60717cc44d919e57b5d954cfdc8a444a6236ef9cfa7f379396f4f00f81cd90d03970d052e06df520cba416194f7d9016308e567a72bbbed7ecbad7f2097ea9210f58e7e82e424c3a46272ec48f434916c4bdffb1e7e98f34b8e5f1dbf06327787e1c9e45b8db8fdd8cd620db721bf44199dc9f6a7ccafe181621d7c83010e95ddfef9368a949725a13ea1f32e591d92fff3401611c3b7f73e41032ca9b3ddc6ec4a267e96bc4e9cd7c04f98601eccd84cde0ef78a7ed554d2540a11175de9172c2283f0b26f482333aeb27ba87736ff03ef571559642ded634f6ec73f1bf914e576f59076503232676884fa8b60b5eef34cb99d6c1803bed373a4f84ed66ead283cf68aab58093c66563aca0ab55e0a3e98fcef10c244c597e79328968bff6092fa0441a2dbdfbf0824ab5b1b8901e78958601936db1fe11107882a33fc4152f0a3bf48bf5de15e3901870f88ae85c71aa1d6eb000d032c6c88d6b2ab7e0b7547bec8c1d469889426b00c719b89998c226f1ca68e4a8cf29c7dc5d7c178281f4e1a8b6dd52a1ebc5d2a25218bc90e6618f7ebb1d76301eaa96f23ad425f4211b34e67aeebf925473d7b4a2f93edba78030c50e4ae9d54ce3498b9cfe387e00a2259814784673016d7f4a43a2d94f01ec8f4f506e55b05c345b8f6438e94bfaae867788b85c6e9166f93629e31e24141d36360ee5d95ba22f401a1dad1104a22540642e0daabfab4e509460663eb4ab6969d989f1a7e03fe483321959d1266c800bc63ba3535f3cdef50ccf53908c7fa089906a11dfc1f2170198a1e30be7bde941d1a993299b5acc4098e20d80ee41162dff204d552892f5a10bba9e579683ccf316e1ac51af27f8a01d4d47a4fc3b198b6b89768c8e2c20475b0048d75969d242f754bac6d9c99acdede5ace9a798c28"}, {0x18, 0x8, "5acdf0ac71669b2c9c96a670f0a3ccf9a7eb5029143348b278f471273c3c29cd1cc22b7f9a7d80a602e6ab249dac26be9d287d8a4f3dbd285772c00c520ea92d8c"}, {0x22, 0x8, "9902f89ee9970163fdcc5fb0ffcd09ef1b5d644d0276d81a8d4b0f62a137adfbaec90dd41169b857d1bc1f6222571d5d180b11331cad71fe2a7cf2502e8789"}]}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff00001142"], 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) read$qrtrtun(0xffffffffffffffff, &(0x7f0000002200)=""/247, 0xf7) 1.251918902s ago: executing program 4 (id=2661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000008000000070000000900008001fe2da3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f00000002c0)="19fcbd263c7296e67aec6ce52170762ef0a514995cdd548ed24b89323a05b0d60ee8a2efbfc02e", &(0x7f0000000380)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r7, 0x400, 0x0) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r8}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r9}, 0x20) unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000000000000000000018110e00", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.106613954s ago: executing program 5 (id=2662): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 1.094485364s ago: executing program 2 (id=2663): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_clone(0x6200, &(0x7f0000000500)="629be414ca395ef185b3e81a89c033ef6cb805b16b4690501a54e6d401293007b9d33af751419d52b965a49a40a2ae98352f9dca47990be709ee150786d39b3da0f6dbd06cade44a94d5da", 0x4b, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fadvise64(r4, 0xfffffffffffffe01, 0x5, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) bind$tipc(r7, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) 680.94849ms ago: executing program 1 (id=2664): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x20000004) 544.220472ms ago: executing program 0 (id=2665): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4839fb68893e9ec6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000feffffffffb6290000000000007b41fda41ed55875edd84db38af8ff00000000bfa2000000522a1031f7894c4d016a4300000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700bb4d9f9077a56ec6e37c000200", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) r2 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r3, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x3500, 0x5dd8, 0xfffffffd, 0x0, 0x5, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20000600) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0xe0}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 520.925173ms ago: executing program 5 (id=2666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002"], 0x118}}, 0x0) 449.585404ms ago: executing program 5 (id=2667): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000300), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) socket$inet_udplite(0x2, 0x2, 0x88) poll(0x0, 0x0, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) 359.840405ms ago: executing program 4 (id=2668): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @private=0xa010102}, 0x4, 0x1, 0x3, 0x2}}, 0x26) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000000)={0x3, 0x5, 0xd5, &(0x7f00000001c0)=""/213}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x3c}}, 0x0) 257.390237ms ago: executing program 0 (id=2669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x9) clock_gettime(0x0, &(0x7f0000002500)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r5, @ANYBLOB="08000a001a42dbaec1ebce2600000000013d00000000", @ANYRES32=r5, @ANYBLOB="2fda84219d07123e0eb4519f70127cbfb553517b5dc7527f424984608b3fe86e36e852e0f18de1d64e088d74207052a0654ff42320813db77bfa515db992f310631fb7f4efa002dee134868d7eec35319079f5e08a15e8bf4a9d3051285b6f5a2a136764fdf217a7e154a0fefca3fd849b36e195ecb1741ba14640247a92c04950b11c7294e318a732"], 0x44}}, 0x4009080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="3df59869572605f5462458de394a36dadeb2be0b3388feb8717f5b149be77173b270f6958bed17f444116224238e5716565ee9066deed23cae6c0291688f4359c960a927d67535c2ee862f14deb5d2a4c95452827c618bf233eb4289e8c7a6f561d1326bbd5a3c71806f707d5d9cae863c95ac500ce5f12f1008039463b188672ab93e60b605d58d19d9d609c0eac7c7a9061a1c5ac822eb403be52d2f822095aa2533d4fd5d35e6089229f71b8ca84154d4a00c3bf63e4b2bb0ac0f5c0071fbe49d", @ANYRESHEX=r2, @ANYRES8=r1], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000300)=ANY=[], 0x381, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1) 256.288457ms ago: executing program 4 (id=2670): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe8011e0000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 133.161318ms ago: executing program 2 (id=2671): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "e9255bb992464e73a02159d3720df19f7a1dfec3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) 86.444799ms ago: executing program 0 (id=2672): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000001c0)={0x400, 0xfffffffc}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r5, &(0x7f0000001b00)=[{&(0x7f00000004c0)=""/205, 0xcd}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r8, &(0x7f0000000640)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000007c0)="ca82aa38f8338ee7c5b582fc60793df285c8b1f945ae4a835ef3c8b7757fc2f713b23f8f649d87c4baf26115988a9b4cb35b0a04f96c6c35ef3f223657563e73f513b1d521e86b719e7049e1e808ea3ffdc6ecf61521cac14acd6c5428b93387dde5e34b7ed650e5521b9d4ed51d10fb35d78cf18a066776ce6749215ccd8025453a88b23d0743c52ea5671ec763592dd8381703dfaf36167a5843", 0x9b}, {&(0x7f0000000cc0)="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", 0x153}, {&(0x7f0000000940)="240adb1111469b025fa9c4f0317521f8ceacdc4a976cedcbe3d3a27daeefcc07758f7377d971942dec9bfcb3fbc4efed78cd6daf00292385c0f816ba5db36185fabd868e6c322d8583607f127d97985263ccac74450afdfca0a3c3fb3c09", 0x5e}, {&(0x7f0000001ec0)="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", 0x3fc}], 0x4}}], 0x1, 0x4004844) mq_timedsend(r2, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 73.028469ms ago: executing program 2 (id=2673): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)=""/259, 0x103}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfe, 0x10000, 0x0, 0x12000, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x4, 0x5, 0x3, 0x7, @void, @value, @value=r6}, 0x50) 0s ago: executing program 4 (id=2674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) (async, rerun: 32) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x30) creat(&(0x7f0000000000)='./bus\x00', 0x89) (async) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x0, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4800000000000000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1000}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) (async, rerun: 32) umount2(&(0x7f0000000080)='./file0\x00', 0x2) (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x4) (rerun: 64) kernel console output (not intermixed with test programs): s error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.2158: Parent and EA inode have the same ino 15 [ 207.015571][ T9961] EXT4-fs (loop4): Remounting filesystem read-only [ 207.036709][ T9961] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 207.048838][ T9961] EXT4-fs (loop4): 1 orphan inode deleted [ 207.055611][ T9961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.088805][ T9961] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2158'. [ 207.146477][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.580884][ T9984] tmpfs: Unknown parameter 'nos÷ap' [ 208.035727][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 208.048283][ T9990] 9pnet_fd: Insufficient options for proto=fd [ 208.076952][ T9990] tipc: Enabling of bearer rejected, already enabled [ 208.220940][T10000] loop2: detected capacity change from 0 to 512 [ 208.272830][T10005] loop1: detected capacity change from 0 to 128 [ 208.275189][T10000] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.2171: Parent and EA inode have the same ino 15 [ 208.293385][T10004] loop0: detected capacity change from 0 to 512 [ 208.309810][T10000] EXT4-fs (loop2): Remounting filesystem read-only [ 208.323783][T10000] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 208.325320][T10004] EXT4-fs (loop0): bad geometry: block count 268435520 exceeds size of device (64 blocks) [ 208.334117][T10000] EXT4-fs (loop2): 1 orphan inode deleted [ 208.350361][T10000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.422946][T10000] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2171'. [ 208.450889][T10005] bio_check_eod: 104 callbacks suppressed [ 208.450905][T10005] syz.1.2170: attempt to access beyond end of device [ 208.450905][T10005] loop1: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 208.484363][T10005] syz.1.2170: attempt to access beyond end of device [ 208.484363][T10005] loop1: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 208.498200][T10005] buffer_io_error: 98 callbacks suppressed [ 208.498283][T10005] Buffer I/O error on dev loop1, logical block 156, lost async page write [ 208.512816][T10005] syz.1.2170: attempt to access beyond end of device [ 208.512816][T10005] loop1: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 208.526305][T10005] Buffer I/O error on dev loop1, logical block 157, lost async page write [ 208.535011][T10005] syz.1.2170: attempt to access beyond end of device [ 208.535011][T10005] loop1: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 208.548554][T10005] Buffer I/O error on dev loop1, logical block 158, lost async page write [ 208.558519][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.568504][T10005] syz.1.2170: attempt to access beyond end of device [ 208.568504][T10005] loop1: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 208.582114][T10005] Buffer I/O error on dev loop1, logical block 159, lost async page write [ 208.735926][T10017] loop0: detected capacity change from 0 to 1024 [ 208.744905][T10005] syz.1.2170: attempt to access beyond end of device [ 208.744905][T10005] loop1: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 208.758512][T10005] Buffer I/O error on dev loop1, logical block 160, lost async page write [ 208.768710][T10005] syz.1.2170: attempt to access beyond end of device [ 208.768710][T10005] loop1: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 208.782301][T10005] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 208.792397][T10005] syz.1.2170: attempt to access beyond end of device [ 208.792397][T10005] loop1: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 208.806151][T10005] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 208.816286][T10005] syz.1.2170: attempt to access beyond end of device [ 208.816286][T10005] loop1: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 208.829751][T10005] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 208.839110][T10005] syz.1.2170: attempt to access beyond end of device [ 208.839110][T10005] loop1: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 208.852604][T10005] Buffer I/O error on dev loop1, logical block 150, lost async page write [ 208.862073][T10005] Buffer I/O error on dev loop1, logical block 151, lost async page write [ 208.873143][T10017] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 208.883024][T10017] EXT4-fs (loop0): group descriptors corrupted! [ 209.004368][T10023] loop2: detected capacity change from 0 to 128 [ 209.059814][ T29] kauditd_printk_skb: 737 callbacks suppressed [ 209.059833][ T29] audit: type=1326 audit(1749431460.943:31120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.2.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197800e929 code=0x7ffc0000 [ 209.089800][ T29] audit: type=1326 audit(1749431460.943:31121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.2.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197800e929 code=0x7ffc0000 [ 209.113630][ T29] audit: type=1326 audit(1749431460.943:31122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.2.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f197800e929 code=0x7ffc0000 [ 209.137378][ T29] audit: type=1326 audit(1749431460.943:31123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.2.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197800e929 code=0x7ffc0000 [ 209.161088][ T29] audit: type=1326 audit(1749431460.943:31124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.2.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f197800e929 code=0x7ffc0000 [ 209.185291][ T29] audit: type=1326 audit(1749431460.943:31125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.2.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197800e929 code=0x7ffc0000 [ 209.209530][ T29] audit: type=1326 audit(1749431460.943:31126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.2.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f197800e929 code=0x7ffc0000 [ 209.233201][ T29] audit: type=1326 audit(1749431460.943:31127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.2.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197800e929 code=0x7ffc0000 [ 209.257064][ T29] audit: type=1326 audit(1749431460.943:31128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.2.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1978010847 code=0x7ffc0000 [ 209.280797][ T29] audit: type=1326 audit(1749431460.943:31129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.2.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f19780107bc code=0x7ffc0000 [ 209.388695][T10038] vhci_hcd: invalid port number 15 [ 209.394002][T10038] vhci_hcd: invalid port number 15 [ 209.425900][T10043] atomic_op ffff88811eca6128 conn xmit_atomic 0000000000000000 [ 209.433679][T10041] loop2: detected capacity change from 0 to 512 [ 209.486877][T10041] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.2185: Parent and EA inode have the same ino 15 [ 209.529143][T10058] loop5: detected capacity change from 0 to 128 [ 209.536144][T10041] EXT4-fs (loop2): Remounting filesystem read-only [ 209.568485][T10041] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 209.578903][T10056] loop4: detected capacity change from 0 to 2048 [ 209.586115][T10041] EXT4-fs (loop2): 1 orphan inode deleted [ 209.592700][T10041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.616145][T10060] loop5: detected capacity change from 0 to 512 [ 209.626684][ T3297] loop4: p1 p3 [ 209.632333][ T3297] loop4: p3 start 8388352 is beyond EOD, truncated [ 209.640432][T10041] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2185'. [ 209.644261][T10060] EXT4-fs (loop5): bad geometry: block count 268435520 exceeds size of device (64 blocks) [ 209.661953][T10056] loop4: p1 p3 [ 209.666291][T10056] loop4: p3 start 8388352 is beyond EOD, truncated [ 209.701064][T10056] hub 9-0:1.0: USB hub found [ 209.707424][T10056] hub 9-0:1.0: 8 ports detected [ 209.759276][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 209.777905][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.799017][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 210.007704][T10074] loop5: detected capacity change from 0 to 1024 [ 210.019420][T10074] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 210.029258][T10074] EXT4-fs (loop5): group descriptors corrupted! [ 210.152067][T10078] vhci_hcd: invalid port number 15 [ 210.157286][T10078] vhci_hcd: invalid port number 15 [ 210.278267][T10083] atomic_op ffff88811eca6128 conn xmit_atomic 0000000000000000 [ 210.336158][T10090] loop4: detected capacity change from 0 to 128 [ 210.344578][T10090] vfat: Unknown parameter '' [ 210.359902][T10090] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.370028][T10090] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.393726][T10094] loop0: detected capacity change from 0 to 512 [ 210.409189][T10094] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.2205: Parent and EA inode have the same ino 15 [ 210.422041][T10094] EXT4-fs (loop0): Remounting filesystem read-only [ 210.430937][T10090] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.433537][T10094] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 210.441067][T10090] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.451712][T10094] EXT4-fs (loop0): 1 orphan inode deleted [ 210.468303][T10094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.518858][T10094] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2205'. [ 210.567109][T10090] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.576982][T10090] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.621278][T10104] loop5: detected capacity change from 0 to 2048 [ 210.629223][T10090] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.639533][T10090] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.650813][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.665895][ T3299] loop5: p1 < > p4 [ 210.677217][ T3299] loop5: p4 size 8388608 extends beyond EOD, truncated [ 210.694134][T10104] loop5: p1 < > p4 [ 210.699027][T10104] loop5: p4 size 8388608 extends beyond EOD, truncated [ 210.730743][T10090] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.739165][T10090] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.762509][T10090] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.770818][T10090] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.781543][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 210.784377][T10090] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.792852][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 210.799585][T10090] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.841730][T10090] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.847004][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 210.850132][T10090] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.860163][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 210.908641][T10118] atomic_op ffff88811868e928 conn xmit_atomic 0000000000000000 [ 211.213314][T10138] loop1: detected capacity change from 0 to 512 [ 211.257272][T10138] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.2219: Parent and EA inode have the same ino 15 [ 211.271664][T10138] EXT4-fs (loop1): Remounting filesystem read-only [ 211.282021][T10138] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 211.293664][T10138] EXT4-fs (loop1): 1 orphan inode deleted [ 211.300317][T10138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.335710][T10138] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2219'. [ 211.407802][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.447644][T10143] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2220'. [ 211.457592][T10143] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2220'. [ 211.467002][T10143] 0ªX¹¦D: renamed from gretap0 (while UP) [ 211.476262][T10143] 0ªX¹¦D: entered allmulticast mode [ 211.482405][T10143] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 211.649363][T10145] loop0: detected capacity change from 0 to 2048 [ 211.686521][ T3299] loop0: p1 < > p4 [ 211.694949][ T3299] loop0: p4 size 8388608 extends beyond EOD, truncated [ 211.709143][T10145] loop0: p1 < > p4 [ 211.713192][T10148] loop5: detected capacity change from 0 to 512 [ 211.714777][T10145] loop0: p4 size 8388608 extends beyond EOD, truncated [ 211.748853][T10148] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.2222: Parent and EA inode have the same ino 15 [ 211.762491][T10148] EXT4-fs (loop5): Remounting filesystem read-only [ 211.773202][T10148] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 211.783939][T10148] EXT4-fs (loop5): 1 orphan inode deleted [ 211.791291][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 211.793470][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 211.802594][T10148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.867322][T10154] atomic_op ffff88811920dd28 conn xmit_atomic 0000000000000000 [ 211.905528][T10160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2227'. [ 211.918968][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2227'. [ 211.968627][T10148] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2222'. [ 211.969800][T10165] loop2: detected capacity change from 0 to 1024 [ 211.991477][T10165] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 212.001453][T10165] EXT4-fs (loop2): group descriptors corrupted! [ 212.091705][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 212.105005][T10164] loop0: detected capacity change from 0 to 512 [ 212.120386][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 212.151573][T10164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.165330][T10164] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.217329][T10177] tmpfs: Unknown parameter 'nos÷ap' [ 212.347777][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.432223][ T4378] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.820193][T10195] atomic_op ffff88811ecab928 conn xmit_atomic 0000000000000000 [ 212.879016][T10197] tmpfs: Unknown parameter 'nos÷ap' [ 213.199601][T10207] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2240'. [ 213.351080][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2241'. [ 213.363613][T10209] 9pnet_fd: Insufficient options for proto=fd [ 213.377107][T10209] tipc: Enabling of bearer rejected, already enabled [ 213.429220][T10211] vhci_hcd: invalid port number 15 [ 213.434498][T10211] vhci_hcd: invalid port number 15 [ 213.556971][T10215] vhci_hcd: invalid port number 15 [ 213.562154][T10215] vhci_hcd: invalid port number 15 [ 213.643922][T10221] FAULT_INJECTION: forcing a failure. [ 213.643922][T10221] name failslab, interval 1, probability 0, space 0, times 0 [ 213.656758][T10221] CPU: 0 UID: 0 PID: 10221 Comm: syz.2.2247 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(voluntary) [ 213.656811][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.656828][T10221] Call Trace: [ 213.656836][T10221] [ 213.656847][T10221] __dump_stack+0x1d/0x30 [ 213.656912][T10221] dump_stack_lvl+0xe8/0x140 [ 213.656931][T10221] dump_stack+0x15/0x1b [ 213.656950][T10221] should_fail_ex+0x265/0x280 [ 213.657057][T10221] should_failslab+0x8c/0xb0 [ 213.657086][T10221] kmem_cache_alloc_node_noprof+0x57/0x320 [ 213.657120][T10221] ? __alloc_skb+0x101/0x320 [ 213.657163][T10221] __alloc_skb+0x101/0x320 [ 213.657199][T10221] ? audit_log_start+0x365/0x6c0 [ 213.657310][T10221] audit_log_start+0x380/0x6c0 [ 213.657388][T10221] audit_seccomp+0x48/0x100 [ 213.657415][T10221] ? __seccomp_filter+0x68c/0x10d0 [ 213.657460][T10221] __seccomp_filter+0x69d/0x10d0 [ 213.657490][T10221] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 213.657518][T10221] ? vfs_write+0x75e/0x8e0 [ 213.657540][T10221] ? __rcu_read_unlock+0x4f/0x70 [ 213.657568][T10221] ? __fget_files+0x184/0x1c0 [ 213.657659][T10221] __secure_computing+0x82/0x150 [ 213.657690][T10221] syscall_trace_enter+0xcf/0x1e0 [ 213.657729][T10221] do_syscall_64+0xac/0x200 [ 213.657774][T10221] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.657803][T10221] ? clear_bhb_loop+0x40/0x90 [ 213.657870][T10221] ? clear_bhb_loop+0x40/0x90 [ 213.657899][T10221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.657922][T10221] RIP: 0033:0x7f197800e929 [ 213.657950][T10221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.657969][T10221] RSP: 002b:00007f1976677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 213.657994][T10221] RAX: ffffffffffffffda RBX: 00007f1978235fa0 RCX: 00007f197800e929 [ 213.658010][T10221] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000200000ff5000 [ 213.658027][T10221] RBP: 00007f1976677090 R08: 0000000000000000 R09: 0000000000000000 [ 213.658043][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.658075][T10221] R13: 0000000000000000 R14: 00007f1978235fa0 R15: 00007ffefaa8cc38 [ 213.658100][T10221] [ 213.913098][T10213] loop0: detected capacity change from 0 to 512 [ 213.962073][T10213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.128349][T10231] tmpfs: Unknown parameter 'nos÷ap' [ 214.429349][T10234] tmpfs: Unknown parameter 'nos÷ap' [ 214.465382][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 214.465402][ T29] audit: type=1400 audit(1749431466.023:31458): avc: denied { create } for pid=10222 comm="syz.1.2246" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 214.517623][T10213] ext4 filesystem being mounted at /454/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.773260][T10237] atomic_op ffff88811920fd28 conn xmit_atomic 0000000000000000 [ 214.803171][ T29] audit: type=1400 audit(1749431466.413:31459): avc: denied { mount } for pid=10212 comm="syz.0.2243" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 214.825244][ T29] audit: type=1400 audit(1749431466.663:31460): avc: denied { create } for pid=10236 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.839982][T10239] loop2: detected capacity change from 0 to 512 [ 214.845217][ T29] audit: type=1400 audit(1749431466.663:31461): avc: denied { bind } for pid=10236 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.871006][ T29] audit: type=1400 audit(1749431466.663:31462): avc: denied { write } for pid=10236 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.940217][ T29] audit: type=1400 audit(1749431466.803:31463): avc: denied { create } for pid=10240 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.960245][ T29] audit: type=1400 audit(1749431466.803:31464): avc: denied { setopt } for pid=10240 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.980544][ T29] audit: type=1400 audit(1749431466.813:31465): avc: denied { create } for pid=10240 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 215.000471][ T29] audit: type=1400 audit(1749431466.853:31466): avc: denied { setopt } for pid=10240 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 215.020982][ T29] audit: type=1400 audit(1749431466.853:31467): avc: denied { create } for pid=10240 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.035922][T10239] EXT4-fs (loop2): bad geometry: block count 268435520 exceeds size of device (64 blocks) [ 215.050590][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.129210][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2253'. [ 215.414933][T10253] loop2: detected capacity change from 0 to 1024 [ 215.423490][T10253] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 215.433277][T10253] EXT4-fs (loop2): group descriptors corrupted! [ 216.434746][T10277] tmpfs: Unknown parameter 'nos÷ap' [ 216.955915][T10280] loop2: detected capacity change from 0 to 512 [ 216.962463][T10290] loop1: detected capacity change from 0 to 2048 [ 216.978197][T10280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.993626][T10280] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.022027][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.085919][ T3536] loop1: p1 < > p4 [ 217.093395][ T3536] loop1: p4 size 8388608 extends beyond EOD, truncated [ 217.122806][T10290] loop1: p1 < > p4 [ 217.127403][T10290] loop1: p4 size 8388608 extends beyond EOD, truncated [ 217.147446][T10299] loop2: detected capacity change from 0 to 128 [ 217.209402][T10299] bio_check_eod: 47 callbacks suppressed [ 217.209420][T10299] syz.2.2268: attempt to access beyond end of device [ 217.209420][T10299] loop2: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 217.220812][T10301] loop5: detected capacity change from 0 to 512 [ 217.262711][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 217.264058][T10299] syz.2.2268: attempt to access beyond end of device [ 217.264058][T10299] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 217.277177][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 217.286022][T10299] buffer_io_error: 44 callbacks suppressed [ 217.286076][T10299] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 217.299067][T10301] EXT4-fs: quotafile must be on filesystem root [ 217.343836][T10299] syz.2.2268: attempt to access beyond end of device [ 217.343836][T10299] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 217.357457][T10299] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 217.400006][T10305] loop5: detected capacity change from 0 to 512 [ 217.415874][T10299] syz.2.2268: attempt to access beyond end of device [ 217.415874][T10299] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 217.429494][T10299] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 217.452436][T10299] syz.2.2268: attempt to access beyond end of device [ 217.452436][T10299] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 217.466083][T10299] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 217.475592][T10305] EXT4-fs: Ignoring removed orlov option [ 217.488661][T10305] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.2270: casefold flag without casefold feature [ 217.501052][T10299] syz.2.2268: attempt to access beyond end of device [ 217.501052][T10299] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 217.514870][T10299] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 217.525356][T10305] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2270: couldn't read orphan inode 15 (err -117) [ 217.548290][T10310] loop4: detected capacity change from 0 to 512 [ 217.555463][T10299] syz.2.2268: attempt to access beyond end of device [ 217.555463][T10299] loop2: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 217.569015][T10299] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 217.578009][T10299] syz.2.2268: attempt to access beyond end of device [ 217.578009][T10299] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 217.589175][T10305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.591576][T10299] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 217.616393][T10299] syz.2.2268: attempt to access beyond end of device [ 217.616393][T10299] loop2: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 217.630148][T10299] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 217.630256][T10313] loop1: detected capacity change from 0 to 2048 [ 217.646458][T10299] syz.2.2268: attempt to access beyond end of device [ 217.646458][T10299] loop2: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 217.653028][T10310] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.2273: Parent and EA inode have the same ino 15 [ 217.660266][T10299] Buffer I/O error on dev loop2, logical block 150, lost async page write [ 217.681652][T10299] Buffer I/O error on dev loop2, logical block 151, lost async page write [ 217.692050][T10310] EXT4-fs (loop4): Remounting filesystem read-only [ 217.701512][ T3299] loop1: p1 p3 [ 217.709845][T10310] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 217.732651][ T3299] loop1: p3 start 8388352 is beyond EOD, truncated [ 217.750699][T10313] loop1: p1 p3 [ 217.752780][T10310] EXT4-fs (loop4): 1 orphan inode deleted [ 217.754705][T10313] loop1: p3 start 8388352 is beyond EOD, truncated [ 217.768670][T10316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.775935][T10316] IPv6: NLM_F_CREATE should be set when creating new route [ 217.783229][T10316] IPv6: NLM_F_CREATE should be set when creating new route [ 217.787557][T10310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.790476][T10316] IPv6: NLM_F_CREATE should be set when creating new route [ 217.849130][T10313] hub 9-0:1.0: USB hub found [ 217.854141][T10313] hub 9-0:1.0: 8 ports detected [ 217.914053][T10310] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2273'. [ 217.955642][T10327] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2278'. [ 218.065468][ T4378] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.095007][T10334] tmpfs: Unknown parameter 'nos÷ap' [ 219.188380][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.471070][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2284'. [ 219.482543][T10348] loop0: detected capacity change from 0 to 128 [ 219.495530][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 219.495548][ T29] audit: type=1326 audit(1749431471.393:31879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10315 comm="syz.2.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197800e929 code=0x7ffc0000 [ 219.540150][T10352] geneve2: entered promiscuous mode [ 219.545534][T10352] geneve2: entered allmulticast mode [ 219.553163][T10349] 9pnet_fd: Insufficient options for proto=fd [ 219.553611][ T29] audit: type=1326 audit(1749431471.393:31880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10315 comm="syz.2.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197800e929 code=0x7ffc0000 [ 219.597947][T10349] tipc: Enabling of bearer rejected, already enabled [ 219.627894][T10354] loop4: detected capacity change from 0 to 512 [ 219.714146][ T29] audit: type=1404 audit(1749431471.453:31881): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 219.729356][ T29] audit: type=1404 audit(1749431471.483:31882): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 219.744463][ T29] audit: type=1400 audit(1749431471.483:31883): avc: denied { mounton } for pid=10344 comm="syz.1.2284" path="/441/file1" dev="tmpfs" ino=2470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 219.767411][ T29] audit: type=1400 audit(1749431471.483:31884): avc: denied { create } for pid=10344 comm="syz.1.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.788106][ T29] audit: type=1400 audit(1749431471.483:31885): avc: denied { write } for pid=10344 comm="syz.1.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.809009][ T29] audit: type=1400 audit(1749431471.483:31886): avc: denied { read } for pid=10344 comm="syz.1.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.829488][ T29] audit: type=1400 audit(1749431471.503:31887): avc: denied { write } for pid=10344 comm="syz.1.2284" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 219.843770][T10362] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.864380][T10354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 219.913443][T10354] EXT4-fs (loop4): 1 truncate cleaned up [ 219.944641][T10354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.961743][T10367] loop0: detected capacity change from 0 to 2048 [ 219.971401][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2282'. [ 220.015605][ T3299] loop0: p1 p3 [ 220.021816][ T3299] loop0: p3 start 8388352 is beyond EOD, truncated [ 220.037428][T10367] loop0: p1 p3 [ 220.043254][T10367] loop0: p3 start 8388352 is beyond EOD, truncated [ 220.064042][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.125978][T10367] hub 9-0:1.0: USB hub found [ 220.142494][T10367] hub 9-0:1.0: 8 ports detected [ 220.230352][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2298'. [ 220.249485][T10395] 9pnet_fd: Insufficient options for proto=fd [ 220.272113][T10395] tipc: Enabling of bearer rejected, already enabled [ 220.290783][T10397] loop1: detected capacity change from 0 to 2048 [ 220.307736][T10400] loop2: detected capacity change from 0 to 2048 [ 220.336504][ T3299] loop1: p1 < > p4 [ 220.342125][ T3299] loop1: p4 size 8388608 extends beyond EOD, truncated [ 220.352175][T10397] loop1: p1 < > p4 [ 220.357170][T10397] loop1: p4 size 8388608 extends beyond EOD, truncated [ 220.370389][ T3297] loop2: p1 p3 [ 220.375365][ T3297] loop2: p3 start 8388352 is beyond EOD, truncated [ 220.392300][T10400] loop2: p1 p3 [ 220.404578][ T2998] loop1: p1 < > p4 [ 220.409915][T10400] loop2: p3 start 8388352 is beyond EOD, truncated [ 220.417230][ T2998] loop1: p4 size 8388608 extends beyond EOD, truncated [ 220.473808][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 220.485484][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 220.503987][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 220.515500][T10412] hub 9-0:1.0: USB hub found [ 220.522984][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 220.536502][T10412] hub 9-0:1.0: 8 ports detected [ 220.623599][T10420] loop5: detected capacity change from 0 to 512 [ 220.652403][T10420] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.2310: Parent and EA inode have the same ino 15 [ 220.665466][T10420] EXT4-fs (loop5): Remounting filesystem read-only [ 220.682377][T10420] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 220.692911][T10420] EXT4-fs (loop5): 1 orphan inode deleted [ 220.701796][T10420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.730151][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2314'. [ 220.739418][T10430] loop2: detected capacity change from 0 to 512 [ 220.747908][T10432] 9pnet_fd: Insufficient options for proto=fd [ 220.763155][T10430] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.2315: Parent and EA inode have the same ino 15 [ 220.788287][T10432] tipc: Enabling of bearer rejected, already enabled [ 220.796246][T10430] EXT4-fs (loop2): Remounting filesystem read-only [ 220.806814][T10420] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2310'. [ 220.808877][T10430] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 220.826583][T10430] EXT4-fs (loop2): 1 orphan inode deleted [ 220.833911][T10430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.859994][T10436] loop1: detected capacity change from 0 to 512 [ 220.870666][T10430] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2315'. [ 220.892595][T10436] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.2316: Parent and EA inode have the same ino 15 [ 220.905290][T10436] EXT4-fs (loop1): Remounting filesystem read-only [ 220.915609][T10436] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 220.926114][T10436] EXT4-fs (loop1): 1 orphan inode deleted [ 220.932427][T10436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.956656][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.968902][ T4378] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.992830][T10436] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2316'. [ 221.000744][T10442] loop2: detected capacity change from 0 to 512 [ 221.031134][T10444] loop5: detected capacity change from 0 to 2048 [ 221.041239][T10442] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.2317: Parent and EA inode have the same ino 15 [ 221.054818][T10442] EXT4-fs (loop2): Remounting filesystem read-only [ 221.068207][T10442] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 221.078532][T10442] EXT4-fs (loop2): 1 orphan inode deleted [ 221.087869][T10444] loop5: p1 < > p4 [ 221.092134][T10442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.112608][T10444] loop5: p4 size 8388608 extends beyond EOD, truncated [ 221.129160][T10442] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2317'. [ 221.134240][ T2998] loop5: p1 < > p4 [ 221.143143][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.152372][ T2998] loop5: p4 size 8388608 extends beyond EOD, truncated [ 221.160075][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.230128][T10453] loop4: detected capacity change from 0 to 128 [ 221.261678][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 221.276710][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 221.317658][T10455] loop2: detected capacity change from 0 to 512 [ 221.323716][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 221.348901][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 221.401356][T10455] EXT4-fs (loop2): bad geometry: block count 268435520 exceeds size of device (64 blocks) [ 221.426146][T10464] 9pnet_fd: Insufficient options for proto=fd [ 221.447131][T10464] tipc: Enabling of bearer rejected, already enabled [ 221.458941][T10466] loop0: detected capacity change from 0 to 2048 [ 221.578330][T10474] loop2: detected capacity change from 0 to 1024 [ 221.599985][T10474] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 221.609843][T10474] EXT4-fs (loop2): group descriptors corrupted! [ 221.610710][T10466] loop0: p1 p3 [ 221.625141][T10478] loop4: detected capacity change from 0 to 128 [ 221.637339][T10466] loop0: p3 start 8388352 is beyond EOD, truncated [ 221.914059][T10484] hub 9-0:1.0: USB hub found [ 221.947110][T10484] hub 9-0:1.0: 8 ports detected [ 221.967047][T10486] loop4: detected capacity change from 0 to 1024 [ 222.008780][T10486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.033775][T10486] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.089961][T10486] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 222.167147][T10486] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 8 with error 28 [ 222.179544][T10486] EXT4-fs (loop4): This should not happen!! Data will be lost [ 222.179544][T10486] [ 222.189305][T10486] EXT4-fs (loop4): Total free blocks count 0 [ 222.195603][T10486] EXT4-fs (loop4): Free/Dirty block details [ 222.201741][T10486] EXT4-fs (loop4): free_blocks=4293918736 [ 222.207633][T10486] EXT4-fs (loop4): dirty_blocks=16 [ 222.212791][T10486] EXT4-fs (loop4): Block reservation details [ 222.218933][T10486] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 222.290342][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.505288][T10504] tmpfs: Unknown parameter 'nos÷ap' [ 222.891078][T10518] vhci_hcd: invalid port number 15 [ 222.896383][T10518] vhci_hcd: invalid port number 15 [ 222.974348][T10522] __nla_validate_parse: 2 callbacks suppressed [ 222.974362][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 223.255141][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'. [ 223.454179][T10529] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2347'. [ 224.088230][T10540] loop2: detected capacity change from 0 to 128 [ 224.123852][T10540] bio_check_eod: 66 callbacks suppressed [ 224.123872][T10540] syz.2.2351: attempt to access beyond end of device [ 224.123872][T10540] loop2: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 224.154100][T10545] loop0: detected capacity change from 0 to 512 [ 224.165382][T10546] vhci_hcd: invalid port number 15 [ 224.171117][T10546] vhci_hcd: invalid port number 15 [ 224.173158][T10540] syz.2.2351: attempt to access beyond end of device [ 224.173158][T10540] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 224.190374][T10540] buffer_io_error: 62 callbacks suppressed [ 224.190389][T10540] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 224.197754][T10545] EXT4-fs (loop0): bad geometry: block count 268435520 exceeds size of device (64 blocks) [ 224.224527][T10540] syz.2.2351: attempt to access beyond end of device [ 224.224527][T10540] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 224.238342][T10540] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 224.379005][T10540] syz.2.2351: attempt to access beyond end of device [ 224.379005][T10540] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 224.392494][T10540] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 224.412417][T10540] syz.2.2351: attempt to access beyond end of device [ 224.412417][T10540] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 224.426101][T10540] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 224.467492][T10552] tmpfs: Unknown parameter 'nos÷ap' [ 224.517736][T10540] syz.2.2351: attempt to access beyond end of device [ 224.517736][T10540] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 224.531299][T10540] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 224.549870][T10554] loop4: detected capacity change from 0 to 128 [ 224.657449][T10554] syz.4.2356: attempt to access beyond end of device [ 224.657449][T10554] loop4: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 224.740486][T10540] syz.2.2351: attempt to access beyond end of device [ 224.740486][T10540] loop2: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 224.754101][T10540] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 224.768933][T10554] syz.4.2356: attempt to access beyond end of device [ 224.768933][T10554] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 224.782437][T10554] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 224.828555][T10540] syz.2.2351: attempt to access beyond end of device [ 224.828555][T10540] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 224.842251][T10540] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 224.853838][ T29] kauditd_printk_skb: 1165 callbacks suppressed [ 224.853854][ T29] audit: type=1326 audit(1749431476.743:33051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 224.868507][T10554] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 224.884240][ T29] audit: type=1326 audit(1749431476.743:33052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 224.893008][T10540] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 224.916308][ T29] audit: type=1326 audit(1749431476.743:33053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 224.949513][ T29] audit: type=1326 audit(1749431476.743:33054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 224.973338][ T29] audit: type=1326 audit(1749431476.743:33055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 224.997387][ T29] audit: type=1326 audit(1749431476.743:33056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 225.021236][ T29] audit: type=1326 audit(1749431476.743:33057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 225.045221][ T29] audit: type=1326 audit(1749431476.743:33058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 225.071854][ T29] audit: type=1326 audit(1749431476.833:33059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 225.095624][ T29] audit: type=1326 audit(1749431476.833:33060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 225.127773][T10562] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2357'. [ 225.136995][T10562] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2357'. [ 225.146135][T10562] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2357'. [ 225.157394][T10562] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2357'. [ 225.211216][T10565] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2358'. [ 225.242574][T10561] loop0: detected capacity change from 0 to 1024 [ 225.280840][T10561] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 225.290719][T10561] EXT4-fs (loop0): group descriptors corrupted! [ 225.353407][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2361'. [ 225.736256][T10578] loop5: detected capacity change from 0 to 2048 [ 225.786835][ T3299] loop5: p1 p3 [ 225.792420][ T3299] loop5: p3 start 8388352 is beyond EOD, truncated [ 225.832280][T10578] loop5: p1 p3 [ 225.845610][T10578] loop5: p3 start 8388352 is beyond EOD, truncated [ 225.972143][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 226.101812][T10586] vhci_hcd: invalid port number 15 [ 226.107624][T10586] vhci_hcd: invalid port number 15 [ 226.165730][T10592] vhci_hcd: invalid port number 224 [ 226.177332][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 226.284013][T10594] loop1: detected capacity change from 0 to 512 [ 226.315976][T10594] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.2369: Parent and EA inode have the same ino 15 [ 226.365561][T10601] tmpfs: Unknown parameter 'nos÷ap' [ 226.457244][T10594] EXT4-fs (loop1): Remounting filesystem read-only [ 226.467769][T10594] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 226.482276][T10594] EXT4-fs (loop1): 1 orphan inode deleted [ 226.520589][T10603] loop5: detected capacity change from 0 to 128 [ 226.623283][T10594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.846925][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.887073][T10615] loop5: detected capacity change from 0 to 512 [ 226.894394][T10615] EXT4-fs (loop5): bad geometry: block count 268435520 exceeds size of device (64 blocks) [ 227.226682][T10628] loop5: detected capacity change from 0 to 1024 [ 227.245219][T10628] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 227.255529][T10628] EXT4-fs (loop5): group descriptors corrupted! [ 228.220823][T10645] loop4: detected capacity change from 0 to 512 [ 228.279023][T10645] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.2384: Parent and EA inode have the same ino 15 [ 228.351563][T10645] EXT4-fs (loop4): Remounting filesystem read-only [ 228.391181][T10645] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 228.439593][T10645] EXT4-fs (loop4): 1 orphan inode deleted [ 228.460118][T10645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.566241][T10645] __nla_validate_parse: 1 callbacks suppressed [ 228.566263][T10645] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2384'. [ 228.611336][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.791331][T10666] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2391'. [ 228.937233][T10667] tmpfs: Unknown parameter 'nos÷ap' [ 229.784975][T10670] loop2: detected capacity change from 0 to 512 [ 229.822173][T10670] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.2392: Parent and EA inode have the same ino 15 [ 229.864448][T10676] loop0: detected capacity change from 0 to 2048 [ 229.874747][T10670] EXT4-fs (loop2): Remounting filesystem read-only [ 229.879328][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 229.879370][ T29] audit: type=1326 audit(1749431481.773:33279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.5.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 229.911132][ T29] audit: type=1326 audit(1749431481.773:33280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.5.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 229.916863][T10670] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 229.935022][ T29] audit: type=1326 audit(1749431481.773:33281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.5.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 229.969397][ T29] audit: type=1326 audit(1749431481.773:33282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.5.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 229.970025][T10670] EXT4-fs (loop2): 1 orphan inode deleted [ 230.004581][T10670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.030811][ T29] audit: type=1326 audit(1749431481.843:33283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.5.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 230.052648][ T2998] loop0: p1 p3 [ 230.054567][ T29] audit: type=1326 audit(1749431481.843:33284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.5.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 230.081911][ T29] audit: type=1326 audit(1749431481.843:33285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.5.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 230.105941][ T29] audit: type=1326 audit(1749431481.843:33286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.5.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 230.129891][ T29] audit: type=1326 audit(1749431481.843:33287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.5.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 230.133956][T10673] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2392'. [ 230.154304][ T29] audit: type=1326 audit(1749431481.843:33288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.5.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 230.163884][ T2998] loop0: p3 start 8388352 is beyond EOD, truncated [ 230.221002][ T2998] loop0: p1 p3 [ 230.225384][ T2998] loop0: p3 start 8388352 is beyond EOD, truncated [ 230.234755][T10676] loop0: p1 p3 [ 230.239499][T10676] loop0: p3 start 8388352 is beyond EOD, truncated [ 230.247210][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2395'. [ 230.270144][ T2998] loop0: p1 p3 [ 230.276975][ T2998] loop0: p3 start 8388352 is beyond EOD, truncated [ 230.288768][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.328359][T10696] loop0: detected capacity change from 0 to 512 [ 230.343804][T10696] EXT4-fs (loop0): bad geometry: block count 268435520 exceeds size of device (64 blocks) [ 230.365344][T10698] x_tables: duplicate underflow at hook 2 [ 230.382041][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 230.419350][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 230.456274][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 230.474443][T10700] loop2: detected capacity change from 0 to 2048 [ 230.488142][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 230.535571][ T3536] loop2: p1 p3 [ 230.539811][ T3536] loop2: p3 start 8388352 is beyond EOD, truncated [ 230.548181][T10700] loop2: p1 p3 [ 230.552462][T10700] loop2: p3 start 8388352 is beyond EOD, truncated [ 230.690948][T10703] loop0: detected capacity change from 0 to 1024 [ 230.699248][T10703] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 230.709225][T10703] EXT4-fs (loop0): group descriptors corrupted! [ 230.717458][T10704] hub 9-0:1.0: USB hub found [ 230.741210][T10704] hub 9-0:1.0: 8 ports detected [ 230.908349][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 230.927118][T10707] loop2: detected capacity change from 0 to 2048 [ 230.951929][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2403'. [ 231.024990][T10717] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2406'. [ 231.059423][ T3536] loop2: p1 < > p4 [ 231.076243][T10720] loop4: detected capacity change from 0 to 2048 [ 231.082988][ T3536] loop2: p4 size 8388608 extends beyond EOD, truncated [ 231.093977][T10707] loop2: p1 < > p4 [ 231.099615][T10707] loop2: p4 size 8388608 extends beyond EOD, truncated [ 231.116505][ T3299] loop4: p1 p3 [ 231.168111][ T3299] loop4: p3 start 8388352 is beyond EOD, truncated [ 231.178423][T10725] tmpfs: Unknown parameter 'nos÷ap' [ 231.341315][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 231.366202][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 231.441703][T10732] hub 9-0:1.0: USB hub found [ 231.515023][T10732] hub 9-0:1.0: 8 ports detected [ 231.569971][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 231.595626][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 231.608497][T10720] loop4: p1 p3 [ 231.612836][T10720] loop4: p3 start 8388352 is beyond EOD, truncated [ 231.676558][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 231.691482][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 231.754989][T10747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.790462][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2417'. [ 231.857069][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2419'. [ 231.949520][T10760] loop1: detected capacity change from 0 to 8192 [ 231.958656][T10760] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.131411][T10766] loop5: detected capacity change from 0 to 2048 [ 232.195363][ T2998] loop5: p1 p3 [ 232.203769][ T2998] loop5: p3 start 8388352 is beyond EOD, truncated [ 232.214504][T10766] loop5: p1 p3 [ 232.218772][T10766] loop5: p3 start 8388352 is beyond EOD, truncated [ 232.248467][ T2998] loop5: p1 p3 [ 232.260759][ T2998] loop5: p3 start 8388352 is beyond EOD, truncated [ 232.286924][T10773] hub 9-0:1.0: USB hub found [ 232.298649][T10773] hub 9-0:1.0: 8 ports detected [ 232.328338][T10768] loop1: detected capacity change from 0 to 512 [ 232.352469][T10768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.384819][T10768] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.425738][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 232.455070][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 232.546576][T10783] sctp: [Deprecated]: syz.2.2428 (pid 10783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.546576][T10783] Use struct sctp_sack_info instead [ 232.563781][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2429'. [ 232.680894][T10791] loop2: detected capacity change from 0 to 128 [ 232.687788][T10791] vfat: Unknown parameter '' [ 232.705945][T10791] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.733680][T10779] loop5: detected capacity change from 0 to 512 [ 232.760198][T10791] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.791466][T10779] EXT4-fs (loop5): 1 orphan inode deleted [ 232.805475][ T85] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 232.823655][T10797] loop0: detected capacity change from 0 to 8192 [ 232.823976][T10779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.844633][T10791] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.848990][T10802] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2436'. [ 232.861319][T10779] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.872481][T10797] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.914640][T10779] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 232.928710][T10791] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.975583][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.993813][T10791] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.006119][T10791] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.050588][T10791] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.089040][T10791] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.229244][T10816] loop0: detected capacity change from 0 to 2048 [ 233.285649][T10816] loop0: p1 p3 [ 233.290393][T10816] loop0: p3 start 8388352 is beyond EOD, truncated [ 233.394263][ T4378] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.630205][T10842] loop0: detected capacity change from 0 to 512 [ 233.696617][T10842] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.2451: Parent and EA inode have the same ino 15 [ 233.719739][T10842] EXT4-fs (loop0): Remounting filesystem read-only [ 233.729541][T10842] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 233.740422][T10842] EXT4-fs (loop0): 1 orphan inode deleted [ 233.746766][T10842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.768927][T10843] loop5: detected capacity change from 0 to 512 [ 233.800492][T10842] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2451'. [ 233.814185][T10843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.829739][T10843] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.888791][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.927264][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2452'. [ 234.053922][T10859] loop1: detected capacity change from 0 to 2048 [ 234.138652][T10859] loop1: p1 p3 [ 234.143220][T10859] loop1: p3 start 8388352 is beyond EOD, truncated [ 234.753519][T10865] tmpfs: Unknown parameter 'nos÷ap' [ 234.813057][T10866] tmpfs: Unknown parameter 'nos÷ap' [ 235.131291][ T29] kauditd_printk_skb: 545 callbacks suppressed [ 235.131310][ T29] audit: type=1326 audit(1749431487.023:33833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 235.183130][ T4378] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.184430][ T29] audit: type=1326 audit(1749431487.053:33834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 235.216190][ T29] audit: type=1326 audit(1749431487.053:33835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 235.244807][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 235.281037][ T29] audit: type=1326 audit(1749431487.153:33836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 235.305109][ T29] audit: type=1326 audit(1749431487.153:33837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 235.329112][ T29] audit: type=1326 audit(1749431487.163:33838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 235.352830][ T29] audit: type=1326 audit(1749431487.163:33839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 235.376785][ T29] audit: type=1326 audit(1749431487.163:33840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 235.400619][ T29] audit: type=1326 audit(1749431487.163:33841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 235.424690][ T29] audit: type=1326 audit(1749431487.163:33842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 235.467283][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2464'. [ 235.513839][T10892] loop5: detected capacity change from 0 to 512 [ 235.516436][T10892] EXT4-fs (loop5): bad geometry: block count 268435520 exceeds size of device (64 blocks) [ 235.593236][T10899] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 235.713508][T10904] loop4: detected capacity change from 0 to 2048 [ 235.756573][T10904] loop4: p1 < > p4 [ 235.761615][T10904] loop4: p4 size 8388608 extends beyond EOD, truncated [ 235.790253][T10908] loop0: detected capacity change from 0 to 512 [ 235.813294][T10908] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.2470: Parent and EA inode have the same ino 15 [ 235.835363][T10908] EXT4-fs (loop0): Remounting filesystem read-only [ 235.959409][T10914] loop5: detected capacity change from 0 to 1024 [ 235.976767][T10908] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 235.991882][T10908] EXT4-fs (loop0): 1 orphan inode deleted [ 236.011331][T10908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.094940][T10914] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 236.104894][T10914] EXT4-fs (loop5): group descriptors corrupted! [ 236.134329][T10908] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2470'. [ 236.350692][T10922] tmpfs: Unknown parameter 'nos÷ap' [ 236.436750][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.621856][T10925] loop1: detected capacity change from 0 to 512 [ 236.671971][T10925] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.2475: Parent and EA inode have the same ino 15 [ 236.722802][T10925] EXT4-fs (loop1): Remounting filesystem read-only [ 236.746472][T10932] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2474'. [ 236.843663][T10925] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 236.905149][T10925] EXT4-fs (loop1): 1 orphan inode deleted [ 236.911497][T10925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.013407][T10936] loop2: detected capacity change from 0 to 8192 [ 237.022159][T10936] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.341941][T10943] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2475'. [ 237.506222][T10947] loop4: detected capacity change from 0 to 2048 [ 237.535945][T10933] loop4: p1 < > p4 [ 237.549252][T10933] loop4: p4 size 8388608 extends beyond EOD, truncated [ 237.565700][T10947] loop4: p1 < > p4 [ 237.572799][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.574553][T10947] loop4: p4 size 8388608 extends beyond EOD, truncated [ 237.774062][T10952] loop5: detected capacity change from 0 to 512 [ 237.792583][T10962] loop4: detected capacity change from 0 to 2048 [ 237.801389][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 237.842253][T10933] loop4: p1 p3 [ 237.843393][T10952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.846955][T10933] loop4: p3 start 8388352 is beyond EOD, truncated [ 237.888438][T10962] loop4: p1 p3 [ 237.893301][T10962] loop4: p3 start 8388352 is beyond EOD, truncated [ 237.926158][T10952] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.944972][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 238.053924][T10933] udevd[10933]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 238.106972][T10933] udevd[10933]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 238.154095][T10974] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 238.284111][T10972] loop4: detected capacity change from 0 to 512 [ 238.340378][T10972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.359945][T10972] ext4 filesystem being mounted at /517/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.392219][T10972] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2488: corrupted inode contents [ 238.425201][T10972] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.2488: mark_inode_dirty error [ 238.470809][T10972] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2488: corrupted inode contents [ 238.492388][T10972] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2488: mark_inode_dirty error [ 238.534734][ T4378] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.564993][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.617721][T10985] loop5: detected capacity change from 0 to 512 [ 238.638651][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2495'. [ 238.657348][T10994] loop2: detected capacity change from 0 to 2048 [ 238.661877][T10985] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.2492: Parent and EA inode have the same ino 15 [ 238.705469][T10985] EXT4-fs (loop5): Remounting filesystem read-only [ 238.728130][T10985] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 238.739722][T10985] EXT4-fs (loop5): 1 orphan inode deleted [ 238.746781][T10985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.760601][ T3299] loop2: p1 < > p4 [ 238.765170][ T3299] loop2: p4 size 8388608 extends beyond EOD, truncated [ 238.794045][T10994] loop2: p1 < > p4 [ 238.804016][T10994] loop2: p4 size 8388608 extends beyond EOD, truncated [ 238.818923][T10985] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2492'. [ 238.835679][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 238.848194][T10933] udevd[10933]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 238.866521][T10933] udevd[10933]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 238.869994][T11003] loop2: detected capacity change from 0 to 128 [ 238.877332][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 238.909472][T11003] bio_check_eod: 47 callbacks suppressed [ 238.909491][T11003] syz.2.2499: attempt to access beyond end of device [ 238.909491][T11003] loop2: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 238.928993][T11003] syz.2.2499: attempt to access beyond end of device [ 238.928993][T11003] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 238.943675][T11003] buffer_io_error: 44 callbacks suppressed [ 238.943688][T11003] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 238.959774][T11003] syz.2.2499: attempt to access beyond end of device [ 238.959774][T11003] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 238.973353][T11003] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 238.982855][T11003] syz.2.2499: attempt to access beyond end of device [ 238.982855][T11003] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 238.996456][T11003] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 239.005369][T11003] syz.2.2499: attempt to access beyond end of device [ 239.005369][T11003] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 239.006408][ T4378] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.018799][T11003] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 239.019209][T11003] syz.2.2499: attempt to access beyond end of device [ 239.019209][T11003] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 239.050456][T11003] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 239.064604][T11007] loop5: detected capacity change from 0 to 2048 [ 239.072710][T11003] syz.2.2499: attempt to access beyond end of device [ 239.072710][T11003] loop2: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 239.086269][T11003] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 239.097000][T11003] syz.2.2499: attempt to access beyond end of device [ 239.097000][T11003] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 239.110531][T11003] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 239.121577][T11007] loop5: p1 p3 [ 239.125129][T11003] syz.2.2499: attempt to access beyond end of device [ 239.125129][T11003] loop2: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 239.126122][T11007] loop5: p3 start 8388352 is beyond EOD, [ 239.139085][T11003] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 239.150468][T11003] syz.2.2499: attempt to access beyond end of device [ 239.150468][T11003] loop2: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 239.153477][T11007] truncated [ 239.167141][T11003] Buffer I/O error on dev loop2, logical block 150, lost async page write [ 239.197621][T11003] Buffer I/O error on dev loop2, logical block 151, lost async page write [ 239.208757][T11011] cgroup: name respecified [ 239.251456][T11007] hub 9-0:1.0: USB hub found [ 239.256581][T11007] hub 9-0:1.0: 8 ports detected [ 239.334537][T11023] 9pnet_fd: Insufficient options for proto=fd [ 239.356226][T11026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.366952][T11028] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2509'. [ 240.335236][T11048] tmpfs: Unknown parameter 'nos÷ap' [ 240.406442][T11049] tmpfs: Unknown parameter 'nos÷ap' [ 240.690819][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 240.690839][ T29] audit: type=1400 audit(1749431492.283:34002): avc: denied { create } for pid=11038 comm="syz.2.2514" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 240.942356][T11056] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11056 comm=syz.2.2518 [ 240.959413][ T29] audit: type=1400 audit(1749431492.833:34003): avc: denied { name_bind } for pid=11052 comm="syz.5.2517" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 240.982205][ T29] audit: type=1400 audit(1749431492.833:34004): avc: denied { node_bind } for pid=11052 comm="syz.5.2517" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 240.990966][T11056] FAULT_INJECTION: forcing a failure. [ 240.990966][T11056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.018551][T11056] CPU: 1 UID: 0 PID: 11056 Comm: syz.2.2518 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(voluntary) [ 241.018589][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.018604][T11056] Call Trace: [ 241.018670][T11056] [ 241.018678][T11056] __dump_stack+0x1d/0x30 [ 241.018705][T11056] dump_stack_lvl+0xe8/0x140 [ 241.018736][T11056] dump_stack+0x15/0x1b [ 241.018756][T11056] should_fail_ex+0x265/0x280 [ 241.018865][T11056] should_fail+0xb/0x20 [ 241.018896][T11056] should_fail_usercopy+0x1a/0x20 [ 241.018917][T11056] _copy_to_user+0x20/0xa0 [ 241.018945][T11056] simple_read_from_buffer+0xb5/0x130 [ 241.019009][T11056] proc_fail_nth_read+0x100/0x140 [ 241.019099][T11056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.019126][T11056] vfs_read+0x19d/0x6f0 [ 241.019149][T11056] ? __rcu_read_unlock+0x4f/0x70 [ 241.019175][T11056] ? __fget_files+0x184/0x1c0 [ 241.019199][T11056] ksys_read+0xda/0x1a0 [ 241.019296][T11056] __x64_sys_read+0x40/0x50 [ 241.019321][T11056] x64_sys_call+0x2d77/0x2fb0 [ 241.019391][T11056] do_syscall_64+0xd2/0x200 [ 241.019419][T11056] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.019532][T11056] ? clear_bhb_loop+0x40/0x90 [ 241.019560][T11056] ? clear_bhb_loop+0x40/0x90 [ 241.019659][T11056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.019688][T11056] RIP: 0033:0x7f197800d33c [ 241.019704][T11056] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 241.019729][T11056] RSP: 002b:00007f1976677030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.019748][T11056] RAX: ffffffffffffffda RBX: 00007f1978235fa0 RCX: 00007f197800d33c [ 241.019763][T11056] RDX: 000000000000000f RSI: 00007f19766770a0 RDI: 0000000000000004 [ 241.019779][T11056] RBP: 00007f1976677090 R08: 0000000000000000 R09: 0000000000000000 [ 241.019807][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.019822][T11056] R13: 0000000000000000 R14: 00007f1978235fa0 R15: 00007ffefaa8cc38 [ 241.019847][T11056] [ 241.236747][T11061] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2521'. [ 241.281784][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'. [ 241.302939][ T29] audit: type=1400 audit(1749431493.193:34005): avc: denied { create } for pid=11064 comm="syz.5.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 241.337870][T11063] bridge0: entered promiscuous mode [ 241.351631][ T29] audit: type=1326 audit(1749431493.243:34006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4868e929 code=0x7ffc0000 [ 241.351663][ T29] audit: type=1326 audit(1749431493.243:34007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4868e929 code=0x7ffc0000 [ 241.351759][ T29] audit: type=1326 audit(1749431493.243:34008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2a4868e929 code=0x7ffc0000 [ 241.351795][ T29] audit: type=1326 audit(1749431493.243:34009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4868e929 code=0x7ffc0000 [ 241.351830][ T29] audit: type=1326 audit(1749431493.243:34010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4868e929 code=0x7ffc0000 [ 241.381821][ T29] audit: type=1326 audit(1749431493.273:34011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2a4868e929 code=0x7ffc0000 [ 241.388920][T11063] bridge0: left promiscuous mode [ 241.392102][T11070] loop0: detected capacity change from 0 to 1024 [ 241.589494][T11070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.609952][T11065] FAULT_INJECTION: forcing a failure. [ 241.609952][T11065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.623242][T11065] CPU: 1 UID: 0 PID: 11065 Comm: syz.5.2522 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(voluntary) [ 241.623292][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.623309][T11065] Call Trace: [ 241.623317][T11065] [ 241.623325][T11065] __dump_stack+0x1d/0x30 [ 241.623353][T11065] dump_stack_lvl+0xe8/0x140 [ 241.623429][T11065] dump_stack+0x15/0x1b [ 241.623445][T11065] should_fail_ex+0x265/0x280 [ 241.623482][T11065] should_fail+0xb/0x20 [ 241.623565][T11065] should_fail_usercopy+0x1a/0x20 [ 241.623592][T11065] _copy_from_iter+0xcf/0xe40 [ 241.623616][T11065] ? __build_skb_around+0x1a0/0x200 [ 241.623653][T11065] ? __alloc_skb+0x223/0x320 [ 241.623707][T11065] netlink_sendmsg+0x471/0x6b0 [ 241.623745][T11065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.623845][T11065] __sock_sendmsg+0x142/0x180 [ 241.623883][T11065] ____sys_sendmsg+0x31e/0x4e0 [ 241.623912][T11065] ___sys_sendmsg+0x17b/0x1d0 [ 241.623946][T11065] __x64_sys_sendmsg+0xd4/0x160 [ 241.624024][T11065] x64_sys_call+0x2999/0x2fb0 [ 241.624083][T11065] do_syscall_64+0xd2/0x200 [ 241.624110][T11065] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.624143][T11065] ? clear_bhb_loop+0x40/0x90 [ 241.624231][T11065] ? clear_bhb_loop+0x40/0x90 [ 241.624262][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.624283][T11065] RIP: 0033:0x7f0755a1e929 [ 241.624299][T11065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.624319][T11065] RSP: 002b:00007f0754087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.624406][T11065] RAX: ffffffffffffffda RBX: 00007f0755c45fa0 RCX: 00007f0755a1e929 [ 241.624432][T11065] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000b [ 241.624447][T11065] RBP: 00007f0754087090 R08: 0000000000000000 R09: 0000000000000000 [ 241.624462][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.624475][T11065] R13: 0000000000000000 R14: 00007f0755c45fa0 R15: 00007ffdb2fc21b8 [ 241.624541][T11065] [ 241.673772][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.137257][T11091] tmpfs: Unknown parameter 'nos÷ap' [ 242.295884][T11087] loop0: detected capacity change from 0 to 512 [ 242.409141][T11087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.495008][T11087] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.544108][T11099] loop2: detected capacity change from 0 to 512 [ 242.563216][T11099] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.2532: Parent and EA inode have the same ino 15 [ 242.589950][T11099] EXT4-fs (loop2): Remounting filesystem read-only [ 242.600830][T11099] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 242.611765][T11099] EXT4-fs (loop2): 1 orphan inode deleted [ 242.620504][T11099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.670641][T11099] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2532'. [ 242.740440][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.867720][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2539'. [ 242.886742][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.931813][T11117] loop4: detected capacity change from 0 to 128 [ 242.946909][T11119] loop0: detected capacity change from 0 to 128 [ 242.950805][T11117] vfat: Unknown parameter '' [ 242.988147][T11117] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.998131][T11117] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.053571][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2542'. [ 243.063752][T11117] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.073751][T11117] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.117179][T11117] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.127082][T11117] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.187103][T11117] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.197023][T11117] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.269893][T11131] loop1: detected capacity change from 0 to 2048 [ 243.302771][T11131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.316639][T11131] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.330013][T11131] futex_wake_op: syz.1.2545 tries to shift op by -1; fix this program [ 243.448726][T11117] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.457212][T11117] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.469590][T11117] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.477932][T11117] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.491700][T11117] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.500181][T11117] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.516478][T11117] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.525050][T11117] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.711371][T11141] SELinux: Context Ü is not valid (left unmapped). [ 243.720027][T11141] batman_adv: batadv0: Adding interface: dummy0 [ 243.726359][T11141] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.762297][T11141] batman_adv: batadv0: Interface activated: dummy0 [ 243.781549][T11141] batadv0: mtu less than device minimum [ 243.788046][T11141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.799525][T11141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.811416][T11141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.822597][T11141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.833444][T11141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.844755][T11141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.855724][T11141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.866554][T11141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.877538][T11141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.882033][T11160] netlink: 'syz.4.2548': attribute type 1 has an invalid length. [ 243.896275][T11160] netlink: 'syz.4.2548': attribute type 2 has an invalid length. [ 243.952304][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2553'. [ 243.984583][T11165] loop0: detected capacity change from 0 to 2048 [ 244.031862][T11169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.035622][ T3299] loop0: p1 p3 [ 244.043309][ T3299] loop0: p3 start 8388352 is beyond EOD, truncated [ 244.051879][T11165] loop0: p1 p3 [ 244.056761][T11165] loop0: p3 start 8388352 is beyond EOD, truncated [ 244.094555][T11165] hub 9-0:1.0: USB hub found [ 244.099398][T11165] hub 9-0:1.0: 8 ports detected [ 244.247498][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.314560][T11181] loop1: detected capacity change from 0 to 128 [ 244.323504][T10933] udevd[10933]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 244.343308][T10933] udevd[10933]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 244.517381][T11183] loop0: detected capacity change from 0 to 1024 [ 244.527250][T11181] vfat: Unknown parameter '' [ 244.542439][T10933] udevd[10933]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 244.566270][T11181] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.588662][T11183] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 244.598755][T11183] EXT4-fs (loop0): group descriptors corrupted! [ 244.699298][T11181] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.776893][T11181] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.837499][T11181] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.904372][T11181] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.917387][T11181] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.928221][ T4762] printk: udevd: 12 output lines suppressed due to ratelimiting [ 244.931525][T11181] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.940105][T11195] loop4: detected capacity change from 0 to 512 [ 244.952859][T11181] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.953547][T11195] EXT4-fs: Invalid want_extra_isize 107 [ 245.018408][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2565'. [ 245.060481][T11200] loop0: detected capacity change from 0 to 2048 [ 245.105792][T11200] loop0: p1 p3 [ 245.110217][T11200] loop0: p3 start 8388352 is beyond EOD, truncated [ 245.140051][T11200] hub 9-0:1.0: USB hub found [ 245.144878][T11200] hub 9-0:1.0: 8 ports detected [ 245.158070][T11206] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2568'. [ 245.222779][T11208] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 246.174126][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 246.174141][ T29] audit: type=1326 audit(1749431498.063:34399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11193 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2303d358e7 code=0x7fc00000 [ 246.276157][ T29] audit: type=1326 audit(1749431498.153:34400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 246.299896][ T29] audit: type=1326 audit(1749431498.153:34401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 246.323641][ T29] audit: type=1326 audit(1749431498.153:34402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 246.347724][ T29] audit: type=1326 audit(1749431498.153:34403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 246.359297][T11221] loop4: detected capacity change from 0 to 164 [ 246.371862][ T29] audit: type=1326 audit(1749431498.153:34404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 246.371910][ T29] audit: type=1326 audit(1749431498.153:34405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 246.371943][ T29] audit: type=1326 audit(1749431498.153:34406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 246.427242][T11221] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 246.448981][ T29] audit: type=1326 audit(1749431498.153:34407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 246.449019][ T29] audit: type=1326 audit(1749431498.153:34408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2303d3e929 code=0x7ffc0000 [ 246.516622][T11221] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 246.551206][T11227] loop1: detected capacity change from 0 to 128 [ 246.565615][T11221] Symlink component flag not implemented [ 246.568406][T11227] vfat: Unknown parameter '' [ 246.571763][T11221] Symlink component flag not implemented [ 246.583594][T11229] loop2: detected capacity change from 0 to 512 [ 246.590831][T11229] EXT4-fs (loop2): bad geometry: block count 268435520 exceeds size of device (64 blocks) [ 246.603461][T11221] Symlink component flag not implemented (7) [ 246.609685][T11221] Symlink component flag not implemented (116) [ 246.628717][T11227] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.680365][T11233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.687664][T11233] IPv6: NLM_F_CREATE should be set when creating new route [ 246.694923][T11233] IPv6: NLM_F_CREATE should be set when creating new route [ 246.702336][T11233] IPv6: NLM_F_CREATE should be set when creating new route [ 246.732838][T11227] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.964699][T11236] loop2: detected capacity change from 0 to 1024 [ 246.997148][T11236] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 247.007006][T11236] EXT4-fs (loop2): group descriptors corrupted! [ 247.081978][T11227] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.158354][T11227] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.510927][T11245] ALSA: seq fatal error: cannot create timer (-22) [ 247.730547][T11250] tmpfs: Unknown parameter 'nos÷ap' [ 248.172763][T11255] infiniband syz2: set active [ 248.177759][T11255] infiniband syz2: added veth0_to_bond [ 248.188765][T11255] RDS/IB: syz2: added [ 248.193006][T11255] smc: adding ib device syz2 with port count 1 [ 248.199330][T11255] smc: ib device syz2 port 1 has pnetid [ 248.331198][T11259] batman_adv: batadv0: Adding interface: dummy0 [ 248.337594][T11259] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.364238][T11259] batman_adv: batadv0: Interface activated: dummy0 [ 248.471758][T11266] loop0: detected capacity change from 0 to 8192 [ 248.479365][T11266] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.595454][T11273] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2592'. [ 248.650562][T11278] loop0: detected capacity change from 0 to 512 [ 248.658189][T11278] EXT4-fs (loop0): bad geometry: block count 268435520 exceeds size of device (64 blocks) [ 249.066128][T11280] loop0: detected capacity change from 0 to 1024 [ 249.106546][T11280] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 249.116496][T11280] EXT4-fs (loop0): group descriptors corrupted! [ 249.282968][T11284] FAULT_INJECTION: forcing a failure. [ 249.282968][T11284] name failslab, interval 1, probability 0, space 0, times 0 [ 249.295739][T11284] CPU: 0 UID: 0 PID: 11284 Comm: syz.4.2594 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(voluntary) [ 249.295775][T11284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.295816][T11284] Call Trace: [ 249.295824][T11284] [ 249.295832][T11284] __dump_stack+0x1d/0x30 [ 249.295855][T11284] dump_stack_lvl+0xe8/0x140 [ 249.295930][T11284] dump_stack+0x15/0x1b [ 249.295947][T11284] should_fail_ex+0x265/0x280 [ 249.295985][T11284] ? do_inotify_init+0x93/0x270 [ 249.296069][T11284] should_failslab+0x8c/0xb0 [ 249.296094][T11284] __kmalloc_cache_noprof+0x4c/0x320 [ 249.296127][T11284] do_inotify_init+0x93/0x270 [ 249.296183][T11284] __x64_sys_inotify_init1+0x1e/0x30 [ 249.296205][T11284] x64_sys_call+0x2ce8/0x2fb0 [ 249.296228][T11284] do_syscall_64+0xd2/0x200 [ 249.296251][T11284] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 249.296279][T11284] ? clear_bhb_loop+0x40/0x90 [ 249.296311][T11284] ? clear_bhb_loop+0x40/0x90 [ 249.296335][T11284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.296357][T11284] RIP: 0033:0x7f2303d3e929 [ 249.296373][T11284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.296472][T11284] RSP: 002b:00007f23023a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 249.296491][T11284] RAX: ffffffffffffffda RBX: 00007f2303f65fa0 RCX: 00007f2303d3e929 [ 249.296504][T11284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000800 [ 249.296517][T11284] RBP: 00007f23023a7090 R08: 0000000000000000 R09: 0000000000000000 [ 249.296599][T11284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.296612][T11284] R13: 0000000000000000 R14: 00007f2303f65fa0 R15: 00007ffd0bef54c8 [ 249.296631][T11284] [ 249.568368][T11294] batman_adv: batadv0: Adding interface: dummy0 [ 249.574822][T11294] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.602155][T11294] batman_adv: batadv0: Interface activated: dummy0 [ 249.825834][T11302] tmpfs: Unknown parameter 'nos÷ap' [ 250.408131][T11313] loop2: detected capacity change from 0 to 128 [ 250.428227][T11313] bio_check_eod: 28 callbacks suppressed [ 250.428241][T11313] syz.2.2605: attempt to access beyond end of device [ 250.428241][T11313] loop2: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 250.447583][T11313] syz.2.2605: attempt to access beyond end of device [ 250.447583][T11313] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 250.461058][T11313] buffer_io_error: 26 callbacks suppressed [ 250.461073][T11313] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 250.483523][T11313] syz.2.2605: attempt to access beyond end of device [ 250.483523][T11313] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 250.497130][T11313] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 250.509565][T11313] syz.2.2605: attempt to access beyond end of device [ 250.509565][T11313] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 250.523619][T11313] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 250.534241][T11313] syz.2.2605: attempt to access beyond end of device [ 250.534241][T11313] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 250.547836][T11313] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 250.556895][T11313] syz.2.2605: attempt to access beyond end of device [ 250.556895][T11313] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 250.570762][T11313] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 250.580065][T11313] syz.2.2605: attempt to access beyond end of device [ 250.580065][T11313] loop2: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 250.593596][T11313] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 250.602750][T11313] syz.2.2605: attempt to access beyond end of device [ 250.602750][T11313] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 250.609737][T11317] SELinux: syz.5.2607 (11317) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 250.616270][T11313] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 250.616417][T11313] syz.2.2605: attempt to access beyond end of device [ 250.616417][T11313] loop2: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 250.652402][T11313] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 250.661310][T11313] syz.2.2605: attempt to access beyond end of device [ 250.661310][T11313] loop2: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 250.674765][T11313] Buffer I/O error on dev loop2, logical block 150, lost async page write [ 250.683724][T11313] Buffer I/O error on dev loop2, logical block 151, lost async page write [ 250.774581][T11326] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2610'. [ 251.380977][T11336] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2612'. [ 251.579433][T11227] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.593661][T11227] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.077545][T11227] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.099329][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 252.099347][ T29] audit: type=1326 audit(1749431503.993:34639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 252.107028][T11227] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.138195][ T29] audit: type=1326 audit(1749431504.033:34640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 252.162191][ T29] audit: type=1326 audit(1749431504.033:34641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 252.185938][ T29] audit: type=1326 audit(1749431504.033:34642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 252.209689][ T29] audit: type=1326 audit(1749431504.033:34643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 252.234228][ T29] audit: type=1326 audit(1749431504.033:34644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 252.258276][ T29] audit: type=1326 audit(1749431504.033:34645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 252.281951][ T29] audit: type=1326 audit(1749431504.033:34646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 252.305821][ T29] audit: type=1326 audit(1749431504.033:34647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 252.329793][ T29] audit: type=1326 audit(1749431504.033:34648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0755a1e929 code=0x7ffc0000 [ 252.486360][T11358] tmpfs: Unknown parameter 'nos÷ap' [ 252.616656][T11362] SELinux: syz.1.2620 (11362) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 252.655717][T11365] loop4: detected capacity change from 0 to 512 [ 252.682745][T11364] ipip0: entered promiscuous mode [ 252.690799][T11365] ext4: Unknown parameter '' [ 252.699971][T11362] FAULT_INJECTION: forcing a failure. [ 252.699971][T11362] name failslab, interval 1, probability 0, space 0, times 0 [ 252.712764][T11362] CPU: 1 UID: 0 PID: 11362 Comm: syz.1.2620 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(voluntary) [ 252.712801][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.712827][T11362] Call Trace: [ 252.712833][T11362] [ 252.712840][T11362] __dump_stack+0x1d/0x30 [ 252.712927][T11362] dump_stack_lvl+0xe8/0x140 [ 252.712946][T11362] dump_stack+0x15/0x1b [ 252.712975][T11362] should_fail_ex+0x265/0x280 [ 252.713011][T11362] should_failslab+0x8c/0xb0 [ 252.713034][T11362] __kmalloc_noprof+0xa5/0x3e0 [ 252.713137][T11362] ? sel_write_user+0x197/0x440 [ 252.713173][T11362] sel_write_user+0x197/0x440 [ 252.713268][T11362] selinux_transaction_write+0xc3/0x110 [ 252.713309][T11362] ? __pfx_selinux_transaction_write+0x10/0x10 [ 252.713385][T11362] vfs_write+0x266/0x8e0 [ 252.713406][T11362] ? bpf_trace_run4+0x134/0x1d0 [ 252.713438][T11362] ? __rcu_read_unlock+0x4f/0x70 [ 252.713528][T11362] ? __fget_files+0x184/0x1c0 [ 252.713559][T11362] ksys_write+0xda/0x1a0 [ 252.713584][T11362] __x64_sys_write+0x40/0x50 [ 252.713610][T11362] x64_sys_call+0x2cdd/0x2fb0 [ 252.713635][T11362] do_syscall_64+0xd2/0x200 [ 252.713665][T11362] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 252.713791][T11362] ? clear_bhb_loop+0x40/0x90 [ 252.713817][T11362] ? clear_bhb_loop+0x40/0x90 [ 252.713882][T11362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.713903][T11362] RIP: 0033:0x7f2a4868e929 [ 252.713918][T11362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.713938][T11362] RSP: 002b:00007f2a46cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.713971][T11362] RAX: ffffffffffffffda RBX: 00007f2a488b5fa0 RCX: 00007f2a4868e929 [ 252.713983][T11362] RDX: 0000000000000027 RSI: 0000200000000080 RDI: 0000000000000003 [ 252.714063][T11362] RBP: 00007f2a46cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 252.714076][T11362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.714090][T11362] R13: 0000000000000000 R14: 00007f2a488b5fa0 R15: 00007ffe056ecb48 [ 252.714115][T11362] [ 252.991243][T11366] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 252.991243][T11366] The task syz.0.2621 (11366) triggered the difference, watch for misbehavior. [ 253.009180][T11372] loop5: detected capacity change from 0 to 2048 [ 253.016871][T11376] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2626'. [ 253.030856][T11366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2621'. [ 253.046536][T11372] loop5: p1 p3 [ 253.051583][T11372] loop5: p3 start 8388352 is beyond EOD, truncated [ 253.164535][T11380] hub 9-0:1.0: USB hub found [ 253.169522][T11374] loop1: detected capacity change from 0 to 512 [ 253.179885][T11380] hub 9-0:1.0: 8 ports detected [ 253.190992][T11366] loop0: detected capacity change from 0 to 256 [ 253.212838][T11366] vfat: Unknown parameter 'shortname' [ 253.514329][T11374] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.2625: Parent and EA inode have the same ino 15 [ 253.698846][T11374] EXT4-fs (loop1): Remounting filesystem read-only [ 253.743012][T11374] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 253.753722][T11374] EXT4-fs (loop1): 1 orphan inode deleted [ 254.041595][T11393] loop2: detected capacity change from 0 to 1024 [ 254.050143][T11393] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 254.060078][T11393] EXT4-fs (loop2): group descriptors corrupted! [ 254.085513][T11374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.122120][T11392] loop0: detected capacity change from 0 to 128 [ 254.145485][T11392] vfat: Unknown parameter '' [ 254.161887][T11374] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2625'. [ 254.172131][T11392] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.182020][T11392] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.194196][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2631'. [ 254.209634][T11400] tipc: Enabling of bearer rejected, already enabled [ 254.262074][T11392] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.271951][T11392] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.282343][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.316635][T11392] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.326732][T11392] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.404721][T11403] loop5: detected capacity change from 0 to 512 [ 254.417655][T11392] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.427687][T11392] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.440872][T11403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.466964][T11403] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.513755][T11392] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.522313][T11392] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.530998][T11409] loop1: detected capacity change from 0 to 512 [ 254.534849][T11392] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.546030][T11392] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.557989][T11392] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.566272][T11392] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.578237][T11409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.594447][T11392] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.602866][T11392] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.608479][T11409] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.722906][T11424] FAULT_INJECTION: forcing a failure. [ 254.722906][T11424] name failslab, interval 1, probability 0, space 0, times 0 [ 254.735698][T11424] CPU: 0 UID: 0 PID: 11424 Comm: syz.4.2638 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(voluntary) [ 254.735769][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.735787][T11424] Call Trace: [ 254.735795][T11424] [ 254.735805][T11424] __dump_stack+0x1d/0x30 [ 254.735827][T11424] dump_stack_lvl+0xe8/0x140 [ 254.735846][T11424] dump_stack+0x15/0x1b [ 254.735940][T11424] should_fail_ex+0x265/0x280 [ 254.736020][T11424] ? __scm_send+0x3da/0xae0 [ 254.736050][T11424] should_failslab+0x8c/0xb0 [ 254.736071][T11424] __kmalloc_cache_noprof+0x4c/0x320 [ 254.736108][T11424] __scm_send+0x3da/0xae0 [ 254.736132][T11424] unix_stream_sendmsg+0xb9/0x8e0 [ 254.736224][T11424] ? selinux_socket_sendmsg+0x175/0x1b0 [ 254.736269][T11424] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 254.736303][T11424] __sock_sendmsg+0x142/0x180 [ 254.736328][T11424] ____sys_sendmsg+0x31e/0x4e0 [ 254.736421][T11424] ___sys_sendmsg+0x17b/0x1d0 [ 254.736451][T11424] __x64_sys_sendmsg+0xd4/0x160 [ 254.736474][T11424] x64_sys_call+0x2999/0x2fb0 [ 254.736493][T11424] do_syscall_64+0xd2/0x200 [ 254.736524][T11424] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 254.736548][T11424] ? clear_bhb_loop+0x40/0x90 [ 254.736567][T11424] ? clear_bhb_loop+0x40/0x90 [ 254.736587][T11424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.736608][T11424] RIP: 0033:0x7f2303d3e929 [ 254.736621][T11424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.736638][T11424] RSP: 002b:00007f23023a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.736661][T11424] RAX: ffffffffffffffda RBX: 00007f2303f65fa0 RCX: 00007f2303d3e929 [ 254.736672][T11424] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000004 [ 254.736691][T11424] RBP: 00007f23023a7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.736707][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.736759][T11424] R13: 0000000000000000 R14: 00007f2303f65fa0 R15: 00007ffd0bef54c8 [ 254.736776][T11424] [ 255.090740][ T4378] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.104165][T11428] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.114310][T11428] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.166889][T11428] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.176863][T11428] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.205941][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.217522][T11428] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.227509][T11428] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.238810][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2642'. [ 255.255158][T11433] tipc: Enabling of bearer rejected, already enabled [ 255.272367][T11435] loop2: detected capacity change from 0 to 128 [ 255.287133][T11428] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.297639][T11428] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.330577][T11439] FAULT_INJECTION: forcing a failure. [ 255.330577][T11439] name failslab, interval 1, probability 0, space 0, times 0 [ 255.343480][T11439] CPU: 0 UID: 0 PID: 11439 Comm: syz.1.2645 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(voluntary) [ 255.343516][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.343532][T11439] Call Trace: [ 255.343539][T11439] [ 255.343546][T11439] __dump_stack+0x1d/0x30 [ 255.343601][T11439] dump_stack_lvl+0xe8/0x140 [ 255.343647][T11439] dump_stack+0x15/0x1b [ 255.343668][T11439] should_fail_ex+0x265/0x280 [ 255.343790][T11439] should_failslab+0x8c/0xb0 [ 255.343869][T11439] kmem_cache_alloc_noprof+0x50/0x310 [ 255.343953][T11439] ? skb_clone+0x151/0x1f0 [ 255.343998][T11439] skb_clone+0x151/0x1f0 [ 255.344025][T11439] __netlink_deliver_tap+0x2c9/0x500 [ 255.344098][T11439] netlink_unicast+0x64c/0x670 [ 255.344138][T11439] netlink_sendmsg+0x58b/0x6b0 [ 255.344170][T11439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.344213][T11439] __sock_sendmsg+0x142/0x180 [ 255.344246][T11439] sock_write_iter+0x165/0x1b0 [ 255.344277][T11439] do_iter_readv_writev+0x41e/0x4c0 [ 255.344303][T11439] vfs_writev+0x2df/0x8b0 [ 255.344351][T11439] do_writev+0xe7/0x210 [ 255.344392][T11439] __x64_sys_writev+0x45/0x50 [ 255.344421][T11439] x64_sys_call+0x2006/0x2fb0 [ 255.344448][T11439] do_syscall_64+0xd2/0x200 [ 255.344503][T11439] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 255.344530][T11439] ? clear_bhb_loop+0x40/0x90 [ 255.344558][T11439] ? clear_bhb_loop+0x40/0x90 [ 255.344583][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.344660][T11439] RIP: 0033:0x7f2a4868e929 [ 255.344680][T11439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.344710][T11439] RSP: 002b:00007f2a46cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 255.344733][T11439] RAX: ffffffffffffffda RBX: 00007f2a488b5fa0 RCX: 00007f2a4868e929 [ 255.344747][T11439] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 255.344763][T11439] RBP: 00007f2a46cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 255.344826][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.344842][T11439] R13: 0000000000000000 R14: 00007f2a488b5fa0 R15: 00007ffe056ecb48 [ 255.344866][T11439] [ 255.577137][T11428] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.577189][T11428] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.586309][T11428] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.607636][T11428] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.620482][T11428] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.628934][T11428] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.642879][T11428] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.651185][T11428] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.686617][T11447] loop2: detected capacity change from 0 to 128 [ 255.720771][T11447] bio_check_eod: 28 callbacks suppressed [ 255.720826][T11447] syz.2.2648: attempt to access beyond end of device [ 255.720826][T11447] loop2: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 255.742030][T11447] syz.2.2648: attempt to access beyond end of device [ 255.742030][T11447] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 255.745636][T11451] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2650'. [ 255.756207][T11447] buffer_io_error: 26 callbacks suppressed [ 255.756228][T11447] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 255.765033][T11446] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2647'. [ 255.793930][T11447] syz.2.2648: attempt to access beyond end of device [ 255.793930][T11447] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 255.807522][T11447] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 255.816212][T11447] syz.2.2648: attempt to access beyond end of device [ 255.816212][T11447] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 255.829709][T11447] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 255.843106][T11447] syz.2.2648: attempt to access beyond end of device [ 255.843106][T11447] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 255.856776][T11447] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 255.886501][T11447] syz.2.2648: attempt to access beyond end of device [ 255.886501][T11447] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 255.900048][T11447] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 255.916210][T11447] syz.2.2648: attempt to access beyond end of device [ 255.916210][T11447] loop2: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 255.929891][T11447] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 255.939802][T11447] syz.2.2648: attempt to access beyond end of device [ 255.939802][T11447] loop2: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 255.953285][T11447] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 255.979242][T11447] syz.2.2648: attempt to access beyond end of device [ 255.979242][T11447] loop2: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 255.992895][T11447] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 256.006154][T11447] syz.2.2648: attempt to access beyond end of device [ 256.006154][T11447] loop2: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 256.019674][T11447] Buffer I/O error on dev loop2, logical block 150, lost async page write [ 256.028603][T11447] Buffer I/O error on dev loop2, logical block 151, lost async page write [ 256.326589][T11465] loop5: detected capacity change from 0 to 512 [ 256.361093][T11465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.411211][T11465] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.448834][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2655'. [ 256.538476][T11470] tipc: Enabling of bearer rejected, already enabled [ 256.613527][T11474] loop2: detected capacity change from 0 to 1024 [ 256.628046][T11474] EXT4-fs (loop2): failed to initialize system zone (-117) [ 256.638094][T11474] EXT4-fs (loop2): mount failed [ 256.728656][T11480] loop2: detected capacity change from 0 to 2048 [ 256.754449][T11484] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2661'. [ 256.826352][T11480] loop2: p1 p3 [ 256.837108][T11480] loop2: p3 start 8388352 is beyond EOD, truncated [ 256.875848][T11480] hub 9-0:1.0: USB hub found [ 256.880930][T11480] hub 9-0:1.0: 8 ports detected [ 256.897803][ T4378] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.209724][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 257.209739][ T29] audit: type=1400 audit(1749431509.103:35060): avc: denied { cpu } for pid=11488 comm="syz.2.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 257.336036][ T29] audit: type=1400 audit(1749431509.133:35061): avc: denied { create } for pid=11488 comm="syz.2.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.355954][ T29] audit: type=1400 audit(1749431509.133:35062): avc: denied { setopt } for pid=11488 comm="syz.2.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.375641][ T29] audit: type=1400 audit(1749431509.153:35063): avc: denied { bind } for pid=11488 comm="syz.2.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.395262][ T29] audit: type=1400 audit(1749431509.193:35064): avc: denied { execmem } for pid=11495 comm="syz.1.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 257.490469][ T29] audit: type=1400 audit(1749431509.383:35065): avc: denied { create } for pid=11499 comm="syz.0.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 257.514819][T11500] loop0: detected capacity change from 0 to 128 [ 257.516877][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2666'. [ 257.555516][ T29] audit: type=1400 audit(1749431509.443:35066): avc: denied { mount } for pid=11499 comm="syz.0.2665" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 257.657368][ T29] audit: type=1326 audit(1749431509.493:35067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11499 comm="syz.0.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 257.681241][ T29] audit: type=1326 audit(1749431509.503:35068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11499 comm="syz.0.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 257.705142][ T29] audit: type=1326 audit(1749431509.503:35069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11499 comm="syz.0.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bfbee929 code=0x7ffc0000 [ 257.767541][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2669'. [ 257.782723][T11514] bridge0: entered promiscuous mode [ 257.790757][T11512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.801064][T11514] bridge0: left promiscuous mode [ 257.832786][T11515] loop0: detected capacity change from 0 to 1024 [ 257.850650][T11515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.917373][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.022184][T11527] ================================================================== [ 258.030538][T11527] BUG: KCSAN: data-race in mas_replace_node / mas_state_walk [ 258.037979][T11527] [ 258.040353][T11527] write to 0xffff888119840d00 of 8 bytes by task 11526 on cpu 0: [ 258.048199][T11527] mas_replace_node+0x1a6/0x410 [ 258.053105][T11527] mas_wr_store_entry+0x2406/0x2b50 [ 258.058348][T11527] mas_store_prealloc+0x74d/0x9e0 [ 258.063412][T11527] vma_iter_store_new+0x1c5/0x200 [ 258.068483][T11527] vma_complete+0x125/0x580 [ 258.073014][T11527] __split_vma+0x591/0x650 [ 258.077467][T11527] vma_modify+0x21e/0xca0 [ 258.081830][T11527] vma_modify_flags+0x101/0x130 [ 258.086711][T11527] mprotect_fixup+0x2cc/0x570 [ 258.091561][T11527] do_mprotect_pkey+0x6d6/0x980 [ 258.096558][T11527] __x64_sys_mprotect+0x48/0x60 [ 258.101457][T11527] x64_sys_call+0x2794/0x2fb0 [ 258.106190][T11527] do_syscall_64+0xd2/0x200 [ 258.110737][T11527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.116678][T11527] [ 258.119028][T11527] read to 0xffff888119840d00 of 8 bytes by task 11527 on cpu 1: [ 258.126688][T11527] mas_state_walk+0x485/0x650 [ 258.131744][T11527] mas_walk+0x30/0x120 [ 258.135832][T11527] lock_vma_under_rcu+0xa2/0x2f0 [ 258.140796][T11527] do_user_addr_fault+0x233/0x1090 [ 258.145941][T11527] exc_page_fault+0x62/0xa0 [ 258.150475][T11527] asm_exc_page_fault+0x26/0x30 [ 258.155342][T11527] [ 258.157672][T11527] value changed: 0xffff888103ce7a0e -> 0xffff888119840d00 [ 258.164800][T11527] [ 258.167136][T11527] Reported by Kernel Concurrency Sanitizer on: [ 258.173301][T11527] CPU: 1 UID: 0 PID: 11527 Comm: syz.4.2674 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(voluntary) [ 258.185475][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.195558][T11527] ================================================================== [ 258.210097][T11522] loop2: detected capacity change from 0 to 512 [ 258.240986][T11522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.276498][T11522] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.791627][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.