last executing test programs: 4.421552564s ago: executing program 0 (id=1685): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="008f080b000edb2c9cec3b02cfbe14f12acc86efdf641770469c2d152309449bc6b762890f2c00a4c2986df3946b48fc3cb1992417fc1a75e8d1318df9dd9f3c969894fbbe01a6ef05eeb4872494082d12f21d9921265b9363f1c1a63e5233106f32c961ad9effffcb2353b96d37cfac2f564361a553b707c651254df7fa7630b95dcd631b2236efcad788069bd28e5a41"], 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb9, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f0000000800)="6c1de7982414d1ab55d393d24d7e310115163081529d5e32b007497e16537b24eeb439598a5b37574a9f9956927d05d9dc0378d0eb67c95c323424f06ddabd3e1c7e1c72b1", 0x45, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018250000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000001e80)={0x0, 0x2, 0x4, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d", 0x80}, {&(0x7f0000000f00)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f73430670040cdd4b16742e94b62f4eb1c5d9daab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4a9f77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb6cd44d4957b00ed35a858d44b25d5b8dad1be420467333d9ce17dddc425dad69c4c9395a5c170170a4fa63091786e2a563e3d5982a73c15edf854046e1a33", 0x143}, {&(0x7f0000000640)="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", 0x111}, {&(0x7f0000000480)="fff5c0293353dbff0f8392718c8095fbc29ac956aabc89", 0x17}], 0x4}}], 0x1, 0x4800) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.055720687s ago: executing program 0 (id=1692): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r3, 0x0, 0xfdef) 3.873966914s ago: executing program 0 (id=1696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9e) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffef}, {0x0, 0xffff}}}, 0x24}}, 0x0) 3.655076234s ago: executing program 4 (id=1700): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = inotify_init1(0x800) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) dup3(r1, r0, 0x0) 3.549901744s ago: executing program 4 (id=1701): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000e900000000000800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000240)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x5bae, &(0x7f0000000340)={0x0, 0x7150, 0x2, 0x0, 0x2d7}, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_enter(r1, 0x6b34, 0xa905, 0xc, 0x0, 0x0) r2 = semget(0x3, 0x2, 0x42) semctl$IPC_RMID(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbf) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@noinit_itable}, {@nobh}, {@i_version}]}, 0x1, 0xb90, &(0x7f0000003380)="$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") open(&(0x7f0000000500)='./bus\x00', 0x64842, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x5477, 0x200000a, 0xffffffdb, 0x0, 0x2}) 3.447861223s ago: executing program 0 (id=1704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000ff0100000f0000000800000000010000", @ANYRES32=r3, @ANYBLOB="0d00000000000000000000000000f97000000000934954f95457f03eedd97814dacaaae827fa69da4d8541c55457d6da5237d6", @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='mm_page_alloc\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r6 = dup(0xffffffffffffffff) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x4f2, 0x618, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x25, 0xe0, 0xae, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0xd2, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x152}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7b, 0x2f, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x8, 0x8}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x5, 0x1, 0x6, 0x8, 0x5}, 0x17d, &(0x7f0000000a40)={0x5, 0xf, 0x17d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x5, 0xff80}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x8, 0x3}, @generic={0x4c, 0x10, 0xa, "bec28469a2dce371a989ba6496f9cf65822396505781b80373578ebaead8257ffcfc3a986946a71492c5a153188e829b54b06a164746180c36c1917bd954449f05033f38d498aa9f13"}, @generic={0xff, 0x10, 0x2, "bb05b19b020065ce70149aab07a2c759dddd32b80099ba66de44007a84648e8b2165ba3a5d0d7bd7e65d050a54c43fd20979f3e0f5fec9d618d2b426956c2fda5ea4fdb2b2d43c77b7c7aaa117811eb8a3aec27cf97a7921a3d3d7af96b88f75fdb5e68b9b4429bc6bd92c80135161fc2ca6539d4898f31d5f928e06e8b5699619905eee3c23d5122745f2e18ec3c794dd360527ca0f32a7db4c8f62d5a7cd15c4d051de6b92d8efd800f4cd9da39dcfae1d8031695b6ff04e3184faa87905ae1038b86571419fd7b2376a8a1fe1dbd18613aa1342bfd3fd1cc813a31283dd52d15324fd2926ce4827704bcbb4082cf5f2fc93d5696573d01c22fd52"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0xe, 0x4, 0x9, 0xe}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "891e3cd294499705576599dfb65cfcc1"}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x5e02}}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00005d9000/0x2000)=nil) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000180), 0xee, 0x456, &(0x7f00000004c0)="$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") 3.384585129s ago: executing program 4 (id=1706): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000faff00a61e17fa0000000000000000007939000000000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setns(r2, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 2.885374735s ago: executing program 4 (id=1707): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r3, 0x0, 0xfdef) 2.788465564s ago: executing program 4 (id=1709): syz_open_dev$usbfs(0x0, 0x75, 0x109301) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r4, 0x0, 0xfffffffffffffffb}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) unshare(0x60060100) 2.745749577s ago: executing program 2 (id=1710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c0001000000000000000000003c0000", @ANYRES32=r1, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) 2.523850108s ago: executing program 2 (id=1712): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = inotify_init1(0x800) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) dup3(r1, r0, 0x0) 2.389690911s ago: executing program 2 (id=1714): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000e900000000000800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000240)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x5bae, &(0x7f0000000340)={0x0, 0x7150, 0x2, 0x0, 0x2d7}, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_enter(r2, 0x6b34, 0xa905, 0xc, 0x0, 0x0) r3 = semget(0x3, 0x2, 0x42) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@noinit_itable}, {@nobh}, {@i_version}]}, 0x1, 0xb90, &(0x7f0000003380)="$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") r5 = open(&(0x7f0000000500)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x21000}], 0x2, 0x1800, 0x0, 0x3) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2.035103163s ago: executing program 1 (id=1718): io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x0, 0x802}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xb7119103a0d71020, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1f0000000000000000000000060000000000000099b80c341d42862c7372a81dd3b33c6633037240e03ce767f6109b4fc2fc6b7febfd8ff1033d8266afab75e5d6ecfe4fadff310a1d8e33a16aa2ae377391360092b98fe3261210aef1c925856fdb2d1536d2de0511e490612edd0f603d7f24a09bf4527523eac107223bab898bf58c3a29bd6a67a82cae58e692c8e04a65cf05cc578c7b94ce9ac6795ed10b3ddff1e714b9889b962987211176ce56650f9cc77458844214ed6f6aef403f8782f9fcf89f0c6e144fc23d", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) readv(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000800)) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x208012, &(0x7f00000000c0)={[{@nogrpid}, {@noauto_da_alloc}, {@noinit_itable}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0xff80}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1.651298138s ago: executing program 2 (id=1721): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) 1.585752034s ago: executing program 3 (id=1722): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000200000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x2d) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$packet(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYRES64=r3], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000005002f000000000008000300", @ANYRES32=r6], 0x2c}}, 0x0) 1.41507978s ago: executing program 3 (id=1723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c0001000000000000000000003c0000", @ANYRES32=r1, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) 1.297941351s ago: executing program 3 (id=1724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 1.185701901s ago: executing program 3 (id=1725): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = inotify_init1(0x800) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) dup3(r1, r0, 0x0) 1.121987287s ago: executing program 1 (id=1726): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 1.021625766s ago: executing program 3 (id=1727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r3, 0xc4fc9e906872378b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x0, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xff2e) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xffffdfff00000001}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x20, 0xfffffffc, 0x10, "0000000000000000000000000000003d0000f7"}) r8 = syz_open_pts(r7, 0xe8642) write$binfmt_aout(r8, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf0}}, 0x0) 1.014809367s ago: executing program 1 (id=1728): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xfc, 0x2dd, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)) 939.970773ms ago: executing program 1 (id=1729): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r1, 0x0, 0x1000, 0xa4, &(0x7f0000000340)="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", &(0x7f0000000240)=""/164, 0x8, 0x0, 0x87, 0x71, &(0x7f0000001340)="4c28a1be0ddcc591f0232d9d17fe68d9d04d469ed1f30b2b375e8ce521c5bbb1aaf158e730f1de0fca796e42c2567f660abed969c28ae3d8473e5cfc1df855a5fd4212fc52d7384471e6eb7737bac3b27d833f5c541bd37187300ca7f080c685578345d80960243e63a06f7865947fad8bd327e1130bbe287aec593036c12d29171ebef806e0dd", &(0x7f0000000180)="e45048b9dbb109495b7e3c2bc4e9fedab519ee85e69ed618811d110e4f4084810ad59f8ec75aec1896d973227c50c73f43a7c04cf605fb70ede52d1009d7c6575a5eecf5f9f148844058ba261427dce5f9ac3ff0920c5680513ccd1909d5a5b929875656bbdd3d3d1589d09e24dfd02cf6", 0x0, 0x0, 0x6}, 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 727.015873ms ago: executing program 2 (id=1730): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r1, 0x0, 0x0) socket(0x22, 0x2, 0x11) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="10000000", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") 385.649984ms ago: executing program 4 (id=1731): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0xf3, 0x0, 0x0, 0x0, "0abac4ea42e3c7ad4c7e30c48c00"}) r1 = dup(r0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x1002, 0x4, 0x3e8, 0x0, 0x1f8, 0x1f8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@random="c1c02e68092d", @multicast1, @rand_addr, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x101c}}, 0x20002046) io_uring_setup(0x1434, &(0x7f0000001500)={0x0, 0x2000000, 0x2, 0x0, 0x310}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000001c0)=""/39, 0x27, 0x0, 0x3}}, 0x120) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) sendmsg$tipc(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8004) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200010, &(0x7f0000000c40)={[{@journal_async_commit}, {@init_itable}, {@dioread_lock}, {@norecovery}, {@sb={'sb', 0x3d, 0x5f2}}, {@data_ordered}, {@grpquota}, {@usrquota}, {@noauto_da_alloc}]}, 0xfb, 0x54c, &(0x7f0000002080)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061107d00000000009500000000000000a5fb54345759eaf362a918f5c228e6320e1a9a6e395b6cd3c68db21a214fc6093e802bd0889c16390720d82c65350c982e3720c4dfee51dc650bbcd47b9cd366c71326c34e9bca537474d44247739a7d8eeb"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2cad43, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0xfffffffd, @mcast2={0xff, 0x5}}, r8}}, 0x48) close_range(r6, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000002dc0), 0xffffffffffffffff) 374.120385ms ago: executing program 0 (id=1732): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000faff00a61e17fa0000000000000000007939000000000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setns(r2, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 351.876078ms ago: executing program 2 (id=1733): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0x400000, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000092de7c8152"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000010000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) io_uring_enter(r1, 0x52e, 0x0, 0x0, 0x0, 0x0) 126.534588ms ago: executing program 3 (id=1734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) 92.733161ms ago: executing program 0 (id=1735): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 33.450307ms ago: executing program 1 (id=1736): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=1737): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000e900000000000800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000240)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x5bae, &(0x7f0000000340)={0x0, 0x7150, 0x2, 0x0, 0x2d7}, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_enter(r0, 0x6b34, 0xa905, 0xc, 0x0, 0x0) r1 = semget(0x3, 0x2, 0x42) semctl$IPC_RMID(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@noinit_itable}, {@nobh}, {@i_version}]}, 0x1, 0xb90, &(0x7f0000003380)="$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") open(&(0x7f0000000500)='./bus\x00', 0x64842, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x5477, 0x200000a, 0xffffffdb, 0x0, 0x2}) kernel console output (not intermixed with test programs): port 2(bridge_slave_1) entered forwarding state [ 185.665596][ T7735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.745681][ T1516] IPVS: stop unused estimator thread 0... [ 185.778643][ T7735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.887642][ T7735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.996160][ T7697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.009996][ T7735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.177054][ T7735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.213587][ T7735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.247583][ T7735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.295790][ T7735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.410479][ T7697] veth0_vlan: entered promiscuous mode [ 186.469345][ T7697] veth1_vlan: entered promiscuous mode [ 186.596762][ T7697] veth0_macvtap: entered promiscuous mode [ 186.629950][ T7697] veth1_macvtap: entered promiscuous mode [ 186.676675][ T7735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.717764][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.728380][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.738343][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.748793][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.758643][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.769055][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.778872][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.789280][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.799144][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.809645][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.819461][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.829918][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.839752][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.850188][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.859991][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.870482][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.399314][ T7697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.411601][ T7735] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.442661][ T1516] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.449999][ T1516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.497831][ T1516] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.504918][ T1516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.577680][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.588228][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.598083][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.608574][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.618395][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.628924][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.638738][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.649155][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.659031][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.669452][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.679262][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.689813][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.699670][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.710143][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.719965][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.730428][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.119989][ T7819] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1279'. [ 188.211626][ T7821] loop4: detected capacity change from 0 to 1024 [ 188.253818][ T7697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.264114][ T7735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.274539][ T7735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.315563][ T7821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.364453][ T7697] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.373274][ T7697] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.381969][ T7697] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.390717][ T7697] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.710664][ T7735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.889522][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 188.889536][ T29] audit: type=1326 audit(1727731111.115:8863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 189.024275][ T7735] veth0_vlan: entered promiscuous mode [ 189.032520][ T7735] veth1_vlan: entered promiscuous mode [ 189.060664][ T7735] veth0_macvtap: entered promiscuous mode [ 189.063438][ T29] audit: type=1326 audit(1727731111.155:8864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 189.067905][ T7735] veth1_macvtap: entered promiscuous mode [ 189.089861][ T29] audit: type=1326 audit(1727731111.155:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 189.119060][ T29] audit: type=1326 audit(1727731111.165:8866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 189.142542][ T29] audit: type=1326 audit(1727731111.165:8867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 189.165946][ T29] audit: type=1326 audit(1727731111.165:8868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 189.178102][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.190207][ T29] audit: type=1326 audit(1727731111.165:8869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 189.200552][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.223881][ T29] audit: type=1326 audit(1727731111.165:8870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 189.223903][ T29] audit: type=1326 audit(1727731111.165:8871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 189.223922][ T29] audit: type=1326 audit(1727731111.165:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 189.233773][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.314556][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.324375][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.334790][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.344638][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.355048][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.365078][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.375616][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.385614][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.396063][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.405963][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.416382][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.426241][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.436651][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.446605][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.457040][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.644013][ T5346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.752602][ T7849] loop1: detected capacity change from 0 to 512 [ 189.760109][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.784524][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.795004][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.804859][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.815301][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.825307][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.835845][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.845735][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.856237][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.866060][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.876540][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.886477][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.896910][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.906763][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.916382][ T7849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.917250][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.939718][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.950289][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.960130][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.970588][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.053887][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.087047][ T7860] loop4: detected capacity change from 0 to 256 [ 190.093171][ T7849] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.154575][ T7735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.163399][ T7735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.172130][ T7735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.180879][ T7735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.479428][ T7866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1287'. [ 190.524204][ T7867] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1289'. [ 190.621537][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.771932][ T7854] chnl_net:caif_netlink_parms(): no params data found [ 190.880452][ T7880] loop4: detected capacity change from 0 to 4096 [ 190.902789][ T7880] EXT4-fs: Ignoring removed nobh option [ 190.908402][ T7880] EXT4-fs: Ignoring removed i_version option [ 190.931619][ T7891] loop3: detected capacity change from 0 to 1024 [ 190.970980][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.978148][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.985325][ T7854] bridge_slave_0: entered allmulticast mode [ 190.990009][ T7880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.991703][ T7854] bridge_slave_0: entered promiscuous mode [ 191.010552][ T7854] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.017609][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.024716][ T7854] bridge_slave_1: entered allmulticast mode [ 191.031188][ T7854] bridge_slave_1: entered promiscuous mode [ 191.041976][ T7880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.065450][ T7854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.076021][ T7854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.076736][ T7891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.119719][ T7854] team0: Port device team_slave_0 added [ 191.126558][ T7854] team0: Port device team_slave_1 added [ 191.288315][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.295323][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.321339][ T7854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.670038][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.677064][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.702979][ T7854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.735950][ T7854] hsr_slave_0: entered promiscuous mode [ 191.742321][ T7854] hsr_slave_1: entered promiscuous mode [ 191.748402][ T7854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.756440][ T7854] Cannot create hsr debugfs directory [ 191.805115][ T7908] loop1: detected capacity change from 0 to 512 [ 191.917027][ T7908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.947809][ T7854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.963238][ T7908] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.013064][ T7908] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 192.031142][ T7854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.110970][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.156756][ T7854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.179479][ T7735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.242144][ T7854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.368012][ T7921] loop4: detected capacity change from 0 to 512 [ 192.515268][ T7921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.548850][ T7921] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.643773][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1302'. [ 192.744183][ T7925] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1305'. [ 192.770018][ T7854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 193.023768][ T7933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1303'. [ 193.106373][ T7934] loop3: detected capacity change from 0 to 512 [ 193.274643][ T7934] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.1303: corrupted xattr block 255: invalid header [ 193.296576][ T7854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.425036][ T7934] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 193.455985][ T7934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.472315][ T7854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.529737][ T7934] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.1303: corrupted xattr block 255: invalid header [ 193.643129][ T7934] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 193.663572][ T7934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.801487][ T7854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.812910][ T5346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.912967][ T7854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.961930][ T7854] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.971330][ T7945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1310'. [ 193.993840][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.000959][ T5334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.020353][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.027420][ T5334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.125991][ T7854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.136401][ T7854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.329456][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 194.329468][ T29] audit: type=1326 audit(1727731116.555:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 194.386204][ T7854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.403186][ T29] audit: type=1326 audit(1727731116.595:9016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 194.426655][ T29] audit: type=1326 audit(1727731116.595:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 194.450094][ T29] audit: type=1326 audit(1727731116.595:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 194.473514][ T29] audit: type=1326 audit(1727731116.595:9019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 194.497166][ T29] audit: type=1326 audit(1727731116.595:9020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 194.520769][ T29] audit: type=1326 audit(1727731116.595:9021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 194.544260][ T29] audit: type=1326 audit(1727731116.595:9022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 194.567816][ T29] audit: type=1326 audit(1727731116.595:9023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 194.591290][ T29] audit: type=1326 audit(1727731116.595:9024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 194.822142][ T7959] loop1: detected capacity change from 0 to 1024 [ 194.841030][ T7959] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 194.851948][ T7959] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 195.096126][ T7964] loop3: detected capacity change from 0 to 512 [ 195.108900][ T7959] JBD2: no valid journal superblock found [ 195.114677][ T7959] EXT4-fs (loop1): Could not load journal inode [ 195.140089][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1315'. [ 195.216262][ T7969] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1316'. [ 195.280754][ T7964] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1313: corrupted in-inode xattr: invalid ea_ino [ 195.300975][ T7964] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1313: couldn't read orphan inode 15 (err -117) [ 195.337868][ T7970] loop2: detected capacity change from 0 to 512 [ 195.507070][ T7964] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.647067][ T7970] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.1315: corrupted xattr block 255: invalid header [ 195.825681][ T7991] loop1: detected capacity change from 0 to 512 [ 195.838139][ T7970] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 195.864582][ T7991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.885834][ T7854] veth0_vlan: entered promiscuous mode [ 195.901870][ T7970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.919000][ T7854] veth1_vlan: entered promiscuous mode [ 195.935051][ T7991] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.970654][ T7854] veth0_macvtap: entered promiscuous mode [ 195.983437][ T7964] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 195.996876][ T7854] veth1_macvtap: entered promiscuous mode [ 196.020852][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.031300][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.041149][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.051649][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.061460][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.071985][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.081816][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.092734][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.102655][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.113168][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.122955][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.133395][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.143230][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.153714][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.163639][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.174165][ T7970] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.1315: corrupted xattr block 255: invalid header [ 196.174189][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.174203][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.203550][ T7970] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 196.207567][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.224034][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.234479][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.311489][ T7960] delete_channel: no stack [ 196.334277][ T7970] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.384584][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.455656][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.466184][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.476033][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.486544][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.496413][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.506834][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.516653][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.527153][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.537000][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.547445][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.557275][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.567721][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.577562][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.588013][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.597831][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.608340][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.618163][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.628598][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.638410][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.648828][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.722173][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.758827][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.769891][ T7854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.778699][ T7854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.787418][ T7854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.796136][ T7854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.934996][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1321'. [ 196.943992][ T8012] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1321'. [ 196.963732][ T8012] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1321'. [ 197.065770][ T8015] loop0: detected capacity change from 0 to 512 [ 197.171077][ T8015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.275819][ T8010] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 197.275867][ T8015] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.303347][ T8029] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1326'. [ 197.594906][ T8040] loop1: detected capacity change from 0 to 2048 [ 197.635886][ T8045] 9pnet_fd: Insufficient options for proto=fd [ 197.646274][ T8040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.666654][ T7854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.694335][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1327'. [ 197.703351][ T8035] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1327'. [ 197.897237][ T8035] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1327'. [ 198.006461][ T8051] loop4: detected capacity change from 0 to 512 [ 198.108379][ T8051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.166412][ T8051] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.197706][ T8055] loop0: detected capacity change from 0 to 512 [ 198.296340][ T5346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.345835][ T8055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.372236][ T8061] loop4: detected capacity change from 0 to 256 [ 198.465534][ T8055] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.484036][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.583757][ T8055] siw: device registration error -23 [ 198.585071][ T8064] loop4: detected capacity change from 0 to 4096 [ 198.613556][ T8064] EXT4-fs: Ignoring removed nobh option [ 198.619246][ T8064] EXT4-fs: Ignoring removed i_version option [ 198.645455][ T8064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.668856][ T8070] loop1: detected capacity change from 0 to 2048 [ 198.675378][ T7854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.773544][ T8070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.795073][ T8064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.965290][ T8079] loop0: detected capacity change from 0 to 1024 [ 199.077023][ T8079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.229533][ T8089] loop4: detected capacity change from 0 to 2048 [ 199.280461][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1342'. [ 199.290670][ T8085] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1342'. [ 199.315933][ T8089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.549747][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.613935][ T8085] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1342'. [ 199.676969][ T8096] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 199.730368][ T8100] loop2: detected capacity change from 0 to 128 [ 199.753830][ T8097] 9pnet_fd: Insufficient options for proto=fd [ 199.760548][ T8097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1344'. [ 199.762444][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 199.762536][ T29] audit: type=1326 audit(1727731121.955:9202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.2.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 199.769589][ T8097] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1344'. [ 199.789806][ T8097] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1344'. [ 199.799418][ T29] audit: type=1326 audit(1727731121.955:9203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.2.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 199.831677][ T8096] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 199.840754][ T29] audit: type=1326 audit(1727731121.955:9204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.2.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 199.853146][ T8096] EXT4-fs (loop4): This should not happen!! Data will be lost [ 199.853146][ T8096] [ 199.853161][ T8096] EXT4-fs (loop4): Total free blocks count 0 [ 199.876571][ T29] audit: type=1326 audit(1727731121.955:9205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.2.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 199.886149][ T8096] EXT4-fs (loop4): Free/Dirty block details [ 199.892086][ T29] audit: type=1326 audit(1727731121.955:9206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.2.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 199.915472][ T8096] EXT4-fs (loop4): free_blocks=66060288 [ 199.921287][ T29] audit: type=1326 audit(1727731121.955:9207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.2.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa93e81e033 code=0x7ffc0000 [ 199.944731][ T8096] EXT4-fs (loop4): dirty_blocks=2480 [ 199.944816][ T8096] EXT4-fs (loop4): Block reservation details [ 199.944827][ T8096] EXT4-fs (loop4): i_reserved_data_blocks=155 [ 199.991925][ T29] audit: type=1326 audit(1727731121.955:9208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.2.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa93e81cadf code=0x7ffc0000 [ 200.015218][ T29] audit: type=1326 audit(1727731121.955:9209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.2.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa93e81e087 code=0x7ffc0000 [ 200.038516][ T29] audit: type=1326 audit(1727731121.955:9210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.2.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa93e81c990 code=0x7ffc0000 [ 200.061982][ T29] audit: type=1326 audit(1727731121.955:9211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.2.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa93e81dbfb code=0x7ffc0000 [ 200.123348][ T7854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.235876][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 200.465881][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 200.480835][ T8115] loop1: detected capacity change from 0 to 2048 [ 200.503213][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1350'. [ 200.505286][ T8115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.603512][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 200.617934][ T8122] loop0: detected capacity change from 0 to 512 [ 200.635816][ T8121] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 200.644114][ T8121] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 200.754884][ T8128] loop2: detected capacity change from 0 to 256 [ 200.876866][ T8132] loop4: detected capacity change from 0 to 256 [ 201.018211][ T8122] EXT4-fs (loop0): orphan cleanup on readonly fs [ 201.029121][ T8134] loop4: detected capacity change from 0 to 1024 [ 201.079429][ T8134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.174343][ T8122] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1353: bg 0: block 248: padding at end of block bitmap is not set [ 201.398956][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.436700][ T8122] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.1353: Failed to acquire dquot type 1 [ 201.545431][ T8122] EXT4-fs (loop0): 1 truncate cleaned up [ 201.589707][ T8142] 9pnet_fd: Insufficient options for proto=fd [ 201.611116][ T8122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.876575][ T5346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.950973][ T8151] loop1: detected capacity change from 0 to 256 [ 201.979569][ T7854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.064021][ T8154] loop4: detected capacity change from 0 to 4096 [ 202.073490][ T8154] EXT4-fs: Ignoring removed nobh option [ 202.079136][ T8154] EXT4-fs: Ignoring removed i_version option [ 202.509784][ T8154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.694721][ T8154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.806914][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 202.999080][ T8173] loop1: detected capacity change from 0 to 2048 [ 203.033221][ T8161] loop0: detected capacity change from 0 to 4096 [ 203.280978][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.303259][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.317346][ T8183] loop4: detected capacity change from 0 to 512 [ 203.355941][ T8161] EXT4-fs: Ignoring removed nobh option [ 203.361510][ T8161] EXT4-fs: Ignoring removed i_version option [ 203.383149][ T8183] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 203.394718][ T8183] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: comm syz.4.1373: inode #67108864: comm syz.4.1373: iget: illegal inode # [ 203.418290][ T8183] EXT4-fs (loop4): no journal found [ 203.508995][ T8173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.628249][ T8161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.841271][ T8161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.275173][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.468115][ T8199] loop0: detected capacity change from 0 to 512 [ 204.536438][ T8199] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1377: corrupted in-inode xattr: invalid ea_ino [ 204.726022][ T8206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1379'. [ 204.744826][ T8199] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1377: couldn't read orphan inode 15 (err -117) [ 204.813805][ T8199] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.886108][ T8210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1383'. [ 204.905748][ T8199] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 204.974932][ T8198] delete_channel: no stack [ 205.059412][ T8216] syz.2.1385[8216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.059522][ T8216] syz.2.1385[8216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.097938][ T8216] syz.2.1385[8216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.195826][ T8218] loop0: detected capacity change from 0 to 2048 [ 205.286263][ T8218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.351464][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1387'. [ 205.548515][ T8225] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 205.610352][ T8214] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 205.695407][ T8225] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1828 with error 28 [ 205.707967][ T8225] EXT4-fs (loop0): This should not happen!! Data will be lost [ 205.707967][ T8225] [ 205.717714][ T8225] EXT4-fs (loop0): Total free blocks count 0 [ 205.723789][ T8225] EXT4-fs (loop0): Free/Dirty block details [ 205.729743][ T8225] EXT4-fs (loop0): free_blocks=66060288 [ 205.735353][ T8225] EXT4-fs (loop0): dirty_blocks=1840 [ 205.740710][ T8225] EXT4-fs (loop0): Block reservation details [ 205.746693][ T8225] EXT4-fs (loop0): i_reserved_data_blocks=115 [ 205.853638][ T8231] loop2: detected capacity change from 0 to 1024 [ 205.882368][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 205.882381][ T29] audit: type=1326 audit(1727731128.105:9519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 205.912013][ T29] audit: type=1326 audit(1727731128.105:9520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 205.957288][ T8234] loop1: detected capacity change from 0 to 4096 [ 205.971878][ T29] audit: type=1326 audit(1727731128.105:9521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 205.993427][ T8234] EXT4-fs: Ignoring removed nobh option [ 205.995293][ T29] audit: type=1326 audit(1727731128.105:9522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 206.000766][ T8234] EXT4-fs: Ignoring removed i_version option [ 206.024117][ T29] audit: type=1326 audit(1727731128.105:9523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 206.053524][ T29] audit: type=1326 audit(1727731128.105:9524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 206.076898][ T29] audit: type=1326 audit(1727731128.105:9525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 206.100374][ T29] audit: type=1326 audit(1727731128.105:9526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 206.123844][ T29] audit: type=1326 audit(1727731128.105:9527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 206.147253][ T29] audit: type=1326 audit(1727731128.105:9528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 206.250323][ T7854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.265436][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1391'. [ 206.275320][ T8234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.295830][ T8231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.296231][ T8234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.512679][ T8248] loop1: detected capacity change from 0 to 512 [ 206.572289][ T8248] EXT4-fs (loop1): orphan cleanup on readonly fs [ 206.590717][ T8248] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1394: bg 0: block 248: padding at end of block bitmap is not set [ 206.625127][ T8248] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1394: Failed to acquire dquot type 1 [ 206.687631][ T8248] EXT4-fs (loop1): 1 truncate cleaned up [ 206.697736][ T8248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.704244][ T8257] loop4: detected capacity change from 0 to 1024 [ 206.732874][ T8257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.743723][ T8248] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.920042][ T7275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.020602][ T8268] loop0: detected capacity change from 0 to 2048 [ 207.083526][ T8268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.124395][ T8267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1400'. [ 207.133381][ T8267] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1400'. [ 207.164193][ T8267] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1400'. [ 207.311090][ T8277] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 207.319402][ T8277] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 207.456179][ T8285] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 207.531404][ T8285] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1580 with error 28 [ 207.543967][ T8285] EXT4-fs (loop0): This should not happen!! Data will be lost [ 207.543967][ T8285] [ 207.553625][ T8285] EXT4-fs (loop0): Total free blocks count 0 [ 207.559612][ T8285] EXT4-fs (loop0): Free/Dirty block details [ 207.565618][ T8285] EXT4-fs (loop0): free_blocks=66060288 [ 207.571309][ T8285] EXT4-fs (loop0): dirty_blocks=1680 [ 207.576623][ T8285] EXT4-fs (loop0): Block reservation details [ 207.582643][ T8285] EXT4-fs (loop0): i_reserved_data_blocks=105 [ 207.606068][ T5346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.784377][ T8295] loop4: detected capacity change from 0 to 4096 [ 207.791242][ T8295] EXT4-fs: Ignoring removed nobh option [ 207.796906][ T8295] EXT4-fs: Ignoring removed i_version option [ 207.863792][ T8295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.907286][ T8295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.187284][ T1516] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1580 with max blocks 90 with error 28 [ 208.209839][ T8299] chnl_net:caif_netlink_parms(): no params data found [ 208.236526][ T8316] loop2: detected capacity change from 0 to 512 [ 208.465737][ T8316] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1415: corrupted in-inode xattr: invalid ea_ino [ 208.505768][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.512818][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.531729][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1421'. [ 208.575708][ T8299] bridge_slave_0: entered allmulticast mode [ 208.605902][ T8299] bridge_slave_0: entered promiscuous mode [ 208.633696][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.635986][ T8316] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1415: couldn't read orphan inode 15 (err -117) [ 208.640749][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.733389][ T8299] bridge_slave_1: entered allmulticast mode [ 208.741230][ T8299] bridge_slave_1: entered promiscuous mode [ 208.764197][ T8334] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 208.772421][ T8334] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 208.795257][ T8299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.823219][ T8299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.997387][ T8315] delete_channel: no stack [ 209.356258][ T8299] team0: Port device team_slave_0 added [ 209.367392][ T8299] team0: Port device team_slave_1 added [ 209.544120][ T8349] loop0: detected capacity change from 0 to 512 [ 209.562960][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.569970][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.596140][ T8299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.597362][ T8347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1426'. [ 209.615757][ T8347] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1426'. [ 209.714485][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.721548][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.747525][ T8299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.873181][ T8349] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.918532][ T8299] hsr_slave_0: entered promiscuous mode [ 209.929152][ T8365] loop4: detected capacity change from 0 to 512 [ 209.947026][ T8299] hsr_slave_1: entered promiscuous mode [ 209.987912][ T8299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.005750][ T8299] Cannot create hsr debugfs directory [ 210.011760][ T8365] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.049749][ T8373] syz.1.1436[8373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.049867][ T8373] syz.1.1436[8373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.123325][ T8373] syz.1.1436[8373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.237854][ T8299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.360185][ T8299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.386563][ T8379] __nla_validate_parse: 1 callbacks suppressed [ 210.386578][ T8379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1437'. [ 210.401691][ T8379] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1437'. [ 210.448002][ T8299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.473124][ T8379] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1437'. [ 210.529975][ T8299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.548706][ T8392] loop4: detected capacity change from 0 to 512 [ 210.585461][ T8389] loop1: detected capacity change from 0 to 4096 [ 210.592289][ T8389] EXT4-fs: Ignoring removed nobh option [ 210.597890][ T8389] EXT4-fs: Ignoring removed i_version option [ 210.607133][ T8392] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.639528][ T8299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.656946][ T8299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.677607][ T8299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.688573][ T8299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.734827][ T8299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.746576][ T8299] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.762591][ T5335] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.769768][ T5335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.790371][ T8396] loop2: detected capacity change from 0 to 2048 [ 210.836382][ T5335] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.843455][ T5335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.912171][ T8299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.922554][ T8299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.971203][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 210.971214][ T29] audit: type=1326 audit(1727731133.195:9897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 211.102731][ T8415] loop4: detected capacity change from 0 to 512 [ 211.118018][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.159652][ T29] audit: type=1326 audit(1727731133.225:9898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 211.183129][ T29] audit: type=1326 audit(1727731133.225:9899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 211.206515][ T29] audit: type=1326 audit(1727731133.225:9900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 211.230018][ T29] audit: type=1326 audit(1727731133.225:9901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 211.253487][ T29] audit: type=1326 audit(1727731133.225:9902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 211.276946][ T29] audit: type=1326 audit(1727731133.225:9903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 211.300646][ T29] audit: type=1326 audit(1727731133.225:9904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 211.324308][ T29] audit: type=1326 audit(1727731133.225:9905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 211.347756][ T29] audit: type=1326 audit(1727731133.225:9906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x7ffc0000 [ 211.564130][ T8419] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 211.595589][ T8415] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.639698][ T8419] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1542 with error 28 [ 211.652176][ T8419] EXT4-fs (loop2): This should not happen!! Data will be lost [ 211.652176][ T8419] [ 211.661940][ T8419] EXT4-fs (loop2): Total free blocks count 0 [ 211.667968][ T8419] EXT4-fs (loop2): Free/Dirty block details [ 211.673892][ T8419] EXT4-fs (loop2): free_blocks=66060288 [ 211.679440][ T8419] EXT4-fs (loop2): dirty_blocks=1552 [ 211.684790][ T8419] EXT4-fs (loop2): Block reservation details [ 211.690759][ T8419] EXT4-fs (loop2): i_reserved_data_blocks=97 [ 211.726409][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.734982][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.749857][ T8430] loop0: detected capacity change from 0 to 512 [ 211.756792][ T8430] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 211.765519][ T8430] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: comm syz.0.1449: inode #67108864: comm syz.0.1449: iget: illegal inode # [ 211.791202][ T8299] veth0_vlan: entered promiscuous mode [ 211.805107][ T8299] veth1_vlan: entered promiscuous mode [ 211.827070][ T8299] veth0_macvtap: entered promiscuous mode [ 211.835880][ T8299] veth1_macvtap: entered promiscuous mode [ 211.847979][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.858416][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.868241][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.878695][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.888495][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.898907][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.908774][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.919188][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.929008][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.939515][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.949317][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.959839][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.969698][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.980157][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.989975][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.000409][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.010383][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.020812][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.030616][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.041029][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.050896][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.061381][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.113159][ T8430] EXT4-fs (loop0): no journal found [ 212.164313][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.168051][ T8432] loop1: detected capacity change from 0 to 512 [ 212.203962][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.214432][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.224249][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.234769][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.244591][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.255010][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.264833][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.275333][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.285345][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.295862][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.305880][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.316377][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.326261][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.336701][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.346557][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.356998][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.366829][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.377271][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.387170][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.397628][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.407443][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.417906][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.431579][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.440889][ T8299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.449615][ T8299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.458335][ T8299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.467033][ T8299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.495381][ T8432] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.697196][ T8447] syz.1.1455[8447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.697523][ T8447] syz.1.1455[8447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.724061][ T8439] loop4: detected capacity change from 0 to 4096 [ 212.733085][ T8447] syz.1.1455[8447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.756382][ T8439] EXT4-fs: Ignoring removed nobh option [ 212.773333][ T8439] EXT4-fs: Ignoring removed i_version option [ 212.912562][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1452'. [ 212.921613][ T8445] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1452'. [ 212.934822][ T8454] loop1: detected capacity change from 0 to 2048 [ 212.981742][ T8445] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1452'. [ 213.007105][ T8444] loop3: detected capacity change from 0 to 4096 [ 213.149093][ T8444] EXT4-fs: Ignoring removed nobh option [ 213.154694][ T8444] EXT4-fs: Ignoring removed i_version option [ 213.168515][ T8460] loop2: detected capacity change from 0 to 128 [ 213.783146][ T8467] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1460'. [ 213.816051][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 214.097554][ T8481] loop2: detected capacity change from 0 to 512 [ 214.108907][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1463'. [ 214.117992][ T8474] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1463'. [ 214.182706][ T8481] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.266927][ T8485] loop4: detected capacity change from 0 to 2048 [ 214.563380][ T8494] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 214.606026][ T8494] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1980 with error 28 [ 214.618500][ T8494] EXT4-fs (loop4): This should not happen!! Data will be lost [ 214.618500][ T8494] [ 214.628135][ T8494] EXT4-fs (loop4): Total free blocks count 0 [ 214.634131][ T8494] EXT4-fs (loop4): Free/Dirty block details [ 214.640010][ T8494] EXT4-fs (loop4): free_blocks=66060288 [ 214.646013][ T8494] EXT4-fs (loop4): dirty_blocks=2560 [ 214.651329][ T8494] EXT4-fs (loop4): Block reservation details [ 214.657639][ T8494] EXT4-fs (loop4): i_reserved_data_blocks=160 [ 214.813914][ T8504] loop2: detected capacity change from 0 to 512 [ 214.915814][ T8509] syz.0.1474[8509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.915962][ T8509] syz.0.1474[8509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.969686][ T8504] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.051775][ T8509] syz.0.1474[8509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.058098][ T1584] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 215.081918][ T1584] EXT4-fs (loop4): This should not happen!! Data will be lost [ 215.081918][ T1584] [ 215.214778][ T8518] loop1: detected capacity change from 0 to 4096 [ 215.256342][ T8518] EXT4-fs: Ignoring removed nobh option [ 215.261925][ T8518] EXT4-fs: Ignoring removed i_version option [ 215.423773][ T8530] loop4: detected capacity change from 0 to 512 [ 215.468358][ T8530] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.1479: corrupted xattr block 255: invalid header [ 215.532407][ T8530] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 215.593448][ T8530] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.1479: corrupted xattr block 255: invalid header [ 215.616932][ T8536] loop2: detected capacity change from 0 to 512 [ 215.654475][ T8536] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.662734][ T8530] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 215.768815][ T8539] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 215.968843][ T8546] loop1: detected capacity change from 0 to 512 [ 216.006816][ T8546] EXT4-fs (loop1): orphan cleanup on readonly fs [ 216.041180][ T8546] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 216.122031][ T8546] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 216.160851][ T8551] __nla_validate_parse: 4 callbacks suppressed [ 216.160866][ T8551] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1485'. [ 216.183667][ T8546] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.1481: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 216.212078][ T8546] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1481: couldn't read orphan inode 13 (err -117) [ 216.246450][ T8539] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 216.252180][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1485'. [ 216.257029][ T8539] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 2 [ 216.295558][ T8555] loop0: detected capacity change from 0 to 1024 [ 216.648507][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1488'. [ 216.657483][ T8565] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1488'. [ 216.683553][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 216.683566][ T29] audit: type=1326 audit(1727731138.915:10199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.3.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4296dff9 code=0x7ffc0000 [ 216.685967][ T8565] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1488'. [ 216.693372][ T29] audit: type=1326 audit(1727731138.915:10200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.3.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4296dff9 code=0x7ffc0000 [ 216.745849][ T29] audit: type=1326 audit(1727731138.915:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.3.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4296dff9 code=0x7ffc0000 [ 216.769517][ T29] audit: type=1326 audit(1727731138.915:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.3.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4296dff9 code=0x7ffc0000 [ 216.793077][ T29] audit: type=1326 audit(1727731138.915:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.3.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4296dff9 code=0x7ffc0000 [ 216.816585][ T29] audit: type=1326 audit(1727731138.915:10204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.3.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4296dff9 code=0x7ffc0000 [ 216.840111][ T29] audit: type=1326 audit(1727731138.915:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.3.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4296dff9 code=0x7ffc0000 [ 216.863717][ T29] audit: type=1326 audit(1727731138.915:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.3.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4296dff9 code=0x7ffc0000 [ 216.887479][ T29] audit: type=1326 audit(1727731138.915:10207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.3.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4296dff9 code=0x7ffc0000 [ 216.910950][ T29] audit: type=1326 audit(1727731138.915:10208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.3.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4296dff9 code=0x7ffc0000 [ 216.993325][ T8576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8576 comm=syz.1.1493 [ 217.015690][ T8580] loop2: detected capacity change from 0 to 512 [ 217.041307][ T8577] loop1: detected capacity change from 0 to 512 [ 217.068895][ T8577] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 217.082043][ T8577] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.121488][ T8580] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.134521][ T8577] EXT4-fs (loop1): 1 truncate cleaned up [ 217.239081][ T8568] loop3: detected capacity change from 0 to 4096 [ 217.376966][ T8589] loop1: detected capacity change from 0 to 4096 [ 217.403209][ T8568] EXT4-fs: Ignoring removed nobh option [ 217.408777][ T8568] EXT4-fs: Ignoring removed i_version option [ 217.419036][ T8589] EXT4-fs: Ignoring removed nobh option [ 217.424624][ T8589] EXT4-fs: Ignoring removed i_version option [ 217.471509][ T8591] loop0: detected capacity change from 0 to 4096 [ 217.537849][ T8591] EXT4-fs: Ignoring removed nobh option [ 217.543478][ T8591] EXT4-fs: Ignoring removed i_version option [ 217.603358][ T8568] /dev/loop3: Can't open blockdev [ 217.663523][ T8594] syz.1.1499[8594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.663579][ T8594] syz.1.1499[8594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.684499][ T8594] syz.1.1499[8594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.807827][ T8601] 9pnet: Could not find request transport: 0xffffffffffffffff [ 217.977402][ T8613] 9pnet: Could not find request transport: f0xffffffffffffffff [ 218.074610][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1504'. [ 218.083791][ T8611] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1504'. [ 218.165960][ T8611] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1504'. [ 218.187714][ T8627] bond_slave_1: mtu less than device minimum [ 218.263446][ T8631] FAULT_INJECTION: forcing a failure. [ 218.263446][ T8631] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 218.276764][ T8631] CPU: 0 UID: 0 PID: 8631 Comm: syz.4.1511 Not tainted 6.12.0-rc1-syzkaller #0 [ 218.285753][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 218.295808][ T8631] Call Trace: [ 218.299091][ T8631] [ 218.302018][ T8631] dump_stack_lvl+0xf2/0x150 [ 218.306609][ T8631] dump_stack+0x15/0x20 [ 218.310760][ T8631] should_fail_ex+0x223/0x230 [ 218.315447][ T8631] should_fail_alloc_page+0xfd/0x110 [ 218.320736][ T8631] __alloc_pages_noprof+0x109/0x360 [ 218.325933][ T8631] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 218.331386][ T8631] folio_alloc_mpol_noprof+0x36/0x70 [ 218.336680][ T8631] shmem_get_folio_gfp+0x3d1/0xd90 [ 218.341868][ T8631] shmem_write_begin+0xa2/0x180 [ 218.346788][ T8631] generic_perform_write+0x1a8/0x4a0 [ 218.352081][ T8631] shmem_file_write_iter+0xc2/0xe0 [ 218.357247][ T8631] vfs_write+0x76a/0x910 [ 218.361540][ T8631] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 218.367404][ T8631] ksys_write+0xeb/0x1b0 [ 218.371656][ T8631] __x64_sys_write+0x42/0x50 [ 218.376314][ T8631] x64_sys_call+0x27dd/0x2d60 [ 218.381008][ T8631] do_syscall_64+0xc9/0x1c0 [ 218.385577][ T8631] ? clear_bhb_loop+0x55/0xb0 [ 218.390376][ T8631] ? clear_bhb_loop+0x55/0xb0 [ 218.395050][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.400965][ T8631] RIP: 0033:0x7ffa7758dff9 [ 218.405384][ T8631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.425056][ T8631] RSP: 002b:00007ffa76201038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.433489][ T8631] RAX: ffffffffffffffda RBX: 00007ffa77745f80 RCX: 00007ffa7758dff9 [ 218.441461][ T8631] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000007 [ 218.449435][ T8631] RBP: 00007ffa76201090 R08: 0000000000000000 R09: 0000000000000000 [ 218.457394][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.465413][ T8631] R13: 0000000000000000 R14: 00007ffa77745f80 R15: 00007fff1db5d278 [ 218.473387][ T8631] [ 218.592791][ T8636] syz.1.1513[8636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.592924][ T8636] syz.1.1513[8636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.614184][ T8629] loop3: detected capacity change from 0 to 4096 [ 218.649038][ T8636] syz.1.1513[8636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.786617][ T8645] loop1: detected capacity change from 0 to 512 [ 218.790052][ T8640] loop4: detected capacity change from 0 to 4096 [ 218.828991][ T8629] EXT4-fs: Ignoring removed nobh option [ 218.834594][ T8629] EXT4-fs: Ignoring removed i_version option [ 218.853747][ T8640] EXT4-fs: Ignoring removed nobh option [ 218.859312][ T8640] EXT4-fs: Ignoring removed i_version option [ 218.901397][ T8640] EXT4-fs mount: 46 callbacks suppressed [ 218.901409][ T8640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.933659][ T8640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.945918][ T8645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.947225][ T8651] 9pnet: Could not find request transport: f0xffffffffffffffff [ 219.003635][ T8645] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.110133][ T3360] bridge_slave_1: left allmulticast mode [ 219.115841][ T3360] bridge_slave_1: left promiscuous mode [ 219.121627][ T3360] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.135393][ T8629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.158437][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.180946][ T3360] bridge_slave_0: left allmulticast mode [ 219.186712][ T3360] bridge_slave_0: left promiscuous mode [ 219.192445][ T3360] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.194402][ T8657] loop0: detected capacity change from 0 to 512 [ 219.246957][ T8629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.313128][ T8657] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.1520: corrupted xattr block 255: invalid header [ 219.354578][ T8662] loop1: detected capacity change from 0 to 1024 [ 219.372783][ T8662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.387678][ T3360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.435539][ T8657] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 219.448304][ T3360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.518979][ T3360] bond0 (unregistering): Released all slaves [ 219.565621][ T8657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.586842][ T8659] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 219.595058][ T8659] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 219.626557][ T8657] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.1520: corrupted xattr block 255: invalid header [ 219.641331][ T3360] hsr_slave_0: left promiscuous mode [ 219.650913][ T3360] hsr_slave_1: left promiscuous mode [ 219.663562][ T3360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.670973][ T3360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.704466][ T8657] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 219.717966][ T3360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.725489][ T3360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.747548][ T8657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.760844][ T3360] veth1_macvtap: left promiscuous mode [ 219.767154][ T3360] veth0_macvtap: left promiscuous mode [ 219.772710][ T3360] veth1_vlan: left promiscuous mode [ 219.778078][ T3360] veth0_vlan: left promiscuous mode [ 219.936729][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1524'. [ 219.945737][ T8671] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1524'. [ 219.975815][ T3360] team0 (unregistering): Port device team_slave_1 removed [ 219.988031][ T3360] team0 (unregistering): Port device team_slave_0 removed [ 220.102647][ T8680] 9pnet: Could not find request transport: f0xffffffffffffffff [ 220.143928][ T8678] loop3: detected capacity change from 0 to 2048 [ 220.167356][ T8685] loop0: detected capacity change from 0 to 512 [ 220.207230][ T8687] loop4: detected capacity change from 0 to 2048 [ 220.234821][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.262070][ T8687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.325053][ T8694] loop1: detected capacity change from 0 to 512 [ 220.352511][ T8685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.368467][ T8695] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 220.386463][ T8694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.407976][ T8695] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 672 with error 28 [ 220.420384][ T8695] EXT4-fs (loop4): This should not happen!! Data will be lost [ 220.420384][ T8695] [ 220.430160][ T8695] EXT4-fs (loop4): Total free blocks count 0 [ 220.436215][ T8695] EXT4-fs (loop4): Free/Dirty block details [ 220.436507][ T8685] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.442089][ T8695] EXT4-fs (loop4): free_blocks=66060288 [ 220.442105][ T8695] EXT4-fs (loop4): dirty_blocks=928 [ 220.442115][ T8695] EXT4-fs (loop4): Block reservation details [ 220.442124][ T8695] EXT4-fs (loop4): i_reserved_data_blocks=58 [ 220.447647][ T8694] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.525796][ T8678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.550822][ T8685] siw: device registration error -23 [ 220.641752][ T7854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.664891][ T1584] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 672 with max blocks 1156 with error 28 [ 220.743635][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.840827][ T8706] loop4: detected capacity change from 0 to 4096 [ 220.847956][ T8706] EXT4-fs: Ignoring removed nobh option [ 220.853557][ T8706] EXT4-fs: Ignoring removed i_version option [ 220.903290][ T8708] bond_slave_1: mtu less than device minimum [ 220.961349][ T8706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.984427][ T8706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.047042][ T8721] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 221.055349][ T8721] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 221.217927][ T8728] loop1: detected capacity change from 0 to 4096 [ 221.230074][ T8728] EXT4-fs: Ignoring removed nobh option [ 221.235691][ T8728] EXT4-fs: Ignoring removed i_version option [ 221.250047][ T8709] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 221.275508][ T8728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.291600][ T8733] loop0: detected capacity change from 0 to 512 [ 221.343958][ T8728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.358939][ T8736] loop4: detected capacity change from 0 to 512 [ 221.396571][ T8733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.455787][ T8736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.487143][ T8738] loop2: detected capacity change from 0 to 2048 [ 221.496081][ T8736] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.529915][ T8733] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.541485][ T8736] siw: device registration error -23 [ 221.556509][ T8744] __nla_validate_parse: 6 callbacks suppressed [ 221.556522][ T8744] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1549'. [ 221.573119][ T8733] EXT4-fs (loop0): shut down requested (0) [ 221.579670][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 221.597219][ T8709] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 221.609736][ T8709] EXT4-fs (loop3): This should not happen!! Data will be lost [ 221.609736][ T8709] [ 221.619404][ T8709] EXT4-fs (loop3): Total free blocks count 0 [ 221.625437][ T8709] EXT4-fs (loop3): Free/Dirty block details [ 221.631324][ T8709] EXT4-fs (loop3): free_blocks=66060288 [ 221.636899][ T8709] EXT4-fs (loop3): dirty_blocks=2304 [ 221.642235][ T8709] EXT4-fs (loop3): Block reservation details [ 221.648224][ T8709] EXT4-fs (loop3): i_reserved_data_blocks=144 [ 221.693234][ T5346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.737214][ T7854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.758654][ T158] __quota_error: 279 callbacks suppressed [ 221.758665][ T158] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 221.796798][ T8738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.904889][ T8758] syz.1.1555[8758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.904965][ T8758] syz.1.1555[8758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.943958][ T8763] erspan0: mtu less than device minimum [ 221.971750][ T8758] syz.1.1555[8758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.082324][ T8770] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 222.092151][ T8774] loop0: detected capacity change from 0 to 512 [ 222.093681][ T8770] block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 222.118020][ T8770] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 578 with error 28 [ 222.130416][ T8770] EXT4-fs (loop2): This should not happen!! Data will be lost [ 222.130416][ T8770] [ 222.140147][ T8770] EXT4-fs (loop2): Total free blocks count 0 [ 222.146135][ T8770] EXT4-fs (loop2): Free/Dirty block details [ 222.152027][ T8770] EXT4-fs (loop2): free_blocks=66060288 [ 222.157628][ T8770] EXT4-fs (loop2): dirty_blocks=592 [ 222.162829][ T8770] EXT4-fs (loop2): Block reservation details [ 222.168854][ T8770] EXT4-fs (loop2): i_reserved_data_blocks=37 [ 222.263373][ T8781] loop4: detected capacity change from 0 to 512 [ 222.269953][ T8781] journal_path: Lookup failure for './bus' [ 222.275804][ T8781] EXT4-fs: error: could not find journal device path [ 222.293292][ T8774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.342161][ T8781] loop4: detected capacity change from 0 to 512 [ 222.364143][ T8774] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.365537][ T28] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1178 with error 28 [ 222.384834][ T8781] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 222.397351][ T8781] EXT4-fs (loop4): group descriptors corrupted! [ 222.484949][ T8774] siw: device registration error -23 [ 222.515079][ T8789] loop4: detected capacity change from 0 to 256 [ 222.527826][ T7275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.626758][ T7854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.751596][ T8800] syz.0.1568[8800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.751658][ T8800] syz.0.1568[8800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.809238][ T8804] erspan0: mtu less than device minimum [ 222.819775][ T8800] syz.0.1568[8800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.876013][ T8809] loop2: detected capacity change from 0 to 256 [ 222.929586][ T8813] loop0: detected capacity change from 0 to 512 [ 222.981410][ T8813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.073565][ T8817] loop3: detected capacity change from 0 to 512 [ 223.098684][ T8813] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.186636][ T29] audit: type=1400 audit(1727731145.415:10488): avc: denied { read } for pid=8812 comm="syz.0.1575" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 223.187426][ T8822] loop1: detected capacity change from 0 to 512 [ 223.214782][ T8820] loop2: detected capacity change from 0 to 2048 [ 223.247246][ T29] audit: type=1400 audit(1727731145.415:10489): avc: denied { open } for pid=8812 comm="syz.0.1575" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 223.255002][ T8813] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 223.282142][ T8813] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 223.291698][ T8813] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.1575: Failed to acquire dquot type 0 [ 223.337948][ T8822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.405404][ T8820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.418439][ T29] audit: type=1326 audit(1727731145.635:10490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8827 comm="syz.4.1579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa7758dff9 code=0x0 [ 223.433083][ T8822] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.518383][ T8817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.573678][ T7854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.574708][ T8833] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 223.592827][ T8817] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.709137][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.816270][ T8833] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 620 with error 28 [ 223.828679][ T8833] EXT4-fs (loop2): This should not happen!! Data will be lost [ 223.828679][ T8833] [ 223.838333][ T8833] EXT4-fs (loop2): Total free blocks count 0 [ 223.844387][ T8833] EXT4-fs (loop2): Free/Dirty block details [ 223.850280][ T8833] EXT4-fs (loop2): free_blocks=66060288 [ 223.855878][ T8833] EXT4-fs (loop2): dirty_blocks=624 [ 223.861063][ T8833] EXT4-fs (loop2): Block reservation details [ 223.867157][ T8833] EXT4-fs (loop2): i_reserved_data_blocks=39 [ 223.967961][ T8841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1582'. [ 223.977029][ T8841] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1582'. [ 223.990095][ T7275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.999269][ T8841] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1582'. [ 224.038069][ T8299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.075598][ T8850] syz.1.1587[8850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.075669][ T8850] syz.1.1587[8850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.103078][ T8850] syz.1.1587[8850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.235471][ T29] audit: type=1326 audit(1727731146.465:10491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e5edff9 code=0x7ffc0000 [ 224.238703][ T8858] loop2: detected capacity change from 0 to 512 [ 224.253075][ T29] audit: type=1326 audit(1727731146.485:10492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff53e5edff9 code=0x7ffc0000 [ 224.292699][ T8859] loop1: detected capacity change from 0 to 512 [ 224.300704][ T29] audit: type=1326 audit(1727731146.485:10493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e5edff9 code=0x7ffc0000 [ 224.300726][ T29] audit: type=1326 audit(1727731146.485:10494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8860 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e5edff9 code=0x7ffc0000 [ 224.452639][ T8861] loop0: detected capacity change from 0 to 4096 [ 224.473760][ T8865] loop4: detected capacity change from 0 to 512 [ 224.480858][ T8858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.495717][ T8861] EXT4-fs: Ignoring removed nobh option [ 224.501292][ T8861] EXT4-fs: Ignoring removed i_version option [ 224.546156][ T8865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.603138][ T8865] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.637730][ T8861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.670677][ T8858] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.673047][ T8859] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.1589: corrupted xattr block 255: invalid header [ 224.711794][ T8861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.745145][ T8859] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 224.793867][ T8859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.823106][ T8859] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.1589: corrupted xattr block 255: invalid header [ 224.837728][ T5346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.934916][ T8859] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 224.953719][ T8859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.008767][ T8875] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 225.016996][ T8875] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 225.130266][ T8881] loop1: detected capacity change from 0 to 2048 [ 225.150218][ T8883] loop0: detected capacity change from 0 to 512 [ 225.211342][ T8883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.226802][ T8881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.262834][ T8886] loop4: detected capacity change from 0 to 1024 [ 225.271348][ T8885] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 225.301055][ T8883] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.332304][ T8886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.388946][ T8895] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 225.486088][ T8895] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1022 with error 28 [ 225.498607][ T8895] EXT4-fs (loop1): This should not happen!! Data will be lost [ 225.498607][ T8895] [ 225.508269][ T8895] EXT4-fs (loop1): Total free blocks count 0 [ 225.514264][ T8895] EXT4-fs (loop1): Free/Dirty block details [ 225.520222][ T8895] EXT4-fs (loop1): free_blocks=66060288 [ 225.526505][ T8895] EXT4-fs (loop1): dirty_blocks=1024 [ 225.531786][ T8895] EXT4-fs (loop1): Block reservation details [ 225.538079][ T8895] EXT4-fs (loop1): i_reserved_data_blocks=64 [ 225.562933][ T7275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.688686][ T7854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.754391][ T8904] syz.0.1600[8904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.756688][ T8904] syz.0.1600[8904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.782982][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.855009][ T8904] syz.0.1600[8904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.980654][ T8919] syz.0.1606[8919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.010303][ T8921] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 226.029906][ T8921] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 226.080127][ T5346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.237934][ T8930] loop2: detected capacity change from 0 to 512 [ 226.572865][ T8930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.733158][ T8930] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.747916][ T8940] 9pnet_fd: Insufficient options for proto=fd [ 226.827238][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 226.827250][ T29] audit: type=1326 audit(1727731149.055:10552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.1.1616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x0 [ 227.022003][ T8956] loop4: detected capacity change from 0 to 512 [ 227.083641][ T8956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.103470][ T29] audit: type=1326 audit(1727731149.325:10553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 227.178467][ T8956] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.219282][ T29] audit: type=1326 audit(1727731149.355:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 227.236621][ T8963] loop1: detected capacity change from 0 to 4096 [ 227.242791][ T29] audit: type=1326 audit(1727731149.355:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 227.251873][ T7275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.272615][ T29] audit: type=1326 audit(1727731149.355:10556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 227.272648][ T29] audit: type=1326 audit(1727731149.355:10557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 227.293817][ T8963] EXT4-fs: Ignoring removed nobh option [ 227.305075][ T29] audit: type=1326 audit(1727731149.365:10558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 227.328481][ T8963] EXT4-fs: Ignoring removed i_version option [ 227.334012][ T29] audit: type=1326 audit(1727731149.365:10559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 227.334065][ T29] audit: type=1326 audit(1727731149.365:10560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 227.334085][ T29] audit: type=1326 audit(1727731149.365:10561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 227.458490][ T8963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.482542][ T8969] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.1620: corrupted inode contents [ 227.499050][ T8963] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.521515][ T8969] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.1620: mark_inode_dirty error [ 227.542807][ T8975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1625'. [ 227.570758][ T8969] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.1620: corrupted inode contents [ 227.589170][ T8969] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3005: inode #19: comm syz.4.1620: mark_inode_dirty error [ 227.642614][ T8969] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3008: inode #19: comm syz.4.1620: mark inode dirty (error -117) [ 227.689281][ T8969] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 227.738241][ T5346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.794676][ T8982] loop4: detected capacity change from 0 to 512 [ 227.815751][ T8982] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 227.854000][ T8982] EXT4-fs (loop4): 1 truncate cleaned up [ 227.871207][ T8982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.981251][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 228.174508][ T5346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.433255][ T9002] bpf_get_probe_write_proto: 8 callbacks suppressed [ 228.433270][ T9002] syz.4.1635[9002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.473612][ T9002] syz.4.1635[9002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.542954][ T9002] syz.4.1635[9002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.596562][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1637'. [ 228.776870][ T9007] loop2: detected capacity change from 0 to 4096 [ 228.938291][ T9007] EXT4-fs: Ignoring removed nobh option [ 228.944006][ T9007] EXT4-fs: Ignoring removed i_version option [ 229.223710][ T9007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.268916][ T9007] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.580390][ T9019] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 229.605934][ T9028] FAULT_INJECTION: forcing a failure. [ 229.605934][ T9028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.619029][ T9028] CPU: 1 UID: 0 PID: 9028 Comm: syz.2.1645 Not tainted 6.12.0-rc1-syzkaller #0 [ 229.628021][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.638143][ T9028] Call Trace: [ 229.641417][ T9028] [ 229.644429][ T9028] dump_stack_lvl+0xf2/0x150 [ 229.649016][ T9028] dump_stack+0x15/0x20 [ 229.653162][ T9028] should_fail_ex+0x223/0x230 [ 229.657911][ T9028] should_fail+0xb/0x10 [ 229.662130][ T9028] should_fail_usercopy+0x1a/0x20 [ 229.667161][ T9028] _copy_from_user+0x1e/0xd0 [ 229.671744][ T9028] __se_sys_memfd_create+0x26b/0x5c0 [ 229.677044][ T9028] __x64_sys_memfd_create+0x31/0x40 [ 229.682252][ T9028] x64_sys_call+0x2891/0x2d60 [ 229.686936][ T9028] do_syscall_64+0xc9/0x1c0 [ 229.691432][ T9028] ? clear_bhb_loop+0x55/0xb0 [ 229.696127][ T9028] ? clear_bhb_loop+0x55/0xb0 [ 229.700812][ T9028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.706713][ T9028] RIP: 0033:0x7fa93e81dff9 [ 229.711138][ T9028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.730787][ T9028] RSP: 002b:00007fa93d490e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 229.739243][ T9028] RAX: ffffffffffffffda RBX: 000000000000044b RCX: 00007fa93e81dff9 [ 229.747212][ T9028] RDX: 00007fa93d490ef0 RSI: 0000000000000000 RDI: 00007fa93e890b02 [ 229.755191][ T9028] RBP: 00000000200001c0 R08: 00007fa93d490bb7 R09: 00007fa93d490e40 [ 229.763231][ T9028] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200000c0 [ 229.771268][ T9028] R13: 00007fa93d490ef0 R14: 00007fa93d490eb0 R15: 0000000020000780 [ 229.779252][ T9028] [ 229.813347][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1646'. [ 229.822327][ T9038] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1646'. [ 229.852159][ T9040] syz.2.1649[9040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.852270][ T9040] syz.2.1649[9040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.968501][ T9040] syz.2.1649[9040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.989561][ T9046] loop1: detected capacity change from 0 to 256 [ 230.194732][ T9038] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1646'. [ 230.401945][ T9053] loop1: detected capacity change from 0 to 512 [ 230.505274][ T9054] 9pnet_fd: Insufficient options for proto=fd [ 230.520677][ T9053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.564947][ T9053] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.605293][ T9061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1656'. [ 230.681189][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'. [ 231.054592][ T9072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.063251][ T9072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.077373][ T9072] loop4: detected capacity change from 0 to 512 [ 231.084590][ T9072] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 231.093021][ T9072] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: comm syz.4.1659: inode #67108864: comm syz.4.1659: iget: illegal inode # [ 231.117669][ T9072] EXT4-fs (loop4): no journal found [ 231.141621][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.298751][ T9075] loop2: detected capacity change from 0 to 2048 [ 231.316627][ T9077] loop1: detected capacity change from 0 to 512 [ 231.393351][ T9077] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1662: corrupted in-inode xattr: invalid ea_ino [ 231.435189][ T9077] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1662: couldn't read orphan inode 15 (err -117) [ 231.498250][ T9076] delete_channel: no stack [ 231.556402][ T9087] loop0: detected capacity change from 0 to 256 [ 231.684805][ T9086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1665'. [ 231.693815][ T9086] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1665'. [ 231.729740][ T9094] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 231.799665][ T9101] syz.1.1669 uses obsolete (PF_INET,SOCK_PACKET) [ 231.807388][ T9094] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 606 with error 28 [ 231.819794][ T9094] EXT4-fs (loop2): This should not happen!! Data will be lost [ 231.819794][ T9094] [ 231.829427][ T9094] EXT4-fs (loop2): Total free blocks count 0 [ 231.835453][ T9094] EXT4-fs (loop2): Free/Dirty block details [ 231.841343][ T9094] EXT4-fs (loop2): free_blocks=66060288 [ 231.846991][ T9094] EXT4-fs (loop2): dirty_blocks=608 [ 231.852199][ T9094] EXT4-fs (loop2): Block reservation details [ 231.858190][ T9094] EXT4-fs (loop2): i_reserved_data_blocks=38 [ 231.926454][ T9109] loop0: detected capacity change from 0 to 512 [ 232.049049][ T9109] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.374101][ T9119] loop1: detected capacity change from 0 to 512 [ 232.469436][ T9109] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1672: corrupted inode contents [ 232.489774][ T9119] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.510948][ T9109] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.1672: mark_inode_dirty error [ 232.586762][ T9109] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1672: corrupted inode contents [ 232.619661][ T9109] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.1672: mark_inode_dirty error [ 232.636057][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 232.636070][ T29] audit: type=1326 audit(1727731154.865:10746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 232.675416][ T9129] __nla_validate_parse: 1 callbacks suppressed [ 232.675426][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 232.711158][ T9109] x_tables: duplicate underflow at hook 1 [ 232.755317][ T29] audit: type=1326 audit(1727731154.895:10747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 232.755796][ T9131] loop2: detected capacity change from 0 to 256 [ 232.778775][ T29] audit: type=1326 audit(1727731154.895:10748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 232.778799][ T29] audit: type=1326 audit(1727731154.895:10749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 232.832119][ T29] audit: type=1326 audit(1727731154.895:10750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 232.855583][ T29] audit: type=1326 audit(1727731154.895:10751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 232.878949][ T29] audit: type=1326 audit(1727731154.895:10752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 232.902540][ T29] audit: type=1326 audit(1727731154.895:10753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 232.926152][ T29] audit: type=1326 audit(1727731154.905:10754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa93e81dff9 code=0x7ffc0000 [ 232.950687][ T29] audit: type=1400 audit(1727731155.025:10755): avc: denied { create } for pid=9106 comm="syz.0.1672" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 232.961063][ T9129] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 233.198744][ T9135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1680'. [ 233.207778][ T9135] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1680'. [ 233.236315][ T9141] syz.2.1681[9141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.236374][ T9141] syz.2.1681[9141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.296878][ T9141] syz.2.1681[9141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.317162][ T9135] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1680'. [ 233.416512][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 233.515265][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1685'. [ 233.524378][ T9155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.531767][ T9155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.545324][ T9157] loop1: detected capacity change from 0 to 512 [ 233.589353][ T9157] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.614435][ T9155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.621891][ T9155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.640197][ T9163] loop2: detected capacity change from 0 to 512 [ 233.709026][ T9166] loop3: detected capacity change from 0 to 512 [ 233.723397][ T9163] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.746582][ T9163] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 233.772138][ T9166] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.858314][ T9163] EXT4-fs (loop2): can't mount with commit=6, fs mounted w/o journal [ 234.055383][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 234.133055][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1689'. [ 234.145414][ T9182] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9182 comm=syz.0.1696 [ 234.218524][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 234.368578][ T9197] loop4: detected capacity change from 0 to 4096 [ 234.402632][ T9197] EXT4-fs: Ignoring removed nobh option [ 234.408391][ T9197] EXT4-fs: Ignoring removed i_version option [ 234.445968][ T9199] loop3: detected capacity change from 0 to 512 [ 234.656263][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.665142][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.679610][ T9210] loop0: detected capacity change from 0 to 512 [ 234.737911][ T9210] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 234.746357][ T9210] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: comm syz.0.1704: inode #67108864: comm syz.0.1704: iget: illegal inode # [ 234.760835][ T9210] EXT4-fs (loop0): no journal found [ 234.785532][ T9209] loop2: detected capacity change from 0 to 256 [ 234.876341][ T9199] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.102923][ T9218] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 235.111203][ T9218] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 235.332385][ T9225] loop4: detected capacity change from 0 to 1024 [ 235.430141][ T9199] siw: device registration error -23 [ 235.444280][ T9225] EXT4-fs: Ignoring removed bh option [ 235.665974][ T9237] loop1: detected capacity change from 0 to 256 [ 235.804061][ T9231] loop2: detected capacity change from 0 to 4096 [ 235.826507][ T9231] EXT4-fs: Ignoring removed nobh option [ 235.832109][ T9231] EXT4-fs: Ignoring removed i_version option [ 235.852463][ T9241] loop1: detected capacity change from 0 to 1024 [ 236.347525][ T9253] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1722'. [ 236.884666][ T9267] loop1: detected capacity change from 0 to 256 [ 237.254998][ T9274] loop2: detected capacity change from 0 to 512 [ 237.299587][ T9274] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1730: corrupted in-inode xattr: invalid ea_ino [ 237.346894][ T9274] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1730: couldn't read orphan inode 15 (err -117) [ 237.402694][ T9273] delete_channel: no stack [ 237.538902][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.538932][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.538956][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.561265][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.568695][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.568719][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.568806][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.590938][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598436][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598459][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598481][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598556][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598577][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598599][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598626][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598645][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598735][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598758][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598782][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598804][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598826][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598865][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598886][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598907][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598927][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.598946][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599016][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599037][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599059][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599080][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599115][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599139][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599160][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599191][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599252][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599271][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599291][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599314][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.599333][ T3341] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 237.662119][ T9285] loop4: detected capacity change from 0 to 1024 [ 237.663806][ T9285] EXT4-fs (loop4): unable to read superblock [ 237.665552][ T9285] ================================================================== [ 237.665582][ T9285] BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event [ 237.665611][ T9285] [ 237.665620][ T9285] write to 0xffff888103162404 of 4 bytes by task 3725 on cpu 0: [ 237.665637][ T9285] fsnotify_detach_mark+0xe1/0x190 [ 237.665659][ T9285] fsnotify_destroy_mark+0x9a/0x1a0 [ 237.665685][ T9285] __se_sys_inotify_rm_watch+0xf1/0x170 [ 237.665709][ T9285] __x64_sys_inotify_rm_watch+0x31/0x40 [ 237.665739][ T9285] x64_sys_call+0x1ae0/0x2d60 [ 237.665767][ T9285] do_syscall_64+0xc9/0x1c0 [ 237.665787][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.665819][ T9285] [ 237.665825][ T9285] read to 0xffff888103162404 of 4 bytes by task 9285 on cpu 1: [ 237.665844][ T9285] fsnotify_handle_inode_event+0xf6/0x1f0 [ 237.665874][ T9285] fsnotify+0x10ba/0x11a0 [ 237.665892][ T9285] __fsnotify_parent+0x285/0x380 [ 237.665914][ T9285] __fput+0x5a6/0x6d0 [ 237.665936][ T9285] __fput_sync+0x43/0x60 [ 237.665958][ T9285] __se_sys_close+0xf9/0x1a0 [ 237.665982][ T9285] __x64_sys_close+0x1f/0x30 [ 237.666008][ T9285] x64_sys_call+0x25cb/0x2d60 [ 237.666033][ T9285] do_syscall_64+0xc9/0x1c0 [ 237.666054][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.666082][ T9285] [ 237.666085][ T9285] value changed: 0x00000003 -> 0x00000000 [ 237.666095][ T9285] [ 237.666099][ T9285] Reported by Kernel Concurrency Sanitizer on: [ 237.666106][ T9285] CPU: 1 UID: 0 PID: 9285 Comm: syz.4.1731 Not tainted 6.12.0-rc1-syzkaller #0 [ 237.666133][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 237.666144][ T9285] ================================================================== [ 237.674113][ T3341] hid-generic 0000:0003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 237.894505][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 237.894518][ T29] audit: type=1326 audit(1727731160.125:10907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 237.894908][ T29] audit: type=1326 audit(1727731160.125:10908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 237.895054][ T29] audit: type=1326 audit(1727731160.125:10909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 237.895237][ T29] audit: type=1326 audit(1727731160.125:10910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 237.895326][ T29] audit: type=1326 audit(1727731160.125:10911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 237.895497][ T29] audit: type=1326 audit(1727731160.125:10912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 237.895708][ T29] audit: type=1326 audit(1727731160.125:10913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 237.895906][ T29] audit: type=1326 audit(1727731160.125:10914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 237.896010][ T29] audit: type=1326 audit(1727731160.125:10915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 237.896226][ T29] audit: type=1326 audit(1727731160.125:10916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.1.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c676dff9 code=0x7ffc0000 [ 237.978367][ T9295] loop1: detected capacity change from 0 to 4096 [ 238.528463][ T9295] EXT4-fs: Ignoring removed nobh option [ 238.528483][ T9295] EXT4-fs: Ignoring removed i_version option