last executing test programs: 16.972656687s ago: executing program 2 (id=1040): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x1c0da, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) 16.896320318s ago: executing program 2 (id=1043): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRESHEX=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd47, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x141) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f00000008c0), &(0x7f0000000040)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x9e, 0x0, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x8, 0xb, 0x4}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) inotify_init() 16.72644794s ago: executing program 2 (id=1054): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x0, 0x800000000003}, 0x1320, 0xffffffff, 0xf, 0x6, 0x0, 0x28000000, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000180001002dbd7000010000001d0100001500030000000000000000008ca5be073cff296e02001b7108000500f8fd08"], 0x34}}, 0x20008030) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000009000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40082, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) listen(r1, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x46e, &(0x7f0000000400)="$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") 15.340387912s ago: executing program 2 (id=1055): syz_open_dev$loop(0x0, 0x9, 0x12d600) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x18) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) rt_sigqueueinfo(0x0, 0x1b, &(0x7f0000000140)={0x3, 0x0, 0x9}) iopl(0x3) perf_event_open(&(0x7f00000012c0)={0x6, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffa3, 0xb}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14.291059278s ago: executing program 2 (id=1068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(0x0, 0x141) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000008c0), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x9e, 0x0, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x8, 0xb, 0x4}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) inotify_init() 13.664228538s ago: executing program 2 (id=1077): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES64=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r4, &(0x7f0000004200)='t', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000080e, @void, @value}, 0x94) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r5, 0x407, 0x6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) 13.663669868s ago: executing program 32 (id=1077): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES64=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r4, &(0x7f0000004200)='t', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000080e, @void, @value}, 0x94) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r5, 0x407, 0x6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) 7.254086048s ago: executing program 0 (id=1145): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800120000000000000000000000000085fa00"/32], &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='bcache_alloc\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0\x00', 0x148) pidfd_getfd(0xffffffffffffffff, r2, 0x0) chroot(&(0x7f00000003c0)='./file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) r3 = dup(r0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000040)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x32900) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000090000008f0000007153ec00733c3d6a43881c3cf58d77d27df541e27e4a166a0b307f0b9bdb1d7b49b678a2c3bcc6155171613844a0"]) socket$inet6(0xa, 0x5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/prev\x00') pread64(r7, 0x0, 0x0, 0x3) 7.08377644s ago: executing program 0 (id=1136): syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@dstopts={0x2c}]}}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r4, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 6.572209708s ago: executing program 0 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, 0x0, &(0x7f0000000400)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000240)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f0000000000)={[{@unhide}, {@check_relaxed}, {@nocompress}, {@block={'block', 0x3d, 0x200}}, {@cruft}, {@hide}, {@overriderock}, {@unhide}]}, 0x1, 0x558, &(0x7f0000001800)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x60000480) 5.543932354s ago: executing program 0 (id=1153): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0xd, 0x8, 0x4}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r2], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYRESOCT=r3], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) ioprio_set$pid(0x1, r4, 0x2007) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES32=r1, @ANYBLOB="af55ad77a43d45a5ee43a913588a952bdcc4faf0dee314d47017b796815beb072cf90cdd7aae6e3a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20008, @void, @value}, 0x94) r5 = getpid() r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x24020000) syz_usbip_server_init(0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 5.471962565s ago: executing program 4 (id=1155): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r2 = syz_io_uring_setup(0xa2, &(0x7f0000000100)={0x0, 0x105cc8, 0x0, 0xfffffffe, 0x77}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f0000000000)={[{@unhide}, {@check_relaxed}, {@nocompress}, {@block={'block', 0x3d, 0x200}}, {@cruft}, {@hide}, {@overriderock}, {@unhide}]}, 0x1, 0x558, &(0x7f0000001800)="$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") syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a80", 0xb}], 0x1}, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.335179687s ago: executing program 5 (id=1156): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101801, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3}}, 0x20) close_range(r2, r1, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x1b) writev(r2, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r5 = socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x6000, 0x10, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x154}}, 0x8040) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r7, 0x11, 0x6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 5.079944351s ago: executing program 3 (id=1157): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x11, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)=""/245, 0xf5}], 0x1}, 0x3}], 0x1, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4c005) mknod$loop(0x0, 0x100000000000600d, 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r4 = gettid() socket(0x27, 0x5, 0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000840)={0x0, 0x0, 0x3, 0x0, '\x00', [{0xb, 0x6, 0x8001, 0xf, 0x3, 0x8}, {0xcaa, 0x10, 0xfff, 0xb301, 0x84}], ['\x00', '\x00', '\x00']}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r3, r5, 0x60010000000, 0x0) 4.913512013s ago: executing program 5 (id=1158): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c00000008060103000000000000003b770000080500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x24004084}, 0xc040) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r6 = dup(0xffffffffffffffff) bind$unix(r6, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 4.613700268s ago: executing program 0 (id=1160): syz_open_dev$loop(0x0, 0x9, 0x12d600) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x18) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) rt_sigqueueinfo(0x0, 0x1b, &(0x7f0000000140)={0x3, 0x0, 0x9}) iopl(0x3) perf_event_open(&(0x7f00000012c0)={0x6, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffa3, 0xb}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugBj3VbCGGhhtZECJFqDF5MDImejUcT/wJvXox6MvGqd0NClAvoqWZmZ2C77PaFbncr+/kkA8+z83Sf57vPPDPPzLMbQN8ayf5JInZExG8RMVTPLi0wUv/vxrUL1b+vXagmsbj41p9JXu76tQvVsmj5d9uLzGgakX6SFJUsNXfu/KmpWm3mbJEfnz/93vjcufPPnjw9dWLmxMyZySNHDh+aeOH5yec6EmcW1/V9H87u3/vaO5dfrx67/O5P32bt3VHsb4yjU0aywP9azDXve6LTlfXYzoZ0MtDDhrAmlYjIumswH/9DUYlbnTcUr37c08YBGyq7Nm1tv3thEbiLJdHrFgC9UV7os/vfcuvS1GNTuPpS/QYoi/tGsdX3DERalBlsur/tpJGIOLbwz1fZFhv0HAIAoNFn1S+PxjOt5n9p3N9QblexhjIcEfdExO6IuDci9kTEfRF52Qci4sE11t+8NHT7/Ce9ckeBrVI2/3uxWNtaOv8rZ38xXClyO/P4B5PjJ2szB4vPZDQGt2b5iWXq+P6VXz9vt69x/pdtWf3lXLBox5WBpgd001PzU/mktAOufhSxb6BV/MnNlYAkIvZGxL61vfWuMnHyqW/2tyu0cvzL6MA60+LXEU/W+38hmuIvJcuvT47/L2ozB8fLo+J2P/9y6c129a8r/g7I+n/b0uO/uchw0rheO7f2Oi79/mnbe5o7Pf63JG/n56Oyoz6Ymp8/OxGxJTmav1geGvnrk7f+tsyX5bP4Rw+0Hv+741YFD0VEdhA/HBGPRMSjRdsfi4jHI+LAMvH/+HL7fZuh/6dbnv9uHv9N/b/2ROXUD9+1q391/X84T40Wr+TnvxWstoHr+ewAAADgvyLNvwOfpGM302k6Nlb/Dv+e2JbWZufmnz4++/6Z6fp35YdjMC2fdA01PA+dSBaKd6znJ4tnxeX+Q8Vz4y8q/8/zY9XZ2nSPY4d+t73N+M/8Uel164AN12odbXJLDxoCdF3z+E+XZi++0c3GAF3l99rQv1YY/2m32gF0n+s/9K9W4/9iU95aANydXP+hfxn/0L+Mf+hfxj/0pfX8rl+inxORbopmSGxQotdnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74NwAA//+8yu7V") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.613162069s ago: executing program 5 (id=1161): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="381a8d83fb99c333ba15c3dafb5babc1cb6dbd39954c14f141cc482e9ae0dad8913cd6363a0b815d392798586bd1d08adac6d609aad085d0e091117491ef0a6e4f13c438d5728d08ea830d7f8942880ea16404c835e155dca9949431a70b9345f2abd760c1778534eaed169bde7f5c3a5ccc4300c0125dcc097ab53b4848a6b942bc46c500d330f2c74d1c7669b4a9ee388172e83a1f6e167f5feacb359cf6a6318fa0477fb1f6c0d8e5c42ae09abf2ad0c4dd8f1fdb7c2e2ef1d7018aaf7bd9d6cc1ffb43d7b9440d92cca6da6fbb25e4eb708f9325f6d13ee964615055"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000300)=0x4, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1f0000000000000000000000000004e3ff0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_open_procfs(0x0, &(0x7f0000000280)='net/ptype\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x1a, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="160000000000000000000000000080001800000001c6e842000000004e0e00009500ff460000000076fdf8ea7f345cacd0356391b0131507b99970dee824743e25083595443b784cb7a854e57ead602fbb4df55c44b4ef78532ffbb0b76ad7cb48ef05c902f56f1d371b284d75b6ad4d8149900c5905f72e23f1084b043747d8fee5105c44d2"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r1, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() getpgid(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 4.559843309s ago: executing program 4 (id=1162): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r1) 4.534081529s ago: executing program 4 (id=1163): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x40000000) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0xfffa, 0x6}, 0x20) mount(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a}) 4.411448041s ago: executing program 1 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pipe(0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000200)={[0x2000007]}, 0x8) kexec_load(0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r5, r6, 0x0, 0x800000009) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x68, r7, 0x1, 0x70bd67, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0xd}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80029}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 3.84799348s ago: executing program 1 (id=1165): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x1c0da, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) 3.84681072s ago: executing program 3 (id=1166): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x300, 0x0, 0xc000}, 0x10) sendmmsg$unix(r7, &(0x7f00000029c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000480)="7459f65067b382c90f07e0c3abc7d3eb3887a8866c00ac2310534e2032a84e532a7b2b735f0f9abe263c599f1cfd386bf075a0", 0x33}, {0x0}, {&(0x7f0000000800)="faaa5fd5d49bfb794ece3d5e9e5196282a9f6f97d9d54848a508caabcc4348e93202b9160d23cab56a7f01bef808136c8b95d77ee9aebed5fdc001069e91f6aff0826041ac11505bce38b9533c429512b4fbadd56deba8dbe9a0ae057c679823c52e2fc8f6c086f248a5fe987488c025853aa03ce4844ce4d1d33beb5c7270be15dcc33b544b4006404b78cf1bb2e80fc8927d10c7d1d39c90b9", 0x9a}], 0x5, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5], 0x48, 0x40}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)="6bf0d4b9bbcad9b1b86a62b8e32873057d6099bc847cb6e138e29a34ea0bbedc50b69e96462cbbe1955bfc6d0b39b96948bbbd264cb4e64f496c94253444bca9ad3d2ac3b779401a225aa6e110b64539be2c92425ab156a924ec74e8820cfb110564489d1dfe39c374b6192831464355c3c11be8661b3362a32ad4065521dd721fae6a0513ab71d7a0ad12c0595ba27c04c0ab942fac469c63084f2f8a805578b2d9b19838152d8f71428a6869a9bc82ffdacb6ba035b9c30f17014565c65e8268184d1c68a9965c0e8a052992b1bb15f84acc30f288cac8d8151e08496feb4c678c21740056157d922ba92d2bfbbe8b2a", 0xf1}, {&(0x7f0000000100)="4a298c0d3e6bab1e99ca3bb005bef99e59411d0c7ea29d858a56cce1a38520ec28f6ed9b9b33560533f000ccbe6af0", 0x2f}, {&(0x7f0000000b00)="df47aab77966914451d7f8ec160ee577edecfce8580843124b2807a244f76e286c6cd1283d5e2f56f5f8aab298f6850e2baf0253422bfb8e0cd020347b76a56c6725cd91f97791ff41df613190c4b6593936fb2b0abe41b0a8595e304c8e14d2810edcfd2056a88c06e78dddbdf4906f607c442708186560d60c5b83c16582cd801fba10ca2e1e8d646e877d827b0513fe7f28638fbca9b2d4b14aa85aca37c032286678b424427cebf1ca9ed7a73d9cf905ba52682f7c2218c4af7f49ff58243df296b69a21b225367dcbba01e7b1a3b2ae542ed2ad567bd75b4e26bd397a2fc48ac43c2a0893ba9d47e98625634ce035", 0xf1}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=r7, @ANYRES32, @ANYRES16=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x40001}}, {{&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000000700)="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", 0xfe}, {&(0x7f00000004c0)="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", 0x154}, {&(0x7f0000002340)}, {&(0x7f00000023c0)}], 0x4, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000003c0)="d6435fc75231ac991094826b3ce5071d002126bfaa169213a30f4e99b7db5885bb6e7a0bc8dae3e7cde02c3a", 0x2c}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x4044}}], 0x4, 0xc004) 3.708158182s ago: executing program 1 (id=1167): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x301040, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x8, 0x1, 0x0, 0xa, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast2, @private=0xa010101, {[@noop]}}}}}) write(r0, &(0x7f0000000a00)="4c39f1a84fc435ac0af26ba6866d0305daf2a3dd86eeeb8130c7318c774f849d4c56861d349857f49cc13ebcc6bf7004a4ee5b1f6b5dc58aa9f7e8c2f262e0dc3606564004f5e06a6734fcc8722704b0a4c9f04d5f938e004f09035fa2e1591ea31fa942fbf612894a8677d3d72a5341d450fb1720490111c5f1208d639cd710f226e296351a56d00e9cca194d9ed501d8e17b", 0x93) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = memfd_create(&(0x7f0000001f40)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xfa\xed\x04\x00\x00\x00\xd4N\x12;\x83-j\xa7\x02\x92\xecA\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4\xe1\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x19\b\x00\x00\x00\x00~\xf3S\x12\"\x00^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x00ZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99Y', 0x0) fchown(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f00000002c0)={&(0x7f00000004c0)=@in6={0xa, 0x4e21, 0xb832, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}, 0x2404000d) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) read$eventfd(r8, 0x0, 0x0) getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r2, r0, 0x2, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nobarrier}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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") 3.470911486s ago: executing program 5 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d814}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000005c0)={r5, 0x11, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9, 0x0, 0x100}, 0x18) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.012680343s ago: executing program 1 (id=1169): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101801, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3}}, 0x20) close_range(r2, r1, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x1b) writev(r2, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r5 = socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x6000, 0x10, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x154}}, 0x8040) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r7, 0x11, 0x6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 3.002083154s ago: executing program 5 (id=1179): syz_emit_ethernet(0x4a, &(0x7f00000043c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@grpquota}, {@nolazytime}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x56d, &(0x7f00000015c0)="$eJzs3d9rU1ccAPDvTX9o1c0KItseRsGHOZypbffDwR7c49hkwvbuQhuLNDXSpGI7YfowX3wZMhhjwtgfsPc9yv6B/RXCJsiQsr1m3PSmxjZpY02buHw+cPWc+6PnnHvuOffcnBsSwMCaSP/JRbweEd8lEUebtg1HtnFifb+1Jzdn0yWJWu2Lv5NIsnWN/ZPs/8NZ5LWI+P3biNO5relWVlYXCqVScSmLT1YXr01WVlbPXFkszBfni1enZ2bOvTcz/eEH73etrG9f/PfHzx98cu7uybUffn107F4S5+NItq25HC/gVnNkIiayczIS5zftONWFxPpJ0usMsCtDWTsfibQPOBpDWasH/v++iYgaMKAS7R8GVGMc0Hi279Jz8Evj8cfrD0Bbyz+8/tlIHKw/Gx1aS555Mkqfd8e7kH6axm9/3b+XLtG9zyEAdnTrdkScHR5e7/sONvV/Sdb/7d7ZDvbZnIb+D/bPg3T8806r8U9uY/wTLcY/h1u03d3Yuf3nHrU4LOnWp9Tp+O+jluPfjUmr8aEs9kp9zDeSXL5SKqZ926sRcSpGDqTx7eZzzq09rLXb1jz+S5c0/cZYMMvHo+EDzx4zV6gWXqTMzR7fjnij5fg32aj/pEX9p+fjYodpnCjef7Pdtp3Lv7dqv0S81bL+n85oJdvPT07Wr4fJxlWx1T93TvzRLv1elz+t/0Pbl388aZ6vrTx/Gj8fbD87uNvrfzT5sh4ezdbdKFSrS1MRo8lnW9dPPz22EW/sn5b/1Mnt+79W1/9YRHzVYfnvHL/Tdtd+qP+556r/5w88/PTrn9ql31n9v1sPncrWdNL/dZrBFzl3AAAAAAAA0G9yEXEkklx+I5zL5fPr73ccj0O5UrlSPX25vHx1LurflR2PkVxjpvto0/sQU9n7sI349Kb4TEQci4jvh8bq8fxsuTTX68IDAAAAAAAAAAAAAAAAAABAnzjc5vv/qT+HWh4yur85BPaUn/yGwbVj++/GLz0Bfcn9HwbXrtr/WPfzAew/938YUCO9zgDQS+7/MLi0fxhcHbX/1i8DAS85938AAAAAAAAAAAAAAAAAAAAAAAAAAADoqosXLqRLbe3Jzdk0Pnd9ZXmhfP3MXLGykF9cns3Plpeu5efL5flSMT9bXtzp75XK5WtT07F8Y7JarFQnKyurlxbLy1erl64sFuaLl4p+bQgAAAAAAAAAAAAAAAAAAAC2qqysLhRKpeKSwB4ExrKz3C/52YvAcH9kQ6ApcLcLrbuHnRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPJfAAAA//+FqTCn") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x170, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) 2.975414094s ago: executing program 3 (id=1170): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c00000008060103000000000000003b770000080500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x24004084}, 0xc040) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r6 = dup(0xffffffffffffffff) bind$unix(r6, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 2.937490784s ago: executing program 4 (id=1171): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x415}, 0x18) unshare(0x64000600) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) unshare(0x2040400) r6 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.046008774s ago: executing program 5 (id=1172): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0xd, 0x8, 0x4}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r2], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYRESOCT=r3], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) ioprio_set$pid(0x1, r4, 0x2007) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES32=r1, @ANYBLOB="af55ad77a43d45a5ee43a913588a952bdcc4faf0dee314d47017b796815beb072cf90cdd7aae6e3a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20008, @void, @value}, 0x94) r5 = getpid() r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x24020000) syz_usbip_server_init(0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.044967814s ago: executing program 3 (id=1173): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xb, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00'}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") socket$inet_udp(0x2, 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrandom(0x0, 0x0, 0x2) 943.554575ms ago: executing program 1 (id=1174): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES64=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r3, &(0x7f0000004200)='t', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000080e, @void, @value}, 0x94) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r4, 0x407, 0x6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8000, &(0x7f0000000100), 0x1, 0x7b2, &(0x7f00000007c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) socket$inet6(0xa, 0x2, 0x0) 855.685987ms ago: executing program 0 (id=1175): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) 855.319067ms ago: executing program 4 (id=1176): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) openat$autofs(0xffffffffffffff9c, 0x0, 0x140, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)='_', 0x1}, {0x0}], 0x2}, 0x44864) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 632.14427ms ago: executing program 4 (id=1177): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00'}, 0x18) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 399.955043ms ago: executing program 1 (id=1178): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000), 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000001400000000000000d32830c9a35e68b1ac82b4026face18357d85effba90ae84ab28acc75d3fb3214e2d75f5bb396433a5fdfafaa77caa9dbaff0893225dc5dd596c217e9360fd4e1e7f85f959185bdc76f2e72757cd289923867195fd27e2f6f2ee2241f7536746836a7e7691fe5f2f94abd41c45e2362fd7879f354e3849e2b38ca577d8088268101a7aa2aaa23f90ce76ee4c3172143159235b3c2820babb150ea078afa015e702b250634731486ba795ee21da7606dc6f173874aa5cdf"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x72, 0x0, &(0x7f0000001040)=0xc00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646e6c2500000000000000ee7a1af8ff000088bb2d372e5671ef000007010000f8ffffff9c82000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 387.682084ms ago: executing program 3 (id=1180): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRESHEX=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd47, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x141) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f00000008c0), &(0x7f0000000040)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x9e, 0x0, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x8, 0xb, 0x4}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) inotify_init() 0s ago: executing program 3 (id=1181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000007c0)={0xf}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x1, 0xd853, 0x400, 0x0, 0xf}) socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000c10a}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="f400000000090500c7b36abb0911e88c050000040900010073797a3000000000080005400000001d0900010073797a30000000000900010073797a3000000000700002002c000180140003000000000000000000000000000000000114000400fe8000100000000000000000000000bb2c00018014000300fe8800000000000000000000000001011400040000000000000000000000ffff000000000c000280050001003a00000006000340000400004400020006000340000301000000000000000000000000000114000400fc0200000000000000000000000000010c000280050001008400"/243], 0xf4}, 0x1, 0x0, 0x0, 0x20000005}, 0x4094) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000980)=0xffffff94) timer_gettime(r4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYRES32=r7, @ANYBLOB="0080020000000000140012800b001100677a473a75d3656e65766500"], 0x34}, 0x1, 0x2}, 0x80) kernel console output (not intermixed with test programs): ysadm_t pid=6346 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 149.532240][ T6327] lo speed is unknown, defaulting to 1000 [ 149.552599][ T6327] lo speed is unknown, defaulting to 1000 [ 149.560012][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 149.569446][ T29] audit: type=1326 audit(1750131607.360:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 149.596322][ T29] audit: type=1326 audit(1750131607.360:7865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 149.628078][ T29] audit: type=1326 audit(1750131607.360:7866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 149.654421][ T29] audit: type=1326 audit(1750131607.360:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 149.681749][ T29] audit: type=1326 audit(1750131607.360:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 149.708086][ T29] audit: type=1326 audit(1750131607.360:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 149.735579][ T29] audit: type=1326 audit(1750131607.360:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 149.765343][ T29] audit: type=1326 audit(1750131607.360:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 149.904978][ T6359] loop3: detected capacity change from 0 to 256 [ 149.923757][ T6361] ipvlan0: entered promiscuous mode [ 149.931011][ T6361] bridge0: port 1(ipvlan0) entered blocking state [ 149.938286][ T6361] bridge0: port 1(ipvlan0) entered disabled state [ 149.957112][ T6361] ipvlan0: entered allmulticast mode [ 149.963069][ T6361] bridge0: entered allmulticast mode [ 149.978401][ T6363] GUP no longer grows the stack in syz.0.770 (6363): 200000004000-200000008000 (200000002000) [ 149.991002][ T6363] CPU: 1 UID: 0 PID: 6363 Comm: syz.0.770 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 149.991030][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.991106][ T6363] Call Trace: [ 149.991114][ T6363] [ 149.991123][ T6363] __dump_stack+0x1d/0x30 [ 149.991205][ T6363] dump_stack_lvl+0xe8/0x140 [ 149.991223][ T6363] dump_stack+0x15/0x1b [ 149.991242][ T6363] __get_user_pages+0x199d/0x1fb0 [ 149.991328][ T6363] ? __rcu_read_unlock+0x4f/0x70 [ 149.991353][ T6363] get_user_pages_remote+0x1dc/0x7a0 [ 149.991380][ T6363] __access_remote_vm+0x156/0x560 [ 149.991407][ T6363] access_remote_vm+0x32/0x40 [ 149.991469][ T6363] proc_pid_cmdline_read+0x30f/0x6a0 [ 149.991498][ T6363] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 149.991566][ T6363] vfs_readv+0x3fb/0x690 [ 149.991647][ T6363] ? restore_fpregs_from_fpstate+0x61/0x120 [ 149.991725][ T6363] __x64_sys_preadv+0xfd/0x1c0 [ 149.991760][ T6363] x64_sys_call+0x1503/0x2fb0 [ 149.991779][ T6363] do_syscall_64+0xd2/0x200 [ 149.991797][ T6363] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.991826][ T6363] ? clear_bhb_loop+0x40/0x90 [ 149.991895][ T6363] ? clear_bhb_loop+0x40/0x90 [ 149.991916][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.991963][ T6363] RIP: 0033:0x7f41fccce929 [ 149.991984][ T6363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.992002][ T6363] RSP: 002b:00007f41fb337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 149.992030][ T6363] RAX: ffffffffffffffda RBX: 00007f41fcef5fa0 RCX: 00007f41fccce929 [ 149.992043][ T6363] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 000000000000000a [ 149.992055][ T6363] RBP: 00007f41fcd50b39 R08: 0000000000000200 R09: 0000000000000000 [ 149.992067][ T6363] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 149.992078][ T6363] R13: 0000000000000000 R14: 00007f41fcef5fa0 R15: 00007fffab9b6528 [ 149.992095][ T6363] [ 150.002579][ T6361] ipvlan0: left allmulticast mode [ 150.082332][ T6365] loop3: detected capacity change from 0 to 512 [ 150.086309][ T6361] bridge0: left allmulticast mode [ 150.170967][ T6365] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.196825][ T6365] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 150.274857][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 150.295271][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 150.377101][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 150.437077][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 150.582654][ T6377] lo speed is unknown, defaulting to 1000 [ 150.610142][ T6377] lo speed is unknown, defaulting to 1000 [ 150.969715][ T6391] lo speed is unknown, defaulting to 1000 [ 150.978136][ T6391] lo speed is unknown, defaulting to 1000 [ 151.409257][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 151.485087][ T6396] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 151.558694][ T6401] loop0: detected capacity change from 0 to 512 [ 151.567997][ T6401] ext3: Unknown parameter 'smackfsfloor' [ 151.588280][ T6401] lo speed is unknown, defaulting to 1000 [ 151.617076][ T6401] lo speed is unknown, defaulting to 1000 [ 151.638507][ T6401] lo speed is unknown, defaulting to 1000 [ 151.660200][ T6404] loop0: detected capacity change from 0 to 2048 [ 151.668932][ T6401] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 151.682976][ T6401] lo speed is unknown, defaulting to 1000 [ 151.696671][ T6401] lo speed is unknown, defaulting to 1000 [ 151.718602][ T6401] lo speed is unknown, defaulting to 1000 [ 151.734667][ T6401] lo speed is unknown, defaulting to 1000 [ 151.745441][ T3588] Alternate GPT is invalid, using primary GPT. [ 151.752747][ T3588] loop0: p1 p2 p3 [ 151.757575][ T6401] lo speed is unknown, defaulting to 1000 [ 151.771251][ T6401] lo speed is unknown, defaulting to 1000 [ 151.853007][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 151.864686][ T6404] Alternate GPT is invalid, using primary GPT. [ 151.871860][ T6404] loop0: p1 p2 p3 [ 152.076391][ T6414] lo speed is unknown, defaulting to 1000 [ 152.083958][ T6414] lo speed is unknown, defaulting to 1000 [ 152.091934][ T6414] lo speed is unknown, defaulting to 1000 [ 152.517600][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 152.535111][ T3588] udevd[3588]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 152.558609][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 152.661489][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 152.673499][ T3588] udevd[3588]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 152.685885][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 152.813265][ T6419] loop0: detected capacity change from 0 to 256 [ 153.097896][ T6430] lo speed is unknown, defaulting to 1000 [ 153.105932][ T6430] lo speed is unknown, defaulting to 1000 [ 153.114188][ T6430] lo speed is unknown, defaulting to 1000 [ 154.368083][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 154.368143][ T29] audit: type=1326 audit(1750131612.260:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 154.404581][ T29] audit: type=1326 audit(1750131612.260:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 154.433962][ T29] audit: type=1326 audit(1750131612.260:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 154.479157][ T6437] loop0: detected capacity change from 0 to 1024 [ 154.522210][ T6437] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.578944][ T29] audit: type=1326 audit(1750131612.330:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff87ee0e929 code=0x7ffc0000 [ 154.606699][ T29] audit: type=1326 audit(1750131612.330:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87ee0e929 code=0x7ffc0000 [ 154.633448][ T29] audit: type=1326 audit(1750131612.330:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87ee0e929 code=0x7ffc0000 [ 154.661876][ T29] audit: type=1326 audit(1750131612.360:8162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 154.690210][ T29] audit: type=1326 audit(1750131612.360:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 154.717774][ T29] audit: type=1326 audit(1750131612.360:8164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 154.746400][ T29] audit: type=1326 audit(1750131612.360:8165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 154.754426][ T6437] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.789: Invalid block bitmap block 0 in block_group 0 [ 154.892487][ T6437] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.789: Failed to acquire dquot type 0 [ 154.932401][ T6437] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.789: Freeing blocks not in datazone - block = 0, count = 4096 [ 155.010706][ T6437] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.789: Invalid inode bitmap blk 0 in block_group 0 [ 155.028700][ T4712] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 0 [ 155.095394][ T6437] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 155.108446][ T6437] EXT4-fs (loop0): 1 orphan inode deleted [ 155.170517][ T6437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.234923][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.283436][ T6465] xt_connbytes: Forcing CT accounting to be enabled [ 155.293929][ T6465] Cannot find set identified by id 0 to match [ 155.326081][ T6467] loop1: detected capacity change from 0 to 164 [ 155.334733][ T6467] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.351195][ T6467] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.356157][ T6471] loop0: detected capacity change from 0 to 8192 [ 155.362926][ T6467] Symlink component flag not implemented [ 155.377857][ T6467] Symlink component flag not implemented [ 155.404665][ T6467] Symlink component flag not implemented (7) [ 155.411912][ T6467] Symlink component flag not implemented (116) [ 155.427142][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 155.440716][ T3588] loop0: p1 p4 < > [ 155.445259][ T3588] loop0: p1 start 4261412864 is beyond EOD, truncated [ 155.473732][ T6471] loop0: p1 p4 < > [ 155.478031][ T6471] loop0: p1 start 4261412864 is beyond EOD, truncated [ 155.493534][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 155.686971][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'. [ 155.739423][ T6502] loop0: detected capacity change from 0 to 1024 [ 155.749806][ T6502] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 155.750135][ T6505] netlink: 132 bytes leftover after parsing attributes in process `syz.1.807'. [ 155.785101][ T6502] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.806: Invalid block bitmap block 0 in block_group 0 [ 155.802183][ T6502] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.806: Failed to acquire dquot type 0 [ 155.815951][ T6502] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.806: Freeing blocks not in datazone - block = 0, count = 4096 [ 155.831853][ T6502] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.806: Invalid inode bitmap blk 0 in block_group 0 [ 155.870841][ T6502] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 155.952058][ T4746] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:51: Failed to release dquot type 0 [ 156.090035][ T6505] random: crng reseeded on system resumption [ 156.152189][ T6502] EXT4-fs (loop0): 1 orphan inode deleted [ 156.159109][ T6502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.205495][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.295043][ T6512] lo speed is unknown, defaulting to 1000 [ 156.303270][ T6512] lo speed is unknown, defaulting to 1000 [ 156.310326][ T6512] lo speed is unknown, defaulting to 1000 [ 156.572604][ T6514] loop1: detected capacity change from 0 to 1024 [ 156.592969][ T6516] loop3: detected capacity change from 0 to 256 [ 156.616631][ T6514] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.663604][ T6518] loop0: detected capacity change from 0 to 256 [ 156.674329][ T6514] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.809: Invalid block bitmap block 0 in block_group 0 [ 156.694392][ T6514] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.809: Failed to acquire dquot type 0 [ 156.782336][ T6514] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.809: Freeing blocks not in datazone - block = 0, count = 4096 [ 156.895256][ T6514] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.809: Invalid inode bitmap blk 0 in block_group 0 [ 156.922118][ T4747] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:52: Failed to release dquot type 0 [ 156.956983][ T6514] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 156.979169][ T6530] loop0: detected capacity change from 0 to 1024 [ 157.002301][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 157.013767][ T6530] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.033059][ T6530] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.816: Invalid block bitmap block 0 in block_group 0 [ 157.059030][ T6530] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.816: Failed to acquire dquot type 0 [ 157.104171][ T6514] EXT4-fs (loop1): 1 orphan inode deleted [ 157.111634][ T6514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.143878][ T6535] loop2: detected capacity change from 0 to 1024 [ 157.151362][ T6535] EXT4-fs: dax option not supported [ 157.160697][ T6530] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.816: Freeing blocks not in datazone - block = 0, count = 4096 [ 157.161055][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 157.208499][ T6535] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.818'. [ 157.220196][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.240355][ T6530] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.816: Invalid inode bitmap blk 0 in block_group 0 [ 157.255295][ T4747] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:52: Failed to release dquot type 0 [ 157.300655][ T6539] loop3: detected capacity change from 0 to 1024 [ 157.321542][ T6539] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.339369][ T6530] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 157.378999][ T6543] loop1: detected capacity change from 0 to 128 [ 157.397774][ T6530] EXT4-fs (loop0): 1 orphan inode deleted [ 157.435562][ T6530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.469242][ T6539] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.820: Invalid block bitmap block 0 in block_group 0 [ 157.500867][ T6546] loop2: detected capacity change from 0 to 256 [ 157.512232][ T6539] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.820: Failed to acquire dquot type 0 [ 157.517460][ T6543] syz.1.819: attempt to access beyond end of device [ 157.517460][ T6543] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 157.548554][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.563018][ T6539] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.820: Freeing blocks not in datazone - block = 0, count = 4096 [ 157.631396][ T6539] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.820: Invalid inode bitmap blk 0 in block_group 0 [ 157.652106][ T4736] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 0 [ 157.678491][ T6551] net_ratelimit: 41 callbacks suppressed [ 157.678508][ T6551] openvswitch: netlink: Message has 6 unknown bytes. [ 157.700505][ T6549] loop2: detected capacity change from 0 to 8192 [ 157.707396][ T6539] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 157.732813][ T6539] EXT4-fs (loop3): 1 orphan inode deleted [ 157.756046][ T6539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.780268][ T6555] loop1: detected capacity change from 0 to 256 [ 157.788558][ T3299] loop2: p1 p4 < > [ 157.796125][ T3299] loop2: p1 start 4261412864 is beyond EOD, truncated [ 157.804680][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.820948][ T6549] loop2: p1 p4 < > [ 157.825277][ T6549] loop2: p1 start 4261412864 is beyond EOD, truncated [ 157.899446][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 157.919399][ T6564] vhci_hcd: invalid port number 96 [ 157.926170][ T6564] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 157.974085][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 157.985885][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 158.088081][ T6577] random: crng reseeded on system resumption [ 158.117352][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 158.148015][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 158.159238][ T6584] loop0: detected capacity change from 0 to 256 [ 158.432456][ T6586] lo speed is unknown, defaulting to 1000 [ 158.450610][ T6586] lo speed is unknown, defaulting to 1000 [ 158.462385][ T6586] lo speed is unknown, defaulting to 1000 [ 158.783098][ T36] hid-generic 0000:0800:0001.0001: item fetching failed at offset 0/3 [ 158.802456][ T36] hid-generic 0000:0800:0001.0001: probe with driver hid-generic failed with error -22 [ 158.828878][ T6593] loop1: detected capacity change from 0 to 512 [ 158.844631][ T6593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.892520][ T6593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.962214][ T6593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.980634][ T6599] loop2: detected capacity change from 0 to 256 [ 158.992950][ T6595] loop3: detected capacity change from 0 to 1024 [ 159.006898][ T6593] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.020337][ T6595] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.023664][ T6593] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 159.048931][ T6593] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 159.075136][ T6602] netlink: '+}[@': attribute type 13 has an invalid length. [ 159.108389][ T6595] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.837: Invalid block bitmap block 0 in block_group 0 [ 159.190629][ T6595] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.837: Failed to acquire dquot type 0 [ 159.239531][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.241034][ T6595] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.837: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.304953][ T6595] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.837: Invalid inode bitmap blk 0 in block_group 0 [ 159.326940][ T6608] loop0: detected capacity change from 0 to 2048 [ 159.335232][ T4736] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 0 [ 159.349864][ T6595] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 159.381630][ T6595] EXT4-fs (loop3): 1 orphan inode deleted [ 159.390879][ T6611] loop1: detected capacity change from 0 to 512 [ 159.399922][ T6595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.415464][ T6602] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.424660][ T6602] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.434672][ T6602] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.444132][ T6602] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.456744][ T6611] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.456913][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 159.456923][ T29] audit: type=1326 audit(1750131617.350:8677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4b0f5d290 code=0x7ffc0000 [ 159.503847][ T6611] EXT4-fs (loop1): 1 truncate cleaned up [ 159.517869][ T6608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.532073][ T29] audit: type=1326 audit(1750131617.400:8678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd4b0f5d677 code=0x7ffc0000 [ 159.534546][ T6611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.560328][ T29] audit: type=1326 audit(1750131617.400:8679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4b0f5d290 code=0x7ffc0000 [ 159.600773][ T29] audit: type=1326 audit(1750131617.400:8680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 159.626366][ T29] audit: type=1326 audit(1750131617.400:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 159.653301][ T6602] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.662771][ T6602] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.672071][ T6602] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.681737][ T6602] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.695003][ T6602] bond0: left promiscuous mode [ 159.700427][ T6602] bond_slave_0: left promiscuous mode [ 159.706615][ T6602] bond_slave_1: left promiscuous mode [ 159.717136][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.752545][ T6618] loop3: detected capacity change from 0 to 512 [ 159.783239][ T6618] ext3: Unknown parameter 'smackfsfloor' [ 159.800756][ T6618] siw: device registration error -23 [ 159.829841][ T6618] loop3: detected capacity change from 0 to 2048 [ 159.862114][ T6619] hsr_slave_0 (unregistering): left promiscuous mode [ 159.897565][ T29] audit: type=1400 audit(1750131617.790:8682): avc: denied { execute } for pid=6621 comm="syz.2.844" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 159.961915][ T6618] Alternate GPT is invalid, using primary GPT. [ 159.969242][ T6618] loop3: p1 p2 p3 [ 159.975131][ T29] audit: type=1400 audit(1750131617.830:8683): avc: denied { map } for pid=6621 comm="syz.2.844" path="socket:[14023]" dev="sockfs" ino=14023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.026136][ T29] audit: type=1326 audit(1750131617.910:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87ee0e929 code=0x7ffc0000 [ 160.052654][ T29] audit: type=1326 audit(1750131617.910:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff87ee0e929 code=0x7ffc0000 [ 160.079405][ T29] audit: type=1326 audit(1750131617.910:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87ee0e929 code=0x7ffc0000 [ 160.109948][ T6626] loop2: detected capacity change from 0 to 1024 [ 160.172078][ T6626] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.233064][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 160.248461][ T3588] udevd[3588]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 160.272362][ T6636] loop3: detected capacity change from 0 to 256 [ 160.281666][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 160.300132][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.318199][ T6626] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.846: Invalid block bitmap block 0 in block_group 0 [ 160.362287][ T6626] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.846: Failed to acquire dquot type 0 [ 160.392240][ T6626] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.846: Freeing blocks not in datazone - block = 0, count = 4096 [ 160.422319][ T6626] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.846: Invalid inode bitmap blk 0 in block_group 0 [ 160.436845][ T6626] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 160.446218][ T4747] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:52: Failed to release dquot type 0 [ 160.532878][ T6626] EXT4-fs (loop2): 1 orphan inode deleted [ 160.539869][ T6626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.587194][ T6617] syz.1.842 (6617) used greatest stack depth: 5880 bytes left [ 160.695866][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.762762][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.003655][ T6651] __nla_validate_parse: 8 callbacks suppressed [ 161.003673][ T6651] netlink: 60 bytes leftover after parsing attributes in process `syz.2.854'. [ 161.029762][ T6649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.854'. [ 161.044853][ T6650] loop1: detected capacity change from 0 to 1024 [ 161.054445][ T6650] EXT4-fs: Ignoring removed nobh option [ 161.060546][ T6650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.085537][ T6651] loop2: detected capacity change from 0 to 2048 [ 161.149459][ T6650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.181911][ T6650] syzkaller1: entered promiscuous mode [ 161.189304][ T6650] syzkaller1: entered allmulticast mode [ 161.202751][ T3588] Alternate GPT is invalid, using primary GPT. [ 161.210763][ T3588] loop2: p1 p2 p3 [ 161.307201][ T6651] Alternate GPT is invalid, using primary GPT. [ 161.315243][ T6651] loop2: p1 p2 p3 [ 161.341494][ T3306] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 161.417646][ T3306] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 161.865815][ T6664] xt_connbytes: Forcing CT accounting to be enabled [ 161.936133][ T6664] Cannot find set identified by id 0 to match [ 161.958890][ T3914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.980837][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'. [ 162.019420][ T6669] 9pnet_fd: Insufficient options for proto=fd [ 162.053470][ T6658] Set syz1 is full, maxelem 65536 reached [ 162.063574][ T6669] loop2: detected capacity change from 0 to 512 [ 162.132732][ T6669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.172928][ T6669] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.250697][ T6678] loop0: detected capacity change from 0 to 128 [ 162.270714][ T6679] netlink: 'syz.3.866': attribute type 10 has an invalid length. [ 162.293329][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.326924][ T6679] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 162.380026][ T6681] loop2: detected capacity change from 0 to 512 [ 162.390195][ T6679] loop3: detected capacity change from 0 to 512 [ 162.400828][ T6678] syz.0.864: attempt to access beyond end of device [ 162.400828][ T6678] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 162.423273][ T6679] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 162.439944][ T6679] EXT4-fs (loop3): mount failed [ 162.454698][ T6681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.520747][ T6692] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 162.545495][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 162.563876][ T6692] (: renamed from lo [ 162.608969][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.637518][ T6696] loop0: detected capacity change from 0 to 2048 [ 162.669070][ T6696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.678492][ T6682] lo speed is unknown, defaulting to 1000 [ 162.690620][ T6682] lo speed is unknown, defaulting to 1000 [ 162.697739][ T6682] lo speed is unknown, defaulting to 1000 [ 162.781854][ T6682] chnl_net:caif_netlink_parms(): no params data found [ 162.806775][ T6709] loop2: detected capacity change from 0 to 512 [ 162.850721][ T6709] ext3: Unknown parameter 'smackfsfloor' [ 162.932981][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.970654][ T6709] loop2: detected capacity change from 0 to 2048 [ 163.022652][ T3299] Alternate GPT is invalid, using primary GPT. [ 163.030252][ T3299] loop2: p1 p2 p3 [ 163.043991][ T6717] loop0: detected capacity change from 0 to 512 [ 163.152651][ T6717] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 163.172448][ T6717] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 163.192473][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.201125][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.258739][ T6682] bridge_slave_0: entered allmulticast mode [ 163.287300][ T6682] bridge_slave_0: entered promiscuous mode [ 163.313831][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.323242][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.356334][ T6682] bridge_slave_1: entered allmulticast mode [ 163.378895][ T6682] bridge_slave_1: entered promiscuous mode [ 163.466451][ T6709] Alternate GPT is invalid, using primary GPT. [ 163.472599][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.475859][ T6709] loop2: p1 p2 p3 [ 163.503749][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.526818][ T2998] Alternate GPT is invalid, using primary GPT. [ 163.534468][ T2998] loop2: p1 p2 p3 [ 163.627491][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 163.629013][ T6682] team0: Port device team_slave_0 added [ 163.641218][ T3661] udevd[3661]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 163.656499][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 163.672992][ T6722] loop2: detected capacity change from 0 to 1024 [ 163.685822][ T6722] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.687625][ T6682] team0: Port device team_slave_1 added [ 163.734585][ T6722] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.876: Invalid block bitmap block 0 in block_group 0 [ 163.779396][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 163.806560][ T6722] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.876: Failed to acquire dquot type 0 [ 163.807910][ T3588] udevd[3588]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 163.830700][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 163.879328][ T6722] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.876: Freeing blocks not in datazone - block = 0, count = 4096 [ 163.898258][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.907048][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.936094][ T6682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.957305][ T6722] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.876: Invalid inode bitmap blk 0 in block_group 0 [ 163.982164][ T4747] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:52: Failed to release dquot type 0 [ 163.997220][ T6722] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 164.012294][ T6722] EXT4-fs (loop2): 1 orphan inode deleted [ 164.019524][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.027376][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.057655][ T6682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.071283][ T6722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.122340][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.185009][ T6682] hsr_slave_0: entered promiscuous mode [ 164.185138][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 164.204953][ T6682] hsr_slave_1: entered promiscuous mode [ 164.221695][ T6682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.233672][ T6682] Cannot create hsr debugfs directory [ 164.433325][ T6682] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.465396][ T6753] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 164.478212][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 164.478224][ T29] audit: type=1400 audit(1750131622.370:8977): avc: denied { relabelto } for pid=6752 comm="syz.0.885" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 164.518757][ T29] audit: type=1400 audit(1750131622.370:8978): avc: denied { associate } for pid=6752 comm="syz.0.885" name="cgroup.procs" dev="cgroup" ino=53 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 164.555870][ T6753] loop0: detected capacity change from 0 to 512 [ 164.568382][ T6682] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.587804][ T6753] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.600739][ T29] audit: type=1326 audit(1750131622.480:8979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 164.628261][ T29] audit: type=1326 audit(1750131622.480:8980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 164.655863][ T29] audit: type=1326 audit(1750131622.480:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 164.681378][ T29] audit: type=1326 audit(1750131622.480:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 164.707687][ T29] audit: type=1326 audit(1750131622.480:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 164.739777][ T6753] EXT4-fs (loop0): 1 truncate cleaned up [ 164.747879][ T6753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.803955][ T6682] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.817536][ T29] audit: type=1326 audit(1750131622.500:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 164.846492][ T29] audit: type=1326 audit(1750131622.500:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 164.856024][ T6759] loop3: detected capacity change from 0 to 256 [ 164.873263][ T29] audit: type=1326 audit(1750131622.580:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.4.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 164.916200][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.944116][ T6682] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.022616][ T6763] netlink: '+}[@': attribute type 13 has an invalid length. [ 165.055859][ T6682] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.063440][ T6765] loop4: detected capacity change from 0 to 256 [ 165.076543][ T6682] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.146407][ T6682] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.163206][ T6682] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.336749][ T6790] netlink: 'syz.3.893': attribute type 4 has an invalid length. [ 165.486666][ T6796] netlink: 'syz.3.893': attribute type 4 has an invalid length. [ 165.504027][ T6782] lo speed is unknown, defaulting to 1000 [ 165.511850][ T6797] netlink: 60 bytes leftover after parsing attributes in process `syz.4.896'. [ 165.528124][ T6782] lo speed is unknown, defaulting to 1000 [ 165.534085][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.555490][ T6797] loop4: detected capacity change from 0 to 2048 [ 165.603315][ T6795] netlink: 60 bytes leftover after parsing attributes in process `syz.4.896'. [ 165.617850][ T6782] lo speed is unknown, defaulting to 1000 [ 165.627546][ T6682] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.645446][ T6797] Alternate GPT is invalid, using primary GPT. [ 165.652553][ T6797] loop4: p1 p2 p3 [ 165.690275][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.698503][ T4747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.777687][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.787336][ T4747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.931856][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.078924][ T6682] veth0_vlan: entered promiscuous mode [ 166.106234][ T6682] veth1_vlan: entered promiscuous mode [ 166.180446][ T6682] veth0_macvtap: entered promiscuous mode [ 166.203267][ T6682] veth1_macvtap: entered promiscuous mode [ 166.213792][ T6814] loop2: detected capacity change from 0 to 512 [ 166.218467][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.232203][ T6814] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.243581][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.281099][ T6814] EXT4-fs (loop2): 1 truncate cleaned up [ 166.293296][ T6814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.333392][ T6682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.343647][ T6682] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.355136][ T6682] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.364987][ T6682] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.392610][ T6815] loop3: detected capacity change from 0 to 8192 [ 166.394247][ T6819] loop4: detected capacity change from 0 to 512 [ 166.418738][ T6819] ext3: Unknown parameter 'smackfsfloor' [ 166.433978][ T6819] siw: device registration error -23 [ 166.449922][ T6819] loop4: detected capacity change from 0 to 2048 [ 166.503110][ T3299] Alternate GPT is invalid, using primary GPT. [ 166.510522][ T3299] loop4: p1 p2 p3 [ 166.532896][ T6819] Alternate GPT is invalid, using primary GPT. [ 166.540237][ T6819] loop4: p1 p2 p3 [ 166.624807][ T2998] Alternate GPT is invalid, using primary GPT. [ 166.634955][ T2998] loop4: p1 p2 p3 [ 166.756413][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 166.757066][ T3588] udevd[3588]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 166.953569][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 167.268025][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 167.398210][ T6833] lo speed is unknown, defaulting to 1000 [ 167.406125][ T6833] lo speed is unknown, defaulting to 1000 [ 167.414270][ T6840] loop3: detected capacity change from 0 to 512 [ 167.458214][ T6833] lo speed is unknown, defaulting to 1000 [ 167.491835][ T6840] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 167.544333][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.592762][ T6840] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 167.619751][ T6840] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #11: comm syz.3.900: corrupted inode contents [ 167.639171][ T6847] loop2: detected capacity change from 0 to 512 [ 167.655186][ T6847] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.706403][ T6847] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 167.738026][ T6840] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #11: comm syz.3.900: mark_inode_dirty error [ 167.832371][ T6840] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.900: invalid indirect mapped block 1 (level 1) [ 167.883797][ T6840] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #11: comm syz.3.900: corrupted inode contents [ 167.922947][ T6840] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 167.947524][ T6840] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #11: comm syz.3.900: corrupted inode contents [ 167.974991][ T6840] EXT4-fs error (device loop3): ext4_truncate:4597: inode #11: comm syz.3.900: mark_inode_dirty error [ 168.005708][ T6840] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 168.035736][ T6840] EXT4-fs (loop3): 1 truncate cleaned up [ 168.044672][ T6840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.278688][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.708307][ T6869] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 168.717220][ T6869] netlink: 40 bytes leftover after parsing attributes in process `syz.0.910'. [ 168.893110][ T6869] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 169.004651][ T6871] Falling back ldisc for ttyS3. [ 169.171134][ T6876] loop4: detected capacity change from 0 to 512 [ 169.198546][ T6876] EXT4-fs: Ignoring removed bh option [ 169.221187][ T6876] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.294629][ T6876] EXT4-fs (loop4): 1 truncate cleaned up [ 169.310098][ T6876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.495138][ T6876] netlink: 'syz.4.914': attribute type 4 has an invalid length. [ 169.565166][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 169.632114][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 169.632133][ T29] audit: type=1326 audit(1750131627.520:9296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 169.666863][ T29] audit: type=1326 audit(1750131627.520:9297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 169.692944][ T29] audit: type=1326 audit(1750131627.520:9298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 169.721518][ T29] audit: type=1326 audit(1750131627.520:9299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 169.751575][ T29] audit: type=1326 audit(1750131627.520:9300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 169.811663][ T6902] bridge_slave_1: left allmulticast mode [ 169.818568][ T6902] bridge_slave_1: left promiscuous mode [ 169.825224][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.836745][ T29] audit: type=1326 audit(1750131627.680:9301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 169.862682][ T29] audit: type=1326 audit(1750131627.730:9302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 169.889984][ T29] audit: type=1326 audit(1750131627.760:9303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 169.921055][ T6902] bridge_slave_0: left allmulticast mode [ 169.921554][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.927068][ T6902] bridge_slave_0: left promiscuous mode [ 169.944016][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.983370][ T29] audit: type=1326 audit(1750131627.870:9304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6903 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 170.176974][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.921'. [ 170.189074][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.921'. [ 170.222359][ T6927] loop1: detected capacity change from 0 to 1024 [ 170.249611][ T29] audit: type=1326 audit(1750131628.130:9305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6928 comm="syz.2.922" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff87ee0e929 code=0x0 [ 170.252760][ T6927] EXT4-fs: dax option not supported [ 170.496927][ T6927] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.923'. [ 170.876581][ T6946] loop1: detected capacity change from 0 to 1024 [ 170.922444][ T6946] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.081423][ T6946] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.926: Invalid block bitmap block 0 in block_group 0 [ 171.104687][ T6946] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.926: Failed to acquire dquot type 0 [ 171.120996][ T6952] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.928'. [ 171.133736][ T6946] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.926: Freeing blocks not in datazone - block = 0, count = 4096 [ 171.213072][ T6952] netlink: zone id is out of range [ 171.222799][ T6952] netlink: zone id is out of range [ 171.230765][ T6946] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.926: Invalid inode bitmap blk 0 in block_group 0 [ 171.251255][ T6955] IPv6: Can't replace route, no match found [ 171.267395][ T4747] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:52: Failed to release dquot type 0 [ 171.274211][ T6954] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 171.300053][ T6957] loop4: detected capacity change from 0 to 256 [ 171.301239][ T6952] netlink: zone id is out of range [ 171.311021][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 171.314547][ T6952] netlink: zone id is out of range [ 171.329791][ T6952] netlink: zone id is out of range [ 171.332738][ T6946] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 171.336163][ T6952] netlink: zone id is out of range [ 171.336176][ T6952] netlink: zone id is out of range [ 171.336181][ T6952] netlink: zone id is out of range [ 171.336186][ T6952] netlink: zone id is out of range [ 171.378963][ T6946] EXT4-fs (loop1): 1 orphan inode deleted [ 171.386614][ T6946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.418071][ T6959] loop3: detected capacity change from 0 to 1024 [ 171.432816][ T6959] EXT4-fs: Ignoring removed orlov option [ 171.433752][ T6682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.474241][ T6959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.289348][ T6972] lo speed is unknown, defaulting to 1000 [ 172.297111][ T6972] lo speed is unknown, defaulting to 1000 [ 172.303655][ T6972] lo speed is unknown, defaulting to 1000 [ 172.489644][ T6968] loop4: detected capacity change from 0 to 1024 [ 172.702423][ T6968] EXT4-fs: Ignoring removed nobh option [ 172.708254][ T6968] EXT4-fs: Ignoring removed bh option [ 172.741172][ T6977] loop2: detected capacity change from 0 to 256 [ 172.776382][ T6980] rdma_op ffff888125f40180 conn xmit_rdma 0000000000000000 [ 172.804057][ T6968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.853590][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.907396][ T6968] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 172.950806][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.037999][ T6997] loop2: detected capacity change from 0 to 1024 [ 173.049785][ T6997] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.070375][ T6997] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.942: Invalid block bitmap block 0 in block_group 0 [ 173.085386][ T6997] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.942: Failed to acquire dquot type 0 [ 173.085446][ T7003] loop4: detected capacity change from 0 to 512 [ 173.106874][ T6997] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.942: Freeing blocks not in datazone - block = 0, count = 4096 [ 173.120677][ T6997] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.942: Invalid inode bitmap blk 0 in block_group 0 [ 173.133700][ T4740] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:46: Failed to release dquot type 0 [ 173.146488][ T6997] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 173.157135][ T7003] loop4: detected capacity change from 0 to 128 [ 173.158837][ T6997] EXT4-fs (loop2): 1 orphan inode deleted [ 173.172427][ T6997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.211343][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.253707][ T7008] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.327694][ T7013] loop3: detected capacity change from 0 to 1024 [ 173.341616][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 173.351541][ T7013] EXT4-fs: dax option not supported [ 173.390138][ T7013] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.946'. [ 173.399342][ T7003] syz.4.944: attempt to access beyond end of device [ 173.399342][ T7003] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 173.414664][ T7003] syz.4.944: attempt to access beyond end of device [ 173.414664][ T7003] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 173.429547][ T7003] syz.4.944: attempt to access beyond end of device [ 173.429547][ T7003] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 173.444895][ T7003] syz.4.944: attempt to access beyond end of device [ 173.444895][ T7003] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 173.458662][ T7003] syz.4.944: attempt to access beyond end of device [ 173.458662][ T7003] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 173.473578][ T7003] syz.4.944: attempt to access beyond end of device [ 173.473578][ T7003] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 173.487880][ T7003] syz.4.944: attempt to access beyond end of device [ 173.487880][ T7003] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 173.502412][ T7003] syz.4.944: attempt to access beyond end of device [ 173.502412][ T7003] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 173.516776][ T7003] syz.4.944: attempt to access beyond end of device [ 173.516776][ T7003] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 173.548354][ T7003] syz.4.944: attempt to access beyond end of device [ 173.548354][ T7003] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 173.567991][ T7021] rdma_op ffff888123bc2980 conn xmit_rdma 0000000000000000 [ 173.598764][ T7024] xt_hashlimit: size too large, truncated to 1048576 [ 173.717265][ T7028] loop0: detected capacity change from 0 to 256 [ 174.440128][ T7040] loop2: detected capacity change from 0 to 256 [ 174.687429][ T7048] loop1: detected capacity change from 0 to 512 [ 174.695335][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 174.712869][ T7048] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 174.730349][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 174.749639][ T7048] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 174.777987][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 174.826077][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 174.837590][ T7053] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.871090][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 174.890489][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 174.936273][ T7050] lo speed is unknown, defaulting to 1000 [ 174.944488][ T7050] lo speed is unknown, defaulting to 1000 [ 174.951128][ T7050] lo speed is unknown, defaulting to 1000 [ 174.960707][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 174.973513][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.955'. [ 175.040631][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 175.040647][ T29] audit: type=1400 audit(1750131632.930:9635): avc: denied { getopt } for pid=7058 comm="syz.2.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.237769][ T7064] loop4: detected capacity change from 0 to 1024 [ 175.252834][ T7064] EXT4-fs: dax option not supported [ 175.279988][ T7064] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.959'. [ 175.286886][ T29] audit: type=1326 audit(1750131633.160:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 175.314653][ T29] audit: type=1326 audit(1750131633.160:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 175.338175][ T29] audit: type=1326 audit(1750131633.160:9638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 175.361556][ T29] audit: type=1326 audit(1750131633.160:9639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 175.385186][ T29] audit: type=1326 audit(1750131633.160:9640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 175.409253][ T29] audit: type=1326 audit(1750131633.160:9641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 175.433819][ T29] audit: type=1326 audit(1750131633.160:9642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 175.458728][ T29] audit: type=1326 audit(1750131633.160:9643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 175.487980][ T29] audit: type=1326 audit(1750131633.160:9644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b544de929 code=0x7ffc0000 [ 175.773810][ T7068] Falling back ldisc for ttyS3. [ 175.851614][ T7071] lo speed is unknown, defaulting to 1000 [ 175.881460][ T7071] lo speed is unknown, defaulting to 1000 [ 175.901900][ T7071] lo speed is unknown, defaulting to 1000 [ 175.912058][ T7082] loop4: detected capacity change from 0 to 2048 [ 175.946291][ T7082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.040993][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.553526][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'. [ 176.714868][ T7123] loop0: detected capacity change from 0 to 1024 [ 176.867372][ T7123] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.904510][ T7123] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.968: Invalid block bitmap block 0 in block_group 0 [ 176.949562][ T7123] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.968: Failed to acquire dquot type 0 [ 177.002200][ T7123] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.968: Freeing blocks not in datazone - block = 0, count = 4096 [ 177.114385][ T7123] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.968: Invalid inode bitmap blk 0 in block_group 0 [ 177.134028][ T4712] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 0 [ 177.188532][ T7123] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 177.202411][ T7123] EXT4-fs (loop0): 1 orphan inode deleted [ 177.470179][ T7135] loop4: detected capacity change from 0 to 512 [ 177.516656][ T7135] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 177.559917][ T7123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.773572][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.011219][ T7160] loop3: detected capacity change from 0 to 1024 [ 178.048782][ T7160] EXT4-fs: Ignoring removed nobh option [ 178.054889][ T7160] EXT4-fs: Ignoring removed bh option [ 178.126659][ T7160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.296235][ T7160] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 178.324631][ T7177] loop4: detected capacity change from 0 to 8192 [ 178.392952][ T7177] loop4: p1 p4 < > [ 178.400196][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.419897][ T7177] loop4: p1 start 4261412864 is beyond EOD, truncated [ 178.561388][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 178.585454][ T7208] loop4: detected capacity change from 0 to 164 [ 178.596290][ T7199] lo speed is unknown, defaulting to 1000 [ 178.607913][ T7208] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 178.611663][ T7199] lo speed is unknown, defaulting to 1000 [ 178.643606][ T7199] lo speed is unknown, defaulting to 1000 [ 178.651058][ T7205] lo speed is unknown, defaulting to 1000 [ 178.658095][ T7205] lo speed is unknown, defaulting to 1000 [ 178.689973][ T7205] lo speed is unknown, defaulting to 1000 [ 178.907642][ T7214] lo speed is unknown, defaulting to 1000 [ 178.914549][ T7214] lo speed is unknown, defaulting to 1000 [ 178.920851][ T7214] lo speed is unknown, defaulting to 1000 [ 179.055541][ T7214] loop3: detected capacity change from 0 to 512 [ 179.146716][ T7214] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.180755][ T7214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.193421][ T7214] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.362556][ T7218] 0·: renamed from hsr_slave_1 [ 179.638216][ T7219] ALSA: seq fatal error: cannot create timer (-22) [ 179.663898][ T7218] 0·: entered allmulticast mode [ 179.686632][ T7218] net_ratelimit: 8 callbacks suppressed [ 179.686647][ T7218] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 179.756715][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.814923][ T7225] loop3: detected capacity change from 0 to 256 [ 180.050694][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 180.050708][ T29] audit: type=1326 audit(1750131637.940:9789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 180.117835][ T7223] lo speed is unknown, defaulting to 1000 [ 180.155451][ T7223] lo speed is unknown, defaulting to 1000 [ 180.243578][ T7223] lo speed is unknown, defaulting to 1000 [ 180.929866][ T7233] loop3: detected capacity change from 0 to 512 [ 180.977382][ T7233] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 181.031234][ T29] audit: type=1326 audit(1750131638.110:9790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 181.035619][ T7233] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.994: iget: bad i_size value: 12154757448730 [ 181.054982][ T29] audit: type=1326 audit(1750131638.110:9791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 181.068539][ T7233] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.994: couldn't read orphan inode 13 (err -117) [ 181.091524][ T29] audit: type=1326 audit(1750131638.110:9792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7230 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 181.091569][ T29] audit: type=1326 audit(1750131638.200:9793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.3.994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x0 [ 181.104326][ T7233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.126574][ T29] audit: type=1326 audit(1750131638.880:9794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a5e8e929 code=0x7ffc0000 [ 181.172461][ T7233] EXT4-fs warning (device loop3): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 181.185250][ T29] audit: type=1326 audit(1750131638.880:9795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a5e8e929 code=0x7ffc0000 [ 181.219186][ T29] audit: type=1326 audit(1750131638.910:9796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f86a5e8e929 code=0x7ffc0000 [ 181.242550][ T29] audit: type=1326 audit(1750131638.910:9797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a5e8e929 code=0x7ffc0000 [ 181.265989][ T29] audit: type=1326 audit(1750131638.910:9798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a5e8e929 code=0x7ffc0000 [ 181.318584][ T7233] netlink: 'syz.3.994': attribute type 10 has an invalid length. [ 181.326466][ T7233] __nla_validate_parse: 3 callbacks suppressed [ 181.326478][ T7233] netlink: 40 bytes leftover after parsing attributes in process `syz.3.994'. [ 181.351678][ T7233] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 181.535137][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.716321][ T7270] loop3: detected capacity change from 0 to 512 [ 181.793376][ T7270] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.840475][ T7270] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 181.900937][ T7270] blktrace: Concurrent blktraces are not allowed on loop7 [ 181.990529][ T7283] loop1: detected capacity change from 0 to 256 [ 182.050203][ T7284] loop4: detected capacity change from 0 to 2048 [ 182.091418][ T7287] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1006'. [ 182.127474][ T7284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.214509][ T7302] loop0: detected capacity change from 0 to 1024 [ 182.251344][ T7302] EXT4-fs: Ignoring removed i_version option [ 182.257748][ T7306] loop3: detected capacity change from 0 to 128 [ 182.291339][ T7302] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.318115][ T7302] EXT4-fs: Ignoring removed nobh option [ 182.323830][ T7302] EXT4-fs: Ignoring removed bh option [ 182.413728][ T7302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.497230][ T7302] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 182.506577][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.562226][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.660142][ T7338] loop0: detected capacity change from 0 to 512 [ 182.667248][ T7338] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 182.686848][ T7343] loop4: detected capacity change from 0 to 164 [ 182.758292][ T7356] loop0: detected capacity change from 0 to 256 [ 183.175939][ T7368] loop3: detected capacity change from 0 to 512 [ 183.208245][ T7368] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.210520][ T7373] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1018'. [ 183.242138][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 183.250964][ T7368] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 183.355329][ T7384] netlink: 'syz.0.1030': attribute type 298 has an invalid length. [ 183.376870][ T7387] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1020'. [ 183.393481][ T7387] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 183.406182][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 183.433188][ T7387] bond0 (unregistering): Released all slaves [ 183.485418][ T7399] loop2: detected capacity change from 0 to 1024 [ 183.522595][ T7399] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.552174][ T7399] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1023: Invalid block bitmap block 0 in block_group 0 [ 183.576659][ T7399] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1023: Failed to acquire dquot type 0 [ 183.602893][ T7399] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.1023: Freeing blocks not in datazone - block = 0, count = 4096 [ 183.632235][ T7399] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1023: Invalid inode bitmap blk 0 in block_group 0 [ 183.638440][ T7408] loop3: detected capacity change from 0 to 2048 [ 183.651807][ T7399] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 183.672301][ T4747] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:52: Failed to release dquot type 0 [ 183.684136][ T7399] EXT4-fs (loop2): 1 orphan inode deleted [ 183.690380][ T7399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.720255][ T7408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.801592][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.884495][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.935064][ T7417] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 184.025982][ T7419] loop3: detected capacity change from 0 to 512 [ 184.080929][ T7419] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1028: Parent and EA inode have the same ino 15 [ 184.169355][ T7419] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1028: Parent and EA inode have the same ino 15 [ 184.238640][ T7419] EXT4-fs (loop3): 1 orphan inode deleted [ 184.273191][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.340906][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1029'. [ 184.370428][ T7426] loop4: detected capacity change from 0 to 512 [ 184.378306][ T7426] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.392053][ T7426] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 184.452742][ T7428] wireguard0: entered promiscuous mode [ 184.458315][ T7428] wireguard0: entered allmulticast mode [ 184.525127][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 184.678945][ T7445] loop4: detected capacity change from 0 to 1024 [ 184.688528][ T7445] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.699615][ T7445] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 184.750125][ T7450] loop2: detected capacity change from 0 to 256 [ 184.756529][ T7445] JBD2: no valid journal superblock found [ 184.756544][ T7445] EXT4-fs (loop4): Could not load journal inode [ 184.838657][ T7452] loop0: detected capacity change from 0 to 2048 [ 184.882466][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 184.892709][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.913145][ T7452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.052694][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 185.052710][ T29] audit: type=1326 audit(1750131642.950:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7461 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff87ee0e929 code=0x7ffc0000 [ 185.124123][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.133804][ T29] audit: type=1326 audit(1750131642.950:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7461 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87ee0e929 code=0x7ffc0000 [ 185.157495][ T29] audit: type=1326 audit(1750131642.950:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7461 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff87ee0e929 code=0x7ffc0000 [ 185.181234][ T29] audit: type=1326 audit(1750131642.980:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7461 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87ee0e929 code=0x7ffc0000 [ 185.202888][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 185.204816][ T29] audit: type=1326 audit(1750131642.980:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7461 comm="syz.2.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff87ee0e929 code=0x7ffc0000 [ 185.242190][ T7473] loop2: detected capacity change from 0 to 512 [ 185.261996][ T7473] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 185.294139][ T7477] loop6: detected capacity change from 0 to 7 [ 185.302354][ T29] audit: type=1400 audit(1750131643.190:10095): avc: denied { append } for pid=7475 comm="syz.3.1048" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.342690][ T7473] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 185.452629][ T29] audit: type=1326 audit(1750131643.230:10096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 185.476247][ T29] audit: type=1326 audit(1750131643.230:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fccce929 code=0x7ffc0000 [ 185.499775][ T29] audit: type=1326 audit(1750131643.230:10098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41fcccd290 code=0x7ffc0000 [ 185.523475][ T29] audit: type=1326 audit(1750131643.230:10099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41fcccd290 code=0x7ffc0000 [ 185.549408][ T7473] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #11: comm syz.2.1054: corrupted inode contents [ 185.573034][ T7473] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #11: comm syz.2.1054: mark_inode_dirty error [ 185.637574][ T7487] loop3: detected capacity change from 0 to 164 [ 185.664524][ T7487] isofs_fill_super: root inode is not a directory. Corrupted media? [ 185.758899][ T7473] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1054: invalid indirect mapped block 1 (level 1) [ 185.929738][ T7473] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #11: comm syz.2.1054: corrupted inode contents [ 185.962213][ T7473] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 185.974421][ T7493] loop1: detected capacity change from 0 to 512 [ 185.991788][ T7493] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 186.009029][ T7493] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.1050: iget: bad i_size value: 12154757448730 [ 186.016824][ T7473] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #11: comm syz.2.1054: corrupted inode contents [ 186.039789][ T7493] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1050: couldn't read orphan inode 13 (err -117) [ 186.048382][ T7473] EXT4-fs error (device loop2): ext4_truncate:4597: inode #11: comm syz.2.1054: mark_inode_dirty error [ 186.063608][ T7493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.079028][ T7493] EXT4-fs warning (device loop1): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 186.089651][ T7473] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 186.100192][ T7493] netlink: 'syz.1.1050': attribute type 10 has an invalid length. [ 186.114103][ T7493] team0: Port device geneve1 added [ 186.116841][ T7473] EXT4-fs (loop2): 1 truncate cleaned up [ 186.125797][ T7473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.217165][ T7508] loop3: detected capacity change from 0 to 256 [ 186.362867][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.387246][ T7527] loop3: detected capacity change from 0 to 512 [ 186.402338][ T7527] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 186.520906][ T7534] lo speed is unknown, defaulting to 1000 [ 186.528029][ T7534] lo speed is unknown, defaulting to 1000 [ 186.534172][ T7534] lo speed is unknown, defaulting to 1000 [ 186.666353][ T7534] loop0: detected capacity change from 0 to 512 [ 186.675595][ T7534] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.748899][ T7534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.761472][ T7534] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.835722][ T6682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.888652][ T7536] loop2: detected capacity change from 0 to 512 [ 186.957719][ T7536] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1055: Parent and EA inode have the same ino 15 [ 187.018650][ T7549] siw: device registration error -23 [ 187.025119][ T7536] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1055: Parent and EA inode have the same ino 15 [ 187.039580][ T7536] EXT4-fs (loop2): 1 orphan inode deleted [ 187.058773][ T7536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.122960][ T7574] loop3: detected capacity change from 0 to 512 [ 187.152791][ T7574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.181697][ T7574] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 187.195687][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.286140][ T7583] hub 9-0:1.0: USB hub found [ 187.290969][ T7583] hub 9-0:1.0: 8 ports detected [ 187.379503][ T7588] loop3: detected capacity change from 0 to 256 [ 187.399143][ T3313] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 187.438499][ T3313] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 187.455309][ T3313] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 187.476759][ T7599] __nla_validate_parse: 1 callbacks suppressed [ 187.476777][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1069'. [ 187.526066][ T7602] loop4: detected capacity change from 0 to 512 [ 187.526195][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'. [ 187.537060][ T7602] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 187.620061][ T7607] loop1: detected capacity change from 0 to 2048 [ 187.654863][ T7607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.793501][ T5312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.811693][ T6682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.845439][ T7619] loop1: detected capacity change from 0 to 1024 [ 187.853911][ T7619] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.867985][ T7619] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1075: Invalid block bitmap block 0 in block_group 0 [ 187.882435][ T7619] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1075: Failed to acquire dquot type 0 [ 187.894213][ T7619] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.1075: Freeing blocks not in datazone - block = 0, count = 4096 [ 187.907805][ T7619] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1075: Invalid inode bitmap blk 0 in block_group 0 [ 187.920681][ T4746] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:51: Failed to release dquot type 0 [ 187.933534][ T7619] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 187.942829][ T7619] EXT4-fs (loop1): 1 orphan inode deleted [ 187.948765][ T7619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.970349][ T6682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.991783][ T7623] loop1: detected capacity change from 0 to 512 [ 187.999342][ T7623] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.009841][ T7623] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 188.080357][ T7626] loop0: detected capacity change from 0 to 128 [ 188.091919][ T7626] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.109818][ T7626] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.203165][ T7639] loop1: detected capacity change from 0 to 256 [ 188.244095][ T7627] lo speed is unknown, defaulting to 1000 [ 188.251367][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.252326][ T7627] lo speed is unknown, defaulting to 1000 [ 188.266897][ T7627] lo speed is unknown, defaulting to 1000 [ 188.295948][ T7646] loop0: detected capacity change from 0 to 256 [ 188.305329][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 188.417285][ T7627] chnl_net:caif_netlink_parms(): no params data found [ 188.484025][ T7662] loop1: detected capacity change from 0 to 512 [ 188.491382][ T7662] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.505639][ T7662] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 188.533092][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.540200][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.569142][ T7627] bridge_slave_0: entered allmulticast mode [ 188.582978][ T7627] bridge_slave_0: entered promiscuous mode [ 188.590245][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.597683][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.612816][ T7627] bridge_slave_1: entered allmulticast mode [ 188.619472][ T7627] bridge_slave_1: entered promiscuous mode [ 188.647795][ T7627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.658904][ T7627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.688497][ T7627] team0: Port device team_slave_0 added [ 188.712009][ T7627] team0: Port device team_slave_1 added [ 188.731150][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.738315][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.764767][ T7627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.767653][ T7673] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1089'. [ 188.776583][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.791373][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.817772][ T7627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.832371][ T7673] 1ªX¹¦À: renamed from 60ªX¹¦À [ 188.839937][ T7673] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 188.871396][ T7676] loop0: detected capacity change from 0 to 256 [ 188.906134][ T7627] hsr_slave_0: entered promiscuous mode [ 188.929001][ T7627] hsr_slave_1: entered promiscuous mode [ 188.944117][ T7627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.956357][ T7627] Cannot create hsr debugfs directory [ 189.039806][ T7627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.048930][ T7627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.055583][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1091'. [ 189.064853][ T7684] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1091'. [ 189.065726][ T7684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1091'. [ 189.075937][ T7627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.100191][ T7627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.117853][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.125122][ T7627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.132441][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.139500][ T7627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.183198][ T7692] tipc: Started in network mode [ 189.188201][ T7692] tipc: Node identity 4, cluster identity 4711 [ 189.194918][ T7692] tipc: Node number set to 4 [ 189.201017][ T7627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.218471][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.232374][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.248017][ T7627] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.264796][ T4746] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.269137][ T7696] loop3: detected capacity change from 0 to 256 [ 189.271983][ T4746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.295877][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.303004][ T4736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.340724][ T7694] loop4: detected capacity change from 0 to 512 [ 189.386015][ T7694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.399806][ T7694] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.400278][ T7627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.491434][ T7712] loop3: detected capacity change from 0 to 256 [ 189.503578][ T7715] loop1: detected capacity change from 0 to 512 [ 189.518425][ T7715] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.534271][ T7715] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 189.535261][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.604012][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 189.627533][ T7725] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1098'. [ 189.636987][ T7725] 0·: renamed from hsr_slave_1 [ 189.650220][ T7725] 0·: entered allmulticast mode [ 189.662951][ T7727] loop1: detected capacity change from 0 to 256 [ 189.676569][ T7725] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 189.694290][ T7728] ALSA: seq fatal error: cannot create timer (-22) [ 189.718701][ T7627] veth0_vlan: entered promiscuous mode [ 189.739858][ T7734] loop1: detected capacity change from 0 to 1024 [ 189.744901][ T7627] veth1_vlan: entered promiscuous mode [ 189.758130][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 189.760918][ T7734] EXT4-fs: Ignoring removed orlov option [ 189.877706][ T7734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.893222][ T7627] veth0_macvtap: entered promiscuous mode [ 189.900523][ T7627] veth1_macvtap: entered promiscuous mode [ 189.910795][ T7627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.926780][ T7627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.937311][ T7627] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.946119][ T7627] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.954898][ T7627] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.963621][ T7627] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.134863][ T6682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.315368][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 190.315382][ T29] audit: type=1326 audit(1750131648.210:10665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 190.321849][ T7763] loop5: detected capacity change from 0 to 512 [ 190.482650][ T7767] lo speed is unknown, defaulting to 1000 [ 190.489949][ T7767] lo speed is unknown, defaulting to 1000 [ 190.496716][ T7767] lo speed is unknown, defaulting to 1000 [ 190.662038][ T7767] hub 9-0:1.0: USB hub found [ 190.667839][ T7767] hub 9-0:1.0: 8 ports detected [ 190.838537][ T29] audit: type=1326 audit(1750131648.290:10666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 190.862942][ T29] audit: type=1326 audit(1750131648.290:10667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 190.886495][ T29] audit: type=1326 audit(1750131648.290:10668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 190.910122][ T29] audit: type=1326 audit(1750131648.290:10669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 190.933561][ T7763] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1078: Parent and EA inode have the same ino 15 [ 190.945952][ T29] audit: type=1326 audit(1750131648.290:10670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4b0f60847 code=0x7ffc0000 [ 190.959353][ T7763] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1078: Parent and EA inode have the same ino 15 [ 190.969425][ T29] audit: type=1326 audit(1750131648.290:10671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 191.005645][ T29] audit: type=1326 audit(1750131648.290:10672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 191.029244][ T29] audit: type=1326 audit(1750131648.290:10673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 191.035005][ T7763] EXT4-fs (loop5): 1 orphan inode deleted [ 191.052803][ T29] audit: type=1326 audit(1750131648.290:10674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 191.068067][ T7763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.174382][ T7775] netlink: 'syz.1.1111': attribute type 39 has an invalid length. [ 191.215638][ T7777] loop3: detected capacity change from 0 to 256 [ 191.242948][ T7775] veth1_macvtap: left promiscuous mode [ 191.306697][ T7773] loop4: detected capacity change from 0 to 8192 [ 191.390120][ T7783] loop1: detected capacity change from 0 to 1024 [ 191.442327][ T7783] EXT4-fs: Ignoring removed bh option [ 191.448358][ T7783] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.468629][ T7783] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 191.502387][ T7783] EXT4-fs (loop1): orphan cleanup on readonly fs [ 191.527495][ T7783] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.1114: Invalid inode table block 0 in block_group 0 [ 191.551820][ T7783] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 191.571196][ T7783] EXT4-fs error (device loop1): ext4_quota_write:7322: inode #3: comm syz.1.1114: mark_inode_dirty error [ 191.602696][ T7783] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1114: Failed to acquire dquot type 0 [ 191.618118][ T7783] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.1114: Invalid inode table block 0 in block_group 0 [ 191.632047][ T7627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.642598][ T7783] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 191.662800][ T7783] EXT4-fs error (device loop1): ext4_ext_truncate:4475: inode #15: comm syz.1.1114: mark_inode_dirty error [ 191.713165][ T7783] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.1114: Invalid inode table block 0 in block_group 0 [ 191.726329][ T7783] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 191.742718][ T7783] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 191.745034][ T7790] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 191.764090][ T7783] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.1114: Invalid inode table block 0 in block_group 0 [ 191.781651][ T7788] lo speed is unknown, defaulting to 1000 [ 191.788175][ T7788] lo speed is unknown, defaulting to 1000 [ 191.794674][ T7790] SELinux: failed to load policy [ 191.794931][ T7788] lo speed is unknown, defaulting to 1000 [ 191.807789][ T7783] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 191.832819][ T7783] EXT4-fs error (device loop1): ext4_truncate:4597: inode #15: comm syz.1.1114: mark_inode_dirty error [ 191.851708][ T7790] can0: slcan on ttyS3. [ 191.861735][ T7783] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 191.878538][ T7783] EXT4-fs (loop1): 1 truncate cleaned up [ 191.895747][ T7783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.012418][ T7783] syz_tun: entered allmulticast mode [ 192.058545][ T7783] syzkaller1: entered promiscuous mode [ 192.064095][ T7783] syzkaller1: entered allmulticast mode [ 192.152334][ T7796] can0 (unregistered): slcan off ttyS3. [ 192.182442][ T7782] syz_tun: left allmulticast mode [ 192.222077][ T6682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.283547][ T7813] loop5: detected capacity change from 0 to 1024 [ 192.301557][ T7813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.325941][ T7813] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.348062][ T7813] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 192.382916][ T7813] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.1119: lblock 2 mapped to illegal pblock 2 (length 1) [ 192.477798][ T7813] EXT4-fs (loop5): Remounting filesystem read-only [ 192.485753][ T7813] EXT4-fs (loop5): 1 orphan inode deleted [ 192.519374][ T7813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.543499][ T7813] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.681538][ T7834] lo speed is unknown, defaulting to 1000 [ 192.688775][ T7834] lo speed is unknown, defaulting to 1000 [ 192.695476][ T7834] lo speed is unknown, defaulting to 1000 [ 193.021995][ T7837] loop3: detected capacity change from 0 to 1024 [ 193.050544][ T7837] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.071831][ T7837] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 193.093022][ T7837] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 193.112194][ T7837] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1122: lblock 2 mapped to illegal pblock 2 (length 1) [ 193.141523][ T7837] EXT4-fs (loop3): Remounting filesystem read-only [ 193.156613][ T7837] EXT4-fs (loop3): 1 orphan inode deleted [ 193.169758][ T7837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.240646][ T7842] loop4: detected capacity change from 0 to 256 [ 193.278114][ T7837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.374217][ T7847] loop5: detected capacity change from 0 to 1024 [ 193.422137][ T7847] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 193.488076][ T7847] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1125: Invalid block bitmap block 0 in block_group 0 [ 193.521910][ T7847] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1125: Failed to acquire dquot type 0 [ 193.543012][ T7858] loop3: detected capacity change from 0 to 256 [ 193.555462][ T7847] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.1125: Freeing blocks not in datazone - block = 0, count = 4096 [ 193.571578][ T7859] loop4: detected capacity change from 0 to 512 [ 193.585019][ T7847] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1125: Invalid inode bitmap blk 0 in block_group 0 [ 193.602947][ T4712] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 0 [ 193.655943][ T7847] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 193.657354][ T7860] __nla_validate_parse: 4 callbacks suppressed [ 193.657369][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 193.679789][ T7860] netlink: 'syz.1.1129': attribute type 15 has an invalid length. [ 193.688263][ T7847] EXT4-fs (loop5): 1 orphan inode deleted [ 193.702673][ T7847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.717889][ T7859] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 193.728443][ T7860] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.737238][ T7860] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.746107][ T7860] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.754910][ T7860] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.763877][ T7860] vxlan0: entered promiscuous mode [ 193.835836][ T7627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.879300][ T7859] EXT4-fs (loop4): orphan cleanup on readonly fs [ 193.902864][ T7859] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.928112][ T7859] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 193.942967][ T7859] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1128: bg 0: block 40: padding at end of block bitmap is not set [ 193.944051][ T7865] lo speed is unknown, defaulting to 1000 [ 193.995726][ T7865] lo speed is unknown, defaulting to 1000 [ 194.002299][ T7859] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 194.011686][ T7865] lo speed is unknown, defaulting to 1000 [ 194.138887][ T7859] EXT4-fs (loop4): 1 truncate cleaned up [ 194.245188][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.252603][ T7859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.252729][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.272524][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.316967][ T7853] Set syz1 is full, maxelem 65536 reached [ 194.336207][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.343702][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.351300][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.358769][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.366213][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.373736][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.381140][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.388639][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.396061][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.403494][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.455064][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.462535][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.469968][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.477421][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.484831][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.492374][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.499458][ T7872] lo speed is unknown, defaulting to 1000 [ 194.499747][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.499768][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.513920][ T7872] lo speed is unknown, defaulting to 1000 [ 194.520671][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.533829][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.537495][ T7872] lo speed is unknown, defaulting to 1000 [ 194.541208][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.554435][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.561852][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.569405][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.576891][ T3414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 194.587783][ T7876] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 194.610910][ T7879] loop1: detected capacity change from 0 to 128 [ 194.625869][ T7879] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.638005][ T3414] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 194.680046][ T7882] loop0: detected capacity change from 0 to 512 [ 194.717366][ T7882] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 194.748038][ T7883] fido_id[7883]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.772315][ T7882] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.1136: iget: bad i_size value: 12154757448730 [ 194.788244][ T7882] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1136: couldn't read orphan inode 13 (err -117) [ 194.845114][ T7882] EXT4-fs warning (device loop0): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 194.866695][ T7893] loop4: detected capacity change from 0 to 512 [ 194.867805][ T7882] netlink: 'syz.0.1136': attribute type 10 has an invalid length. [ 194.880971][ T7882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1136'. [ 194.899312][ T7899] loop3: detected capacity change from 0 to 256 [ 194.914249][ T7893] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1138: Parent and EA inode have the same ino 15 [ 194.928913][ T7893] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1138: Parent and EA inode have the same ino 15 [ 194.974160][ T7882] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 195.016125][ T7893] EXT4-fs (loop4): 1 orphan inode deleted [ 195.105726][ T7907] loop1: detected capacity change from 0 to 2048 [ 195.339504][ T7902] program syz.3.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.652042][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 195.652057][ T29] audit: type=1326 audit(1750131653.480:11075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 195.681916][ T29] audit: type=1326 audit(1750131653.480:11076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 195.705422][ T29] audit: type=1326 audit(1750131653.480:11077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 195.728921][ T29] audit: type=1326 audit(1750131653.480:11078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 195.752558][ T29] audit: type=1326 audit(1750131653.480:11079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 195.776047][ T29] audit: type=1326 audit(1750131653.480:11080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 195.799610][ T29] audit: type=1326 audit(1750131653.480:11081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 195.825440][ T29] audit: type=1326 audit(1750131653.480:11082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 195.848946][ T29] audit: type=1326 audit(1750131653.490:11083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 195.849052][ T29] audit: type=1326 audit(1750131653.490:11084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 195.896904][ T7918] loop0: detected capacity change from 0 to 164 [ 195.911347][ T7918] isofs_fill_super: root inode is not a directory. Corrupted media? [ 195.976410][ T7927] loop4: detected capacity change from 0 to 256 [ 196.001646][ T7915] lo speed is unknown, defaulting to 1000 [ 196.011410][ T7915] lo speed is unknown, defaulting to 1000 [ 196.019724][ T7915] lo speed is unknown, defaulting to 1000 [ 196.136699][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1152'. [ 196.157013][ T7939] bridge_slave_1: left allmulticast mode [ 196.163104][ T7939] bridge_slave_1: left promiscuous mode [ 196.168829][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.189467][ T7944] loop4: detected capacity change from 0 to 256 [ 196.196742][ T7939] bridge_slave_0: left allmulticast mode [ 196.202530][ T7939] bridge_slave_0: left promiscuous mode [ 196.208250][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.238368][ T7946] loop6: detected capacity change from 0 to 7 [ 196.297736][ T7941] lo speed is unknown, defaulting to 1000 [ 196.304553][ T7941] lo speed is unknown, defaulting to 1000 [ 196.310727][ T7941] lo speed is unknown, defaulting to 1000 [ 196.384459][ T7949] batadv_slave_0: entered promiscuous mode [ 196.400292][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1156'. [ 196.442171][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.463879][ T7951] loop4: detected capacity change from 0 to 164 [ 196.473011][ T7951] isofs_fill_super: root inode is not a directory. Corrupted media? [ 196.546770][ T7949] batadv_slave_0 (unregistering): left promiscuous mode [ 196.585968][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.873758][ T7955] random: crng reseeded on system resumption [ 196.950299][ T7956] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1158'. [ 196.970907][ T7956] 0ªX¹¦À: renamed from caif0 [ 196.991687][ T7956] 0ªX¹¦À: entered allmulticast mode [ 196.996988][ T7956] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 197.306910][ T7968] loop1: detected capacity change from 0 to 256 [ 197.314475][ T7968] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.333300][ T7968] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 197.341972][ T7968] FAT-fs (loop1): Filesystem has been set read-only [ 197.466272][ T7971] lo speed is unknown, defaulting to 1000 [ 197.473133][ T7971] lo speed is unknown, defaulting to 1000 [ 197.479505][ T7971] lo speed is unknown, defaulting to 1000 [ 197.806727][ T7973] loop0: detected capacity change from 0 to 512 [ 197.881317][ T7977] loop1: detected capacity change from 0 to 256 [ 197.958449][ T7973] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.1160: Parent and EA inode have the same ino 15 [ 198.220994][ T7984] loop1: detected capacity change from 0 to 1024 [ 198.248605][ T7987] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 198.268826][ T7984] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 198.309037][ T7984] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1167: Invalid block bitmap block 0 in block_group 0 [ 198.354202][ T7973] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.1160: Parent and EA inode have the same ino 15 [ 198.369738][ T7987] bond_slave_1: entered promiscuous mode [ 198.381340][ T7984] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1167: Failed to acquire dquot type 0 [ 198.411185][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1168'. [ 198.435201][ T7984] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.1167: Freeing blocks not in datazone - block = 0, count = 4096 [ 198.486923][ T7987] bond0: (slave bond_slave_1): Releasing backup interface [ 198.503361][ T7984] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1167: Invalid inode bitmap blk 0 in block_group 0 [ 198.522144][ T4712] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 0 [ 198.543436][ T7987] bond_slave_1 (unregistering): left promiscuous mode [ 198.563952][ T7984] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 198.584402][ T7973] EXT4-fs (loop0): 1 orphan inode deleted [ 198.590349][ T7984] EXT4-fs (loop1): 1 orphan inode deleted [ 198.602698][ T7984] EXT4-fs mount: 9 callbacks suppressed [ 198.602790][ T7984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.641420][ T7973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.690118][ T6682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.754971][ T7994] loop5: detected capacity change from 0 to 1024 [ 198.843733][ T8000] batadv_slave_0: entered promiscuous mode [ 198.850655][ T7996] random: crng reseeded on system resumption [ 198.859185][ T7994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.872376][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'. [ 198.881476][ T8000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.933410][ T7996] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1170'. [ 199.073763][ T8000] batadv_slave_0 (unregistering): left promiscuous mode [ 199.914126][ T8000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.941751][ T7996] 1ªX¹¦À: renamed from 60ªX¹¦À [ 199.948767][ T7996] 1ªX¹¦À: entered allmulticast mode [ 199.954148][ T7996] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 200.122249][ T8005] lo speed is unknown, defaulting to 1000 [ 200.128634][ T8005] lo speed is unknown, defaulting to 1000 [ 200.134656][ T8005] lo speed is unknown, defaulting to 1000 [ 200.252062][ T8009] hub 9-0:1.0: USB hub found [ 200.381984][ T8009] hub 9-0:1.0: 8 ports detected [ 200.654399][ T7627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.669718][ T29] kauditd_printk_skb: 564 callbacks suppressed [ 200.669733][ T29] audit: type=1326 audit(1750131658.560:11646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.3.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 200.699572][ T29] audit: type=1326 audit(1750131658.560:11647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.3.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 200.766159][ T29] audit: type=1326 audit(1750131658.620:11648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.3.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 200.789875][ T29] audit: type=1326 audit(1750131658.620:11649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.3.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 200.813549][ T29] audit: type=1326 audit(1750131658.620:11650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.3.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 200.837039][ T29] audit: type=1326 audit(1750131658.620:11651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.3.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 200.860570][ T29] audit: type=1326 audit(1750131658.620:11652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.3.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 200.884101][ T29] audit: type=1326 audit(1750131658.620:11653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.3.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 200.907708][ T29] audit: type=1326 audit(1750131658.620:11654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.3.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 200.907951][ T8013] loop1: detected capacity change from 0 to 2048 [ 200.931301][ T29] audit: type=1326 audit(1750131658.620:11655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.3.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0f5e929 code=0x7ffc0000 [ 200.971621][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.980911][ T8018] loop3: detected capacity change from 0 to 512 [ 201.037566][ T8018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.051086][ T8018] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.122515][ T8013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.155805][ T8027] loop0: detected capacity change from 0 to 8192 [ 201.208184][ T8023] lo speed is unknown, defaulting to 1000 [ 201.214706][ T8023] lo speed is unknown, defaulting to 1000 [ 201.221265][ T8023] lo speed is unknown, defaulting to 1000 [ 201.302070][ T6682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.331474][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.354155][ T8038] loop1: detected capacity change from 0 to 512 [ 201.364005][ T8029] program syz.4.1177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.395547][ T8038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.413735][ T8038] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.549654][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'. [ 201.709894][ T8048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=8048 comm=syz.3.1181 [ 201.730554][ T8046] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 201.788454][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 201.810146][ T4715] ================================================================== [ 201.818271][ T4715] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 201.826530][ T4715] [ 201.828894][ T4715] write to 0xffff8881411cb902 of 2 bytes by task 8027 on cpu 0: [ 201.836535][ T4715] fat16_ent_put+0x28/0x60 [ 201.841150][ T4715] fat_ent_write+0x69/0xe0 [ 201.845588][ T4715] fat_chain_add+0x15b/0x3f0 [ 201.850206][ T4715] fat_get_block+0x46c/0x5e0 [ 201.854817][ T4715] __block_write_begin_int+0x3fd/0xf90 [ 201.860297][ T4715] cont_write_begin+0x5fc/0x970 [ 201.865190][ T4715] fat_write_begin+0x4f/0xe0 [ 201.869903][ T4715] generic_perform_write+0x184/0x490 [ 201.875212][ T4715] __generic_file_write_iter+0x9e/0x120 [ 201.880779][ T4715] generic_file_write_iter+0x8d/0x2f0 [ 201.886171][ T4715] vfs_write+0x4a0/0x8e0 [ 201.890433][ T4715] ksys_write+0xda/0x1a0 [ 201.894693][ T4715] __x64_sys_write+0x40/0x50 [ 201.899316][ T4715] x64_sys_call+0x2cdd/0x2fb0 [ 201.904023][ T4715] do_syscall_64+0xd2/0x200 [ 201.908560][ T4715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.914472][ T4715] [ 201.916799][ T4715] read to 0xffff8881411cb800 of 512 bytes by task 4715 on cpu 1: [ 201.924531][ T4715] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 201.930446][ T4715] generic_perform_write+0x2c2/0x490 [ 201.935838][ T4715] shmem_file_write_iter+0xc5/0xf0 [ 201.940969][ T4715] lo_rw_aio+0x6ed/0x7a0 [ 201.945235][ T4715] loop_process_work+0x52d/0xa60 [ 201.950203][ T4715] loop_workfn+0x31/0x40 [ 201.954469][ T4715] process_scheduled_works+0x4ce/0x9d0 [ 201.959958][ T4715] worker_thread+0x582/0x770 [ 201.964573][ T4715] kthread+0x486/0x510 [ 201.968660][ T4715] ret_from_fork+0xdd/0x150 [ 201.973176][ T4715] ret_from_fork_asm+0x1a/0x30 [ 201.977978][ T4715] [ 201.980309][ T4715] Reported by Kernel Concurrency Sanitizer on: [ 201.986468][ T4715] CPU: 1 UID: 0 PID: 4715 Comm: kworker/u8:21 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 201.999158][ T4715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.009224][ T4715] Workqueue: loop0 loop_workfn [ 202.013997][ T4715] ================================================================== [ 202.226570][ T6682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.