last executing test programs: 4.502708957s ago: executing program 2 (id=7727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newtfilter={0x814, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0xfff1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x7e8, 0x2, [@TCA_U32_SEL={0x7d4, 0x5, {0xd, 0x9, 0x0, 0xfffe, 0xa, 0xeb, 0x3c4, 0x7f, [{0xd, 0x1, 0x38, 0x7ff}, {0x1, 0x0, 0x0, 0xffffffff}, {0xed7, 0x94, 0x1c00, 0x7}, {0x4, 0x6, 0x81, 0x46c}, {0x400, 0x10001, 0x100, 0x1}, {0x8, 0x3, 0x10000, 0x8}, {0x44db1e76, 0x7, 0x4, 0x3ff}, {0xdde, 0x1, 0x7, 0x8000}, {0x7, 0x9, 0x8, 0x7}, {0x8, 0x3, 0x6, 0x9}, {0x7, 0x1, 0xcb01, 0x9}, {0xb, 0x401, 0x5, 0x9}, {0x3, 0x1000, 0xfe, 0xa1f}, {0x2, 0x8001, 0x2, 0x7f}, {0x4, 0x9bdc, 0x5e5f, 0x8d62}, {0x8, 0x9, 0xc494, 0x6}, {0x2, 0xfffff4e7, 0xfffffffe, 0x2}, {0x3, 0x5, 0x5, 0x7}, {0x2, 0x68, 0x3ff, 0x81}, {0x7, 0x6, 0x5, 0x6}, {0x0, 0x4, 0x0, 0xd}, {0xffffff69, 0x0, 0x5, 0x7f}, {0x0, 0x5, 0x6, 0x3}, {0x8001, 0xfffffffb, 0x10000, 0x5}, {0xf70, 0xff, 0x5, 0x9}, {0x101, 0x10000, 0x6, 0x9}, {0xffffffff, 0x200, 0xfffffc00, 0x80000000}, {0x6, 0x7, 0x10, 0x3c27}, {0x7, 0x6b73, 0x8, 0x3}, {0x7, 0xffffffff, 0x7, 0x3}, {0x6, 0x6, 0xae55de4, 0x8}, {0x1, 0x1, 0x7, 0x10001}, {0x8, 0x7, 0xc, 0xf}, {0x8, 0x1, 0xbf8, 0x3}, {0x3, 0x3, 0x3, 0x10001}, {0x200, 0xfffffff8, 0x4, 0x5}, {0x200, 0xa, 0x10000, 0x1e3}, {0x7, 0x3, 0x84d4, 0x9}, {0x7, 0x9, 0x2, 0x200}, {0x3, 0x1de6, 0x0, 0xf}, {0x1, 0x1, 0x7, 0xffff}, {0x2, 0x8, 0x8b, 0xf}, {0x2, 0x2, 0x1, 0x75d}, {0x4, 0x8, 0x8000, 0x1ff}, {0x2, 0x100, 0xb, 0x8001}, {0x5, 0x812, 0x949, 0x2}, {0x411, 0x1, 0xfffffff9, 0x4}, {0x2, 0x0, 0x40aa, 0x2}, {0xffff0001, 0x2, 0x0, 0x3}, {0xffff5727, 0x1000, 0x2, 0xffff}, {0x80, 0xff, 0x9, 0x3}, {0x2, 0xfff, 0x250, 0x6}, {0x177, 0x36e, 0x525, 0xa}, {0x7, 0x4, 0x4, 0x1000}, {0xb, 0x3, 0xffffffff, 0x40}, {0x3, 0x0, 0xf}, {0xbe67, 0xb, 0x101}, {0x9, 0xfff00, 0x7, 0x2b8}, {0x6, 0x80000001, 0x7, 0x5}, {0x9, 0x5}, {0x2, 0x9, 0x1000, 0x8}, {0x2, 0x10, 0x652, 0x3}, {0x6, 0x6, 0x3}, {0x5, 0x0, 0x1, 0xfffffff7}, {0x5, 0x0, 0xdefb, 0x4}, {0x0, 0x2, 0x9, 0x6}, {0x2, 0xe, 0x8, 0x3}, {0xe, 0x4, 0xc, 0x2f73}, {0xffffffff, 0x2, 0xfffffff9, 0x2}, {0x5e, 0x7, 0xb, 0x80000000}, {0x4, 0x4, 0xfffffff7, 0x3}, {0x5, 0x7, 0x2cd, 0x1c19}, {0x0, 0x1, 0x9}, {0x9, 0xa9b2, 0x6, 0xe75}, {0x3, 0x1411, 0x2, 0x9}, {0x6, 0x869, 0x7, 0x80000000}, {0x8, 0x2, 0x8, 0xff}, {0x3, 0xc, 0x8, 0x7}, {0x7, 0x400, 0x0, 0x2}, {0x0, 0xfffffffe, 0x0, 0x9}, {0xaf33, 0x7ff, 0x2, 0xffffffff}, {0x1f827d31, 0x3, 0x9, 0x4}, {0x3, 0x1, 0xe9, 0x7}, {0x1, 0x9, 0x5, 0x4}, {0x200, 0x1, 0x2, 0x8}, {0x400, 0x31, 0x4863, 0x3}, {0x7, 0x4b7c, 0xfffeffff, 0x101}, {0x0, 0xf3e3, 0xea, 0x8}, {0x1, 0x80000001, 0x200, 0x3}, {0xa25c, 0xb0c, 0xfffffff8, 0x8000}, {0x3, 0xd9, 0x1, 0xffff}, {0x4, 0x4f1, 0x9}, {0x2, 0x1, 0x0, 0x62}, {0x8, 0x5, 0x7, 0x9}, {0x1, 0x65b4, 0x7f, 0x2}, {0xf0, 0x80000000, 0x0, 0x4}, {0x2, 0x80000001, 0x46d}, {0x47, 0x5, 0x7, 0x9}, {0x3, 0x5cd, 0x3, 0x112c}, {0x6376, 0x0, 0x6, 0x7}, {0x5, 0x0, 0x10001, 0x7}, {0xff72, 0x9, 0x4, 0xffffffff}, {0x23e, 0x8, 0x100, 0xa61}, {0x5, 0x1, 0x2, 0xfffffffa}, {0x4, 0x245, 0x4, 0x3}, {0x6, 0xa, 0x2, 0x3}, {0xf, 0x10000, 0x4, 0x297}, {0x3, 0x3, 0x4, 0x5}, {0x8, 0x6, 0xffffffff, 0x5}, {0x9b6, 0x54, 0xcc, 0x7}, {0x20000000, 0x40, 0x6, 0x3}, {0x9459, 0x0, 0x277, 0x7}, {0x39, 0x4, 0x2, 0x80000000}, {0x2, 0x5, 0x5, 0x4}, {0x0, 0x4, 0x5, 0x7f}, {0x8, 0xfff, 0x52, 0x100}, {0x2, 0x5, 0x9, 0xa}, {0x2, 0x5223c5ba, 0xb0}, {0x40, 0x2, 0x3, 0x1}, {0x8001, 0x3, 0x3, 0x9}, {0x1c, 0x7, 0x8, 0x4}, {0x5, 0x8, 0xad53, 0x6}, {0xacb, 0xa, 0x4}, {0x4, 0x4, 0x1, 0x81}]}}, @TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}]}, 0x814}, 0x1, 0x0, 0x0, 0x82}, 0x24040084) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) close(r8) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYRES16=r6], 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x24008050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'pim6reg1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'batadv0\x00', @remote}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000300)=0x9) socket(0x5, 0x6, 0xfffffc00) close(r9) socket$nl_route(0x10, 0x3, 0x0) 4.213010791s ago: executing program 2 (id=7728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a000000000800044000000000090001007379"], 0x64}}, 0x0) 3.946536666s ago: executing program 4 (id=7729): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x70) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000880)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x86) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000300000008000000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) write$cgroup_int(r5, &(0x7f00000001c0)=0x700, 0x12) 3.880628347s ago: executing program 4 (id=7731): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x400a02) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)=[r0, r1]}, 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000180)) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x9, [@func={0x10, 0x0, 0x0, 0xc, 0x2}, @union={0x9, 0x5, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x4, 0x4}, {0x4, 0x0, 0x5}, {0xc, 0x1, 0x10001}, {0xe, 0x4, 0x401}, {0x7, 0x3, 0xfffff726}]}, @enum64={0xc, 0x4, 0x0, 0x13, 0x1, 0x1, [{0xd, 0x800, 0x101}, {0xc, 0x10001, 0x8}, {0xa, 0x9, 0x8001}, {0x5, 0x10001, 0xc198}]}, @union={0x1, 0x2, 0x0, 0x5, 0x0, 0x3ff, [{0x10, 0x5, 0x3ff}, {0x5, 0x2, 0x5}]}, @var={0xf, 0x0, 0x0, 0xe, 0x4}, @fwd={0x9}, @restrict={0x1, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x30, 0x2e, 0x0, 0x61, 0x0, 0x5f]}}, &(0x7f0000000300)=""/148, 0xfd, 0x94, 0x0, 0x8, 0x10000, @value=r0}, 0x28) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000400)=""/235) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x40}}}, &(0x7f00000005c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000600)={r2, 0x300}, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000004}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x4, 0xd, 0xd, 0x0, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8000, 0x700, 0x1, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000008c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x80, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x80}, 0x1, 0x0, 0x0, 0x8818}, 0x200408c0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r7 = getpid() ptrace$poke(0x4, r7, &(0x7f0000000a00), 0x1) ptrace$PTRACE_SETSIGMASK(0x420b, r7, 0x8, &(0x7f0000000a40)={[0x1]}) read$nci(r0, &(0x7f0000000a80)=""/146, 0x92) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b40)={'veth0_to_hsr\x00', 0x200}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r3) connect(r3, &(0x7f0000000bc0)=@xdp={0x2c, 0xe, r5, 0x1e}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000c40)={'pimreg0\x00', 0xc100}) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) sendmsg$can_j1939(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000c80)="00f7298f031eb52728d05a179b7872c8b2ff881c00624f488c42cff94597e761ce88a3a1bda9a0440c55da27f348ac4f4edd9bee4032d5f6fe780505a52410c616093ee1a0742111233164148fea5ea9cd5cf26f05fe69731acc12bb34f1662e04d34d9a0db6876af05878991d0525b27eb97f2e7086c3fe7190841459c7bd67a78266d0e0a1c1bd04beec399d8cce6a61139437de30935eb55e1d86a15f8393c12965d96e787521b7df6a4aa6a15bc976522a07691023dfd6f562ada4dc98b0d7d10931e266b4fcd1561e9e6e79cdcea035a675a874134a3bee4a438f49a24e1e5ee89ca7b06716bce5c645fb57db4b47d91b80e0f06611c2b28620963e6d7ed6031a77723cf401ff854b0b04a6023cc53219f580b82e29241e31d2ccef5a170bd648eb7ef50f6a773124eda4c1a090491204cdff489b87c743d84f6b60e1eb6be255c031ee647b35f336f48cd26b3d4979aba8afcf61246d362511026e23f143aba223a989cc28dd17d8a29e58df461ae08becb077a95e11130b24958ef06735fcb28d2a6f6eda34c7149382750f009e163bb0d09c2b4deed2361a47e3b91a19aea0d9d602a361bb100ad4655ecf0101e51f29e62cde6fc2d03fe806af31807319c8164272af1b8de5e546fde2502e3d35767a3928f8808c98e04f65aac9912e3975e746d77a88dfeba0d26e394cbf0c5e0c1f54a175da85c816912ab34e8cf5c130c4c1b66555b5d00e21141774474ed00ad8e8d5380799a6fdfca3c7fa864a6c93c5b4a6aa12bcbaa628ad6d319ff367522924e1d1067f84a25ffda5fc9d2415310c534a9b859eb3a3da93982b3058f54a1e31950e52f61374cedcde106c357209afc664f789f5c74dc08a7436d6f0cbc7a385f9d2586aad111e3a85baadcebd82499651bbb6b3eb3aff6c41de3e45d0eaf3bf00666c533acdb9b7923c250addf7dc24f2ad4f7f53e7c605a68c86770c1da6d73f76bd2ececc3ec6cb8cd4d44e7f2ddf6e97cfc73b695cee2c61af3af247389c067120ab12fa3f0dbb49f7b1a406561bfae6fc3e78d17ddb33142aa4c3715318d9362fe6fc714132f1cc0ee872387a98cac32dbaf013bd32857dc5de1fc899d5e4953c4a187eb2feacc74b195801ed3e9cd10a5db7456b7671959abbf0e23c39c7f0e50007fe357250bb50fedc03fad98cf78deb45c99db6d9f04377409611fcb95b5e3725d33a1800170233736dbc5b26970dd7411f7974de1bd69e4e678967f48e1ba727991ab0e48b41ac39b74698956349898f9ab6e0db1603c0d38b819231d983f98c3aa65f4d2d49219b911be1247b9b5f892f5a8c22d0859fb586a6ac85161a85a465e9342897d0321a2fc72fa36853d506716a97a512a7b4603b30a589cca8e2d35ffeebdf9497acec8072a80ae0a5e7bfa57cb41dbbe80ded54d7f24647d4cf75931961954e2ed9459c4756bb3bf240f1d1d7a001f3cdf3089b1fa7773985fdf9d91a6c6406f0dea6350a0c84ff2322305f7b954eda05818fd23b15361d5ea33d06aa153f02c3d431d82814b44fd0d0a1da6d6ebe0fc8af0afc589c4e667d5602d7f3510565e604a70457c8620f112e4646e7518d4865d33d4b5592932d30b4d53ec2406f65654232141c2f12074ad64e4f4787e1847fa9fe62db276a9be2ce2cee975bdc783b18f2dfdfcc2db777369d66cd3e8b7d853f6cb9c3b1f07771afd4570b399c8f05f8a8654d0ba30f0ce2d265ef5e6bfe879cfabdb5c102fbd300e625abf05253e16536aad182614080931dd2cb40c91ed96896e040720e7733e0b4795c0ff042c5c604c979c9a095c627b63b98bfee1bc63af7ec7387cd7969c00d2f97a32dd5c81c73357b8d3e4601c16755c846cd1440e325dfd1107da4ab351c6f6c36df468ca987e6ed35fc335cd674bbe2de2a6aa6864584f1024ae436cc42e20c5e3accf73ae88594225f7c216d6abf0a79ceca4305cc41da3c5d9f5a2aacf8459419d861bdd52a89f2649e8ae8f940b433d5092056256f4de320f70852d583c1974232825cacf93b671ef7872897c9a5714c20ef7baf04dc98278cee9c0ad77fce558eb1f8ac2914e948fd4eb3ce4dccea54722d546032cc4299bfb7337cec15d3eaadaac05340564a254c85629b9c0587075514b5f1b73c035be4390dcec332196d134074f9b2c165eeaad6bc100e057fe076e27b4cab76ffe0bb1a6b8ca070c156be4ee06abe1b16f0214e703277c73cb5d48a2957a4db055ae728d4206641a7da65c02d639887dcf1238c6bdb982489f2c85379fd5ed9347dd002d16a8e1d772c5843ec228ddbad3d3c25279d1a820e5208c0ffd6072c0b5ce57a1a47842c6e7fbea9ea3bd74d5e3b81c18a89288e946e1f59f18f1040c00fc241c8eea356f43599dd512f4d830232f0c8a92c42f180a70ae18c5804958ace9b4e89008b1baad63225978007cc3fa839bb34e3f2290c16bb62ef4301bba81779b223f2908e3b4fbab560687c61df49e4950582c473f7586956a9222f67c0e6071ab25133f8e2ff426e0694d08369bad21bd6739c02be97f353ac2ebd63b1dc6059ab141c47a20ee56f8be099b61a0eec9dedd17cfedcbfde5b489e20801d12c3213596de68198f9739c0d328263c45db7b45a7eca60ac6b4cd560da40b9653240440e437a815ccb78f5843772879ca44f8b90d024e0b93f3933ad89615a826a7fd325735bdafe41b24333551956b525da6e17010cbf982c0a2ceca0de8cb03e6b7defaf65f6edafac8e0d77c463cf46b99b683d181815edc2023d62050cee768bc0b8b39a02c4d9f45c912ec27f407ef09b8490a05e9751a38f2d95a432adf0364682d298643e57878371acdf31f46a161ab64a7c364447010dad0b65f81d651366b88445cb629dbc502a25e9785b86d30b27bf6a44503efbe1d0b7169abf6a96f25aef36b574d48ebffd543a6acaf2b1427f9e0069c153c39d0bdaddb50d9c51f1adae74fe8896a9eae88f56ba56a9825bdd29c656f6fa34c2a780f2b81217ee84909d905141e0629c708ce09fa402ae1144feab6888baf33dc04b9760834e5af85597ec3a4cae1d3fef9f4ad05c9751730aa1e7173846e447bd71057f0527b32c647b1b8a65e42ed056752e9d9ee8f5292771e8052362e74c63fb1b1c40df63d0344a048aedaa1c943b1b2cd8d0b0d905a250e47f3340d9e1bd13ef884da810a503d757884a81e0573c927b97eaca08eee91bcbdf4623e6907485a8e03e2886a504ebb9bf9fd22c13f2853b892719ffa63ad7ac503c10b681d0737e9652107f7303d97a17b7828873e24d7b011e5b1de5217d7ff8212af372f0190ebbd25614f06b7871b5656ca9da24c1f8c25346fcaa2de4ddea852df14c1ddf0b551ad844a77f0cb7e65b2ddaae1fbfc79e6543c555ce60b989d0771b258846c80e55b99d6f530968dc56efb3a1376bbd385f5d2d28101585a8383252a721e7912c0c8ebaaae0e1338010abe2f18a4fd4d9ccccdc1d9b3eebc7e5b2c99faaa72e83dfdf2d037ca1f334c09c687b73d672a7b0806b04a0692acdba16ddca1d9c65bf3350940e78fe2be2c0e5840d46d66aa4ae280627b61086ffb454aedcf80b1f2bd65637f88e4f02a98ef2a1f41848f97826f7b3eee21d03cf9d61e4698607822a0fb2eab869c4ea612a207d57a0a2f2cf0552ac0403b42811695b11a609968018f144a190b7c9d1ae5fa8be651fdf5b0325f860cb3ad7bec60c667a56d58aca163766ada53e73a04088318e2b72074766ebfdd36c66d9411825570fbb55264a86f8fc36104505163e5e5f370889b2b1830116fc0cfd63733a201a8cbf8c1520bad4a15ecac685141e3ee21d4b267891e7c58eea97d4a7483a7a457e9a827d07f6e1bb417cab3b902db8484f3a2c9b46c2968df071f2181a7bffc3da28b70b46f5f60b88b0ac9c93777bd756cd69687cb24684d39eb060156439b53d318e5c457fcc51447aa2c19aece3e325054216a8ae14db8f6f6a7654361c763f05ef23653a579ac7f838f6a7e179b9f61f74a2d062dad8b89d095e441db1f4122a6b802b306715f7bfdb6b3c72a349b24e48752e7ad30a238aac83a927c2364932fac8cf892bbcad75b6f4975ea8388a7cec1103f130371ce87cdac3ec614eb35eaef09da9775b60e745d0e0f89aadcaf1f8c03758e216d1679db4fd375941d23721887e93d9260767857f28e896d9f4a17174d773f1d15b7cbfa47f993c302e3b2a31ddbcc00a3659949c9d935844e38e4a4a1b6d3aa7011fed64b56094c37dd770e499ac7c23ed438b6af4616ba365018464439643232398d62234dba9de7e78a4fa847931013fb47fe3f026001ca6b7716326023ca86eefa98e99709fad72dfbc70aa888d31defc016dab24d274e1b2ec61db15cab29f785163b451f8578413bbea5203c36ed7319b3531150335f16900d634d9587d4dbdc0625af0d75216aa596790f4c11af2b1d9bf2d382a743a618be440e680ef9b8f82bac434b08ca210747e3b13a42aef86ad674bee0cde96540191bf930c235f749b7df25a53bc53c48888e938ad93a799216f635ce017b6f2067c9ba49c49e1424f3435354f1130ca2c4b9b1eeaaf8689f05ff4f7daba5ba0427198b9aa93769d32e5a4b2ea580048b484d1145960c74615039303cfcbdbf78a2277aab37830eab6fe95148be852f116a51f283791edfa2dea3073cdc719a4f146e25a082b99145bc81e6a7b8ea73934795a17bd8e251a1b39ac41c8eed7af6af33331167db3d1141bd9aae8acada8ce2367d11143733c04f4db30395f14ed7c289ca89896fd8791a0996aca30778fb54656013aace7e07f5b4f4ed3fc6768c10215b5d0507a6d282de549ae698a2994e12e987148d7d4762a9c3deeb69c16b344e115ec6cb7f8d4f1750de22ef901e43cc226b903d33aefd7f09594060aac39a6f3cc32d12e541cca973583294aa1cac605b75139cfa836d682dd6dd98e1ceb303ccb45f797f364b43c56468e18fa90d01b00151b8abc7e23ee4f60b559f908ebedc32b3ac8550b124afc45a202fd8008c650c0badfb659dfd73bfe7089d475fe2910f9931e9dae9d837ca3fc0233d6cef3a2543e753da0e96b66bf6f0cf1734fe684cece9e027ed0aa411546c65894049fbf6503c13f3c088d454e4dae220d01c9aaf444ec496e49d0850eb7c7b9e80091ddb9d84b7d7b91d6a98770e7e8e2eb5882a9a98c917f18dbeeec46cc13d97b8a92e7af4c8bcad342b7ce901c768b6ff6e95b10c139383a8c948572ca47f11558a474c39e533e06067833d38809e819162a93f6b1a39d4ac8c7e7bab05413daabb4d73592f80349f2b1b9cd9ac6961bbc86a6fcb94262fb1b435a0fea029b1643e0e6357e455ab0a24924ece22a8c406327337490262a607e31fbc479d281f2149b56c2c3f9c47e6f2b040c94097a2bad529ab1fd2efa8f05264d2f4ab620010d03c0702d0efd93955e36ff9c44a57f889e45dadba813459c55cebfa7c18654543ff59614b30601d46a1ce14e508b0baf4327a5ee782dd11d092da13ec4d72c39f14ce23f0a239ebd9e5c186cc8f0da5aa9f952fc974589fc42283eaa1c623d031610deb3a7db2b6a94ddc3f627071cbca110ab8050a7a47e3b546c48da99e341083cce5cc62e136ac5e39a5046609dbdf13b725b3003d770d0b8ab633d403e1a40c78be730feec899cb44f23816629807c0551a2bb25f893a11b33e72fa7c4b43ddf7ec13f7d0f38f9f9f626ad477c2c304dae2e5336dfbe84682deec6575e772c2b06af7ffe1b061247f660b", 0x1000}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r8 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r8, &(0x7f0000001d00)={0xa, 0x0, 0x7, @private0, 0x1000, 0x4}, 0x20) getsockname$packet(r0, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001dc0)=0x14) 3.859923747s ago: executing program 4 (id=7732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x70) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000880)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x86) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) write$cgroup_int(r5, &(0x7f00000001c0)=0x700, 0x12) 3.809026818s ago: executing program 4 (id=7733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a000000000800044000000000090001007379"], 0x64}}, 0x0) 3.398174845s ago: executing program 4 (id=7737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@const={0x0, 0x2, 0x0, 0x13, 0x1}, @array={0x2, 0x0, 0x0, 0x3, 0x0, {0xfffffffe}}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250900000030000380770001000100000014000200767c4e295446746f5f626f6e6400000008000300000000000600040003000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x48040) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) close(r5) ioctl$TIOCGSOFTCAR(r4, 0x5414, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x13) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) getuid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0), 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "9000"}, 0x10}, 0x2, 0x0, 0x0, 0x20040000}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x18, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x17ed1bed, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x0, 0x1, 0x0, 0x2, 0x6, 0x50}, @alu={0x7, 0x0, 0x7, 0x2, 0x7, 0x50, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000580)='GPL\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x5, r3, 0x8, &(0x7f0000000680)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xa, 0x10000, 0x4}, 0x10, 0xffffffffffffffff, r0, 0x5, &(0x7f0000000880), &(0x7f00000008c0)=[{0x3, 0x1, 0x5, 0x3}, {0x3, 0x4, 0xc, 0x6}, {0x3, 0x1, 0x8, 0xa}, {0x1, 0x1, 0xc, 0x4}, {0x5, 0x2, 0x6, 0xc}], 0x10, 0x9, @void, @value}, 0x94) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000003c0), &(0x7f0000000400)=0x8) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0\x00') r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$nci(r10, 0x0, 0xfffffeea) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r12, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 3.315607256s ago: executing program 4 (id=7738): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 1.308459009s ago: executing program 0 (id=7761): mkdir(&(0x7f0000000000)='./control\x00', 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r2, 0x0, 0x200) 1.291161599s ago: executing program 0 (id=7762): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x1, 0x0, 0x1, 0x19, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88, 0x8}], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.279878419s ago: executing program 3 (id=7763): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x1, 0x0, 0x1, 0x19, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88, 0x8}], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.266281979s ago: executing program 0 (id=7764): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0x0, 0xc0, 0x330, 0x1a8, 0xc0, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@ip={@loopback, @loopback, 0xffffffff, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x40}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xa}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xc, 0x1, 0xa}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x8, 0x5}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x0, 0x6, 0x4b}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xfffffffe, @multicast2, 0x4e23}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4020}, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="1f85b1eb6056cf19239bd2057c1e9fe23bd2cf68a6919a732de756bd6768560d316265d5383e7af5f4db33c7a9a475989a4c83be8953830b9c0f7ef75b8fe8a2dc3bfa10947951523dc57d55f194e642ff688355a23f3281c98fce267f76f5aad6a803375ed66aee4c3b1d1be881d4b86b7f8d8ecbe2ce6f50f8b2fd74f08aa81d56419a175411e314964a189eaaa4b6756517b4b2e6f8f8362064955621bc3d7b414a9d0f0b633e75a36365aa2a54bc070b676fb3dbbb2ec207f60c929da1b203e56ecc7326cf257c79b2", 0xcb}, {&(0x7f0000000200)="91000a8becea41829480a54d02e6ba2baa73aa952044685208e4bf531492ed948bd6daf9a3723b3e5fd7c9db247ad0517c2e0fdb05f606041b447e6d103ec98a07e6c87c2ae32507bf81d5e9824a4f445f48f95d698dbfbc0a47f2e7df62f3e0c926c6e9a5cbd7fce5883aeef7fc999ce10e9808e91a7ca124ea751590d0a87ba289137d178e6bfac3bea91bf7fe328966d79e4a59440a5d152f398309cd923c30897221e10acb2d74108666012674f8db5c43ddf510ac8d727fad2bf9759ccee20a780e68b56aa800e4a2c3686df3365f71", 0xd2}], 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nobarrier}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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") mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000006880), 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000006900)=ANY=[@ANYBLOB="0c000000010000000100000005000000020000002c553816c14ed73e84c46fde7e303deacae64f7ad7004b1e56fff988af3f3bed5a2252359dd28571506ab43b65524d980706653c923630989e0f769c073f00fcf86c05f8aa184b1d119c2bc442f1ab4b9f2625ab8eaaad"], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x40) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r9 = syz_open_pts(r8, 0x141601) fcntl$setstatus(r9, 0x4, 0x102800) recvmmsg(r1, &(0x7f0000006700)=[{{&(0x7f0000000380)=@alg, 0x80, &(0x7f0000003940)=[{&(0x7f0000001440)=""/90, 0x5a}, {&(0x7f00000014c0)=""/23, 0x17}, {&(0x7f0000001500)=""/80, 0x50}, {0x0}, {&(0x7f0000001640)=""/92, 0x5c}, {&(0x7f0000006980)=""/4104, 0x1008}, {&(0x7f00000026c0)=""/242, 0xf2}, {&(0x7f00000027c0)=""/204, 0xcc}, {&(0x7f00000028c0)=""/77, 0x4d}, {&(0x7f0000002940)=""/4096, 0x1000}], 0xa, &(0x7f0000003a00)=""/157, 0x9d}, 0x3}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003ac0)=""/162, 0xa2}, {&(0x7f0000003b80)=""/19, 0x13}], 0x2, &(0x7f0000003c00)=""/229, 0xe5}, 0x5}, {{&(0x7f0000003d00), 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/25, 0x19}], 0x2, &(0x7f0000004e00)=""/20, 0x14}, 0x7}, {{&(0x7f0000004e40)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005080)=[{&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f0000004fc0)=""/144, 0x90}], 0x2, &(0x7f00000050c0)=""/137, 0x89}, 0x3}, {{&(0x7f0000005180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005200)=""/64, 0x40}, {&(0x7f0000005240)=""/45, 0x2d}, {&(0x7f0000005280)=""/152, 0x98}, {&(0x7f0000005340)=""/193, 0xc1}, {&(0x7f0000005440)=""/105, 0x69}, {&(0x7f00000054c0)=""/4086, 0xff6}, {&(0x7f00000064c0)=""/89, 0x59}, {&(0x7f0000006540)=""/115, 0x73}], 0x8, &(0x7f0000006640)=""/161, 0xa1}, 0xfffffff8}], 0x5, 0x8000, &(0x7f0000006840)={0x77359400}) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) socket$nl_xfrm(0x10, 0x3, 0x6) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800000000000007, 0x400405}) 1.2310417s ago: executing program 3 (id=7765): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.113999062s ago: executing program 3 (id=7766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900020073797a30000000000900010073797a3000000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.086203962s ago: executing program 3 (id=7767): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000007c6e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f00000002c0)='syzkaller\x00', 0xfffffff8, 0xfd, &(0x7f00000004c0)=""/253, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x8, 0x7, 0xa5d}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000a40)=[r3, r3, r3, r3], &(0x7f0000000a80)=[{0x5, 0x4, 0x8, 0x1}], 0x10, 0x1f, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x149882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x8, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0\x00') 1.013776843s ago: executing program 0 (id=7768): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c"], 0x118}}, 0x0) sendto$unix(r0, 0x0, 0x0, 0x80, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r7}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={r7, 0x1, 0x30, 0xa, 0x6}, &(0x7f0000000200)=0x18) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) 960.017614ms ago: executing program 1 (id=7769): mkdir(&(0x7f0000000000)='./control\x00', 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) unlinkat(r2, 0x0, 0x200) 927.535405ms ago: executing program 1 (id=7770): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@const={0x0, 0x2, 0x0, 0x13, 0x1}, @array={0x2, 0x0, 0x0, 0x3, 0x0, {0xfffffffe}}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250900000030000380770001000100000014000200767c4e295446746f5f626f6e6400000008000300000000000600040003000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x48040) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) close(r5) ioctl$TIOCGSOFTCAR(r4, 0x5414, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x13) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) getuid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0), 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "9000"}, 0x10}, 0x2, 0x0, 0x0, 0x20040000}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x18, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x17ed1bed, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x0, 0x1, 0x0, 0x2, 0x6, 0x50}, @alu={0x7, 0x0, 0x7, 0x2, 0x7, 0x50, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000580)='GPL\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x5, r3, 0x8, &(0x7f0000000680)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xa, 0x10000, 0x4}, 0x10, 0xffffffffffffffff, r0, 0x5, &(0x7f0000000880), &(0x7f00000008c0)=[{0x3, 0x1, 0x5, 0x3}, {0x3, 0x4, 0xc, 0x6}, {0x3, 0x1, 0x8, 0xa}, {0x1, 0x1, 0xc, 0x4}, {0x5, 0x2, 0x6, 0xc}], 0x10, 0x9, @void, @value}, 0x94) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000003c0), &(0x7f0000000400)=0x8) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0\x00') r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r12}, 0x18) write$nci(r10, 0x0, 0xfffffeea) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r13, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 851.588066ms ago: executing program 1 (id=7771): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000008000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_getres(0xfffffffffffffff1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xaf9f}}, './file0\x00'}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="7708000000000000000100c910fe8000000000000000000000000000bb000100082de2805314f833cf0dcea6c7950b94471750fb6abdf8c867ef7705b8b63a184367915efea7cd67647a05db222ff4039d8e0a879c07e1c5316a0041f9e08d1f639b446db053f370ae3f3e065c26b940dcbdebe17972e7a26f94013fb27f53e68206b82133369be4209cb8c0efb9498410f054ed2201fe13d0a1ac8545a171546241a0"], 0x50) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1818000, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@noinit_itable}, {@noauto_da_alloc}]}, 0x1, 0x5ee, &(0x7f0000002000)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x10) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r6, 0x0) r7 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r7, 0x10d, 0xdd, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000880)=ANY=[@ANYRES8=0x0, @ANYBLOB="150372626c9d5f3317ad8240d37e160e79c5f60000000030ca7330b2b5547c914d652370565eb02cd1ad2e946cabde8c989b04220180b5bd0b5a6783f89922ed9d405ab950a1502b60feaf88e2ff4281aeffa66a98a061a90b40b957a9ec868be1fe6a887e1507577e3b76ea46a1ccc9cb4695c25a5379506d969a72a494b9d574e11acb59a916fcb56638489f80b02335af0ff7980d0000331ce59a6e1734e7415223cd108194cf", @ANYRES8, @ANYRES16, @ANYBLOB="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"], 0x1, 0x313, &(0x7f0000001280)="$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") r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000740), 0x20080, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={r8, &(0x7f0000003600)="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", &(0x7f0000000d00)=""/167}, 0x20) rmdir(&(0x7f0000000040)='./file0\x00') openat(r0, &(0x7f0000000180)='./bus/file0\x00', 0x44c01, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000100)=0xffffffffffffffff) 364.775004ms ago: executing program 2 (id=7772): mkdir(&(0x7f0000000000)='./control\x00', 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r2, 0x0, 0x200) 253.138636ms ago: executing program 2 (id=7773): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) 167.070067ms ago: executing program 3 (id=7774): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x1, 0x0, 0x1, 0x19, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88, 0x8}], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 145.363138ms ago: executing program 2 (id=7775): r0 = epoll_create(0x7f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) epoll_wait(r0, &(0x7f0000001180)=[{}], 0x1, 0x7) 144.647808ms ago: executing program 0 (id=7776): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 144.392468ms ago: executing program 3 (id=7777): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000007c6e00000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x149882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 129.652878ms ago: executing program 1 (id=7778): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900020073797a30000000000900010073797a3000000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 102.430348ms ago: executing program 1 (id=7779): r0 = epoll_create(0x7f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) epoll_wait(r0, &(0x7f0000001180)=[{}], 0x1, 0x7) 69.144959ms ago: executing program 2 (id=7780): r0 = memfd_create(&(0x7f0000000f80)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee\xf2e\x14]j\xd8A\xd8%\xfc\x1f\xed\xb3~\x1aj\t', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) flock(r2, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="bb5abc6b15f3", 0x0, 0x0, 0x32, 0x2, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x7}, 0x18) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000004000/0x4000)=nil) brk(0x200000001000) io_setup(0x2, &(0x7f0000002400)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) 34.728519ms ago: executing program 1 (id=7781): r0 = memfd_create(&(0x7f0000000f80)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee\xf2e\x14]j\xd8A\xd8%\xfc\x1f\xed\xb3~\x1aj\t', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) flock(r2, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="bb5abc6b15f3", 0x0, 0x0, 0x32, 0x2, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa54000085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x7}, 0x18) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000004000/0x4000)=nil) brk(0x200000001000) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) 0s ago: executing program 0 (id=7782): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 7295 subj=root:sysadm_r:sysadm_t pid=24807 comm="syz.1.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 492.341583][ T29] audit: type=1326 audit(1745036499.300:41621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24807 comm="syz.1.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 492.365246][ T29] audit: type=1326 audit(1745036499.300:41622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24807 comm="syz.1.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 492.370749][T24815] lo speed is unknown, defaulting to 1000 [ 492.388971][ T29] audit: type=1326 audit(1745036499.300:41623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24807 comm="syz.1.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 492.418356][ T29] audit: type=1326 audit(1745036499.300:41624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24807 comm="syz.1.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 492.441998][ T29] audit: type=1326 audit(1745036499.300:41625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24807 comm="syz.1.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 492.465614][ T29] audit: type=1326 audit(1745036499.300:41626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24807 comm="syz.1.6880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 492.559759][T24818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6883'. [ 492.563656][T24820] syz.0.6882: attempt to access beyond end of device [ 492.563656][T24820] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 492.583022][T24805] netem: incorrect gi model size [ 492.588055][T24805] netem: change failed [ 492.635284][T24818] loop4: detected capacity change from 0 to 128 [ 492.674406][T24831] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6888'. [ 492.694489][T24834] random: crng reseeded on system resumption [ 492.812260][T24845] program syz.3.6892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.823123][T24847] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6893'. [ 492.839790][T24843] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.860874][T24829] netem: incorrect gi model size [ 492.865907][T24829] netem: change failed [ 492.902423][T24843] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.930490][T24855] lo speed is unknown, defaulting to 1000 [ 492.942176][T24843] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.963482][T24852] loop0: detected capacity change from 0 to 2048 [ 492.970608][T24852] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 492.995974][T24843] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.057330][T24843] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.069264][T24843] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.081704][T24843] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.093570][T24843] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.118492][T24862] syz.3.6897: attempt to access beyond end of device [ 493.118492][T24862] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 493.285261][T24869] loop3: detected capacity change from 0 to 128 [ 493.412395][T24879] 9pnet_fd: Insufficient options for proto=fd [ 493.478920][T24885] loop3: detected capacity change from 0 to 512 [ 493.577677][T24888] program syz.2.6907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.603552][T24890] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.652079][T24892] syz.2.6909: attempt to access beyond end of device [ 493.652079][T24892] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 493.689424][T24890] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.748456][T24885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.769029][T24890] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.784100][T24885] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 493.816864][T24885] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.6902: corrupted inode contents [ 493.839950][T24890] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.865616][T24899] loop0: detected capacity change from 0 to 128 [ 493.890808][T24885] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.6902: mark_inode_dirty error [ 493.940180][T24885] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.6902: corrupted inode contents [ 493.984096][T24885] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.6902: mark_inode_dirty error [ 494.349751][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.450157][T24917] loop3: detected capacity change from 0 to 1024 [ 494.457369][T24917] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 494.469734][T24917] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.6916: Invalid block bitmap block 0 in block_group 0 [ 494.483656][T24917] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.6916: Failed to acquire dquot type 0 [ 494.495439][T24917] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.6916: Freeing blocks not in datazone - block = 0, count = 4096 [ 494.513431][T24917] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.6916: Invalid inode bitmap blk 0 in block_group 0 [ 494.526926][T24917] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 494.535615][ T6042] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 0 [ 494.549383][T24917] EXT4-fs (loop3): 1 orphan inode deleted [ 494.555557][T24917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.601274][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.906080][T24936] random: crng reseeded on system resumption [ 494.972256][T24938] netem: incorrect gi model size [ 494.977270][T24938] netem: change failed [ 495.106046][T24945] lo speed is unknown, defaulting to 1000 [ 495.283857][T24951] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.343911][T24940] 9pnet_fd: Insufficient options for proto=fd [ 495.351051][T24951] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.399259][T24951] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.439175][T24951] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.504537][T24951] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.517151][T24951] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.546450][T24951] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.558591][T24951] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.691267][T24970] syz.0.6934: attempt to access beyond end of device [ 495.691267][T24970] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 495.796241][T24974] random: crng reseeded on system resumption [ 495.870468][T24974] netem: incorrect gi model size [ 495.875513][T24974] netem: change failed [ 496.064668][T24988] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.155226][T24984] 9pnet_fd: Insufficient options for proto=fd [ 496.179344][T24988] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.240390][T24988] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.279602][T24988] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.334411][T24988] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.352121][T24988] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.377122][T24988] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.399394][T24988] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.617957][T25003] random: crng reseeded on system resumption [ 496.739160][T25003] netem: incorrect gi model size [ 496.744259][T25003] netem: change failed [ 496.825161][T25018] lo speed is unknown, defaulting to 1000 [ 497.003664][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 497.003690][ T29] audit: type=1326 audit(1745036504.400:42037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.0.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 497.066192][ T29] audit: type=1326 audit(1745036504.440:42038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.0.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 497.089747][ T29] audit: type=1326 audit(1745036504.440:42039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.0.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 497.113428][ T29] audit: type=1326 audit(1745036504.440:42040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.0.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 497.137013][ T29] audit: type=1326 audit(1745036504.440:42041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.0.6956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 497.170221][T25029] 9pnet_fd: Insufficient options for proto=fd [ 497.259294][T25030] __nla_validate_parse: 8 callbacks suppressed [ 497.259331][T25030] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6957'. [ 497.317185][T25038] program syz.1.6960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.378082][ T29] audit: type=1326 audit(1745036504.780:42042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25044 comm="syz.1.6962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x0 [ 497.460716][ T29] audit: type=1326 audit(1745036504.800:42043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25044 comm="syz.1.6962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x0 [ 497.508037][ T29] audit: type=1326 audit(1745036504.890:42044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.2.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 497.531732][ T29] audit: type=1326 audit(1745036504.890:42045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.2.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 497.555235][ T29] audit: type=1326 audit(1745036504.890:42046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25046 comm="syz.2.6964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 497.558403][T25043] random: crng reseeded on system resumption [ 497.735270][T25051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6965'. [ 497.777982][T25043] netem: incorrect gi model size [ 497.782968][T25043] netem: change failed [ 497.975504][T24890] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.011905][T24890] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.046382][T24890] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.072174][T24890] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.116196][T25067] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6973'. [ 498.139925][T25070] program syz.4.6974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.236514][T25075] loop4: detected capacity change from 0 to 512 [ 498.329441][T25075] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #15: comm syz.4.6975: casefold flag without casefold feature [ 498.342575][T25075] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.6975: couldn't read orphan inode 15 (err -117) [ 498.346442][T25077] syz.3.6976: attempt to access beyond end of device [ 498.346442][T25077] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 498.355166][T25075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.453548][T25084] syz.3.6977: attempt to access beyond end of device [ 498.453548][T25084] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 498.579559][T25089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.585719][T25086] lo speed is unknown, defaulting to 1000 [ 498.598338][T25089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.765901][T25098] program syz.1.6978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.800414][T25103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6985'. [ 498.820681][T25103] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.842320][T25105] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6986'. [ 498.869865][T25103] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.919721][T25103] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.999624][T25103] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.069352][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.101691][T25115] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.159700][T25115] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.229567][T25115] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.289355][T25115] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.990923][T25125] lo speed is unknown, defaulting to 1000 [ 500.243883][T25129] lo speed is unknown, defaulting to 1000 [ 500.267524][T25103] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.286747][T25103] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.303325][T25103] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.321041][T25103] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.393592][T25137] syz.2.6996: attempt to access beyond end of device [ 500.393592][T25137] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 500.426370][T25139] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6997'. [ 500.436439][T25140] random: crng reseeded on system resumption [ 500.596439][T25134] netem: incorrect gi model size [ 500.601602][T25134] netem: change failed [ 501.237224][T25163] lo speed is unknown, defaulting to 1000 [ 501.363972][T25166] program syz.0.7006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.779011][T25178] syz.3.7012: attempt to access beyond end of device [ 501.779011][T25178] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 502.169039][T25186] random: crng reseeded on system resumption [ 502.235514][T25192] lo speed is unknown, defaulting to 1000 [ 502.281473][T25186] netem: incorrect gi model size [ 502.286665][T25186] netem: change failed [ 502.310535][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 502.310552][ T29] audit: type=1326 audit(1745036509.710:42366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25196 comm="syz.1.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 502.340616][ T29] audit: type=1326 audit(1745036509.710:42367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25196 comm="syz.1.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 502.364262][ T29] audit: type=1326 audit(1745036509.710:42368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25196 comm="syz.1.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 502.387734][ T29] audit: type=1326 audit(1745036509.710:42369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25196 comm="syz.1.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 502.411666][ T29] audit: type=1326 audit(1745036509.710:42370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25196 comm="syz.1.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 502.435415][ T29] audit: type=1326 audit(1745036509.710:42371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25196 comm="syz.1.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 502.459486][ T29] audit: type=1326 audit(1745036509.710:42372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25196 comm="syz.1.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 502.483214][ T29] audit: type=1326 audit(1745036509.710:42373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25196 comm="syz.1.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 502.506597][T25201] lo speed is unknown, defaulting to 1000 [ 502.506944][ T29] audit: type=1326 audit(1745036509.790:42374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25194 comm="syz.2.7018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x0 [ 502.535667][ T29] audit: type=1326 audit(1745036509.790:42375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25194 comm="syz.2.7018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x0 [ 502.548121][T25202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.586817][T25202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.616194][T25207] program syz.0.7023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.661233][T25210] syz.0.7024: attempt to access beyond end of device [ 502.661233][T25210] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 502.693562][T25115] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.705247][T25115] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.726457][T25115] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.738664][T25115] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.784961][T25217] loop4: detected capacity change from 0 to 512 [ 502.807000][T25217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.827322][T25217] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 502.858265][T25217] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.7026: corrupted inode contents [ 502.870454][T25217] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.7026: mark_inode_dirty error [ 502.897064][T25224] lo speed is unknown, defaulting to 1000 [ 502.906872][T25217] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.7026: corrupted inode contents [ 502.942245][T25217] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.7026: mark_inode_dirty error [ 503.001828][T25228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7030'. [ 503.067332][T25228] loop0: detected capacity change from 0 to 128 [ 503.275374][T25239] loop3: detected capacity change from 0 to 1024 [ 503.282674][T25239] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 503.298226][T25239] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.7036: Invalid block bitmap block 0 in block_group 0 [ 503.339288][T25239] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7036: Failed to acquire dquot type 0 [ 503.362137][T25239] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.7036: Freeing blocks not in datazone - block = 0, count = 4096 [ 503.385808][T25239] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.7036: Invalid inode bitmap blk 0 in block_group 0 [ 503.402843][ T3326] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 503.426175][T25239] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 503.445627][T25239] EXT4-fs (loop3): 1 orphan inode deleted [ 503.466621][T25239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.585033][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.623791][T25257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7042'. [ 503.703342][T25260] syz.3.7041: attempt to access beyond end of device [ 503.703342][T25260] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 503.840685][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.858688][T25269] syz.3.7047: attempt to access beyond end of device [ 503.858688][T25269] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 504.038808][T25285] syz.0.7053: attempt to access beyond end of device [ 504.038808][T25285] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 504.042979][T25287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7054'. [ 504.086343][T25290] syz.3.7055: attempt to access beyond end of device [ 504.086343][T25290] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 504.118790][T25287] loop4: detected capacity change from 0 to 128 [ 504.145392][T25295] loop3: detected capacity change from 0 to 512 [ 504.181407][T25295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.199732][T25295] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 504.217961][T25304] syz.0.7060: attempt to access beyond end of device [ 504.217961][T25304] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 504.233811][T25295] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.7057: corrupted inode contents [ 504.275314][T25295] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.7057: mark_inode_dirty error [ 504.314112][T25295] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.7057: corrupted inode contents [ 504.368133][T25311] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.379020][T25295] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.7057: mark_inode_dirty error [ 504.379976][T25312] 9pnet_fd: Insufficient options for proto=fd [ 504.443152][T25311] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.474770][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.548671][T25311] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.630739][T25311] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.726990][T25321] lo speed is unknown, defaulting to 1000 [ 504.869386][T25311] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.058433][T25311] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.070616][T25311] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.082499][T25311] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.210884][T25326] syz.4.7067: attempt to access beyond end of device [ 505.210884][T25326] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 505.290082][T25329] lo speed is unknown, defaulting to 1000 [ 505.318263][T25331] syz.4.7069: attempt to access beyond end of device [ 505.318263][T25331] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 505.321886][T25332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.396313][T25332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.478790][T25348] program syz.2.7076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.493675][T25335] loop3: detected capacity change from 0 to 2048 [ 505.513373][T25345] lo speed is unknown, defaulting to 1000 [ 505.520020][T25335] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 506.196466][T25366] 9pnet_fd: Insufficient options for proto=fd [ 506.303106][T25368] lo speed is unknown, defaulting to 1000 [ 506.685256][T25374] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7084'. [ 506.793656][T25383] program syz.1.7087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.911481][T25394] program syz.4.7092 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.927963][T25392] lo speed is unknown, defaulting to 1000 [ 507.075455][T25392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.087514][T25392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.219167][T25402] loop4: detected capacity change from 0 to 1024 [ 507.226330][T25402] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 507.379194][T25402] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7094: Invalid block bitmap block 0 in block_group 0 [ 507.393337][T25402] __quota_error: 526 callbacks suppressed [ 507.393353][T25402] Quota error (device loop4): write_blk: dquota write failed [ 507.406552][T25402] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 507.425082][T25400] loop0: detected capacity change from 0 to 2048 [ 507.433267][T25400] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 507.457763][T25402] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7094: Failed to acquire dquot type 0 [ 507.493893][T25402] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.7094: Freeing blocks not in datazone - block = 0, count = 4096 [ 507.547791][T25402] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7094: Invalid inode bitmap blk 0 in block_group 0 [ 507.568025][ T5781] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 507.577033][ T5781] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 0 [ 507.588856][T25402] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 507.598015][T25402] EXT4-fs (loop4): 1 orphan inode deleted [ 507.628025][T25402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.684448][ T29] audit: type=1326 audit(1745036515.080:42899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25411 comm="syz.1.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 507.737945][ T29] audit: type=1326 audit(1745036515.110:42900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25411 comm="syz.1.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 507.761745][ T29] audit: type=1326 audit(1745036515.110:42901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25411 comm="syz.1.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 507.785156][ T29] audit: type=1326 audit(1745036515.110:42902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25411 comm="syz.1.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 507.808746][ T29] audit: type=1326 audit(1745036515.110:42903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25411 comm="syz.1.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 507.832828][ T29] audit: type=1326 audit(1745036515.110:42904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25411 comm="syz.1.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 507.856610][ T29] audit: type=1326 audit(1745036515.110:42905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25411 comm="syz.1.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 507.891375][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.941364][T25416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7096'. [ 507.960854][T25419] 9pnet_fd: Insufficient options for proto=fd [ 508.031519][T25416] loop3: detected capacity change from 0 to 128 [ 508.059943][T25430] syz.0.7102: attempt to access beyond end of device [ 508.059943][T25430] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 508.110439][T25432] program syz.4.7103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.289617][T25441] lo speed is unknown, defaulting to 1000 [ 508.809766][T25450] program syz.1.7111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.096514][T25456] loop3: detected capacity change from 0 to 2048 [ 509.113741][T25456] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 509.263799][T25468] loop4: detected capacity change from 0 to 512 [ 509.317790][T25468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.339294][T25465] syz.2.7118: attempt to access beyond end of device [ 509.339294][T25465] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 509.359125][T25468] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.386676][T25468] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.7120: corrupted inode contents [ 509.410016][T25468] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.7120: mark_inode_dirty error [ 509.440811][T25468] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.7120: corrupted inode contents [ 509.472816][T25468] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.7120: mark_inode_dirty error [ 509.629509][T25477] lo speed is unknown, defaulting to 1000 [ 509.943374][T25479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7122'. [ 510.008466][T25479] loop3: detected capacity change from 0 to 128 [ 510.280069][T25487] program syz.0.7135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.292232][T25488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7125'. [ 510.323654][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.424471][T25490] loop0: detected capacity change from 0 to 512 [ 510.449373][T25490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.468175][T25490] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.655253][T25511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7134'. [ 511.041561][T25524] loop3: detected capacity change from 0 to 512 [ 511.068219][T25524] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #15: comm syz.3.7137: casefold flag without casefold feature [ 511.081579][T25524] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.7137: couldn't read orphan inode 15 (err -117) [ 511.094065][T25524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.130649][T25529] lo speed is unknown, defaulting to 1000 [ 511.193952][T22893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.276226][T25541] syz.2.7145: attempt to access beyond end of device [ 511.276226][T25541] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 511.305050][T25543] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.351512][T25543] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.399347][T25543] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.449121][T25543] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.566355][T25543] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.578364][T25543] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.591383][T25543] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.611753][T25543] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.752446][T25549] loop4: detected capacity change from 0 to 2048 [ 511.763695][T25549] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 511.906606][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.920376][T25551] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7150'. [ 512.520671][T25577] syz.0.7157: attempt to access beyond end of device [ 512.520671][T25577] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 512.589863][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 512.589960][ T29] audit: type=1326 audit(1745036519.990:43381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.7154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf435ce169 code=0x0 [ 512.635027][T25585] loop0: detected capacity change from 0 to 512 [ 512.652387][ T29] audit: type=1326 audit(1745036520.050:43382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25586 comm="syz.1.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 512.676261][ T29] audit: type=1326 audit(1745036520.050:43383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25586 comm="syz.1.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 512.700051][ T29] audit: type=1326 audit(1745036520.050:43384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25586 comm="syz.1.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 512.723869][ T29] audit: type=1326 audit(1745036520.050:43385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25586 comm="syz.1.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 512.747649][ T29] audit: type=1326 audit(1745036520.050:43386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25586 comm="syz.1.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 512.771528][ T29] audit: type=1326 audit(1745036520.050:43387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25586 comm="syz.1.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 512.795376][ T29] audit: type=1326 audit(1745036520.050:43388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25586 comm="syz.1.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 512.815021][T25585] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.7160: casefold flag without casefold feature [ 512.819121][ T29] audit: type=1326 audit(1745036520.050:43389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25586 comm="syz.1.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 512.832376][T25585] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.7160: couldn't read orphan inode 15 (err -117) [ 512.855519][ T29] audit: type=1326 audit(1745036520.050:43390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25586 comm="syz.1.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 512.868436][T25585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.179267][T25600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7165'. [ 513.246998][T25605] loop3: detected capacity change from 0 to 1024 [ 513.254273][T25605] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 513.266085][T25605] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.7166: Invalid block bitmap block 0 in block_group 0 [ 513.280379][T25605] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7166: Failed to acquire dquot type 0 [ 513.292245][T25605] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.7166: Freeing blocks not in datazone - block = 0, count = 4096 [ 513.307322][T25605] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.7166: Invalid inode bitmap blk 0 in block_group 0 [ 513.320375][T25605] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 513.320389][ T6042] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 0 [ 513.329060][T25605] EXT4-fs (loop3): 1 orphan inode deleted [ 513.329709][T25605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.376413][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.467574][T22893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.476759][T25617] loop3: detected capacity change from 0 to 2048 [ 513.477071][T25617] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 513.726696][T25628] lo speed is unknown, defaulting to 1000 [ 514.248466][T25646] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7181'. [ 514.266138][T25648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7182'. [ 514.286428][T25652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7183'. [ 514.341294][T25648] loop4: detected capacity change from 0 to 128 [ 514.447241][T25670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7200'. [ 514.522977][T25675] loop0: detected capacity change from 0 to 128 [ 514.610976][T25686] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7195'. [ 514.654410][T25689] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.718293][T25695] loop4: detected capacity change from 0 to 512 [ 514.814711][T25689] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.827505][T25695] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #15: comm syz.4.7198: casefold flag without casefold feature [ 514.840597][T25695] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.7198: couldn't read orphan inode 15 (err -117) [ 514.853611][T25695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.869004][T25689] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.941351][T25704] lo speed is unknown, defaulting to 1000 [ 515.035168][T25689] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.139037][T25689] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.153145][T25689] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.195436][T25689] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.222514][T25689] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.600506][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.633201][T25728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7211'. [ 515.681389][T25732] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7212'. [ 515.701968][T25737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7213'. [ 515.736241][T25724] 9pnet_fd: Insufficient options for proto=fd [ 515.781910][T25737] loop4: detected capacity change from 0 to 128 [ 515.860791][T25743] loop3: detected capacity change from 0 to 1024 [ 515.867986][T25743] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 515.879925][T25743] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.7215: Invalid block bitmap block 0 in block_group 0 [ 515.893821][T25743] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7215: Failed to acquire dquot type 0 [ 515.905710][T25743] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.7215: Freeing blocks not in datazone - block = 0, count = 4096 [ 515.919923][T25743] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.7215: Invalid inode bitmap blk 0 in block_group 0 [ 515.933652][T25743] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 515.942303][ T3397] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 515.942751][T25743] EXT4-fs (loop3): 1 orphan inode deleted [ 515.960406][T25743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.006884][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.093730][T25760] loop4: detected capacity change from 0 to 512 [ 516.119281][T25760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.148072][T25760] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.156443][T25769] syz.3.7225: attempt to access beyond end of device [ 516.156443][T25769] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 516.161486][T25760] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.7223: corrupted inode contents [ 516.222932][T25770] lo speed is unknown, defaulting to 1000 [ 516.275022][T25760] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.7223: mark_inode_dirty error [ 516.336113][T25767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7224'. [ 516.388757][T25760] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.7223: corrupted inode contents [ 516.473842][T25777] loop3: detected capacity change from 0 to 2048 [ 516.497317][T25760] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.7223: mark_inode_dirty error [ 516.528044][T25777] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 516.601368][T25783] 9pnet_fd: Insufficient options for proto=fd [ 516.946266][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.122039][T25808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7239'. [ 517.161218][T25810] program syz.2.7240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.239018][T25812] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7242'. [ 517.476706][T25831] lo speed is unknown, defaulting to 1000 [ 517.627450][T25833] loop4: detected capacity change from 0 to 2048 [ 517.637808][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 517.637821][ T29] audit: type=1326 audit(1745036524.980:43829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25819 comm="syz.3.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6628bde169 code=0x7ffc0000 [ 517.667912][ T29] audit: type=1326 audit(1745036524.980:43830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25819 comm="syz.3.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6628bde169 code=0x7ffc0000 [ 517.691687][ T29] audit: type=1326 audit(1745036524.980:43831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25819 comm="syz.3.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6628bde169 code=0x7ffc0000 [ 517.715326][ T29] audit: type=1326 audit(1745036524.980:43832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25819 comm="syz.3.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6628bde169 code=0x7ffc0000 [ 517.739099][ T29] audit: type=1326 audit(1745036524.980:43833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25819 comm="syz.3.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6628bde169 code=0x7ffc0000 [ 517.762814][ T29] audit: type=1326 audit(1745036524.980:43834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25819 comm="syz.3.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6628bde169 code=0x7ffc0000 [ 517.786587][ T29] audit: type=1326 audit(1745036524.980:43835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25819 comm="syz.3.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6628bde169 code=0x7ffc0000 [ 517.795867][T25833] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 517.810340][ T29] audit: type=1326 audit(1745036524.980:43836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25819 comm="syz.3.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6628bde169 code=0x7ffc0000 [ 517.842444][ T29] audit: type=1326 audit(1745036524.980:43837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25819 comm="syz.3.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6628bde169 code=0x7ffc0000 [ 517.866255][ T29] audit: type=1326 audit(1745036524.980:43838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25819 comm="syz.3.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6628bde169 code=0x7ffc0000 [ 518.003474][T25836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7248'. [ 518.298914][T25846] syz.2.7251: attempt to access beyond end of device [ 518.298914][T25846] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 518.384205][T25849] syz.1.7252: attempt to access beyond end of device [ 518.384205][T25849] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 518.505866][T25858] loop4: detected capacity change from 0 to 1024 [ 518.513261][T25858] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 518.534499][T25858] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7256: Invalid block bitmap block 0 in block_group 0 [ 518.557794][T25858] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7256: Failed to acquire dquot type 0 [ 518.582585][T25858] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.7256: Freeing blocks not in datazone - block = 0, count = 4096 [ 518.640546][T25858] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7256: Invalid inode bitmap blk 0 in block_group 0 [ 518.750785][T25858] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 518.759493][ T3397] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 518.771399][T25858] EXT4-fs (loop4): 1 orphan inode deleted [ 518.777406][T25858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.790704][T25853] 9pnet_fd: Insufficient options for proto=fd [ 518.874376][T25872] lo speed is unknown, defaulting to 1000 [ 518.969223][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.153675][T25875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7262'. [ 519.173007][T25877] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7261'. [ 519.218131][T25875] loop0: detected capacity change from 0 to 128 [ 519.265921][T25893] program syz.0.7268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.298447][T25899] program syz.4.7271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.327230][T25901] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.369598][T25901] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.383004][T25904] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7273'. [ 519.421593][T25901] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.469284][T25901] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.535697][T25901] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.549094][T25901] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.560528][T25901] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.560617][T25917] syz.2.7277: attempt to access beyond end of device [ 519.560617][T25917] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 519.572298][T25901] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.650247][T25926] program syz.2.7281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.921602][T25936] lo speed is unknown, defaulting to 1000 [ 520.253895][T25940] loop3: detected capacity change from 0 to 512 [ 520.279471][T25940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.292197][T25940] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.586677][T25951] lo speed is unknown, defaulting to 1000 [ 520.901255][T25957] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.980197][T25957] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.998408][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.049384][T25969] loop4: detected capacity change from 0 to 512 [ 521.049439][T25957] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.079741][T25969] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #15: comm syz.4.7295: casefold flag without casefold feature [ 521.093740][T25969] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.7295: couldn't read orphan inode 15 (err -117) [ 521.107291][T25969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.129354][T25957] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.135963][T25975] __nla_validate_parse: 1 callbacks suppressed [ 521.135981][T25975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7297'. [ 521.195382][T25957] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.207411][T25957] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.219745][T25957] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.231208][T25957] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.321279][T25988] program syz.0.7301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.438023][T25996] 9pnet_fd: Insufficient options for proto=fd [ 521.899626][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.137046][T26023] lo speed is unknown, defaulting to 1000 [ 522.495591][T26029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7318'. [ 522.511529][T26031] program syz.2.7316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.852894][T26058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7329'. [ 522.864552][T26060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7330'. [ 522.877211][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 522.877249][ T29] audit: type=1326 audit(1745036530.280:44369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26050 comm="syz.2.7327" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf435ce169 code=0x0 [ 522.966959][T26069] syz.4.7333: attempt to access beyond end of device [ 522.966959][T26069] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 522.991230][T26067] lo speed is unknown, defaulting to 1000 [ 523.000525][ T29] audit: type=1326 audit(1745036530.400:44370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26070 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 523.024413][ T29] audit: type=1326 audit(1745036530.400:44371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26070 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 523.048084][ T29] audit: type=1326 audit(1745036530.400:44372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26070 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 523.071676][ T29] audit: type=1326 audit(1745036530.400:44373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26070 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 523.095639][ T29] audit: type=1326 audit(1745036530.400:44374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26070 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 523.119378][ T29] audit: type=1326 audit(1745036530.400:44375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26070 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 523.143051][ T29] audit: type=1326 audit(1745036530.400:44376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26070 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 523.166659][ T29] audit: type=1326 audit(1745036530.400:44377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26070 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 523.190563][ T29] audit: type=1326 audit(1745036530.400:44378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26070 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 523.253231][T26080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7338'. [ 523.318166][T26080] loop4: detected capacity change from 0 to 128 [ 523.580035][T26090] lo speed is unknown, defaulting to 1000 [ 523.947699][T26094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7342'. [ 523.982128][T26097] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7343'. [ 524.058983][T26104] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.336977][T26105] lo speed is unknown, defaulting to 1000 [ 524.409205][T26104] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.479814][T26104] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.559350][T26104] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.629330][T26104] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.652833][T26104] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.661726][T26127] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7354'. [ 524.675655][T26104] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.689570][T26104] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.819728][T26138] syz.3.7357: attempt to access beyond end of device [ 524.819728][T26138] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 525.116513][T26156] lo speed is unknown, defaulting to 1000 [ 525.257352][T26154] loop0: detected capacity change from 0 to 2048 [ 525.285635][T26154] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 525.347869][T26163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7366'. [ 525.468461][T26163] loop4: detected capacity change from 0 to 128 [ 525.608090][T26177] syz.1.7369: attempt to access beyond end of device [ 525.608090][T26177] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 525.806440][T26181] lo speed is unknown, defaulting to 1000 [ 526.097954][T26188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7375'. [ 526.204475][T26198] loop3: detected capacity change from 0 to 512 [ 526.215326][T26202] program syz.1.7382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.225725][T26198] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #15: comm syz.3.7380: casefold flag without casefold feature [ 526.242720][T26198] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.7380: couldn't read orphan inode 15 (err -117) [ 526.258297][T26198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.276165][T26188] loop0: detected capacity change from 0 to 128 [ 526.409283][T26215] loop0: detected capacity change from 0 to 2048 [ 526.422590][T26215] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 526.854155][T26240] program syz.4.7396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.981101][T26242] loop4: detected capacity change from 0 to 1024 [ 526.996846][T26242] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 527.043982][T26242] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7397: Invalid block bitmap block 0 in block_group 0 [ 527.059270][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.066547][T26242] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7397: Failed to acquire dquot type 0 [ 527.094326][T26242] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.7397: Freeing blocks not in datazone - block = 0, count = 4096 [ 527.164824][T26242] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7397: Invalid inode bitmap blk 0 in block_group 0 [ 527.177791][T26242] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 527.186418][T26242] EXT4-fs (loop4): 1 orphan inode deleted [ 527.192565][ T6042] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 0 [ 527.204639][T26242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.245317][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.362490][T26254] syz.4.7401: attempt to access beyond end of device [ 527.362490][T26254] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 527.519313][T26266] lo speed is unknown, defaulting to 1000 [ 527.755842][T26265] random: crng reseeded on system resumption [ 527.925779][T26265] netem: incorrect gi model size [ 527.930810][T26265] netem: change failed [ 527.991826][ T29] kauditd_printk_skb: 601 callbacks suppressed [ 527.991844][ T29] audit: type=1326 audit(1745036535.390:44977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26273 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 528.090147][T26276] lo speed is unknown, defaulting to 1000 [ 528.372512][ T29] audit: type=1326 audit(1745036535.390:44978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26273 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 528.396237][ T29] audit: type=1326 audit(1745036535.390:44979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26273 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 528.419898][ T29] audit: type=1326 audit(1745036535.390:44980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26273 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 528.443680][ T29] audit: type=1326 audit(1745036535.390:44981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26273 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 528.467382][ T29] audit: type=1326 audit(1745036535.390:44982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26273 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 528.491030][ T29] audit: type=1326 audit(1745036535.390:44983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26273 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 528.514648][ T29] audit: type=1326 audit(1745036535.390:44984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26273 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 528.538338][ T29] audit: type=1326 audit(1745036535.390:44985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26273 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 528.561988][ T29] audit: type=1326 audit(1745036535.390:44986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26273 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f7d7b76e169 code=0x7ffc0000 [ 528.736712][T26284] loop4: detected capacity change from 0 to 1024 [ 528.816385][T26284] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 528.829616][T26284] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7410: Invalid block bitmap block 0 in block_group 0 [ 528.849651][T26295] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.853346][T26284] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7410: Failed to acquire dquot type 0 [ 528.916698][T26284] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.7410: Freeing blocks not in datazone - block = 0, count = 4096 [ 528.931907][T26295] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.953181][T26284] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7410: Invalid inode bitmap blk 0 in block_group 0 [ 528.977420][T26284] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 528.987155][ T5781] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 0 [ 529.008689][T26295] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.020327][T26284] EXT4-fs (loop4): 1 orphan inode deleted [ 529.026586][T26284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.049896][T26295] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.082829][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.099347][T26295] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.111409][T26295] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.122859][T26295] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.134753][T26295] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.276422][T26304] random: crng reseeded on system resumption [ 529.438853][T26320] 9pnet_fd: Insufficient options for proto=fd [ 529.550800][T26304] netem: incorrect gi model size [ 529.555852][T26304] netem: change failed [ 529.660059][T26324] lo speed is unknown, defaulting to 1000 [ 530.010787][T26330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7426'. [ 530.081908][T26330] loop4: detected capacity change from 0 to 128 [ 530.281395][T26337] random: crng reseeded on system resumption [ 530.543774][T26342] lo speed is unknown, defaulting to 1000 [ 530.614534][T26344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7431'. [ 530.807174][T26337] netem: incorrect gi model size [ 530.812236][T26337] netem: change failed [ 530.921260][T26356] loop3: detected capacity change from 0 to 512 [ 530.940917][T26356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.956385][T26356] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.168174][T26364] lo speed is unknown, defaulting to 1000 [ 531.307340][T26370] loop0: detected capacity change from 0 to 2048 [ 531.344795][T26370] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 531.575435][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.977157][T26382] lo speed is unknown, defaulting to 1000 [ 532.378716][T26387] 9pnet_fd: Insufficient options for proto=fd [ 532.394923][T26389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7443'. [ 532.444951][T26393] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.477090][T26389] loop3: detected capacity change from 0 to 128 [ 532.506345][T26393] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.519636][T26397] program syz.3.7445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.550065][T26401] syz.3.7447: attempt to access beyond end of device [ 532.550065][T26401] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 532.741034][T26393] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.836088][T26393] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.860422][T26414] lo speed is unknown, defaulting to 1000 [ 533.034781][T26416] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.111366][T26416] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.129686][T26418] loop3: detected capacity change from 0 to 2048 [ 533.155362][T26418] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 533.209831][T26416] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.259264][T26416] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.315243][T26416] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.335455][T26416] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.346848][T26416] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.358570][T26416] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.402106][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 533.402124][ T29] audit: type=1326 audit(1745036540.800:45305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.2.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 533.442488][ T29] audit: type=1326 audit(1745036540.830:45306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.2.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 533.466046][ T29] audit: type=1326 audit(1745036540.830:45307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.2.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 533.489921][ T29] audit: type=1326 audit(1745036540.830:45308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.2.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 533.513558][ T29] audit: type=1326 audit(1745036540.830:45309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.2.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 533.537762][ T29] audit: type=1326 audit(1745036540.830:45310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.2.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 533.561388][ T29] audit: type=1326 audit(1745036540.830:45311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26422 comm="syz.2.7454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 533.634305][T26425] loop4: detected capacity change from 0 to 1024 [ 533.642019][T26425] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 533.656642][T26425] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7455: Invalid block bitmap block 0 in block_group 0 [ 533.670885][T26425] Quota error (device loop4): write_blk: dquota write failed [ 533.678391][T26425] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 533.689138][T26425] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7455: Failed to acquire dquot type 0 [ 533.725743][T26425] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.7455: Freeing blocks not in datazone - block = 0, count = 4096 [ 533.740029][T26425] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7455: Invalid inode bitmap blk 0 in block_group 0 [ 533.753189][T26425] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 533.762044][T26425] EXT4-fs (loop4): 1 orphan inode deleted [ 533.762185][ T6051] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 533.768219][T26425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.776827][ T6051] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 0 [ 533.829570][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.027313][T26439] random: crng reseeded on system resumption [ 534.418721][T26442] lo speed is unknown, defaulting to 1000 [ 534.454798][T26447] netem: incorrect gi model size [ 534.459854][T26447] netem: change failed [ 534.546829][T26454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7464'. [ 534.636417][T26454] loop4: detected capacity change from 0 to 128 [ 534.667483][T26456] random: crng reseeded on system resumption [ 534.683990][T26460] loop4: detected capacity change from 0 to 512 [ 534.800641][T26460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.825940][T26460] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 534.839007][T26456] netem: incorrect gi model size [ 534.843991][T26456] netem: change failed [ 534.858907][T26460] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.7466: corrupted inode contents [ 534.905735][T26460] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.7466: mark_inode_dirty error [ 534.918693][T26460] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.7466: corrupted inode contents [ 534.934027][T26460] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.7466: mark_inode_dirty error [ 535.205892][T26493] lo speed is unknown, defaulting to 1000 [ 535.309931][T26495] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7478'. [ 535.447500][T26504] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.530195][T26504] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.705221][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.729275][T26504] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.782104][T26511] loop4: detected capacity change from 0 to 1024 [ 535.789853][T26511] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 535.899174][T26514] lo speed is unknown, defaulting to 1000 [ 535.990056][T26504] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.002573][T26511] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7484: Invalid block bitmap block 0 in block_group 0 [ 536.065712][T26511] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7484: Failed to acquire dquot type 0 [ 536.101022][T26504] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.121955][T26511] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.7484: Freeing blocks not in datazone - block = 0, count = 4096 [ 536.142406][T26504] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.158874][T26504] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.168052][T26511] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7484: Invalid inode bitmap blk 0 in block_group 0 [ 536.179441][T26504] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.182649][T26511] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 536.218517][T26393] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.226860][ T3326] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 536.242428][T26393] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.250934][T26511] EXT4-fs (loop4): 1 orphan inode deleted [ 536.258150][T26511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.272865][T26393] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.284837][T26393] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.326315][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.463957][T26542] random: crng reseeded on system resumption [ 536.626989][T26546] netem: incorrect gi model size [ 536.632017][T26546] netem: change failed [ 536.653080][T26542] netem: incorrect gi model size [ 536.658112][T26542] netem: change failed [ 536.798540][T26574] loop0: detected capacity change from 0 to 512 [ 536.839340][T26575] loop4: detected capacity change from 0 to 1024 [ 536.846915][T26574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.856004][T26580] lo speed is unknown, defaulting to 1000 [ 536.875048][T26575] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 536.885769][T26574] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 536.919303][T26575] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7501: Invalid block bitmap block 0 in block_group 0 [ 536.919875][T26574] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.7505: corrupted inode contents [ 536.985132][T26575] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7501: Failed to acquire dquot type 0 [ 537.024049][T26574] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.7505: mark_inode_dirty error [ 537.046944][T26575] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.7501: Freeing blocks not in datazone - block = 0, count = 4096 [ 537.071745][T26575] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7501: Invalid inode bitmap blk 0 in block_group 0 [ 537.088158][ T3326] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 537.100052][T26574] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.7505: corrupted inode contents [ 537.132634][T26575] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 537.144571][T26574] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.7505: mark_inode_dirty error [ 537.174553][T26575] EXT4-fs (loop4): 1 orphan inode deleted [ 537.185252][T26575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.215986][T26596] random: crng reseeded on system resumption [ 537.228615][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.349999][T26590] netem: incorrect gi model size [ 537.355291][T26590] netem: change failed [ 537.444672][T26593] netem: incorrect gi model size [ 537.449756][T26593] netem: change failed [ 537.586526][T26609] lo speed is unknown, defaulting to 1000 [ 537.957946][T22893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.120323][T26623] program syz.3.7522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.510623][T26644] lo speed is unknown, defaulting to 1000 [ 539.363967][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 539.363984][ T29] audit: type=1326 audit(1745036546.760:45671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26643 comm="syz.2.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 539.427750][T26645] lo speed is unknown, defaulting to 1000 [ 539.485072][ T29] audit: type=1326 audit(1745036546.880:45672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26643 comm="syz.2.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 539.509059][ T29] audit: type=1326 audit(1745036546.880:45673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26643 comm="syz.2.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 539.532898][ T29] audit: type=1326 audit(1745036546.880:45674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26643 comm="syz.2.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 539.556766][ T29] audit: type=1326 audit(1745036546.880:45675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26643 comm="syz.2.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 539.580600][ T29] audit: type=1326 audit(1745036546.880:45676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26643 comm="syz.2.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 539.604267][ T29] audit: type=1326 audit(1745036546.880:45677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26643 comm="syz.2.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 539.628135][ T29] audit: type=1326 audit(1745036546.880:45678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26643 comm="syz.2.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 539.705521][ T29] audit: type=1326 audit(1745036546.880:45679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26643 comm="syz.2.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 539.729421][ T29] audit: type=1326 audit(1745036546.880:45680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26643 comm="syz.2.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 539.755088][T26653] syz.4.7534: attempt to access beyond end of device [ 539.755088][T26653] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 539.795761][T26656] loop4: detected capacity change from 0 to 512 [ 539.848747][T26662] program syz.3.7538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.878495][T26656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.907810][T26656] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 539.945421][T26656] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.7535: corrupted inode contents [ 539.976769][T26656] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.7535: mark_inode_dirty error [ 540.088216][T26656] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.7535: corrupted inode contents [ 540.100359][T26656] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.7535: mark_inode_dirty error [ 540.239957][T26677] lo speed is unknown, defaulting to 1000 [ 540.600021][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.130995][T26694] random: crng reseeded on system resumption [ 541.279342][T26691] netem: incorrect gi model size [ 541.284317][T26691] netem: change failed [ 541.387386][T26708] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.500190][T26708] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.545572][T26725] random: crng reseeded on system resumption [ 541.553585][T26708] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.610173][T26708] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.674789][T26731] lo speed is unknown, defaulting to 1000 [ 541.759848][T26725] netem: incorrect gi model size [ 541.764854][T26725] netem: change failed [ 541.952562][T26739] netlink: 'syz.4.7565': attribute type 3 has an invalid length. [ 542.026173][T26739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7565'. [ 542.036192][T26739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7565'. [ 542.068214][T26743] FAULT_INJECTION: forcing a failure. [ 542.068214][T26743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.081378][T26743] CPU: 1 UID: 0 PID: 26743 Comm: syz.2.7567 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 542.081467][T26743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 542.081478][T26743] Call Trace: [ 542.081483][T26743] [ 542.081490][T26743] dump_stack_lvl+0xf6/0x150 [ 542.081542][T26743] dump_stack+0x15/0x1a [ 542.081555][T26743] should_fail_ex+0x261/0x270 [ 542.081576][T26743] should_fail+0xb/0x10 [ 542.081592][T26743] should_fail_usercopy+0x1a/0x20 [ 542.081612][T26743] _copy_from_user+0x1c/0xa0 [ 542.081672][T26743] snd_seq_ioctl+0x124/0x2c0 [ 542.081703][T26743] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 542.081727][T26743] __se_sys_ioctl+0xc9/0x140 [ 542.081752][T26743] __x64_sys_ioctl+0x43/0x50 [ 542.081824][T26743] x64_sys_call+0x168d/0x2e10 [ 542.081841][T26743] do_syscall_64+0xc9/0x1a0 [ 542.081862][T26743] ? clear_bhb_loop+0x25/0x80 [ 542.081879][T26743] ? clear_bhb_loop+0x25/0x80 [ 542.081968][T26743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.082058][T26743] RIP: 0033:0x7fdf435ce169 [ 542.082071][T26743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.082163][T26743] RSP: 002b:00007fdf41c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 542.082179][T26743] RAX: ffffffffffffffda RBX: 00007fdf437f5fa0 RCX: 00007fdf435ce169 [ 542.082189][T26743] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000003 [ 542.082200][T26743] RBP: 00007fdf41c37090 R08: 0000000000000000 R09: 0000000000000000 [ 542.082213][T26743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.082222][T26743] R13: 0000000000000000 R14: 00007fdf437f5fa0 R15: 00007ffe5f269ff8 [ 542.082239][T26743] [ 542.363461][T26755] random: crng reseeded on system resumption [ 542.489169][T26755] netem: incorrect gi model size [ 542.494242][T26755] netem: change failed [ 542.517243][T26759] loop4: detected capacity change from 0 to 512 [ 542.554889][T26759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.567821][T26759] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.624382][T26708] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.640918][T26708] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.653848][T26708] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.690071][T26708] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.962404][T26798] lo speed is unknown, defaulting to 1000 [ 543.188119][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.496898][T26808] loop4: detected capacity change from 0 to 1024 [ 543.514570][T26808] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 543.528412][T26807] random: crng reseeded on system resumption [ 543.534739][T26812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7591'. [ 543.546561][T26808] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7589: Invalid block bitmap block 0 in block_group 0 [ 543.577900][T26808] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7589: Failed to acquire dquot type 0 [ 543.609864][T26808] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.7589: Freeing blocks not in datazone - block = 0, count = 4096 [ 543.623690][T26808] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7589: Invalid inode bitmap blk 0 in block_group 0 [ 543.636512][ T1881] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 543.649820][T26808] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 543.658869][T26819] loop3: detected capacity change from 0 to 512 [ 543.659148][T26808] EXT4-fs (loop4): 1 orphan inode deleted [ 543.671359][T26808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.709969][T26807] netem: incorrect gi model size [ 543.714975][T26807] netem: change failed [ 543.749229][T26819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.774342][T26819] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 543.805642][T26819] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.7593: corrupted inode contents [ 543.810019][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.856047][T26819] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.7593: mark_inode_dirty error [ 543.875291][T26819] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.7593: corrupted inode contents [ 543.902722][T26836] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.931290][T26819] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.7593: mark_inode_dirty error [ 544.014898][T26836] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.030773][T26842] loop4: detected capacity change from 0 to 512 [ 544.059972][T26842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.072839][T26842] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.084546][T26836] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.139901][T26836] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.390325][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 544.390340][ T29] audit: type=1326 audit(1745036551.790:45866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26818 comm="syz.3.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6628bde169 code=0x7ffc0000 [ 544.423810][ T29] audit: type=1326 audit(1745036551.820:45867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26818 comm="syz.3.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6628bde169 code=0x7ffc0000 [ 544.770106][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.796854][T26850] syz.4.7601: attempt to access beyond end of device [ 544.796854][T26850] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 544.856000][T26854] syz.4.7604: attempt to access beyond end of device [ 544.856000][T26854] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 544.875062][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.926882][T26860] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7605'. [ 544.967498][T26857] random: crng reseeded on system resumption [ 545.049064][T26866] lo speed is unknown, defaulting to 1000 [ 545.174982][ T29] audit: type=1400 audit(1745036552.570:45868): avc: denied { bind } for pid=26868 comm="syz.1.7608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 545.194572][ T29] audit: type=1400 audit(1745036552.570:45869): avc: denied { write } for pid=26868 comm="syz.1.7608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 545.217651][T26857] netem: incorrect gi model size [ 545.222636][T26857] netem: change failed [ 545.289169][T26867] loop3: detected capacity change from 0 to 1024 [ 545.326371][T26867] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 545.330636][ T29] audit: type=1400 audit(1745036552.630:45870): avc: denied { ioctl } for pid=26868 comm="syz.1.7608" path="socket:[92862]" dev="sockfs" ino=92862 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 545.362284][ T29] audit: type=1400 audit(1745036552.700:45871): avc: denied { sys_module } for pid=26868 comm="syz.1.7608" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 545.403176][T26867] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.7607: Invalid block bitmap block 0 in block_group 0 [ 545.417265][T26867] Quota error (device loop3): write_blk: dquota write failed [ 545.424831][T26867] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 545.435991][T26867] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7607: Failed to acquire dquot type 0 [ 545.448348][T26867] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.7607: Freeing blocks not in datazone - block = 0, count = 4096 [ 545.471480][T26867] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.7607: Invalid inode bitmap blk 0 in block_group 0 [ 545.484579][T26867] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 545.493518][ T6051] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 545.496805][T26867] EXT4-fs (loop3): 1 orphan inode deleted [ 545.502529][ T6051] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 0 [ 545.509290][T26867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.535627][T26885] loop4: detected capacity change from 0 to 512 [ 545.552751][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.554235][T26885] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #15: comm syz.4.7612: casefold flag without casefold feature [ 545.578481][T26885] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.7612: couldn't read orphan inode 15 (err -117) [ 545.591113][T26885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.720938][ T29] audit: type=1326 audit(1745036553.090:45872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26886 comm="syz.1.7613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd20833e169 code=0x0 [ 545.838261][T26898] lo speed is unknown, defaulting to 1000 [ 546.014641][T26902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7617'. [ 546.334418][T21581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.428635][T26913] random: crng reseeded on system resumption [ 546.598547][T26913] netem: incorrect gi model size [ 546.603523][T26913] netem: change failed [ 546.854554][T26922] lo speed is unknown, defaulting to 1000 [ 547.399287][T26935] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7628'. [ 547.612649][T26947] loop3: detected capacity change from 0 to 512 [ 547.664372][T26947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.688307][T26947] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 547.740104][T26947] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.7633: corrupted inode contents [ 547.752278][T26947] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.7633: mark_inode_dirty error [ 547.764228][T26947] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.7633: corrupted inode contents [ 547.800144][T26947] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.7633: mark_inode_dirty error [ 548.133595][T26836] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.145829][T26836] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.158105][T26836] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.170764][T26836] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.282966][T26931] syz.4.7626 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 548.297302][T26931] CPU: 0 UID: 0 PID: 26931 Comm: syz.4.7626 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 548.297329][T26931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 548.297383][T26931] Call Trace: [ 548.297392][T26931] [ 548.297402][T26931] dump_stack_lvl+0xf6/0x150 [ 548.297439][T26931] dump_stack+0x15/0x1a [ 548.297457][T26931] dump_header+0x83/0x2d0 [ 548.297478][T26931] oom_kill_process+0x341/0x4c0 [ 548.297500][T26931] out_of_memory+0x9d1/0xc20 [ 548.297581][T26931] mem_cgroup_out_of_memory+0x13f/0x190 [ 548.297621][T26931] try_charge_memcg+0x5f1/0x890 [ 548.297650][T26931] obj_cgroup_charge_pages+0xc0/0x1a0 [ 548.297741][T26931] __memcg_kmem_charge_page+0x9d/0x170 [ 548.297820][T26931] __alloc_frozen_pages_noprof+0x1a6/0x360 [ 548.297843][T26931] alloc_pages_mpol+0xb6/0x260 [ 548.297879][T26931] alloc_pages_noprof+0xe8/0x130 [ 548.297924][T26931] __vmalloc_node_range_noprof+0x6ea/0xe80 [ 548.297983][T26931] __kvmalloc_node_noprof+0x311/0x520 [ 548.298021][T26931] ? ip_set_alloc+0x1f/0x30 [ 548.298113][T26931] ? ip_set_alloc+0x1f/0x30 [ 548.298220][T26931] ip_set_alloc+0x1f/0x30 [ 548.298254][T26931] hash_netiface_create+0x273/0x730 [ 548.298293][T26931] ? __nla_parse+0x40/0x60 [ 548.298325][T26931] ? __pfx_hash_netiface_create+0x10/0x10 [ 548.298386][T26931] ip_set_create+0x3b6/0x970 [ 548.298434][T26931] ? __schedule+0x780/0xb70 [ 548.298469][T26931] ? schedule+0x5f/0xd0 [ 548.298530][T26931] ? __pfx_ip_set_create+0x10/0x10 [ 548.298572][T26931] nfnetlink_rcv_msg+0x4ba/0x580 [ 548.298756][T26931] netlink_rcv_skb+0x12f/0x230 [ 548.298796][T26931] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 548.298828][T26931] nfnetlink_rcv+0x187/0x1610 [ 548.298879][T26931] ? __kfree_skb+0x102/0x150 [ 548.298913][T26931] ? nlmon_xmit+0x51/0x60 [ 548.298941][T26931] ? __kfree_skb+0x102/0x150 [ 548.298980][T26931] ? consume_skb+0x49/0x160 [ 548.298998][T26931] ? nlmon_xmit+0x51/0x60 [ 548.299127][T26931] ? dev_hard_start_xmit+0x3d1/0x400 [ 548.299153][T26931] ? __dev_queue_xmit+0xb76/0x20b0 [ 548.299184][T26931] ? should_fail_ex+0x31/0x270 [ 548.299242][T26931] ? ref_tracker_free+0x3b8/0x420 [ 548.299318][T26931] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 548.299349][T26931] netlink_unicast+0x605/0x6c0 [ 548.299392][T26931] netlink_sendmsg+0x609/0x720 [ 548.299475][T26931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.299542][T26931] __sock_sendmsg+0x140/0x180 [ 548.299577][T26931] ____sys_sendmsg+0x350/0x4e0 [ 548.299628][T26931] __sys_sendmsg+0x1a0/0x240 [ 548.299668][T26931] __x64_sys_sendmsg+0x46/0x50 [ 548.299690][T26931] x64_sys_call+0x26f3/0x2e10 [ 548.299717][T26931] do_syscall_64+0xc9/0x1a0 [ 548.299821][T26931] ? clear_bhb_loop+0x25/0x80 [ 548.299847][T26931] ? clear_bhb_loop+0x25/0x80 [ 548.299872][T26931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.299896][T26931] RIP: 0033:0x7f7d7b76e169 [ 548.299979][T26931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.300002][T26931] RSP: 002b:00007f7d79dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.300024][T26931] RAX: ffffffffffffffda RBX: 00007f7d7b995fa0 RCX: 00007f7d7b76e169 [ 548.300038][T26931] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 548.300051][T26931] RBP: 00007f7d7b7f0a68 R08: 0000000000000000 R09: 0000000000000000 [ 548.300062][T26931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.300073][T26931] R13: 0000000000000000 R14: 00007f7d7b995fa0 R15: 00007fffe09a8828 [ 548.300162][T26931] [ 548.647184][T26931] memory: usage 307200kB, limit 307200kB, failcnt 1610 [ 548.654219][T26931] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 548.662296][T26931] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 548.669798][T26931] Memory cgroup stats for /syz4: [ 548.713293][T26931] cache 0 [ 548.721235][T26931] rss 0 [ 548.724002][T26931] shmem 0 [ 548.726984][T26931] mapped_file 0 [ 548.730532][T26931] dirty 0 [ 548.733473][T26931] writeback 0 [ 548.736764][T26931] workingset_refault_anon 3736 [ 548.741657][T26931] workingset_refault_file 12373 [ 548.746540][T26931] swap 196608 [ 548.749908][T26931] swapcached 0 [ 548.753284][T26931] pgpgin 827675 [ 548.756829][T26931] pgpgout 827666 [ 548.760456][T26931] pgfault 688765 [ 548.764018][T26931] pgmajfault 1271 [ 548.767686][T26931] inactive_anon 0 [ 548.771376][T26931] active_anon 0 [ 548.774873][T26931] inactive_file 0 [ 548.778571][T26931] active_file 36864 [ 548.782413][T26931] unevictable 0 [ 548.785875][T26931] hierarchical_memory_limit 314572800 [ 548.791294][T26931] hierarchical_memsw_limit 9223372036854771712 [ 548.797464][T26931] total_cache 0 [ 548.801018][T26931] total_rss 0 [ 548.804328][T26931] total_shmem 0 [ 548.807832][T26931] total_mapped_file 0 [ 548.811877][T26931] total_dirty 0 [ 548.815352][T26931] total_writeback 0 [ 548.819179][T26931] total_workingset_refault_anon 3736 [ 548.824503][T26931] total_workingset_refault_file 12373 [ 548.829999][T26931] total_swap 196608 [ 548.833815][T26931] total_swapcached 0 [ 548.837776][T26931] total_pgpgin 827675 [ 548.841820][T26931] total_pgpgout 827666 [ 548.845901][T26931] total_pgfault 688765 [ 548.850015][T26931] total_pgmajfault 1271 [ 548.854283][T26931] total_inactive_anon 0 [ 548.858498][T26931] total_active_anon 0 [ 548.862492][T26931] total_inactive_file 0 [ 548.866654][T26931] total_active_file 36864 [ 548.871058][T26931] total_unevictable 0 [ 548.875048][T26931] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7626,pid=26930,uid=0 [ 548.889802][T26931] Memory cgroup out of memory: Killed process 26930 (syz.4.7626) total-vm:93616kB, anon-rss:936kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 548.960633][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.063436][T26968] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7639'. [ 549.125386][T26967] random: crng reseeded on system resumption [ 549.270066][T26967] netem: incorrect gi model size [ 549.275127][T26967] netem: change failed [ 549.426455][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 549.426470][ T29] audit: type=1326 audit(1745036556.820:46082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.0.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 549.456532][ T29] audit: type=1326 audit(1745036556.820:46083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.0.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 549.480216][ T29] audit: type=1326 audit(1745036556.820:46084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.0.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 549.503809][ T29] audit: type=1326 audit(1745036556.820:46085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.0.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 549.527748][ T29] audit: type=1326 audit(1745036556.820:46086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.0.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 549.551465][ T29] audit: type=1326 audit(1745036556.820:46087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.0.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 549.575078][ T29] audit: type=1326 audit(1745036556.820:46088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.0.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 549.598904][ T29] audit: type=1326 audit(1745036556.820:46089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.0.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 549.622516][ T29] audit: type=1326 audit(1745036556.820:46090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.0.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 549.646384][ T29] audit: type=1326 audit(1745036556.820:46091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26978 comm="syz.0.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34154de169 code=0x7ffc0000 [ 549.855024][T27004] lo speed is unknown, defaulting to 1000 [ 549.930857][T27005] lo speed is unknown, defaulting to 1000 [ 550.615878][T27011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7652'. [ 550.688557][T26991] Cannot find del_set index 0 as target [ 550.832170][T27020] random: crng reseeded on system resumption [ 550.983290][T27020] netem: incorrect gi model size [ 550.988496][T27020] netem: change failed [ 551.037252][T27032] 9pnet: Could not find request transport: fd0x0000000000000004 [ 551.379141][T27047] lo speed is unknown, defaulting to 1000 [ 552.040898][T27056] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.066765][T27052] ip6gretap1: entered allmulticast mode [ 552.077180][T27059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7667'. [ 552.109325][T27056] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.220467][T27056] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.299837][T27056] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.379581][T27069] FAULT_INJECTION: forcing a failure. [ 552.379581][T27069] name failslab, interval 1, probability 0, space 0, times 0 [ 552.392328][T27069] CPU: 1 UID: 0 PID: 27069 Comm: syz.1.7671 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 552.392457][T27069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 552.392469][T27069] Call Trace: [ 552.392475][T27069] [ 552.392483][T27069] dump_stack_lvl+0xf6/0x150 [ 552.392511][T27069] dump_stack+0x15/0x1a [ 552.392531][T27069] should_fail_ex+0x261/0x270 [ 552.392589][T27069] should_failslab+0x8f/0xb0 [ 552.392611][T27069] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 552.392683][T27069] ? __alloc_skb+0x10d/0x320 [ 552.392702][T27069] __alloc_skb+0x10d/0x320 [ 552.392720][T27069] netlink_alloc_large_skb+0xad/0xe0 [ 552.392750][T27069] netlink_sendmsg+0x3da/0x720 [ 552.392801][T27069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.392881][T27069] __sock_sendmsg+0x140/0x180 [ 552.392908][T27069] ____sys_sendmsg+0x350/0x4e0 [ 552.392935][T27069] __sys_sendmsg+0x1a0/0x240 [ 552.392973][T27069] __x64_sys_sendmsg+0x46/0x50 [ 552.393071][T27069] x64_sys_call+0x26f3/0x2e10 [ 552.393093][T27069] do_syscall_64+0xc9/0x1a0 [ 552.393124][T27069] ? clear_bhb_loop+0x25/0x80 [ 552.393151][T27069] ? clear_bhb_loop+0x25/0x80 [ 552.393224][T27069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.393243][T27069] RIP: 0033:0x7fd20833e169 [ 552.393259][T27069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.393276][T27069] RSP: 002b:00007fd2069a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.393294][T27069] RAX: ffffffffffffffda RBX: 00007fd208565fa0 RCX: 00007fd20833e169 [ 552.393307][T27069] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 552.393354][T27069] RBP: 00007fd2069a7090 R08: 0000000000000000 R09: 0000000000000000 [ 552.393432][T27069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.393476][T27069] R13: 0000000000000000 R14: 00007fd208565fa0 R15: 00007ffe68f34158 [ 552.393495][T27069] [ 552.632304][T27065] lo speed is unknown, defaulting to 1000 [ 552.686711][T27056] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.707932][T27056] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.740074][T27056] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.749032][T27077] tipc: Can't bind to reserved service type 3 [ 552.759737][T27056] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.771003][T27075] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.808819][T27079] bridge_slave_0: left allmulticast mode [ 552.809098][T27080] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7676'. [ 552.814615][T27079] bridge_slave_0: left promiscuous mode [ 552.823625][T27080] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7676'. [ 552.829350][T27079] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.846893][T27079] bridge_slave_1: left allmulticast mode [ 552.852585][T27079] bridge_slave_1: left promiscuous mode [ 552.858408][T27079] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.866974][T27079] bond0: (slave bond_slave_0): Releasing backup interface [ 552.875687][T27079] bond0: (slave bond_slave_1): Releasing backup interface [ 552.884385][T27079] team0: Port device team_slave_0 removed [ 552.891078][T27079] team0: Port device team_slave_1 removed [ 552.898172][T27075] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.970091][T27075] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.049162][T27075] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.085352][T27089] loop0: detected capacity change from 0 to 512 [ 553.115312][T27089] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.7678: casefold flag without casefold feature [ 553.128529][T27089] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.7678: couldn't read orphan inode 15 (err -117) [ 553.141928][T27089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.157342][T27095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7680'. [ 553.160662][T27075] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.178758][T27075] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.190572][T27075] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.202311][T27075] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.308359][T27112] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7688'. [ 553.308876][T27110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7687'. [ 553.383347][T27110] loop4: detected capacity change from 0 to 128 [ 553.557488][T27129] lo speed is unknown, defaulting to 1000 [ 553.784043][T27142] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7699'. [ 553.839097][T27147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7701'. [ 553.910939][T27147] loop4: detected capacity change from 0 to 128 [ 553.933824][T22893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.005146][T27178] syz.4.7709: attempt to access beyond end of device [ 554.005146][T27178] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 554.325265][T27213] lo speed is unknown, defaulting to 1000 [ 554.491919][T27217] program syz.2.7717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.847660][ T29] kauditd_printk_skb: 524 callbacks suppressed [ 554.847681][ T29] audit: type=1326 audit(1745036562.240:46616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27228 comm="syz.1.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 554.877509][ T29] audit: type=1326 audit(1745036562.240:46617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27228 comm="syz.1.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 554.901140][ T29] audit: type=1326 audit(1745036562.240:46618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27228 comm="syz.1.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 554.924559][ T29] audit: type=1326 audit(1745036562.240:46619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27228 comm="syz.1.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 554.948227][ T29] audit: type=1326 audit(1745036562.240:46620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27228 comm="syz.1.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 554.971825][ T29] audit: type=1326 audit(1745036562.240:46621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27228 comm="syz.1.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 554.995461][ T29] audit: type=1326 audit(1745036562.240:46622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27228 comm="syz.1.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 555.019221][ T29] audit: type=1326 audit(1745036562.240:46623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27228 comm="syz.1.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 555.042835][ T29] audit: type=1326 audit(1745036562.240:46624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27228 comm="syz.1.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 555.066495][ T29] audit: type=1326 audit(1745036562.240:46625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27228 comm="syz.1.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 555.128417][T27230] lo speed is unknown, defaulting to 1000 [ 555.361072][T27245] loop4: detected capacity change from 0 to 512 [ 555.368381][T27245] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 555.380541][T27245] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 555.610402][T27250] lo speed is unknown, defaulting to 1000 [ 555.660548][T27245] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #11: comm syz.4.7724: corrupted inode contents [ 555.703344][T27245] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #11: comm syz.4.7724: mark_inode_dirty error [ 555.898548][T27245] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7724: invalid indirect mapped block 1 (level 1) [ 556.007022][T27254] lo speed is unknown, defaulting to 1000 [ 556.063447][T27245] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #11: comm syz.4.7724: corrupted inode contents [ 556.110056][T27245] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 556.173951][T27245] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #11: comm syz.4.7724: corrupted inode contents [ 556.264512][T27245] EXT4-fs error (device loop4): ext4_truncate:4255: inode #11: comm syz.4.7724: mark_inode_dirty error [ 556.364824][T27245] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 556.403336][T27263] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.428776][T27245] EXT4-fs (loop4): 1 truncate cleaned up [ 556.452045][T27245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.496363][T27265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7728'. [ 556.509159][T27245] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.593371][T27263] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.634302][T27274] syz.4.7729: attempt to access beyond end of device [ 556.634302][T27274] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 556.700890][T27263] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.715747][T27289] syz.4.7732: attempt to access beyond end of device [ 556.715747][T27289] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 556.752684][T27294] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.769609][T27263] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.802679][T27301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7733'. [ 556.829095][T27294] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.890007][T27294] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.969542][T27294] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.054037][T27294] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.066190][T27294] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.083099][T27294] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.094954][T27294] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.161575][T27330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7735'. [ 557.203358][T27341] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.283216][T27345] program syz.1.7740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.351642][T27341] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.522266][T27341] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.559481][T27341] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.656164][T27352] lo speed is unknown, defaulting to 1000 [ 558.057983][T27358] loop3: detected capacity change from 0 to 1024 [ 558.064970][T27358] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 558.087707][T27358] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.7745: Invalid block bitmap block 0 in block_group 0 [ 558.101375][T27358] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7745: Failed to acquire dquot type 0 [ 558.112882][T27358] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.7745: Freeing blocks not in datazone - block = 0, count = 4096 [ 558.126579][T27358] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.7745: Invalid inode bitmap blk 0 in block_group 0 [ 558.139341][T27358] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 558.148004][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0 [ 558.148086][T27358] EXT4-fs (loop3): 1 orphan inode deleted [ 558.165569][T27358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.208845][T22553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.384846][T27367] loop0: detected capacity change from 0 to 512 [ 558.399944][T27367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.439596][T27367] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.571394][T27388] lo speed is unknown, defaulting to 1000 [ 559.098252][T22893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.133811][T27393] __nla_validate_parse: 1 callbacks suppressed [ 559.133830][T27393] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7758'. [ 559.343694][T27408] loop0: detected capacity change from 0 to 1024 [ 559.358704][T27408] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 559.389638][T27408] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.7764: Invalid block bitmap block 0 in block_group 0 [ 559.408671][T27408] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.7764: Failed to acquire dquot type 0 [ 559.423128][T27408] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.7764: Freeing blocks not in datazone - block = 0, count = 4096 [ 559.439300][T27408] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.7764: Invalid inode bitmap blk 0 in block_group 0 [ 559.468696][ T3397] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 559.484733][T27408] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 559.493594][T27408] EXT4-fs (loop0): 1 orphan inode deleted [ 559.499813][T27408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.537237][T22893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.562367][T27418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7768'. [ 559.571544][T27418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7768'. [ 559.628789][T27423] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7770'. [ 560.074478][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 560.074563][ T29] audit: type=1326 audit(1745036567.470:46882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27428 comm="syz.1.7771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 560.104636][ T29] audit: type=1326 audit(1745036567.470:46883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27428 comm="syz.1.7771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20833e169 code=0x7ffc0000 [ 560.133409][T27263] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.144871][T27263] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.156089][T27263] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.167523][T27263] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.192847][ T29] audit: type=1326 audit(1745036567.590:46884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27432 comm="syz.2.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 560.216597][ T29] audit: type=1326 audit(1745036567.590:46885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27432 comm="syz.2.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 560.240530][ T29] audit: type=1326 audit(1745036567.590:46886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27432 comm="syz.2.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 560.265026][ T29] audit: type=1326 audit(1745036567.590:46887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27432 comm="syz.2.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 560.288656][ T29] audit: type=1326 audit(1745036567.590:46888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27432 comm="syz.2.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 560.312517][ T29] audit: type=1326 audit(1745036567.590:46889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27432 comm="syz.2.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 560.336279][ T29] audit: type=1326 audit(1745036567.590:46890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27432 comm="syz.2.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 560.359973][ T29] audit: type=1326 audit(1745036567.590:46891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27432 comm="syz.2.7772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fdf435ce169 code=0x7ffc0000 [ 560.630324][T27456] lo speed is unknown, defaulting to 1000 [ 560.947906][ T3379] ================================================================== [ 560.956039][ T3379] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 560.963098][ T3379] [ 560.965416][ T3379] read-write to 0xffff888237d299a4 of 4 bytes by task 36 on cpu 1: [ 560.973299][ T3379] wq_worker_running+0x98/0x130 [ 560.978174][ T3379] schedule_timeout+0xbc/0x170 [ 560.982939][ T3379] msleep+0x4f/0x90 [ 560.986755][ T3379] nsim_fib_event_work+0x13dd/0x2290 [ 560.992118][ T3379] process_scheduled_works+0x4de/0xa20 [ 560.997575][ T3379] worker_thread+0x52c/0x710 [ 561.002190][ T3379] kthread+0x4b7/0x540 [ 561.006245][ T3379] ret_from_fork+0x4b/0x60 [ 561.010649][ T3379] ret_from_fork_asm+0x1a/0x30 [ 561.015404][ T3379] [ 561.017714][ T3379] read to 0xffff888237d299a4 of 4 bytes by task 3379 on cpu 0: [ 561.025248][ T3379] kick_pool+0x4d/0x2c0 [ 561.029409][ T3379] __queue_work+0x8f8/0xbb0 [ 561.033914][ T3379] queue_work_on+0xdf/0x190 [ 561.038427][ T3379] wg_queue_enqueue_per_peer_tx+0x124/0x270 [ 561.044337][ T3379] wg_packet_encrypt_worker+0x9ee/0xb90 [ 561.049880][ T3379] process_scheduled_works+0x4de/0xa20 [ 561.055341][ T3379] worker_thread+0x52c/0x710 [ 561.059950][ T3379] kthread+0x4b7/0x540 [ 561.064026][ T3379] ret_from_fork+0x4b/0x60 [ 561.068442][ T3379] ret_from_fork_asm+0x1a/0x30 [ 561.073203][ T3379] [ 561.075518][ T3379] value changed: 0x00000000 -> 0x00000001 [ 561.081220][ T3379] [ 561.083530][ T3379] Reported by Kernel Concurrency Sanitizer on: [ 561.089756][ T3379] CPU: 0 UID: 0 PID: 3379 Comm: kworker/0:3 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 561.102242][ T3379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 561.112308][ T3379] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 561.118810][ T3379] ================================================================== [ 562.212768][T27341] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.224040][T27341] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.235759][T27341] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.247137][T27341] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0