last executing test programs: 24.379475492s ago: executing program 0 (id=4276): r0 = socket$inet6(0xa, 0x800, 0x20002) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) 24.306717587s ago: executing program 0 (id=4277): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltfilter={0x48, 0x2d, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xfff1, 0xc}, {0x6, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x24000085) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40200, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000200)=0xec6d0bcfe46e829a) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000240)="3c8388c1238c02cd49c255686cd7638a1ddec7c4d23c198e2a0801eea66e493ce88940eae001be36466795db4d95ffadf253365949a9d638896fcb2eb55cafdfdf8053cac69b36da8b5cca63a26d1f21ea76cea8a308af54c3d91d953615cfb7bdc01ae632da80f54291716666e543b68dace72f16", 0x75}, {&(0x7f00000002c0)="15f5237f31e54d19a144531e9b27ab05099ef852f0426e9c9c34c1425bb90ac63b794c654867588b4858377395e6444fd643229b29fc75e69260d1d63091cf35c63c2961cfbf9587d69a02305b9b73ea873b303945a9bab6f2fb8b72869c9f6ac612b1389e4b6bf9a2ce9e6a1476638f35c0e874eeab107b32613fb220f2d76e34b8ebea3da7bb356594ab952681494f7307233317cd6091eef724243e693e4d12911d6788d4625b3baa68c3d94ca1db9d06620fe3e25336131bd4", 0xbb}, {&(0x7f0000000380)="65b133c5de63420a9edcdaac1b61", 0xe}, {&(0x7f00000003c0)="281698bae1e2dfccc2d31b76d3092d20b07898d9dd379b746f25b3f407752953ca8d64dfd68f044da3e0aa7d06b17b6178927b08cd0f1c9e6c7ef05569e8b6f60b6e91c5e233c569989fee4a00be1c4aaed4deb6861e91ce5905806f892d8e4724d8436a3c232b95771401cad5138e476646cea8743ebeab16ff397be736210814a3de60dc0c7b97856591d219486fd0216ae5e9f9ac98622d370de272836d249e5dd7744213b65b49628a6a6dfdbc052a34014bf99df19380041dc95e384d846d4a2ed743145af40b50e35fe4", 0xcd}, {&(0x7f00000004c0)="de2cffdf1fc5d2e19d93a7f4fd8a025a28cbfe58c56f8020592784fa8d8b571b1b744dcd009788de89c0367d4d74c6619805df77d50bed5088b0c67bf0a39eeb1048b579490bf05409465bdc995f0cfb6a73ce0146b59b25924ded77c7438fb77dd28e538545d940352c20945e0870b2a8df2856", 0x74}, {&(0x7f0000000540)="c991bfb5499f12bfef807b39c07b", 0xe}, {&(0x7f0000000580)="4919f3b8119bf4f6d60a9e4159f43eb2b9cfd4291292dce30afdf6d9a051f3e252372ee7fcb0938489f8b7340e59827439c2e7699167b8dc1e09c65e91c1599538cab9af6e40f374dac06238da3c1b34fe61f9503d2c8d345f18a93cbca96c42a4a29afdff54410cdc6d569d75f612d726e1d5f3faf007824aaa738fa703a9e1caa55313ba80b0e9fc1a5d3825c87f89d4991e197b9a296c213b7c36f611da7ac327c5ef", 0xa4}, {&(0x7f0000000640)="e650db5dc2bcaca80310ea00e89d3f4b349651f1cab47dc622b61c5b5ba271edee5f176ce890176c8143016a801b039e590dfc9135891b17f6603cb6b05113e46a5584359e3667980f535101668d6c6d22e66dbe8b996001eba43dda16ab45dfe70618351ba25a0ba678648fc6c23ebca56f6ee47c79f468add76cc4dc9e3ce5a6716fdccd68a49e96c3fcb5359978110c16040185442bf8eef329185052485ec44bb0cfa892572bf2342614b96e8a8ba248b976e9576b0a743a7fd1827ecc73b10ca282e560e83ee356a56c70118e9ba752aa15cadb33a129d75f5dbd291bf81c26290a509c229b2e475c786c5b29", 0xef}], 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r3, &(0x7f0000000980)={&(0x7f00000007c0)={0x2c, 0x3, r1, 0x15}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000800)="b97fc42835de0f72d173997b4098a1e6cb1a5ff78cad63f90a15eaf5680a1e5ec7240c5457a40a3b711ee537443ca82fffdea2523636bf4521d08ace4eda53cd0527c6e5939686b1899b6bb9cbba4a31f030bb917f2793af15ecd3412925ce3926183d6f2a31141afbfbc4e48b1f2df3637900c2621241e5d4c3e491133d0a2bbaeb3f5b57e753f589ada873b7621137de3f84704ae775fc740b27df2655628161ace6fbd0de951ec3440ea8e4155baf7daf027b233753ca911b848d6920a51224a00a", 0xc3}, {&(0x7f0000000900)="5da8dbecbec9ee24e2f81626ed879c11f6b8d3f9000ce6ad4f9e2b92b619de9201f2290e", 0x24}], 0x2, 0x0, 0x0, 0x20040800}, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f00000009c0)={'bridge_slave_0\x00', 0x7}) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000a00), &(0x7f0000000a40)=0x30) newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x100) syz_emit_ethernet(0x100e, &(0x7f0000000b40)={@random="eccda3330471", @remote, @void, {@generic={0xa01, "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"}}}, &(0x7f0000001b80)={0x1, 0x2, [0x2f6, 0xc46, 0x610, 0xaed]}) r4 = add_key$keyring(&(0x7f0000001cc0), &(0x7f0000001d00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$fscrypt_v1(&(0x7f0000001bc0), &(0x7f0000001c00)={'fscrypt:', @desc3}, &(0x7f0000001c40)={0x0, "fc5014148e125f0b3e00c2fbfa2c7c15078a945d1dc63e94e8b93bfa9ec01dd6b90f3f3fe905eb99a1572358e7291387502298385eb3cdfed9dcc14c484c3d9d", 0x29}, 0x48, r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f0000001d80)) socketpair(0x1f, 0x3, 0x2, &(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x7c, 0xb, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_hsr\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xe5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x81) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001fc0)={0x9, &(0x7f0000001f40)=[{0xb16, 0x6, 0x9, 0x7fffffff}, {0x29, 0x5, 0x7, 0xef}, {0x3, 0x6, 0x8b, 0xa}, {0x7, 0x2, 0x40, 0x90}, {0x6, 0xd1, 0x6, 0x8}, {0xff2c, 0x8, 0x0, 0x52}, {0x54, 0x6, 0x8, 0x8000}, {0x400, 0x6, 0x2, 0x80000000}, {0x3, 0x67, 0x2, 0x3}]}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x58, 0x140a, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000002140)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) r10 = openat2(r9, &(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)={0x2002, 0x83, 0x24}, 0x18) add_key$fscrypt_provisioning(&(0x7f0000002200), &(0x7f0000002240)={'syz', 0x3}, &(0x7f0000002280)={0x0, 0x0, @b}, 0x48, r5) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000002300), &(0x7f0000002340)='./file1\x00', 0x8, 0x1) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000023c0), r9) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000002480)={'syztnl0\x00', &(0x7f0000002400)={'syztnl1\x00', r1, 0x27, 0x2, 0x9, 0x1, 0x9, @empty, @local, 0x10, 0x7800, 0x8, 0x8}}) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002a40)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a00)={&(0x7f00000024c0)={0x538, r11, 0x2, 0x70bd2a, 0x5972, {}, [@ETHTOOL_A_WOL_MODES={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd018}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, 'trusted.overlay.redirect\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-\x8b\x00'}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0xa5, 0x3, "70be53a74f36ad66a9316141268e7d3f33a62688e9bd163bea1cc1595f20c07c57ff90001dc4f74e4a1d838c79179b2ea5cb1e8836d9c1c50589171cc30e8cd48861422b18187ac049cf9827a38897ccfeb9b4cd1e7cc2d6784215427490b494efe74263c0e9cf13e9f2b5a4f8e2241d1489a64c9f619baf78ba332f78bd2358638db4a30d17be3ef8fe1b3b0097aecf93948489913e2b25ae0be017e910b465c6"}, @ETHTOOL_A_WOL_SOPASS={0x1c, 0x3, "4fa7ee218db70ad1a88d61ab342ebba6045d9f44aac05566"}, @ETHTOOL_A_WOL_MODES={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "0c8a5803bce1e3d95255f2b3f2f219a394a7cff448759970b6fea58c542b079d2d9b8513e239ddfc31023f672e962ffd57e6a4a7175472fe6f21851c032e8adbbcd265c24b67e94215fcf3e73774869e0e6b868a07eb5937dbd1843150b547413c1dade074bcba945dc8b73ef01da1de3cc46025cd4a6e24b7bfae63821e6b83e980a7cd1928c30b60834c81fc111b3a75d5c8ed92cda18d4c01b8f7babd517fdd30b693ff036936e7caf203df9fc67136780c4cb15119eb4c56fb3b13acd36eae8d06d4e1b56590ad2f5d1a250faaa2b5a665c7245dacde3ff3bd"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'syz'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\xa9[-!o,\xfc(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',/\'\x12\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '](-}\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_MODES={0x1ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x100, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "adb320ae45254b0fc283d3da1d79c9e334eda507407bf7a3dc7058191c05be4a5bfba2bd65906e9a4f78ff40b472d15a0d3a417a95f06248dca270254ff51642415bb9c767e7d160fb3030b2aedee20015abfd56d5b698484a4fa3cd276941801fa76ddc6b72fe380e36c5d3fb3be2707feb00aae520554f3ab8a7ca571718cbcb747f28f5a0fbaaaa4559002ad1081688f18b36eb3a47429a1e2dcc98a0f1e13fc65eacc08b6b5358350bdca97a2472ab710662bea1be173eef5f03cbc5ea71237020731f832b41301bbd3c"}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x40}, 0x800) io_submit(0x0, 0x1, &(0x7f0000002b40)=[&(0x7f0000002b00)={0x0, 0x0, 0x0, 0x2, 0x9, r8, &(0x7f0000002a80)="ebcb4a2b17c7bc1a8c6ceca9bc378a17fc78dce803e314c58f5b0d30d133d41354bb59c7df282b79e7b374d793199af2eb14d49a892ebe129d0e63942c54a0ef59fd381a06877d33d5b22d260c17a41d0ca4842efe42c5d5c0e728d959a6349c713ff559fa22e6c7", 0x68, 0x100, 0x0, 0x3, r10}]) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000002bc0)={0x1, &(0x7f0000002b80)=[{0x4, 0x7, 0x7, 0x3}]}, 0x10) 23.371034643s ago: executing program 0 (id=4291): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x2000005c, &(0x7f0000000440)=[{0xd64, 0xa, 0x10, 0x7}, {0x3ff, 0x7, 0x2, 0x10001}, {0x2e6c, 0x5, 0xf0, 0x2}, {0x7, 0x4, 0x7f, 0x1}, {0x2, 0x7, 0x5, 0x3ff}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @private2, 0xb851}, 0x1c) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0x100) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8, 0x8, 0xaec, 0x5c1, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x65, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote, {[@noop, @noop]}}}}}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRESDEC=r0, @ANYRES16=r0], 0x38}}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="8b332abd700000000000150000008c3b300e9b2deefd3a00000010001d800c00008008000d8004000300"], 0x30}}, 0x0) 22.531038131s ago: executing program 0 (id=4298): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00014006040400090400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x500, 0xfffffffffffffffe, 0x10, r4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r8}, &(0x7f0000001d80), &(0x7f0000001dc0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, 0x0, &(0x7f00000002c0)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)={0x6400, 0x1e8, 0xb}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r9}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) fallocate(r6, 0x0, 0x7fffffffffffffff, 0x4000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8840) 22.346283206s ago: executing program 0 (id=4301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x4, 0x7, 0x3, 0x8, 0x7}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000240)={r7, 0x3, 0x400}, 0x8) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4120}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r5, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 21.866128255s ago: executing program 0 (id=4308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x5204332a29c5e573, 0x100443, 0x5, 0x6, 0x2, 0x4, 0x3, 0x0, 0x3, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x7, 0x3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendfile(r4, r5, 0x0, 0x8000002b) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x48, r1, 0x1d, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 21.865852525s ago: executing program 32 (id=4308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x5204332a29c5e573, 0x100443, 0x5, 0x6, 0x2, 0x4, 0x3, 0x0, 0x3, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x7, 0x3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendfile(r4, r5, 0x0, 0x8000002b) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x48, r1, 0x1d, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 2.970982811s ago: executing program 3 (id=4596): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640)={[{@prjquota}, {@delalloc}]}, 0x0, 0x47c, &(0x7f00000001c0)="$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") lchown(0x0, 0x0, 0xee00) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = gettid() r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) flistxattr(r8, 0x0, 0x2) tkill(r7, 0x12) tkill(0x0, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03210000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 2.707993622s ago: executing program 3 (id=4605): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0xc1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) exit(0x5) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80200, {0x0, 0x0, 0x0, r1, {}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r7, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="002204a400ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) 2.59997651s ago: executing program 5 (id=4607): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x400, 0x5) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000080)=0x100) r2 = accept4$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80000) r3 = syz_usbip_server_init(0x2) r4 = fcntl$getown(r1, 0x9) r5 = getuid() getgroups(0x3, &(0x7f0000000600)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)="aa34d4dc2dffce9500fc2f4424576d71db3ba683924852afb57f584b45f6f1673a8bf044dd99de91fef4f52fd4ca57afdde4b0243ef1c3a0d8515dacbb4d9a56626911c3ee9bab7e452d1b554b3d4d0c6420d990a5d0dbfd13ddd9011be18a3145e5aea84f8c751bc9bed4f0c512710ddf8fe9cecbe65a576ce6e1731a3dd3ce16b022b062d797928c9ddf54248b250f9e3926703a46ec8351944b25fcffd4ceda24df2ded511412c47a764c6b119f4e3bc998ab7cab1472fe0203079757535b1fa9592cafed8654b3517d8e8f0af186b4a425b5d80d84f76600805a4c664a181f4a0956d00f", 0xe6}, {&(0x7f0000000300)="603c32708dce00f89507aa8ed4ac3902413192be56ddd6c4b957650aeb3abb3dd1103d156f14de43480c33a6eecc611570beafc47f3c8c9c95cded88ec4bad27d837947b4690ea994dbfb47c1e934d0ddeb1bc4ee9a96133fe3c7e78e98d20c5df02bd0d308fec50d2eebb", 0x6b}, {&(0x7f0000000380)="13c45ece1aadb61c55e1f6a3226c4bab7d4b28fa91114a50c8f06655b128d85d9171bd0b4e0590e2fdae0847b9e0d0b37a980b2a9219ca88f914b6e5b3c7c4d51925870ef381096e1ef9f1c90a989c550aa5aeef9c97886389c86a9d774afc3d14a62f5c18ab8a36c8", 0x69}, {&(0x7f0000000400)="fe5ec9aec27f41897e71a0bed05dfd839b4d89651bfc7d29a5799b6129656c32ea862335f8842b1a90f56872e48c5141c58a0a1c521d2c128c246f6e06f599c81e335c6fc9c8bb64ab", 0x49}, {&(0x7f0000000480)="71bd747db23088b3c5a5aa6a94b426b2524bcf347c4429d5a258341193c13fe0103f5c1b9f2060a0cdb347948a7d40ffbff283fbf80894af7ef049ce01841502ebf8fb51331d25d9e576e07234cd27173a2024ae1bbb2352690ff3a3f2721b27f791877a366abefa61fca4743f8802b18b53e1aa324b066a5c8567ede0195c40bfe25f2c85aaa4718cccf5b8e5dfb420ea62257ad34e73431a4640dd5930ce15d33ed3826edb749a68e87fb00a7e22baa96e7713ec03bf1806d37b1f212b1d981557a44915e4b8201ba860b4a4bc456fd48180ade672e41bf1b9dbd24d319fab00638bdd6d3073a7868ccf50178fca", 0xef}], 0x5, &(0x7f0000000740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r3, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r7}}}, @rights={{0x1c, 0x1, 0x1, [r8, r0, r1]}}], 0x88, 0x40010}, 0x4000000) fadvise64(r0, 0x0, 0x0, 0x0) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount$9p_xen(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x30002, &(0x7f0000000940)={'trans=xen,', {[{@cache_none}, {@version_u}], [{@euid_lt={'euid<', r5}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '/dev/uhid\x00'}}, {@fsname={'fsname', 0x3d, '\x0e'}}, {@dont_hash}, {@hash}, {@permit_directio}, {@flag='nomand'}, {@smackfsfloor={'smackfsfloor', 0x3d, ')#],-^'}}]}}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a00), 0x4d080, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r0) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r11, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4008804) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) sendmsg$nl_xfrm(r12, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)=@newspdinfo={0x54, 0x24, 0x414, 0x70bd28, 0x25dfdbff, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x24044804}, 0x4014) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000dc0)="2cc2aec43366a01accb62c4a5b71ff531b30d595adf62eceb20fe2d3d603717e2ed9fc5dd75389b11d679d96900a3d925105d16b7152ab5fd3c23566a862f3872cefeec07624764bfc649e83797c4efcd115f3473b1618d62121c3f4a7b2b151335123e1485295a6f70d16ed88a43f668c1d84ef9340938d90cf61a5ce412200ebf28ad4ca396ff6dc59dde1314b47633ddf6e6356f8db8b7f48dca7dbb9f506ac87a0055747d9ce1f660755fde65ce707817a9813088fe8ba84a230674b", 0xbe}, {&(0x7f0000000e80)="20062e2f6dd1127053830be4990fe5f25f3327a211fc247cc9e29f74eca2fd71a1", 0x21}, {&(0x7f0000000ec0)="7a91d7bda928d5c7edecab563b4f797059b203589faf63be92916d608d71cc05a61a9a1d7471adb0bb476d92561db9f5f32746818920b011c762e5a5b83f138c79aa1606f38b80475c55a70f4bf15d4314d1201e42358dbcd6dee6ce7307624f436f3221f4de0714ff9745b1e3998b3f554e53e8e8c5032bcc3b361e7a1388abfe9a383fefdf7a252d8b9220075bc19c48afda680145be3e5451f5d69c707fb9dc5dcea46ed2e193fbeae496575f27c6ad5b05f1f861aa87698ffde282f7cf100be0c916846a766be1143393667e14478604afc0d025ead7f0b55a8d52a683666a2d8f97993d75b2f77a5939275a88171ed11694c67582", 0xf7}, {&(0x7f0000000fc0)="0c5d67fba512470063f06150", 0xc}], 0x4}}], 0x1, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r10) sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0xa12c000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x68, r13, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24008810) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r14, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, r15, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x15}}]}, 0x28}}, 0x40890) preadv(r9, &(0x7f0000001580)=[{&(0x7f0000001340)=""/34, 0x22}, {&(0x7f0000001380)=""/68, 0x44}, {&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001440)=""/79, 0x4f}, {&(0x7f00000014c0)=""/153, 0x99}], 0x5, 0x7, 0xce8) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x4c, r11, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x4c}}, 0x4) 2.066118034s ago: executing program 2 (id=4612): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdc00}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) lseek(r2, 0x5, 0x4) 2.026387367s ago: executing program 5 (id=4613): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x2000005c, &(0x7f0000000440)=[{0xd64, 0xa, 0x10, 0x7}, {0x3ff, 0x7, 0x2, 0x10001}, {0x2e6c, 0x5, 0xf0, 0x2}, {0x7, 0x4, 0x7f, 0x1}, {0x2, 0x7, 0x5, 0x3ff}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @private2, 0xb851}, 0x1c) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0x100) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8, 0x8, 0xaec, 0x5c1, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x65, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote, {[@noop, @noop]}}}}}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRESDEC=r0, @ANYRES16=r0], 0x38}}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8b332abd700000000000150000008c3b300e9b2deefd3a00000010001d800c00008008000d8004000300"], 0x30}}, 0x0) 1.674458185s ago: executing program 1 (id=4618): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b0000000700e1a4b878c22891b07375080000010001000900000001b2c0f267bb1e314d51da0a2100000044fcd3a1b7e70450c179575f7a5fe749280e09080ea532228789a612c5d78ee1933f3e73d4862dd454680baa492ec8b8d71b074be56daecd72ef4cec278b665b82ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r4, 0x4) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000100)=[{&(0x7f0000000140)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0xc) r8 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) splice(r6, 0x0, r8, 0x0, 0x8000, 0x0) 1.674151175s ago: executing program 1 (id=4619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280"], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e3000"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1.653276007s ago: executing program 1 (id=4620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000eaff00000000b7030003ddeb0c38f107b483de9e8521e1457904641d99001a000000850000002b000000b70000000000020095000800000000c96c7d58cd6f17b196a01f3c78e19a464c95a46a442a10"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa1c7, 0x2}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180400000000000000000065f187f50000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = dup2(r9, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x18) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.557553194s ago: executing program 1 (id=4621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) statfs(&(0x7f0000000440)='./file0\x00', 0x0) 1.443514714s ago: executing program 1 (id=4624): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdc00}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$eJzs3M1rVFcbAPDn3nwYNb6JL/LyWkoNtGChOBrFSl2py9ZFof0DDHEiIdcPkhRMcBHbhXRVC910UWgXpX9AoetstNBV6aaVFrqXShHdp9zJnWQwM0mqMx4/fj84c8/HZM7z5JK555C5E8BLa6x8yCP2R8S5LGKk6s8jYrBRG4pYWn3eg/vXJh/evzaZxcrKB39nkVV9zdfKquPuqjEUEb+cyeK/n2ycd25hcWaiKOqzVfvw/MUrh+cWFg9NX5y4UL9QvzR+YvzY8RPHjr99pGu5vrv35tmvxk/t+f7Mrauv3fj9yyxOxXA11ppHt4zFWKxUWvv7I2Ki25Ml0lflk7X0Zf0JAwIAYFN5yxrufzESfbG+eBuJW78mDQ4AAADoipW+WPsfFQAAAPCiyuz/AQAA4AXX/BzAg/vXJpsl7ScSnq57pyNitF3+/bHUOA7FQETsepBF622t2eqPPbGxiNj30+iPZYke3Ye8maXrEfH/dvlnjfxHG3dxb8w/j4hu3Jk99kj7ecr/VBfmT50/AC+n5dOrF7KN1798bf0Tba5//W2uXY8j9fWv8/pvPf++Duu/97c5R/3Ap593Gmtd/xXfvnq7nL88PlFS/8K96xGv9Hde/5T5Zx3yP7fNOQb++PmHTmNl/mW+zfK081/5JuJg2/3P+jfaZJt/P9HhqemiXj22nePG7e/2dZq/9fyXpZy/uRd4Gsrzv6tD/lud/yvbnGP5r4N/dhrbOv/87mD2YaM2WPVcnZifnx2PGMzObuw/unkszec0X6PM/83XN//7b5d/+Z6wVP0eyr3A9epYtj9+ZM5D773zxuPn31tl/ucf8/zf3OYcX382e7fTWOr8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+5BExHFleW6vnea0WsTsi9sWuvLg8N//W1OWPLp0vxyJGYyCfmi7qRyJiZLWdle3xRn29ffSR9rGI2BsRX4zsbLRrk5eL86mTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM3uiBiOLK9FRB4RD0fyvFZLHRUAAADQdaOpAwAAAAB6zv4fAAAAXnz2/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTY3gPLd7KIWDq5s1FKg9XYQNLIgF7LUwcAJNOXOgAgmf7UAQDJ2OMD2RbjQx1HdnQ9FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeXQf3L9/JImLp5M5GKQ1WYwNJIwN6LU8dAJBMX+oAgGT6UwcAJGOPD2RbjA91HNnR9VgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHYNN0qW1yIib9TzvFaL2BMRozGQTU0X9SMR8Z+I+G1kYEfZHk8dNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF03t7A4M1EU9VkVFRWVtUrqdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFKYW1icmSiK+uxc6kgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA1OYWFmcmiqI+28NK6hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEjnnwAAAP///JMJmQ==") r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:'], 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) kexec_load(0x3e00, 0x0, 0x0, 0x0) lseek(r2, 0x5, 0x4) 1.304480425s ago: executing program 3 (id=4625): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0x80000) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x0, &(0x7f00000001c0)}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x30, 0x140b, 0x800, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10801, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r4}, 0x18) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{0x380, 0x7, 0x5, 0x8873}, {0x9, 0x8, 0x7, 0x4}, {0x8, 0x13, 0x6, 0x1241}, {0xb356, 0xcf, 0x2, 0xff}, {0x1b4e, 0x1f, 0x53, 0x5}]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000007c0)={0x0, 0x0, "d142ddf42c2dc8bf43d5bf2f2951c7f7cca503319bf97f6b0a0a5f8595a3e8bdb412d5faf1bfd1edaf01d89aa796fd8d6253a1f54369efcb7b5757f9988029c92158a5def19b3cb2bc8e25af1b47870c7b95182d4a812870134bc247bbbaf0b8d07009cca0559af8dbf4eb89649feb5d03af1cc06bc828efbf3e5930c8ec2fa414de12e14e89818114d12ce6613918536d86004f9249aa1cf4c72a92066e26b34eee5a6b67aa71db61b7798eaed357752b35d84a80fa563b551897541dcba2ca4438d294f5c3c11c3a44859a2e3d3a326bf40032ead9d080104997ec63ad4963aff43132e0c905e67f7387d43265fdd82b123c5184cbe3c006d25e222a3321ee", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000003c0)={{r8, 0xe, 0x2, 0xd194, 0xa5f, 0x81, 0x48c9, 0xe, 0x8001, 0x3, 0x10001, 0x7, 0x2, 0x4, 0x4}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r9, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 1.211783732s ago: executing program 2 (id=4627): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640)={[{@prjquota}, {@delalloc}]}, 0x0, 0x47c, &(0x7f00000001c0)="$eJzs3M9vFFUcAPDvzLZF+VVEROWHVNHY+KOlBZWDF43eNDHRA15MalsIslBDSyKEaDUGj4bEu/FkjP4FnvRi1JOJV70bEqLEBPSga2Z2prSlu9Cyyy7u55PM9r2dt/ved2fezJt53Q2gZw1lD0nExoj4JSIG69mlBYbqf65cOjv516Wzk0nUaq/+nuTlLl86O1kWLV+3ocgMpxHph0lRyVKzp88cm6hWp08W+dG542+Pzp4+8+TR4xNHpo9Mnxg/ePDA/rFnnh5/qiVxZnFd3vHuzK6k7/XzL08eOv/mD1/1RcT23fX1i+O4KemGheRQFvgftdzyYo+0pLLusWlROunrYENYlUpEZJurP+//g1GJqxtvMF78oKONA9oqOzeta7x6vgb8jyXR6RYAnVGe6LPr33K5RUOPrnDxufoFUBb3lWKpr+mLtCjT38b674uIQ/N/f5otUWyHfza2sUIAoOd9k41/nlhp/JfG9kXlNhdzKFsi4q6I2BoRd0fEtoi4JyIve28xnlmN+tRQZSF/7fgzvbDm4G5ANv57tpjbWjr+q4/+arXav5UitymPvz85fLQ6va/4TIajf12WH2tSx7cv/Pxxo3VDi8Z/2ZLVX44Fi3Zc6Ft2g25qYm6iVYPSi+9H7OhbKf5kYSYgiYj7I2LH6t56c5k4+tgXuxoVun78TbRgnqn2WcSj9e0/H8viLyXN5ydH74jq9L7Rcq+41o8/nXulUf03FX8LZNt//dL9f1mJwT+TxfO1s6uv49yvHzW8plzr/j+QvJbPWQ8Uz70zMTd3cixiIHkpzy95fvzqa8t8WT6Lf3jvyv1/a/GaLP6dEZHtxLsj4oGI2FO0/cGIeCgi9jaJ//vnH35r7fG3Vxb/1IrHv4X9f8vS7b/6ROXYd183qv/Gtv+BPDVcPJMf/66jcXOiOp0d1te8NwMAAMDtJ42IjZGkIwvpNB0Zqf8P/7ZYn1ZnZucePzxz6sRU/TsCW6I/Le90DRb3Q7Or7bFkvnjH+v3R8eJecXm/dH9x3/iTyp15fmRypjrV4dih121o0P8zv1U63Tqg7XxfC3rX8v6fdqgdwK3n/A+9S/+H3qX/Q+9a1P+/PHVuZ554L3/cs7BixbmAJr8cAtwenP+hd+n/0Lv0f+hd+j/0pJv5Xn93Jwa6oxmrT3ze3xXNuF4i0mZl3ohb3rDoio+l1Ymk6Y9ZtDHR6SMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wXAAD//ys68O0=") lchown(0x0, 0x0, 0xee00) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = gettid() r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) flistxattr(r8, 0x0, 0x2) tkill(r7, 0x12) tkill(0x0, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03210000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 1.166392166s ago: executing program 5 (id=4628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 936.262845ms ago: executing program 5 (id=4629): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000280)=[{0x2, 0xa6, 0x0, 0x3}, {0x2, 0x8, 0x8, 0xfffb}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x3, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x1, 0x9}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 878.182499ms ago: executing program 3 (id=4630): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b0000000700e1a4b878c22891b07375080000010001000900000001b2c0f267bb1e314d51da0a2100000044fcd3a1b7e70450c179575f7a5fe749280e09080ea532228789a612c5d78ee1933f3e73d4862dd454680baa492ec8b8d71b074be56daecd72ef4cec278b665b82ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r4, 0x4) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000100)=[{&(0x7f0000000140)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0xc) r8 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) splice(r6, 0x0, r8, 0x0, 0x8000, 0x0) 877.88265ms ago: executing program 5 (id=4631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0x1000000000000}, 0x18) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r4, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0x36, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 877.48478ms ago: executing program 2 (id=4632): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b0000000700e1a4b878c22891b07375080000010001000900000001b2c0f267bb1e314d51da0a2100000044fcd3a1b7e70450c179575f7a5fe749280e09080ea532228789a612c5d78ee1933f3e73d4862dd454680baa492ec8b8d71b074be56daecd72ef4cec278b665b82ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f0000000140)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0xc) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) 754.917459ms ago: executing program 3 (id=4633): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 749.44433ms ago: executing program 2 (id=4634): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@bsdgroups}, {@oldalloc}, {@discard}]}, 0x2, 0x45b, &(0x7f0000000980)="$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") 615.258231ms ago: executing program 3 (id=4635): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x2000005c, &(0x7f0000000440)=[{0xd64, 0xa, 0x10, 0x7}, {0x3ff, 0x7, 0x2, 0x10001}, {0x2e6c, 0x5, 0xf0, 0x2}, {0x7, 0x4, 0x7f, 0x1}, {0x2, 0x7, 0x5, 0x3ff}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @private2, 0xb851}, 0x1c) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0x100) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8, 0x8, 0xaec, 0x5c1, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x65, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote, {[@noop, @noop]}}}}}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8b332abd700000000000150000008c3b300e9b2deefd3a00000010001d800c00008008000d8004000300"], 0x30}}, 0x0) 572.610724ms ago: executing program 2 (id=4636): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0x1000000000000}, 0x18) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r4, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r6}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004508002800000000000690780a0101010000000000004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000000db97ffff00"], 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 545.866616ms ago: executing program 5 (id=4637): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdc00}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) lseek(r2, 0x5, 0x4) 292.811557ms ago: executing program 2 (id=4640): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1ffffe0e, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005009000018110000d2e037c9c8bb7132c33f8ca5a47ac172259933c19bc38e1a0a0bcd3ce38c54deda93885116545fc4476d2898bb250e58c63b008e67f259e8047b9c636925c1fd22448b53dea13be6fe69beea3b83d41d6603231365666364f812366989707e3e311268f074770a6119edb895811c53dcd7f230c5c781c15de36aa52f630f45d55c20bd15237fa3aa97d6cac2e04209e4b95ea43ef18ae4456f80f952902d6f72a09243d9f467c6a7bc070270c1c9d312", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000300)=""/126, &(0x7f0000000380)=0x7e) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f00000011c0)='xdp_bulk_tx\x00', 0xffffffffffffffff, 0x0, 0xe4b}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 231.557922ms ago: executing program 4 (id=4641): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x3, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 194.904525ms ago: executing program 4 (id=4642): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x275, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xc0800, 0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000700)='./file1\x00', 0x100) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 187.835106ms ago: executing program 1 (id=4643): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26b, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') pipe(&(0x7f0000000500)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0xfffffffe, {}, [{0x78}]}, 0x8c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x2}, 0x18) io_setup(0x2, &(0x7f0000002400)) fcntl$setpipe(r3, 0x407, 0x401) 131.000059ms ago: executing program 4 (id=4644): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b0000000700e1a4b878c22891b07375080000010001000900000001b2c0f267bb1e314d51da0a2100000044fcd3a1b7e70450c179575f7a5fe749280e09080ea532228789a612c5d78ee1933f3e73d4862dd454680baa492ec8b8d71b074be56daecd72ef4cec278b665b82ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r4, 0x4) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000100)=[{&(0x7f0000000140)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) 62.059075ms ago: executing program 4 (id=4645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYRES32=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000018"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000070000000080000001"], 0x50) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) times(0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8916, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='itimer_state\x00', r9}, 0x18) setitimer(0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) 17.564089ms ago: executing program 4 (id=4646): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 0s ago: executing program 4 (id=4647): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3100c0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x608, &(0x7f00000010c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)='.U/', 0x3, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000000)=""/15, 0x8, 0x0, 0x0, 0x1e) ioctl$sock_SIOCGIFBR(r1, 0x8940, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xfd, 0x53b, &(0x7f0000001700)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xec, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x40010, r2, 0x27216000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getgroups(0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = inotify_init() r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r4, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x400008bf) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x12000000, 0x0, 0x0) kernel console output (not intermixed with test programs): .470125][T15643] loop2: detected capacity change from 0 to 4096 [ 277.475354][T15644] loop0: detected capacity change from 0 to 1024 [ 277.486154][T15643] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 277.510437][T15643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.514145][T12532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.520921][T15644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.531885][T15649] loop3: detected capacity change from 0 to 1024 [ 277.549709][T15644] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.4119: Allocating blocks 449-513 which overlap fs metadata [ 277.606864][T15649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.654897][T15640] EXT4-fs (loop0): pa ffff888106d658c0: logic 48, phys. 177, len 21 [ 277.674210][T15649] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4121: Allocating blocks 449-513 which overlap fs metadata [ 277.674475][T15640] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, [ 277.686745][T15649] EXT4-fs (loop3): pa ffff888106d65850: logic 48, phys. 177, len 21 [ 277.690476][T15640] free 0, pa_free 4 [ 277.698451][T15649] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 277.847741][T12725] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.889939][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.911749][T15665] loop3: detected capacity change from 0 to 512 [ 277.912195][T15665] EXT4-fs: Ignoring removed oldalloc option [ 277.925829][T15665] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4123: Parent and EA inode have the same ino 15 [ 277.940289][T15665] EXT4-fs (loop3): Remounting filesystem read-only [ 277.947101][T15665] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 277.956430][T15665] EXT4-fs (loop3): 1 orphan inode deleted [ 277.963700][T15665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.989933][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.086199][T15688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15688 comm=syz.4.4130 [ 278.169899][T15692] loop4: detected capacity change from 0 to 4096 [ 278.178035][T15692] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 278.192661][T15692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.196182][T15694] loop0: detected capacity change from 0 to 1024 [ 278.216950][T11786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.227917][T15694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.259200][T15694] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.4132: Allocating blocks 449-513 which overlap fs metadata [ 278.277267][T15693] EXT4-fs (loop0): pa ffff888106e69e70: logic 48, phys. 177, len 21 [ 278.285422][T15693] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 278.330452][T12725] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.854951][T15711] loop3: detected capacity change from 0 to 512 [ 278.900353][T15711] EXT4-fs: Ignoring removed oldalloc option [ 279.022180][T11080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.048033][T15711] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4137: Parent and EA inode have the same ino 15 [ 279.062348][T15711] EXT4-fs (loop3): Remounting filesystem read-only [ 279.075693][T15711] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 279.094480][T15711] EXT4-fs (loop3): 1 orphan inode deleted [ 279.107317][T15711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.156164][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.203517][ T29] kauditd_printk_skb: 527 callbacks suppressed [ 279.203532][ T29] audit: type=1326 audit(1756571832.390:37788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15714 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 279.233478][ T29] audit: type=1326 audit(1756571832.390:37789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15714 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 279.257208][ T29] audit: type=1326 audit(1756571832.390:37790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15714 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 279.280957][ T29] audit: type=1326 audit(1756571832.390:37791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15714 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 279.304758][ T29] audit: type=1326 audit(1756571832.390:37792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15714 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 279.328342][ T29] audit: type=1326 audit(1756571832.390:37793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15714 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 279.351957][ T29] audit: type=1326 audit(1756571832.390:37794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15714 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 279.375607][ T29] audit: type=1326 audit(1756571832.390:37795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15714 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 279.399255][ T29] audit: type=1326 audit(1756571832.390:37796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15714 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 279.422975][ T29] audit: type=1326 audit(1756571832.390:37797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15714 comm="syz.3.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 279.550070][T15719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.582809][T15719] bond1 (unregistering): Released all slaves [ 279.627239][T15734] loop3: detected capacity change from 0 to 512 [ 279.633953][T15734] journal_path: Non-blockdev passed as './bus' [ 279.640324][T15734] EXT4-fs: error: could not find journal device path [ 279.724139][T15746] loop3: detected capacity change from 0 to 512 [ 279.732680][T15746] EXT4-fs: Ignoring removed oldalloc option [ 279.743006][T15746] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4150: Parent and EA inode have the same ino 15 [ 279.757384][T15746] EXT4-fs (loop3): Remounting filesystem read-only [ 279.764157][T15746] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 279.774955][T15746] EXT4-fs (loop3): 1 orphan inode deleted [ 279.781681][T15746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.832633][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.847368][T15760] loop4: detected capacity change from 0 to 512 [ 279.869308][T15760] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 279.889580][T15760] EXT4-fs (loop4): mount failed [ 279.954343][T15771] loop3: detected capacity change from 0 to 512 [ 279.964717][T15771] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #17: comm syz.3.4160: invalid fast symlink length 37 [ 279.984587][T15771] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4160: couldn't read orphan inode 17 (err -117) [ 279.998952][T15771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.021249][T15774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 280.043806][T15774] bond2 (unregistering): Released all slaves [ 280.070224][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.087265][T15774] loop4: detected capacity change from 0 to 512 [ 280.113126][T15774] journal_path: Non-blockdev passed as './bus' [ 280.119444][T15774] EXT4-fs: error: could not find journal device path [ 280.165303][T15794] loop3: detected capacity change from 0 to 512 [ 280.175264][T15794] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.4169: casefold flag without casefold feature [ 280.189519][T15794] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4169: couldn't read orphan inode 15 (err -117) [ 280.202291][T15794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.231000][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.234020][T15800] bridge_slave_0: left allmulticast mode [ 280.245872][T15800] bridge_slave_0: left promiscuous mode [ 280.246000][T15800] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.260588][T15800] bridge_slave_1: left allmulticast mode [ 280.266448][T15800] bridge_slave_1: left promiscuous mode [ 280.272288][T15800] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.280424][T15804] netlink: 'syz.4.4171': attribute type 10 has an invalid length. [ 280.291354][T15800] bond0: (slave bond_slave_0): Releasing backup interface [ 280.304850][T15800] bond0: (slave bond_slave_1): Releasing backup interface [ 280.317147][T15800] team0: Port device team_slave_0 removed [ 280.331443][T15800] team0: Port device team_slave_1 removed [ 280.341118][T15800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.348659][T15800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.356164][T15807] loop4: detected capacity change from 0 to 128 [ 280.363123][T15807] EXT4-fs: Ignoring removed nobh option [ 280.373403][T15800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.381012][T15800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.384213][T15807] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.402218][T15807] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.410317][T15812] FAULT_INJECTION: forcing a failure. [ 280.410317][T15812] name failslab, interval 1, probability 0, space 0, times 0 [ 280.413717][T15807] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.425397][T15812] CPU: 1 UID: 0 PID: 15812 Comm: syz.1.4175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 280.425496][T15812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.425534][T15812] Call Trace: [ 280.425543][T15812] [ 280.425556][T15812] __dump_stack+0x1d/0x30 [ 280.425584][T15812] dump_stack_lvl+0xe8/0x140 [ 280.425634][T15812] dump_stack+0x15/0x1b [ 280.425658][T15812] should_fail_ex+0x265/0x280 [ 280.425686][T15812] should_failslab+0x8c/0xb0 [ 280.425721][T15812] kmem_cache_alloc_node_noprof+0x57/0x320 [ 280.425810][T15812] ? __alloc_skb+0x101/0x320 [ 280.425837][T15812] __alloc_skb+0x101/0x320 [ 280.425864][T15812] netlink_alloc_large_skb+0xba/0xf0 [ 280.425923][T15812] netlink_sendmsg+0x3cf/0x6b0 [ 280.425958][T15812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.426038][T15812] __sock_sendmsg+0x145/0x180 [ 280.426079][T15812] ____sys_sendmsg+0x31e/0x4e0 [ 280.426115][T15812] ___sys_sendmsg+0x17b/0x1d0 [ 280.426165][T15812] __x64_sys_sendmsg+0xd4/0x160 [ 280.426240][T15812] x64_sys_call+0x191e/0x2ff0 [ 280.426269][T15812] do_syscall_64+0xd2/0x200 [ 280.426384][T15812] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.426425][T15812] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 280.426462][T15812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.426524][T15812] RIP: 0033:0x7f43e56debe9 [ 280.426545][T15812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.426626][T15812] RSP: 002b:00007f43e4147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.426652][T15812] RAX: ffffffffffffffda RBX: 00007f43e5915fa0 RCX: 00007f43e56debe9 [ 280.426668][T15812] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 280.426686][T15812] RBP: 00007f43e4147090 R08: 0000000000000000 R09: 0000000000000000 [ 280.426703][T15812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.426720][T15812] R13: 00007f43e5916038 R14: 00007f43e5915fa0 R15: 00007fffc4692048 [ 280.426746][T15812] [ 280.539659][T15819] __nla_validate_parse: 23 callbacks suppressed [ 280.539759][T15819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4172'. [ 280.543502][T15804] batman_adv: batadv0: Adding interface: veth1_vlan [ 280.592051][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4177'. [ 280.592484][T15804] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.600530][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4177'. [ 280.608972][T15804] batman_adv: batadv0: Interface activated: veth1_vlan [ 280.685635][T15824] siw: device registration error -23 [ 280.779172][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4179'. [ 280.815180][T15827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.825451][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 280.850423][T15827] bond1 (unregistering): Released all slaves [ 280.898641][T15827] loop0: detected capacity change from 0 to 512 [ 280.905333][T15827] journal_path: Non-blockdev passed as './bus' [ 280.911632][T15827] EXT4-fs: error: could not find journal device path [ 280.911939][T15800] loop4: detected capacity change from 0 to 8192 [ 280.925432][T15800] vfat: Unknown parameter '.02ìzWÏý?TR–e™üC…É?T×Éü' [ 280.975622][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4171'. [ 281.001279][T15840] loop0: detected capacity change from 0 to 1024 [ 281.035575][T15840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.066545][T15845] netlink: 'syz.4.4185': attribute type 4 has an invalid length. [ 281.086041][T15840] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.4184: Allocating blocks 449-513 which overlap fs metadata [ 281.121865][T15848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4186'. [ 281.143282][T15850] loop2: detected capacity change from 0 to 1024 [ 281.155566][T15840] EXT4-fs (loop0): pa ffff888106d65850: logic 48, phys. 177, len 21 [ 281.163709][T15840] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 281.169681][T15850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.201166][T12725] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.217672][T15850] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.4187: Allocating blocks 449-513 which overlap fs metadata [ 281.241184][T15850] EXT4-fs (loop2): pa ffff888106d657e0: logic 48, phys. 177, len 21 [ 281.249389][T15850] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 281.276165][T11786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.312058][T15864] loop0: detected capacity change from 0 to 1024 [ 281.329915][T15866] loop2: detected capacity change from 0 to 512 [ 281.337954][T15866] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4193: casefold flag without casefold feature [ 281.352201][T15866] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4193: couldn't read orphan inode 15 (err -117) [ 281.367136][T15864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.380923][T15866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.431814][T15875] loop0: detected capacity change from 0 to 128 [ 281.447596][T15875] FAULT_INJECTION: forcing a failure. [ 281.447596][T15875] name failslab, interval 1, probability 0, space 0, times 0 [ 281.460389][T15875] CPU: 0 UID: 0 PID: 15875 Comm: syz.0.4196 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.460423][T15875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.460439][T15875] Call Trace: [ 281.460476][T15875] [ 281.460486][T15875] __dump_stack+0x1d/0x30 [ 281.460507][T15875] dump_stack_lvl+0xe8/0x140 [ 281.460525][T15875] dump_stack+0x15/0x1b [ 281.460564][T15875] should_fail_ex+0x265/0x280 [ 281.460591][T15875] should_failslab+0x8c/0xb0 [ 281.460622][T15875] kmem_cache_alloc_node_noprof+0x57/0x320 [ 281.460689][T15875] ? __alloc_skb+0x101/0x320 [ 281.460710][T15875] __alloc_skb+0x101/0x320 [ 281.460732][T15875] ? audit_log_start+0x365/0x6c0 [ 281.460786][T15875] audit_log_start+0x380/0x6c0 [ 281.460828][T15875] audit_seccomp+0x48/0x100 [ 281.460892][T15875] ? __seccomp_filter+0x68c/0x10d0 [ 281.460913][T15875] __seccomp_filter+0x69d/0x10d0 [ 281.460964][T15875] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 281.460994][T15875] ? vfs_write+0x7e8/0x960 [ 281.461087][T15875] __secure_computing+0x82/0x150 [ 281.461107][T15875] syscall_trace_enter+0xcf/0x1e0 [ 281.461202][T15875] do_syscall_64+0xac/0x200 [ 281.461238][T15875] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 281.461266][T15875] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 281.461291][T15875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.461313][T15875] RIP: 0033:0x7f37b779ebe9 [ 281.461344][T15875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.461366][T15875] RSP: 002b:00007f37b61ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.461391][T15875] RAX: ffffffffffffffda RBX: 00007f37b79d5fa0 RCX: 00007f37b779ebe9 [ 281.461408][T15875] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000006 [ 281.461424][T15875] RBP: 00007f37b61ff090 R08: 0000000000000000 R09: 0000000000000000 [ 281.461441][T15875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.461453][T15875] R13: 00007f37b79d6038 R14: 00007f37b79d5fa0 R15: 00007ffd295d92d8 [ 281.461471][T15875] [ 281.668520][T15878] loop2: detected capacity change from 0 to 512 [ 281.680595][T15878] EXT4-fs: Ignoring removed oldalloc option [ 281.698391][T15875] syz.0.4196: attempt to access beyond end of device [ 281.698391][T15875] loop0: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 281.716366][T15875] syz.0.4196: attempt to access beyond end of device [ 281.716366][T15875] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 281.729920][T15875] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 281.742364][T15875] syz.0.4196: attempt to access beyond end of device [ 281.742364][T15875] loop0: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 281.745297][T15878] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.4197: Parent and EA inode have the same ino 15 [ 281.756378][T15875] syz.0.4196: attempt to access beyond end of device [ 281.756378][T15875] loop0: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 281.769127][T15878] EXT4-fs (loop2): Remounting filesystem read-only [ 281.781699][T15875] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 281.798121][T15878] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 281.807222][T15878] EXT4-fs (loop2): 1 orphan inode deleted [ 281.834408][T15875] syz.0.4196: attempt to access beyond end of device [ 281.834408][T15875] loop0: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 281.873437][T15875] syz.0.4196: attempt to access beyond end of device [ 281.873437][T15875] loop0: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 281.880105][T15889] loop2: detected capacity change from 0 to 1024 [ 281.887084][T15875] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 281.904217][T15875] syz.0.4196: attempt to access beyond end of device [ 281.904217][T15875] loop0: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 281.918777][T15875] syz.0.4196: attempt to access beyond end of device [ 281.918777][T15875] loop0: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 281.932254][T15875] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 281.942531][T15875] syz.0.4196: attempt to access beyond end of device [ 281.942531][T15875] loop0: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 281.961973][T15890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4199'. [ 281.972129][T15890] siw: device registration error -23 [ 281.991596][T15875] syz.0.4196: attempt to access beyond end of device [ 281.991596][T15875] loop0: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 281.994717][T15889] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.4200: Allocating blocks 449-513 which overlap fs metadata [ 282.005188][T15875] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 282.005822][T15875] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 282.039294][T15875] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 282.043701][T15889] EXT4-fs (loop2): pa ffff888106e69d90: logic 48, phys. 177, len 21 [ 282.050274][T15875] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 282.055772][T15889] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 282.071165][T15875] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 282.084808][T15875] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 282.113909][T15897] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4203'. [ 282.133854][T15897] loop4: detected capacity change from 0 to 1024 [ 282.135988][T15899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4202'. [ 282.148745][T15897] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 282.172490][T15899] loop2: detected capacity change from 0 to 1024 [ 282.179775][T15899] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 282.238961][T15905] loop0: detected capacity change from 0 to 1024 [ 282.298035][T15911] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1794 sclass=netlink_audit_socket pid=15911 comm=syz.2.4208 [ 282.393462][T15919] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 282.535218][T15926] loop3: detected capacity change from 0 to 1024 [ 282.558675][T15928] loop2: detected capacity change from 0 to 1024 [ 282.574473][T15928] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 282.600293][T15926] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4213: Allocating blocks 449-513 which overlap fs metadata [ 282.640323][T15926] EXT4-fs (loop3): pa ffff888106e69e70: logic 48, phys. 177, len 21 [ 282.648437][T15926] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 282.660019][T15937] FAULT_INJECTION: forcing a failure. [ 282.660019][T15937] name failslab, interval 1, probability 0, space 0, times 0 [ 282.672768][T15937] CPU: 0 UID: 0 PID: 15937 Comm: syz.1.4216 Not tainted syzkaller #0 PREEMPT(voluntary) [ 282.672802][T15937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.672868][T15937] Call Trace: [ 282.672877][T15937] [ 282.672885][T15937] __dump_stack+0x1d/0x30 [ 282.672906][T15937] dump_stack_lvl+0xe8/0x140 [ 282.672928][T15937] dump_stack+0x15/0x1b [ 282.672948][T15937] should_fail_ex+0x265/0x280 [ 282.673049][T15937] should_failslab+0x8c/0xb0 [ 282.673083][T15937] kmem_cache_alloc_noprof+0x50/0x310 [ 282.673196][T15937] ? getname_flags+0x80/0x3b0 [ 282.673236][T15937] getname_flags+0x80/0x3b0 [ 282.673302][T15937] getname_uflags+0x21/0x30 [ 282.673338][T15937] __x64_sys_execveat+0x5d/0x90 [ 282.673392][T15937] x64_sys_call+0x1fec/0x2ff0 [ 282.673421][T15937] do_syscall_64+0xd2/0x200 [ 282.673472][T15937] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 282.673505][T15937] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 282.673561][T15937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.673590][T15937] RIP: 0033:0x7f43e56debe9 [ 282.673611][T15937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.673645][T15937] RSP: 002b:00007f43e4147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 282.673691][T15937] RAX: ffffffffffffffda RBX: 00007f43e5915fa0 RCX: 00007f43e56debe9 [ 282.673708][T15937] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 282.673721][T15937] RBP: 00007f43e4147090 R08: 0000000000000000 R09: 0000000000000000 [ 282.673733][T15937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.673744][T15937] R13: 00007f43e5916038 R14: 00007f43e5915fa0 R15: 00007fffc4692048 [ 282.673766][T15937] [ 283.062092][T15946] netlink: 'syz.0.4209': attribute type 10 has an invalid length. [ 283.115266][T15952] loop3: detected capacity change from 0 to 1024 [ 283.174193][T15954] FAULT_INJECTION: forcing a failure. [ 283.174193][T15954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.187352][T15954] CPU: 1 UID: 0 PID: 15954 Comm: syz.1.4223 Not tainted syzkaller #0 PREEMPT(voluntary) [ 283.187394][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.187411][T15954] Call Trace: [ 283.187420][T15954] [ 283.187518][T15954] __dump_stack+0x1d/0x30 [ 283.187546][T15954] dump_stack_lvl+0xe8/0x140 [ 283.187576][T15954] dump_stack+0x15/0x1b [ 283.187596][T15954] should_fail_ex+0x265/0x280 [ 283.187622][T15954] should_fail+0xb/0x20 [ 283.187686][T15954] should_fail_usercopy+0x1a/0x20 [ 283.187713][T15954] _copy_from_user+0x1c/0xb0 [ 283.187745][T15954] ucma_set_option+0x54/0x7f0 [ 283.187816][T15954] ? _parse_integer+0x27/0x40 [ 283.187898][T15954] ? kstrtoull+0x111/0x140 [ 283.187918][T15954] ? kstrtouint+0x76/0xc0 [ 283.187942][T15954] ? kstrtouint_from_user+0x9f/0xf0 [ 283.188015][T15954] ? should_fail_ex+0xdb/0x280 [ 283.188036][T15954] ucma_write+0x1b3/0x250 [ 283.188059][T15954] ? __pfx_ucma_write+0x10/0x10 [ 283.188126][T15954] vfs_write+0x269/0x960 [ 283.188148][T15954] ? __rcu_read_unlock+0x4f/0x70 [ 283.188169][T15954] ? __fget_files+0x184/0x1c0 [ 283.188196][T15954] ksys_write+0xda/0x1a0 [ 283.188223][T15954] __x64_sys_write+0x40/0x50 [ 283.188326][T15954] x64_sys_call+0x27fe/0x2ff0 [ 283.188347][T15954] do_syscall_64+0xd2/0x200 [ 283.188437][T15954] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 283.188461][T15954] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 283.188487][T15954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.188540][T15954] RIP: 0033:0x7f43e56debe9 [ 283.188558][T15954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.188581][T15954] RSP: 002b:00007f43e4147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.188603][T15954] RAX: ffffffffffffffda RBX: 00007f43e5915fa0 RCX: 00007f43e56debe9 [ 283.188620][T15954] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000003 [ 283.188635][T15954] RBP: 00007f43e4147090 R08: 0000000000000000 R09: 0000000000000000 [ 283.188649][T15954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.188661][T15954] R13: 00007f43e5916038 R14: 00007f43e5915fa0 R15: 00007fffc4692048 [ 283.188685][T15954] [ 283.432372][T15958] loop4: detected capacity change from 0 to 1024 [ 283.449642][T15958] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 283.456885][T15960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.475687][T15965] netlink: 'syz.1.4228': attribute type 4 has an invalid length. [ 283.509077][T15969] loop1: detected capacity change from 0 to 1024 [ 283.542461][T15978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15978 comm=syz.0.4233 [ 283.555759][T15975] loop2: detected capacity change from 0 to 512 [ 283.556645][T15960] bond4 (unregistering): Released all slaves [ 283.562470][T15975] journal_path: Non-blockdev passed as './bus' [ 283.574295][T15975] EXT4-fs: error: could not find journal device path [ 283.613795][T15982] FAULT_INJECTION: forcing a failure. [ 283.613795][T15982] name failslab, interval 1, probability 0, space 0, times 0 [ 283.617097][T15984] loop4: detected capacity change from 0 to 512 [ 283.626517][T15982] CPU: 1 UID: 0 PID: 15982 Comm: syz.3.4235 Not tainted syzkaller #0 PREEMPT(voluntary) [ 283.626607][T15982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.626626][T15982] Call Trace: [ 283.626637][T15982] [ 283.626649][T15982] __dump_stack+0x1d/0x30 [ 283.626681][T15982] dump_stack_lvl+0xe8/0x140 [ 283.626708][T15982] dump_stack+0x15/0x1b [ 283.626732][T15982] should_fail_ex+0x265/0x280 [ 283.626812][T15982] should_failslab+0x8c/0xb0 [ 283.626846][T15982] __kmalloc_noprof+0xa5/0x3e0 [ 283.626947][T15982] ? bpf_test_init+0xa9/0x160 [ 283.626978][T15982] bpf_test_init+0xa9/0x160 [ 283.627006][T15982] bpf_prog_test_run_xdp+0x274/0x910 [ 283.627035][T15982] ? kstrtouint+0x76/0xc0 [ 283.627083][T15982] ? __rcu_read_unlock+0x4f/0x70 [ 283.627196][T15982] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 283.627227][T15982] bpf_prog_test_run+0x22a/0x390 [ 283.627332][T15982] __sys_bpf+0x4b9/0x7b0 [ 283.627386][T15982] __x64_sys_bpf+0x41/0x50 [ 283.627429][T15982] x64_sys_call+0x2aea/0x2ff0 [ 283.627460][T15982] do_syscall_64+0xd2/0x200 [ 283.627499][T15982] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 283.627533][T15982] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 283.627595][T15982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.627626][T15982] RIP: 0033:0x7f21a0acebe9 [ 283.627647][T15982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.627673][T15982] RSP: 002b:00007f219f52f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.627700][T15982] RAX: ffffffffffffffda RBX: 00007f21a0d05fa0 RCX: 00007f21a0acebe9 [ 283.627717][T15982] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 283.627741][T15982] RBP: 00007f219f52f090 R08: 0000000000000000 R09: 0000000000000000 [ 283.627758][T15982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.627776][T15982] R13: 00007f21a0d06038 R14: 00007f21a0d05fa0 R15: 00007ffe19b88a68 [ 283.627803][T15982] [ 283.632738][T15969] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4230: Allocating blocks 449-513 which overlap fs metadata [ 283.668694][T15985] loop0: detected capacity change from 0 to 4096 [ 283.693944][T15984] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4234: casefold flag without casefold feature [ 283.701794][T15985] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 283.708628][T15984] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4234: couldn't read orphan inode 15 (err -117) [ 283.716329][T15968] EXT4-fs (loop1): pa ffff888106e69ee0: logic 48, phys. 177, len 21 [ 283.896052][T15968] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 283.984919][T16004] loop2: detected capacity change from 0 to 1024 [ 283.994000][ T29] kauditd_printk_skb: 1018 callbacks suppressed [ 283.994092][ T29] audit: type=1326 audit(1756571837.408:38813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef7e8ebe9 code=0x7ffc0000 [ 284.000475][ T29] audit: type=1326 audit(1756571837.408:38814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef7e8ebe9 code=0x7ffc0000 [ 284.047667][ T29] audit: type=1326 audit(1756571837.408:38815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ef7e8ebe9 code=0x7ffc0000 [ 284.049433][T16004] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 284.071701][ T29] audit: type=1326 audit(1756571837.408:38816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef7e8ebe9 code=0x7ffc0000 [ 284.103367][ T29] audit: type=1326 audit(1756571837.408:38817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef7e8ebe9 code=0x7ffc0000 [ 284.127102][ T29] audit: type=1326 audit(1756571837.408:38818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ef7e8ebe9 code=0x7ffc0000 [ 284.148403][T16007] netlink: 'syz.1.4242': attribute type 4 has an invalid length. [ 284.150701][ T29] audit: type=1326 audit(1756571837.408:38819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef7e8ebe9 code=0x7ffc0000 [ 284.182171][ T29] audit: type=1326 audit(1756571837.408:38820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ef7e8ebe9 code=0x7ffc0000 [ 284.205766][ T29] audit: type=1326 audit(1756571837.408:38821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef7e8ebe9 code=0x7ffc0000 [ 284.213137][T16010] loop3: detected capacity change from 0 to 128 [ 284.229458][ T29] audit: type=1326 audit(1756571837.408:38822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ef7e8ebe9 code=0x7ffc0000 [ 284.267974][T16005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.301276][T16010] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 284.312707][T16015] loop4: detected capacity change from 0 to 512 [ 284.320130][T16015] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 284.358267][T16010] System zones: 1-3, 19-19, 35-36 [ 284.375839][T16015] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 284.375839][T16015] [ 284.386649][T16015] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 284.399642][T16010] ext4 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 284.438765][T16018] loop1: detected capacity change from 0 to 1024 [ 284.507479][T16031] SELinux: policydb version -957581230 does not match my version range 15-35 [ 284.516570][T16031] SELinux: failed to load policy [ 284.517910][T16027] netlink: 'syz.2.4247': attribute type 4 has an invalid length. [ 284.527717][T16031] netlink: 'syz.0.4245': attribute type 10 has an invalid length. [ 284.551358][T16033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.572366][T16031] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 284.621024][T16045] loop1: detected capacity change from 0 to 128 [ 284.668691][T16045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 284.718878][T16045] System zones: 1-3, 19-19, 35-36 [ 284.737519][T16060] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16060 comm=syz.4.4255 [ 284.738168][T16059] loop3: detected capacity change from 0 to 1024 [ 284.757710][T16059] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 284.760367][T16057] netlink: 'syz.0.4254': attribute type 4 has an invalid length. [ 284.790715][T16045] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 284.849161][T16066] loop4: detected capacity change from 0 to 4096 [ 284.901120][T16066] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 285.026959][T16045] FAULT_INJECTION: forcing a failure. [ 285.026959][T16045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.040112][T16045] CPU: 1 UID: 0 PID: 16045 Comm: syz.1.4248 Not tainted syzkaller #0 PREEMPT(voluntary) [ 285.040143][T16045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.040156][T16045] Call Trace: [ 285.040197][T16045] [ 285.040205][T16045] __dump_stack+0x1d/0x30 [ 285.040232][T16045] dump_stack_lvl+0xe8/0x140 [ 285.040257][T16045] dump_stack+0x15/0x1b [ 285.040325][T16045] should_fail_ex+0x265/0x280 [ 285.040346][T16045] should_fail+0xb/0x20 [ 285.040362][T16045] should_fail_usercopy+0x1a/0x20 [ 285.040387][T16045] _copy_from_user+0x1c/0xb0 [ 285.040477][T16045] ucma_set_option+0x54/0x7f0 [ 285.040509][T16045] ? _parse_integer+0x27/0x40 [ 285.040533][T16045] ? kstrtoull+0x111/0x140 [ 285.040605][T16045] ? kstrtouint+0x76/0xc0 [ 285.040625][T16045] ? kstrtouint_from_user+0x9f/0xf0 [ 285.040687][T16045] ? should_fail_ex+0xdb/0x280 [ 285.040716][T16045] ucma_write+0x1b3/0x250 [ 285.040737][T16045] ? __pfx_ucma_write+0x10/0x10 [ 285.040758][T16045] vfs_write+0x269/0x960 [ 285.040779][T16045] ? __rcu_read_unlock+0x4f/0x70 [ 285.040912][T16045] ? __fget_files+0x184/0x1c0 [ 285.040947][T16045] ksys_write+0xda/0x1a0 [ 285.041027][T16045] __x64_sys_write+0x40/0x50 [ 285.041055][T16045] x64_sys_call+0x27fe/0x2ff0 [ 285.041082][T16045] do_syscall_64+0xd2/0x200 [ 285.041109][T16045] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 285.041208][T16045] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 285.041240][T16045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.041285][T16045] RIP: 0033:0x7f43e56debe9 [ 285.041305][T16045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.041340][T16045] RSP: 002b:00007f43e4126038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.041360][T16045] RAX: ffffffffffffffda RBX: 00007f43e5916090 RCX: 00007f43e56debe9 [ 285.041372][T16045] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000009 [ 285.041384][T16045] RBP: 00007f43e4126090 R08: 0000000000000000 R09: 0000000000000000 [ 285.041399][T16045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.041416][T16045] R13: 00007f43e5916128 R14: 00007f43e5916090 R15: 00007fffc4692048 [ 285.041444][T16045] [ 285.439622][T16094] loop0: detected capacity change from 0 to 128 [ 285.450530][T16097] lo speed is unknown, defaulting to 1000 [ 285.483977][T16094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 285.507959][T16094] System zones: 1-3, 19-19, 35-36 [ 285.556546][T16094] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 285.645641][T16108] __nla_validate_parse: 25 callbacks suppressed [ 285.645660][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4269'. [ 285.665124][T16110] loop1: detected capacity change from 0 to 512 [ 285.676037][T16110] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4270: casefold flag without casefold feature [ 285.695594][T16113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4269'. [ 285.705618][T16110] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4270: couldn't read orphan inode 15 (err -117) [ 285.730339][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4268'. [ 285.743871][T16108] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.764415][T16116] loop2: detected capacity change from 0 to 512 [ 285.779792][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4268'. [ 285.781040][T16116] journal_path: Non-blockdev passed as './bus' [ 285.795004][T16116] EXT4-fs: error: could not find journal device path [ 285.804563][T16113] bond4 (unregistering): Released all slaves [ 285.832637][T16119] loop4: detected capacity change from 0 to 512 [ 285.860002][T16119] journal_path: Non-blockdev passed as './bus' [ 285.866427][T16119] EXT4-fs: error: could not find journal device path [ 285.921473][T16115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 285.963565][T16118] bond2 (unregistering): Released all slaves [ 285.979251][T16127] loop2: detected capacity change from 0 to 512 [ 286.002488][T16127] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.044437][T16127] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 286.044437][T16127] [ 286.055288][T16127] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 286.108951][T16138] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16138 comm=syz.2.4278 [ 286.192118][T16143] loop2: detected capacity change from 0 to 4096 [ 286.206033][T16143] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 286.224221][T16140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7410 sclass=netlink_route_socket pid=16140 comm=syz.4.4279 [ 286.290826][T16148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4280'. [ 286.299937][T16148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4280'. [ 286.401317][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'. [ 286.410434][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'. [ 286.456972][T16153] loop3: detected capacity change from 0 to 512 [ 286.466285][T16153] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.4282: casefold flag without casefold feature [ 286.479558][T16153] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4282: couldn't read orphan inode 15 (err -117) [ 286.592242][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4284'. [ 286.601274][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4284'. [ 286.735747][T16165] FAULT_INJECTION: forcing a failure. [ 286.735747][T16165] name failslab, interval 1, probability 0, space 0, times 0 [ 286.748621][T16165] CPU: 1 UID: 0 PID: 16165 Comm: syz.3.4287 Not tainted syzkaller #0 PREEMPT(voluntary) [ 286.748653][T16165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.748694][T16165] Call Trace: [ 286.748701][T16165] [ 286.748709][T16165] __dump_stack+0x1d/0x30 [ 286.748730][T16165] dump_stack_lvl+0xe8/0x140 [ 286.748752][T16165] dump_stack+0x15/0x1b [ 286.748772][T16165] should_fail_ex+0x265/0x280 [ 286.748798][T16165] should_failslab+0x8c/0xb0 [ 286.748833][T16165] kmem_cache_alloc_node_noprof+0x57/0x320 [ 286.748862][T16165] ? __alloc_skb+0x101/0x320 [ 286.748881][T16165] __alloc_skb+0x101/0x320 [ 286.748898][T16165] ? audit_log_start+0x365/0x6c0 [ 286.748942][T16165] audit_log_start+0x380/0x6c0 [ 286.748989][T16165] audit_seccomp+0x48/0x100 [ 286.749041][T16165] ? __seccomp_filter+0x68c/0x10d0 [ 286.749066][T16165] __seccomp_filter+0x69d/0x10d0 [ 286.749096][T16165] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 286.749227][T16165] ? vfs_write+0x7e8/0x960 [ 286.749399][T16165] ? __rcu_read_unlock+0x4f/0x70 [ 286.749484][T16165] ? __fget_files+0x184/0x1c0 [ 286.749519][T16165] __secure_computing+0x82/0x150 [ 286.749547][T16165] syscall_trace_enter+0xcf/0x1e0 [ 286.749602][T16165] do_syscall_64+0xac/0x200 [ 286.749631][T16165] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 286.749736][T16165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.749764][T16165] RIP: 0033:0x7f21a0acebe9 [ 286.749782][T16165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.749801][T16165] RSP: 002b:00007f219f52f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.749839][T16165] RAX: ffffffffffffffda RBX: 00007f21a0d05fa0 RCX: 00007f21a0acebe9 [ 286.749872][T16165] RDX: 0000200000000580 RSI: 00000000408c5333 RDI: 0000000000000006 [ 286.749887][T16165] RBP: 00007f219f52f090 R08: 0000000000000000 R09: 0000000000000000 [ 286.749902][T16165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.749917][T16165] R13: 00007f21a0d06038 R14: 00007f21a0d05fa0 R15: 00007ffe19b88a68 [ 286.749940][T16165] [ 287.069613][T16178] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 287.103302][T16179] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 287.144895][T16171] program syz.3.4290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.154474][T16171] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 287.861973][T16196] loop0: detected capacity change from 0 to 1024 [ 287.868842][T16196] EXT4-fs: Ignoring removed orlov option [ 287.906157][T16196] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 287.929300][T16196] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 287.940517][T16196] EXT4-fs (loop0): invalid journal inode [ 287.946242][T16196] EXT4-fs (loop0): can't get journal size [ 287.975227][T16196] EXT4-fs error (device loop0): __ext4_iget:5464: inode #15: block 1803188595: comm syz.0.4298: invalid block [ 287.991649][T16196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16196 comm=syz.0.4298 [ 288.024862][T16202] FAULT_INJECTION: forcing a failure. [ 288.024862][T16202] name failslab, interval 1, probability 0, space 0, times 0 [ 288.032055][T12725] EXT4-fs error (device loop0): __ext4_iget:5464: inode #15: block 1803188595: comm syz-executor: invalid block [ 288.037644][T16202] CPU: 1 UID: 0 PID: 16202 Comm: syz.3.4300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 288.037674][T16202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.037712][T16202] Call Trace: [ 288.037722][T16202] [ 288.037735][T16202] __dump_stack+0x1d/0x30 [ 288.037767][T16202] dump_stack_lvl+0xe8/0x140 [ 288.037794][T16202] dump_stack+0x15/0x1b [ 288.037819][T16202] should_fail_ex+0x265/0x280 [ 288.037873][T16202] should_failslab+0x8c/0xb0 [ 288.037954][T16202] kmem_cache_alloc_node_noprof+0x57/0x320 [ 288.037996][T16202] ? __alloc_skb+0x101/0x320 [ 288.038023][T16202] __alloc_skb+0x101/0x320 [ 288.038050][T16202] netlink_alloc_large_skb+0xba/0xf0 [ 288.038150][T16202] netlink_sendmsg+0x3cf/0x6b0 [ 288.038185][T16202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.038218][T16202] __sock_sendmsg+0x145/0x180 [ 288.038259][T16202] ____sys_sendmsg+0x31e/0x4e0 [ 288.038354][T16202] ___sys_sendmsg+0x17b/0x1d0 [ 288.038404][T16202] __x64_sys_sendmsg+0xd4/0x160 [ 288.038441][T16202] x64_sys_call+0x191e/0x2ff0 [ 288.038470][T16202] do_syscall_64+0xd2/0x200 [ 288.038544][T16202] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 288.038576][T16202] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 288.038670][T16202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.038719][T16202] RIP: 0033:0x7f21a0acebe9 [ 288.038740][T16202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.038765][T16202] RSP: 002b:00007f219f52f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.038791][T16202] RAX: ffffffffffffffda RBX: 00007f21a0d05fa0 RCX: 00007f21a0acebe9 [ 288.038808][T16202] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 288.038826][T16202] RBP: 00007f219f52f090 R08: 0000000000000000 R09: 0000000000000000 [ 288.038843][T16202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.038869][T16202] R13: 00007f21a0d06038 R14: 00007f21a0d05fa0 R15: 00007ffe19b88a68 [ 288.038895][T16202] [ 288.252841][T12725] EXT4-fs error (device loop0): __ext4_iget:5464: inode #15: block 1803188595: comm syz-executor: invalid block [ 288.284007][T16212] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16212 comm=syz.3.4303 [ 288.316725][T16213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.334204][T16213] bond2 (unregistering): Released all slaves [ 288.359009][T16215] loop3: detected capacity change from 0 to 4096 [ 288.367053][T16215] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 288.381701][T16218] loop1: detected capacity change from 0 to 512 [ 288.389389][T16218] journal_path: Non-blockdev passed as './bus' [ 288.395669][T16218] EXT4-fs: error: could not find journal device path [ 288.458129][T16223] tipc: Withdrawal distribution failure [ 288.475428][ T3503] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.538906][T16231] loop2: detected capacity change from 0 to 1024 [ 288.550131][ T3503] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.567652][T16231] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 288.616334][ T3503] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.664279][ T3503] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.693245][T16242] loop2: detected capacity change from 0 to 1024 [ 288.728938][T16242] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.4314: Allocating blocks 449-513 which overlap fs metadata [ 288.757573][T16242] EXT4-fs (loop2): pa ffff888106d65700: logic 48, phys. 177, len 21 [ 288.765755][T16242] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 288.776072][ T3503] bridge_slave_1: left allmulticast mode [ 288.781894][ T3503] bridge_slave_1: left promiscuous mode [ 288.787636][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.796470][ T3503] bridge_slave_0: left allmulticast mode [ 288.802172][ T3503] bridge_slave_0: left promiscuous mode [ 288.807887][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.846314][T16252] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16252 comm=syz.2.4316 [ 288.912529][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.924177][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.933298][T16253] loop2: detected capacity change from 0 to 4096 [ 288.939986][ T3503] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 288.948687][T16253] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 288.949916][ T3503] bond0 (unregistering): Released all slaves [ 288.970718][T16232] lo speed is unknown, defaulting to 1000 [ 289.036111][ T3503] tipc: Left network mode [ 289.043356][ T3503] hsr_slave_0: left promiscuous mode [ 289.049437][ T3503] hsr_slave_1: left promiscuous mode [ 289.058751][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.066434][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.075354][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.082985][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.093825][ T3503] veth1_vlan: left promiscuous mode [ 289.099573][ T3503] veth0_vlan: left promiscuous mode [ 289.173032][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 289.183615][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 289.192914][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 289.192932][ T29] audit: type=1326 audit(1756571842.878:39367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16261 comm="syz.3.4318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21a0acebe9 code=0x0 [ 289.228574][T16232] chnl_net:caif_netlink_parms(): no params data found [ 289.243323][T16265] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 289.262853][T16264] loop4: detected capacity change from 0 to 1024 [ 289.300162][T16232] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.307369][T16232] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.313321][T16264] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.4319: Allocating blocks 449-513 which overlap fs metadata [ 289.315451][T16232] bridge_slave_0: entered allmulticast mode [ 289.335274][T16232] bridge_slave_0: entered promiscuous mode [ 289.336500][ T29] audit: type=1326 audit(1756571843.025:39368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16228 comm="syz.1.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e56debe9 code=0x7ffc0000 [ 289.342857][T16232] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.365348][ T29] audit: type=1326 audit(1756571843.025:39369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16228 comm="syz.1.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e56debe9 code=0x7ffc0000 [ 289.372454][T16232] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.403223][T16232] bridge_slave_1: entered allmulticast mode [ 289.415827][T16232] bridge_slave_1: entered promiscuous mode [ 289.440012][T16232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.450035][T16264] EXT4-fs (loop4): pa ffff888106d65690: logic 48, phys. 177, len 21 [ 289.458247][T16264] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 289.472799][T16232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.508612][T16232] team0: Port device team_slave_0 added [ 289.514422][ T29] audit: type=1326 audit(1756571843.214:39370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e56debe9 code=0x7ffc0000 [ 289.538103][ T29] audit: type=1326 audit(1756571843.214:39371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43e56debe9 code=0x7ffc0000 [ 289.561743][ T29] audit: type=1326 audit(1756571843.214:39372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e56debe9 code=0x7ffc0000 [ 289.563430][T16277] loop1: detected capacity change from 0 to 1024 [ 289.585360][ T29] audit: type=1326 audit(1756571843.214:39373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43e56debe9 code=0x7ffc0000 [ 289.594042][T16277] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 289.615367][ T29] audit: type=1326 audit(1756571843.214:39374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e56debe9 code=0x7ffc0000 [ 289.635436][T16232] team0: Port device team_slave_1 added [ 289.647006][ T29] audit: type=1326 audit(1756571843.214:39375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43e56debe9 code=0x7ffc0000 [ 289.676105][ T29] audit: type=1326 audit(1756571843.214:39376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16276 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e56debe9 code=0x7ffc0000 [ 289.715614][T16232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.722662][T16232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.748639][T16232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.760379][T16232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.767416][T16232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.793465][T16232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.841107][T16283] loop1: detected capacity change from 0 to 1024 [ 289.842641][T16232] hsr_slave_0: entered promiscuous mode [ 289.855865][T16232] hsr_slave_1: entered promiscuous mode [ 289.861881][T16232] debugfs: 'hsr0' already exists in 'hsr' [ 289.867706][T16232] Cannot create hsr debugfs directory [ 289.897800][T16283] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4325: Allocating blocks 449-513 which overlap fs metadata [ 289.951101][T16283] EXT4-fs (loop1): pa ffff888106d65620: logic 48, phys. 177, len 21 [ 289.959315][T16283] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 290.030338][T16292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7410 sclass=netlink_route_socket pid=16292 comm=syz.4.4326 [ 290.056942][T16232] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 290.066100][T16232] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 290.075766][T16298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16298 comm=syz.1.4327 [ 290.079083][T16232] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 290.097944][T16232] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 290.115029][T16232] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.122218][T16232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.123519][T16297] loop3: detected capacity change from 0 to 512 [ 290.137898][T16297] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 290.150546][T16297] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 290.150546][T16297] [ 290.161441][T16297] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 290.165132][T16232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.190111][T16232] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.201191][T16305] loop1: detected capacity change from 0 to 4096 [ 290.208630][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.214349][T16305] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 290.236021][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.243131][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.255339][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.262628][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.352722][T16315] siw: device registration error -23 [ 290.396776][T16232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.547633][T16232] veth0_vlan: entered promiscuous mode [ 290.556178][T16232] veth1_vlan: entered promiscuous mode [ 290.573371][T16232] veth0_macvtap: entered promiscuous mode [ 290.581870][T16232] veth1_macvtap: entered promiscuous mode [ 290.593631][T16232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.605040][T16232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.619934][ T3503] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.640759][ T3503] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.654947][ T3600] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.668387][ T3600] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.704554][T16335] loop5: detected capacity change from 0 to 512 [ 290.711740][T16335] EXT4-fs: Ignoring removed oldalloc option [ 290.721045][T16335] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.4309: Parent and EA inode have the same ino 15 [ 290.734715][T16335] EXT4-fs (loop5): Remounting filesystem read-only [ 290.743001][T16335] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 290.752524][T16335] EXT4-fs (loop5): 1 orphan inode deleted [ 290.781786][T16338] loop5: detected capacity change from 0 to 512 [ 290.793558][T16338] EXT4-fs: Ignoring removed oldalloc option [ 290.802289][T16338] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.4332: Parent and EA inode have the same ino 15 [ 290.815446][T16338] EXT4-fs (loop5): Remounting filesystem read-only [ 290.822981][T16338] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 290.832081][T16338] EXT4-fs (loop5): 1 orphan inode deleted [ 290.860509][T16341] __nla_validate_parse: 18 callbacks suppressed [ 290.860526][T16341] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4333'. [ 290.884898][T16341] loop5: detected capacity change from 0 to 1024 [ 290.892368][T16341] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 290.946462][T16345] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 290.953063][T16345] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 290.960819][T16345] vhci_hcd vhci_hcd.0: Device attached [ 290.972860][T16346] vhci_hcd: connection closed [ 290.973341][ T3524] vhci_hcd: stop threads [ 290.982408][ T3524] vhci_hcd: release socket [ 290.986888][ T3524] vhci_hcd: disconnect device [ 291.084009][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4337'. [ 291.092982][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4337'. [ 291.142575][T16355] loop3: detected capacity change from 0 to 1024 [ 291.173885][T16355] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4338: Allocating blocks 449-513 which overlap fs metadata [ 291.198386][T16355] EXT4-fs (loop3): pa ffff888106d65540: logic 48, phys. 177, len 21 [ 291.206550][T16355] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 291.251143][T16358] lo speed is unknown, defaulting to 1000 [ 291.468721][T16368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4342'. [ 291.504030][T16370] loop1: detected capacity change from 0 to 512 [ 291.512717][T16368] siw: device registration error -23 [ 291.516112][T16370] EXT4-fs: Ignoring removed oldalloc option [ 291.532363][T16370] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.4343: Parent and EA inode have the same ino 15 [ 291.548870][T16373] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16373 comm=syz.2.4344 [ 291.561747][T16370] EXT4-fs (loop1): Remounting filesystem read-only [ 291.568874][T16370] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 291.579028][T16370] EXT4-fs (loop1): 1 orphan inode deleted [ 291.634883][T16376] loop1: detected capacity change from 0 to 1024 [ 291.642798][T16375] loop2: detected capacity change from 0 to 4096 [ 291.662097][T16375] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 291.716291][T16376] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4345: Allocating blocks 449-513 which overlap fs metadata [ 291.756456][T16374] EXT4-fs (loop1): pa ffff888106d65540: logic 48, phys. 177, len 21 [ 291.764660][T16374] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 292.119763][T16389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4349'. [ 292.130290][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4349'. [ 292.184367][T16390] loop5: detected capacity change from 0 to 512 [ 292.191641][T16390] journal_path: Non-blockdev passed as './bus' [ 292.197947][T16390] EXT4-fs: error: could not find journal device path [ 292.422426][T16402] loop2: detected capacity change from 0 to 1024 [ 292.449243][T16402] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.4353: Allocating blocks 449-513 which overlap fs metadata [ 292.465708][T16401] EXT4-fs (loop2): pa ffff888106d65770: logic 48, phys. 177, len 21 [ 292.473825][T16401] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 292.698295][T16408] loop1: detected capacity change from 0 to 512 [ 292.706235][T16408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 292.717957][T16408] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 292.717957][T16408] [ 292.728865][T16408] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 292.760344][T16411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4356'. [ 292.774779][T16411] loop1: detected capacity change from 0 to 1024 [ 292.782257][T16411] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 292.826804][T16413] loop1: detected capacity change from 0 to 512 [ 292.836033][T16413] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4357: casefold flag without casefold feature [ 292.850351][T16413] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4357: couldn't read orphan inode 15 (err -117) [ 292.927182][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4358'. [ 292.936285][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4358'. [ 292.960738][T16421] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 293.045550][T16424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4359'. [ 293.256346][T16426] lo speed is unknown, defaulting to 1000 [ 293.555750][T16434] loop3: detected capacity change from 0 to 1024 [ 293.770903][T16445] loop1: detected capacity change from 0 to 512 [ 293.777734][T16445] EXT4-fs: Ignoring removed oldalloc option [ 293.788760][T16445] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.4367: Parent and EA inode have the same ino 15 [ 293.802467][T16445] EXT4-fs (loop1): Remounting filesystem read-only [ 293.802621][T16445] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 293.802657][T16445] EXT4-fs (loop1): 1 orphan inode deleted [ 293.985801][T16452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7410 sclass=netlink_route_socket pid=16452 comm=syz.1.4368 [ 293.988292][T16453] loop4: detected capacity change from 0 to 512 [ 294.006623][T16453] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4369: casefold flag without casefold feature [ 294.006764][T16453] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4369: couldn't read orphan inode 15 (err -117) [ 294.061687][T16457] loop4: detected capacity change from 0 to 1024 [ 294.080901][T16457] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.4370: Allocating blocks 449-513 which overlap fs metadata [ 294.092323][T16456] EXT4-fs (loop4): pa ffff888106e69d90: logic 48, phys. 177, len 21 [ 294.103586][T16456] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 294.124886][ T29] kauditd_printk_skb: 543 callbacks suppressed [ 294.124903][ T29] audit: type=1400 audit(1756571848.054:39920): avc: denied { ioctl } for pid=16460 comm="syz.5.4371" path="socket:[55161]" dev="sockfs" ino=55161 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.127938][T16461] loop5: detected capacity change from 0 to 512 [ 294.140893][T16461] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.201453][ T29] audit: type=1326 audit(1756571848.138:39921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.4.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7ebaebe9 code=0x7ffc0000 [ 294.201708][ T29] audit: type=1326 audit(1756571848.138:39922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.4.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc7ebaebe9 code=0x7ffc0000 [ 294.201940][ T29] audit: type=1326 audit(1756571848.138:39923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.4.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7ebaebe9 code=0x7ffc0000 [ 294.202175][ T29] audit: type=1326 audit(1756571848.138:39924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.4.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc7ebaebe9 code=0x7ffc0000 [ 294.202709][ T29] audit: type=1326 audit(1756571848.138:39925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.4.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7ebaebe9 code=0x7ffc0000 [ 294.203053][ T29] audit: type=1326 audit(1756571848.138:39926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.4.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc7ebaebe9 code=0x7ffc0000 [ 294.203435][ T29] audit: type=1326 audit(1756571848.138:39927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.4.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7ebaebe9 code=0x7ffc0000 [ 294.203582][ T29] audit: type=1326 audit(1756571848.138:39928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.4.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc7ebaebe9 code=0x7ffc0000 [ 294.203957][ T29] audit: type=1326 audit(1756571848.138:39929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.4.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7ebaebe9 code=0x7ffc0000 [ 294.477683][T16474] loop2: detected capacity change from 0 to 1024 [ 294.502237][T16474] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.4376: Allocating blocks 449-513 which overlap fs metadata [ 294.505081][T16474] EXT4-fs (loop2): pa ffff888106e69f50: logic 48, phys. 177, len 21 [ 294.524360][T16474] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 294.542290][T16477] siw: device registration error -23 [ 294.693506][T16482] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 294.730613][T16484] loop2: detected capacity change from 0 to 512 [ 294.737394][T16484] EXT4-fs: Ignoring removed oldalloc option [ 294.750028][T16484] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.4379: Parent and EA inode have the same ino 15 [ 294.763469][T16484] EXT4-fs (loop2): Remounting filesystem read-only [ 294.770492][T16484] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 294.780664][T16484] EXT4-fs (loop2): 1 orphan inode deleted [ 294.820579][T16488] loop2: detected capacity change from 0 to 1024 [ 294.828744][T16488] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 294.864559][T16490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16490 comm=syz.2.4381 [ 294.946749][T16491] loop2: detected capacity change from 0 to 4096 [ 294.954876][T16491] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 295.127230][T16494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.141627][T16494] bond2 (unregistering): Released all slaves [ 295.192643][T16496] loop4: detected capacity change from 0 to 512 [ 295.199701][T16496] journal_path: Non-blockdev passed as './bus' [ 295.205955][T16496] EXT4-fs: error: could not find journal device path [ 295.277912][T16498] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 295.284476][T16498] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 295.292245][T16498] vhci_hcd vhci_hcd.0: Device attached [ 295.306272][T16499] vhci_hcd: connection closed [ 295.307131][ T3594] vhci_hcd: stop threads [ 295.316166][ T3594] vhci_hcd: release socket [ 295.320664][ T3594] vhci_hcd: disconnect device [ 295.461980][T16506] siw: device registration error -23 [ 296.287633][T16527] loop3: detected capacity change from 0 to 512 [ 296.294130][T16529] loop5: detected capacity change from 0 to 512 [ 296.295388][T16527] EXT4-fs: Ignoring removed oldalloc option [ 296.302563][T16529] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4392: casefold flag without casefold feature [ 296.314388][T16527] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4391: Parent and EA inode have the same ino 15 [ 296.319386][T16529] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4392: couldn't read orphan inode 15 (err -117) [ 296.333680][T16527] EXT4-fs (loop3): Remounting filesystem read-only [ 296.351483][T16527] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 296.360863][T16527] EXT4-fs (loop3): 1 orphan inode deleted [ 296.392073][T16533] loop5: detected capacity change from 0 to 1024 [ 296.646111][T16548] __nla_validate_parse: 7 callbacks suppressed [ 296.646132][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4398'. [ 296.791452][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4400'. [ 296.808339][T16557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.811729][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4400'. [ 296.828886][T16557] bond2 (unregistering): Released all slaves [ 296.872013][T16557] loop1: detected capacity change from 0 to 512 [ 296.872296][T16557] journal_path: Non-blockdev passed as './bus' [ 296.872316][T16557] EXT4-fs: error: could not find journal device path [ 297.376176][T16574] loop1: detected capacity change from 0 to 512 [ 297.408463][T16574] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4404: casefold flag without casefold feature [ 297.408729][T16574] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4404: couldn't read orphan inode 15 (err -117) [ 297.431864][T16578] loop5: detected capacity change from 0 to 512 [ 297.461913][T16578] EXT4-fs: Ignoring removed oldalloc option [ 297.471323][T16578] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.4405: Parent and EA inode have the same ino 15 [ 297.543033][T16578] EXT4-fs (loop5): Remounting filesystem read-only [ 298.195446][T16578] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 298.205975][T16578] EXT4-fs (loop5): 1 orphan inode deleted [ 298.589704][T16599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4409'. [ 298.601094][T16599] siw: device registration error -23 [ 298.650181][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4410'. [ 298.724832][T16604] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4411'. [ 299.180640][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 299.180674][ T29] audit: type=1326 audit(1756571853.367:40466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 299.236119][ T29] audit: type=1326 audit(1756571853.398:40467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 299.259804][ T29] audit: type=1326 audit(1756571853.398:40468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 299.283524][ T29] audit: type=1326 audit(1756571853.398:40469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 299.320436][ T29] audit: type=1326 audit(1756571853.503:40470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 299.344191][ T29] audit: type=1326 audit(1756571853.503:40471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 299.367823][ T29] audit: type=1326 audit(1756571853.503:40472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 299.391505][ T29] audit: type=1326 audit(1756571853.503:40473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 299.415134][ T29] audit: type=1326 audit(1756571853.503:40474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.5.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 299.428622][T16616] loop3: detected capacity change from 0 to 512 [ 299.438886][ T29] audit: type=1326 audit(1756571853.503:40475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.5.4414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f871c14a5 code=0x7ffc0000 [ 299.509958][T16616] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.612638][T16636] loop4: detected capacity change from 0 to 512 [ 299.648613][T16639] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 299.651042][T16636] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4423: corrupted inode contents [ 299.655178][T16639] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 299.655424][T16639] vhci_hcd vhci_hcd.0: Device attached [ 299.683671][T16636] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.4423: mark_inode_dirty error [ 299.702156][T16636] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4423: corrupted inode contents [ 299.709006][T16644] lo speed is unknown, defaulting to 1000 [ 299.720291][T16636] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.4423: mark_inode_dirty error [ 299.733276][T16636] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4423: corrupted inode contents [ 299.746109][T16641] vhci_hcd: connection closed [ 299.746300][ T3599] vhci_hcd: stop threads [ 299.755293][ T3599] vhci_hcd: release socket [ 299.759776][ T3599] vhci_hcd: disconnect device [ 299.768863][T16636] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 299.787800][T16636] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4423: corrupted inode contents [ 299.801285][T16636] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.4423: mark_inode_dirty error [ 299.816001][T16636] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 299.825841][T16636] EXT4-fs (loop4): 1 truncate cleaned up [ 299.831974][T16636] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.844533][ T3599] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:51: Failed to release dquot type 1 [ 299.888917][T16635] lo speed is unknown, defaulting to 1000 [ 299.986944][T16647] loop4: detected capacity change from 0 to 512 [ 300.045529][T16647] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.249492][T16656] Illegal XDP return value 3873596818 on prog (id 2640) dev syz_tun, expect packet loss! [ 300.330010][T16674] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4434'. [ 300.408901][T16683] loop2: detected capacity change from 0 to 512 [ 300.415621][T16683] EXT4-fs: Ignoring removed oldalloc option [ 300.426536][T16683] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.4436: Parent and EA inode have the same ino 15 [ 300.456315][T16683] EXT4-fs (loop2): Remounting filesystem read-only [ 300.463181][T16683] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 300.472486][T16683] EXT4-fs (loop2): 1 orphan inode deleted [ 300.478860][T16683] EXT4-fs mount: 104 callbacks suppressed [ 300.478879][T16683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.510545][T11786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.600866][T16702] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 300.607441][T16702] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 300.615228][T16702] vhci_hcd vhci_hcd.0: Device attached [ 300.624390][T16703] vhci_hcd: connection closed [ 300.629514][ T3506] vhci_hcd: stop threads [ 300.638601][ T3506] vhci_hcd: release socket [ 300.643032][ T3506] vhci_hcd: disconnect device [ 300.756018][T16706] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 300.782973][T16706] SELinux: failed to load policy [ 300.846348][T16716] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16716 comm=syz.1.4448 [ 300.942503][T16721] loop5: detected capacity change from 0 to 512 [ 300.948381][T16719] loop1: detected capacity change from 0 to 4096 [ 300.951441][T16721] EXT4-fs: Ignoring removed oldalloc option [ 300.963114][T16719] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 300.963750][T16721] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.4450: Parent and EA inode have the same ino 15 [ 300.986978][T16721] EXT4-fs (loop5): Remounting filesystem read-only [ 300.990879][T16723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4451'. [ 300.995186][T16721] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 301.010177][T16723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.018045][T16719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.029928][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4451'. [ 301.031063][T16721] EXT4-fs (loop5): 1 orphan inode deleted [ 301.045962][T16721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.074054][T16232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.085658][T16723] bond2 (unregistering): Released all slaves [ 301.099247][T16727] loop4: detected capacity change from 0 to 512 [ 301.107391][T16727] journal_path: Non-blockdev passed as './bus' [ 301.113653][T16727] EXT4-fs: error: could not find journal device path [ 301.140012][T16729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.194899][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4456'. [ 301.260277][T16744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.269692][T16751] FAULT_INJECTION: forcing a failure. [ 301.269692][T16751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.283003][T16751] CPU: 1 UID: 0 PID: 16751 Comm: syz.2.4462 Not tainted syzkaller #0 PREEMPT(voluntary) [ 301.283039][T16751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.283057][T16751] Call Trace: [ 301.283064][T16751] [ 301.283075][T16751] __dump_stack+0x1d/0x30 [ 301.283105][T16751] dump_stack_lvl+0xe8/0x140 [ 301.283195][T16751] dump_stack+0x15/0x1b [ 301.283216][T16751] should_fail_ex+0x265/0x280 [ 301.283243][T16751] should_fail+0xb/0x20 [ 301.283389][T16751] should_fail_usercopy+0x1a/0x20 [ 301.283416][T16751] _copy_from_user+0x1c/0xb0 [ 301.283450][T16751] __sys_bpf+0x178/0x7b0 [ 301.283490][T16751] __x64_sys_bpf+0x41/0x50 [ 301.283557][T16751] x64_sys_call+0x2aea/0x2ff0 [ 301.283577][T16751] do_syscall_64+0xd2/0x200 [ 301.283610][T16751] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 301.283637][T16751] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 301.283731][T16751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.283760][T16751] RIP: 0033:0x7f3ef7e8ebe9 [ 301.283777][T16751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.283798][T16751] RSP: 002b:00007f3ef68f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 301.283819][T16751] RAX: ffffffffffffffda RBX: 00007f3ef80c5fa0 RCX: 00007f3ef7e8ebe9 [ 301.283836][T16751] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0300000000000000 [ 301.283852][T16751] RBP: 00007f3ef68f7090 R08: 0000000000000000 R09: 0000000000000000 [ 301.283867][T16751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.283881][T16751] R13: 00007f3ef80c6038 R14: 00007f3ef80c5fa0 R15: 00007fff46ec96f8 [ 301.283985][T16751] [ 301.293289][T16753] loop3: detected capacity change from 0 to 512 [ 301.359774][T16757] loop5: detected capacity change from 0 to 512 [ 301.366828][T16753] EXT4-fs: Ignoring removed oldalloc option [ 301.394312][T16757] journal_path: Non-blockdev passed as './bus' [ 301.438274][T16753] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4463: Parent and EA inode have the same ino 15 [ 301.444350][T16757] EXT4-fs: error: could not find journal device path [ 301.446069][T16744] bond2 (unregistering): Released all slaves [ 301.476215][T16764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.488482][T16753] EXT4-fs (loop3): Remounting filesystem read-only [ 301.500812][T16764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.509450][T16753] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 301.545778][T16764] bridge0: Device is already in use. [ 301.545821][T16753] EXT4-fs (loop3): 1 orphan inode deleted [ 301.557465][T16753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.584449][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.600966][T16766] loop4: detected capacity change from 0 to 128 [ 301.609777][T16766] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.622434][T16766] ext4 filesystem being mounted at /355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 301.678205][T12532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.690582][T11080] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.785389][T16785] loop1: detected capacity change from 0 to 512 [ 301.791212][T16785] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 301.813002][T16785] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 301.813002][T16785] [ 301.813060][T16785] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 301.813667][T16785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.826951][T16789] loop4: detected capacity change from 0 to 512 [ 301.873516][T16789] EXT4-fs: Ignoring removed oldalloc option [ 301.889465][T12532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.890470][T16789] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.4478: Parent and EA inode have the same ino 15 [ 301.917118][T16789] EXT4-fs (loop4): Remounting filesystem read-only [ 301.917272][T16789] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 301.917319][T16789] EXT4-fs (loop4): 1 orphan inode deleted [ 301.917877][T16789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.971749][T11080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.088621][T16810] FAULT_INJECTION: forcing a failure. [ 302.088621][T16810] name failslab, interval 1, probability 0, space 0, times 0 [ 302.101332][T16810] CPU: 0 UID: 0 PID: 16810 Comm: syz.2.4485 Not tainted syzkaller #0 PREEMPT(voluntary) [ 302.101445][T16810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.101462][T16810] Call Trace: [ 302.101471][T16810] [ 302.101481][T16810] __dump_stack+0x1d/0x30 [ 302.101510][T16810] dump_stack_lvl+0xe8/0x140 [ 302.101532][T16810] dump_stack+0x15/0x1b [ 302.101554][T16810] should_fail_ex+0x265/0x280 [ 302.101582][T16810] should_failslab+0x8c/0xb0 [ 302.101628][T16810] kmem_cache_alloc_noprof+0x50/0x310 [ 302.101664][T16810] ? __inet_hash_connect+0xbdf/0x1350 [ 302.101695][T16810] __inet_hash_connect+0xbdf/0x1350 [ 302.101788][T16810] inet_hash_connect+0xd1/0xf0 [ 302.101815][T16810] tcp_v4_connect+0x783/0xad0 [ 302.101912][T16810] __inet_stream_connect+0x169/0x7e0 [ 302.101982][T16810] ? tcp_sendmsg_fastopen+0x172/0x520 [ 302.102021][T16810] ? should_failslab+0x8c/0xb0 [ 302.102117][T16810] ? __kmalloc_cache_noprof+0x189/0x320 [ 302.102157][T16810] tcp_sendmsg_fastopen+0x43a/0x520 [ 302.102267][T16810] tcp_sendmsg_locked+0x26e1/0x2c00 [ 302.102304][T16810] ? __rcu_read_unlock+0x4f/0x70 [ 302.102340][T16810] ? xa_load+0xb1/0xe0 [ 302.102455][T16810] ? __account_obj_stock+0x211/0x350 [ 302.102483][T16810] ? __rcu_read_unlock+0x4f/0x70 [ 302.102569][T16810] ? avc_has_perm_noaudit+0x1b1/0x200 [ 302.102602][T16810] ? avc_has_perm+0xf7/0x180 [ 302.102628][T16810] ? _raw_spin_unlock_bh+0x36/0x40 [ 302.102648][T16810] ? __pfx_tcp_sendmsg+0x10/0x10 [ 302.102739][T16810] tcp_sendmsg+0x2f/0x50 [ 302.102766][T16810] inet_sendmsg+0x76/0xd0 [ 302.102789][T16810] __sock_sendmsg+0x102/0x180 [ 302.102836][T16810] ____sys_sendmsg+0x345/0x4e0 [ 302.102861][T16810] ___sys_sendmsg+0x17b/0x1d0 [ 302.102900][T16810] __sys_sendmmsg+0x178/0x300 [ 302.102941][T16810] __x64_sys_sendmmsg+0x57/0x70 [ 302.103007][T16810] x64_sys_call+0x1c4a/0x2ff0 [ 302.103029][T16810] do_syscall_64+0xd2/0x200 [ 302.103057][T16810] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 302.103086][T16810] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 302.103118][T16810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.103144][T16810] RIP: 0033:0x7f3ef7e8ebe9 [ 302.103164][T16810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.103186][T16810] RSP: 002b:00007f3ef68f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.103262][T16810] RAX: ffffffffffffffda RBX: 00007f3ef80c5fa0 RCX: 00007f3ef7e8ebe9 [ 302.103276][T16810] RDX: 0000000000000002 RSI: 0000200000000f40 RDI: 0000000000000003 [ 302.103291][T16810] RBP: 00007f3ef68f7090 R08: 0000000000000000 R09: 0000000000000000 [ 302.103373][T16810] R10: 000000002400c042 R11: 0000000000000246 R12: 0000000000000001 [ 302.103387][T16810] R13: 00007f3ef80c6038 R14: 00007f3ef80c5fa0 R15: 00007fff46ec96f8 [ 302.103409][T16810] [ 302.307599][T16834] __nla_validate_parse: 2 callbacks suppressed [ 302.307619][T16834] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4495'. [ 302.327705][T16836] lo speed is unknown, defaulting to 1000 [ 302.564736][T16837] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 302.564756][T16837] batman_adv: batadv0: Removing interface: veth1_vlan [ 302.675318][T16847] loop2: detected capacity change from 0 to 128 [ 302.688616][T16847] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 302.696706][T16847] FAT-fs (loop2): Filesystem has been set read-only [ 302.697092][T16851] loop5: detected capacity change from 0 to 512 [ 302.709710][T16847] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 302.718516][T16851] EXT4-fs: Ignoring removed oldalloc option [ 302.724828][T16847] bio_check_eod: 18 callbacks suppressed [ 302.724843][T16847] syz.2.4500: attempt to access beyond end of device [ 302.724843][T16847] loop2: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 302.746665][T16851] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.4501: Parent and EA inode have the same ino 15 [ 302.778210][T16851] EXT4-fs (loop5): Remounting filesystem read-only [ 302.797342][T16851] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 302.806862][T16851] EXT4-fs (loop5): 1 orphan inode deleted [ 302.813154][T16851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.840293][T16232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.842136][T16862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4504'. [ 302.852723][T16860] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4506'. [ 302.900068][T16860] loop1: detected capacity change from 0 to 1024 [ 302.918740][T16860] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 302.939691][T16870] lo speed is unknown, defaulting to 1000 [ 302.966698][T16871] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 303.047323][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4509'. [ 303.056271][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4509'. [ 303.194045][T16878] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4510'. [ 303.305974][T16885] loop4: detected capacity change from 0 to 128 [ 303.342404][T16885] syz.4.4513: attempt to access beyond end of device [ 303.342404][T16885] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 303.371193][T16885] syz.4.4513: attempt to access beyond end of device [ 303.371193][T16885] loop4: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 303.413141][T16885] syz.4.4513: attempt to access beyond end of device [ 303.413141][T16885] loop4: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 303.426804][T16885] buffer_io_error: 4 callbacks suppressed [ 303.426820][T16885] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 303.465540][T16885] syz.4.4513: attempt to access beyond end of device [ 303.465540][T16885] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 303.473768][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4514'. [ 303.488049][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4514'. [ 303.499271][T16885] syz.4.4513: attempt to access beyond end of device [ 303.499271][T16885] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 303.512744][T16885] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 303.545750][T16885] syz.4.4513: attempt to access beyond end of device [ 303.545750][T16885] loop4: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 303.588610][T16885] syz.4.4513: attempt to access beyond end of device [ 303.588610][T16885] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 303.602102][T16885] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 303.637517][T16885] syz.4.4513: attempt to access beyond end of device [ 303.637517][T16885] loop4: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 303.661286][T16885] syz.4.4513: attempt to access beyond end of device [ 303.661286][T16885] loop4: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 303.674937][T16885] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 303.712581][T16885] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 303.741032][T16885] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 303.788522][T16885] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 303.807437][T16885] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 303.825205][T16885] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 303.838099][T16898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4518'. [ 303.847810][T16885] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 303.875658][T16895] loop3: detected capacity change from 0 to 512 [ 303.882753][T16895] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 303.894723][T16895] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 303.894723][T16895] [ 303.905527][T16895] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 303.919602][T16895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 303.957977][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.971685][ T29] kauditd_printk_skb: 1164 callbacks suppressed [ 303.971704][ T29] audit: type=1326 audit(1756571858.396:41639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 303.973193][T16906] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4520'. [ 303.980717][ T29] audit: type=1326 audit(1756571858.396:41640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 304.010178][T16906] loop5: detected capacity change from 0 to 1024 [ 304.010725][ T29] audit: type=1326 audit(1756571858.396:41641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 304.036414][T16906] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 304.040549][ T29] audit: type=1326 audit(1756571858.396:41642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 304.095805][ T29] audit: type=1326 audit(1756571858.396:41643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 304.119499][ T29] audit: type=1326 audit(1756571858.396:41644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 304.143175][ T29] audit: type=1326 audit(1756571858.396:41645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 304.166770][ T29] audit: type=1326 audit(1756571858.396:41646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 304.190467][ T29] audit: type=1326 audit(1756571858.396:41647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 304.214230][ T29] audit: type=1326 audit(1756571858.396:41648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16905 comm="syz.5.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8718ebe9 code=0x7ffc0000 [ 304.301617][T16914] loop3: detected capacity change from 0 to 1024 [ 304.306723][T16915] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.321922][T16915] bond2 (unregistering): Released all slaves [ 304.349201][T16914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.384614][T16915] loop4: detected capacity change from 0 to 512 [ 304.406261][T16914] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4523: Allocating blocks 449-513 which overlap fs metadata [ 304.423981][T16915] journal_path: Non-blockdev passed as './bus' [ 304.430296][T16915] EXT4-fs: error: could not find journal device path [ 304.494351][T16912] EXT4-fs (loop3): pa ffff888106e69e70: logic 48, phys. 177, len 21 [ 304.502640][T16912] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 304.533252][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.566396][T16930] loop3: detected capacity change from 0 to 512 [ 304.573683][T16930] EXT4-fs: Ignoring removed oldalloc option [ 304.582817][T16930] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4527: Parent and EA inode have the same ino 15 [ 304.595569][T16930] EXT4-fs (loop3): Remounting filesystem read-only [ 304.604226][T16930] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 304.613367][T16930] EXT4-fs (loop3): 1 orphan inode deleted [ 304.620797][T16930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.646873][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.718928][T16942] loop4: detected capacity change from 0 to 1024 [ 304.732651][T16942] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 304.754332][T16945] loop3: detected capacity change from 0 to 1024 [ 304.763458][T16945] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 304.782371][T16947] loop4: detected capacity change from 0 to 512 [ 304.808198][T16947] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 304.840151][T16950] lo speed is unknown, defaulting to 1000 [ 304.891117][T16947] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 304.891117][T16947] [ 304.902175][T16947] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 304.919121][T16947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 304.936412][T16952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.947891][T16955] bond1 (unregistering): Released all slaves [ 304.966307][T11080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.008928][T16952] loop3: detected capacity change from 0 to 512 [ 305.018015][T16952] journal_path: Non-blockdev passed as './bus' [ 305.024244][T16952] EXT4-fs: error: could not find journal device path [ 305.200897][T16966] loop3: detected capacity change from 0 to 512 [ 305.211202][T16966] EXT4-fs: Ignoring removed oldalloc option [ 305.220913][T16966] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4540: Parent and EA inode have the same ino 15 [ 305.233947][T16966] EXT4-fs (loop3): Remounting filesystem read-only [ 305.242077][T16966] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 305.251448][T16966] EXT4-fs (loop3): 1 orphan inode deleted [ 305.258847][T16966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.284662][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.594026][T16987] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 305.636618][T16991] loop1: detected capacity change from 0 to 1024 [ 305.649777][T16991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.685352][T16998] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 305.745913][T16991] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4551: Allocating blocks 449-513 which overlap fs metadata [ 305.762135][T17000] loop2: detected capacity change from 0 to 512 [ 305.772001][T17000] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 305.790521][T16990] EXT4-fs (loop1): pa ffff888106d65770: logic 48, phys. 177, len 21 [ 305.798606][T16990] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 305.819120][T17000] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 305.819120][T17000] [ 305.830126][T17000] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 305.840439][T17000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 305.855586][T12532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.892161][T11786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.934670][T17009] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 305.941270][T17009] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 305.948929][T17009] vhci_hcd vhci_hcd.0: Device attached [ 305.955062][T17013] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 305.961714][T17013] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 305.969485][T17013] vhci_hcd vhci_hcd.0: Device attached [ 305.972217][T17010] vhci_hcd: connection closed [ 305.977331][ T3507] vhci_hcd: stop threads [ 305.981728][T17014] vhci_hcd: connection closed [ 305.982165][ T3507] vhci_hcd: release socket [ 305.995524][ T3507] vhci_hcd: disconnect device [ 306.011204][ T3507] vhci_hcd: stop threads [ 306.015477][ T3507] vhci_hcd: release socket [ 306.020028][ T3507] vhci_hcd: disconnect device [ 306.365356][T17034] loop5: detected capacity change from 0 to 512 [ 306.372966][T17034] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 306.385526][T17034] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 306.385526][T17034] [ 306.396316][T17034] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 306.407573][T17034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.456054][T16232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.546682][T17046] loop1: detected capacity change from 0 to 128 [ 306.669005][T17062] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 306.711012][T17060] loop3: detected capacity change from 0 to 512 [ 306.738478][T17060] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 306.760786][T17060] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 306.760786][T17060] [ 306.771677][T17060] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 306.787782][T17060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.803790][T17066] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 306.856521][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.888743][T17071] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 306.895449][T17071] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 306.903134][T17071] vhci_hcd vhci_hcd.0: Device attached [ 306.918362][T17072] vhci_hcd: connection closed [ 306.918633][T11016] vhci_hcd: stop threads [ 306.927731][T11016] vhci_hcd: release socket [ 306.932248][T11016] vhci_hcd: disconnect device [ 307.205921][T17095] loop4: detected capacity change from 0 to 512 [ 307.228538][T17095] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 307.242132][T17096] __nla_validate_parse: 22 callbacks suppressed [ 307.242151][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4591'. [ 307.257425][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4591'. [ 307.285231][T17095] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 307.285231][T17095] [ 307.296367][T17095] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 307.323203][T17095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.353374][T11080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.415478][T17105] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4595'. [ 307.432593][T17104] loop3: detected capacity change from 0 to 512 [ 307.465582][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4598'. [ 307.469671][T17104] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.4596: casefold flag without casefold feature [ 307.507767][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4601'. [ 307.550059][T17104] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4596: couldn't read orphan inode 15 (err -117) [ 307.564801][T17121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4597'. [ 307.576991][T17120] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4602'. [ 307.593678][T17104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.594112][T17121] siw: device registration error -23 [ 307.640098][T17123] loop1: detected capacity change from 0 to 512 [ 307.648274][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.649467][T17123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 307.669776][T17123] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 307.669776][T17123] [ 307.680576][T17123] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 307.701228][T17123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.736496][T12532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.801908][T17134] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 307.808530][T17134] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 307.816166][T17134] vhci_hcd vhci_hcd.0: Device attached [ 307.825714][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4604'. [ 307.834794][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4604'. [ 307.858234][T17135] vhci_hcd: connection closed [ 307.858369][ T3605] vhci_hcd: stop threads [ 307.867407][ T3605] vhci_hcd: release socket [ 307.872065][ T3605] vhci_hcd: disconnect device [ 307.884707][T17141] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 307.902963][T17141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4608'. [ 307.966046][T17146] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 307.972653][T17146] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 307.980458][T17146] vhci_hcd vhci_hcd.0: Device attached [ 307.992794][T17147] vhci_hcd: connection closed [ 307.993198][ T3506] vhci_hcd: stop threads [ 308.002258][ T3506] vhci_hcd: release socket [ 308.006697][ T3506] vhci_hcd: disconnect device [ 308.316273][T17154] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17154 comm=syz.2.4612 [ 308.378537][T17157] loop2: detected capacity change from 0 to 4096 [ 308.385949][T17157] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 308.397597][T17157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.412674][T17159] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 308.569875][T17164] loop4: detected capacity change from 0 to 512 [ 308.578622][T17164] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4615: casefold flag without casefold feature [ 308.591486][T17164] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4615: couldn't read orphan inode 15 (err -117) [ 308.605611][T17164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.655620][T11080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.827250][T17178] loop1: detected capacity change from 0 to 1024 [ 308.840858][T17178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.872308][T17178] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4621: Allocating blocks 449-513 which overlap fs metadata [ 308.890720][T17178] EXT4-fs (loop1): pa ffff888106e69ee0: logic 48, phys. 177, len 21 [ 308.898980][T17178] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 308.918032][T17185] FAULT_INJECTION: forcing a failure. [ 308.918032][T17185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.931333][T17185] CPU: 1 UID: 0 PID: 17185 Comm: syz.4.4623 Not tainted syzkaller #0 PREEMPT(voluntary) [ 308.931367][T17185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.931386][T17185] Call Trace: [ 308.931427][T17185] [ 308.931435][T17185] __dump_stack+0x1d/0x30 [ 308.931454][T17185] dump_stack_lvl+0xe8/0x140 [ 308.931471][T17185] dump_stack+0x15/0x1b [ 308.931485][T17185] should_fail_ex+0x265/0x280 [ 308.931504][T17185] should_fail+0xb/0x20 [ 308.931583][T17185] should_fail_usercopy+0x1a/0x20 [ 308.931621][T17185] _copy_from_user+0x1c/0xb0 [ 308.931647][T17185] sg_new_write+0x71a/0x890 [ 308.931697][T17185] ? do_vfs_ioctl+0x866/0xe10 [ 308.931773][T17185] sg_ioctl+0xb81/0x1360 [ 308.931802][T17185] ? __pfx_sg_ioctl+0x10/0x10 [ 308.931835][T17185] __se_sys_ioctl+0xce/0x140 [ 308.931851][T17185] __x64_sys_ioctl+0x43/0x50 [ 308.931886][T17185] x64_sys_call+0x1816/0x2ff0 [ 308.931910][T17185] do_syscall_64+0xd2/0x200 [ 308.931948][T17185] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 308.932043][T17185] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 308.932131][T17185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.932151][T17185] RIP: 0033:0x7efc7ebaebe9 [ 308.932165][T17185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.932181][T17185] RSP: 002b:00007efc7d617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.932212][T17185] RAX: ffffffffffffffda RBX: 00007efc7ede5fa0 RCX: 00007efc7ebaebe9 [ 308.932283][T17185] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000003 [ 308.932294][T17185] RBP: 00007efc7d617090 R08: 0000000000000000 R09: 0000000000000000 [ 308.932305][T17185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.932315][T17185] R13: 00007efc7ede6038 R14: 00007efc7ede5fa0 R15: 00007ffe4f880dc8 [ 308.932381][T17185] [ 308.934423][T12532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.075169][ T29] kauditd_printk_skb: 734 callbacks suppressed [ 309.075189][ T29] audit: type=1326 audit(1756571863.751:42383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17187 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 309.162371][ T29] audit: type=1326 audit(1756571863.751:42384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17187 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 309.186814][T11786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.215662][ T29] audit: type=1326 audit(1756571863.845:42385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17187 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 309.239579][ T29] audit: type=1326 audit(1756571863.845:42386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17187 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 309.263276][ T29] audit: type=1326 audit(1756571863.845:42387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17187 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 309.263357][ T29] audit: type=1326 audit(1756571863.845:42388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17187 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21a0acd550 code=0x7ffc0000 [ 309.263384][ T29] audit: type=1326 audit(1756571863.845:42389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17187 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f21a0ad0417 code=0x7ffc0000 [ 309.263409][ T29] audit: type=1326 audit(1756571863.845:42390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17187 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21a0acebe9 code=0x7ffc0000 [ 309.263496][ T29] audit: type=1326 audit(1756571863.845:42391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17187 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f21a0ad0417 code=0x7ffc0000 [ 309.263596][ T29] audit: type=1326 audit(1756571863.845:42392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17187 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f21a0acd84a code=0x7ffc0000 [ 309.294524][T17195] loop2: detected capacity change from 0 to 512 [ 309.368129][T17199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17199 comm=syz.1.4624 [ 309.396503][T17195] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4627: casefold flag without casefold feature [ 309.440532][T17195] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4627: couldn't read orphan inode 15 (err -117) [ 309.455246][T17195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.488190][T11786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.511433][T17204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.537409][T17205] loop1: detected capacity change from 0 to 4096 [ 309.580959][T17204] bond2 (unregistering): Released all slaves [ 309.588722][T17205] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 309.637444][T17220] loop5: detected capacity change from 0 to 512 [ 309.644299][T17220] journal_path: Non-blockdev passed as './bus' [ 309.650587][T17220] EXT4-fs: error: could not find journal device path [ 309.675782][T17218] loop2: detected capacity change from 0 to 512 [ 309.682729][T17218] EXT4-fs: Ignoring removed oldalloc option [ 309.691267][T17205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.715005][T17218] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.4634: Parent and EA inode have the same ino 15 [ 309.732623][T17218] EXT4-fs (loop2): Remounting filesystem read-only [ 309.739463][T17218] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 309.767328][T17218] EXT4-fs (loop2): 1 orphan inode deleted [ 309.774020][T17218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.804427][T11786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.837524][T17226] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 309.867928][T17228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17228 comm=syz.5.4637 [ 309.920214][T17230] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.938423][T17230] bond4 (unregistering): Released all slaves [ 309.953088][T17232] loop5: detected capacity change from 0 to 4096 [ 309.961514][T17232] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 309.974065][T17232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.991636][T17236] loop2: detected capacity change from 0 to 512 [ 309.999202][T17236] journal_path: Non-blockdev passed as './bus' [ 310.005420][T17236] EXT4-fs: error: could not find journal device path [ 310.072308][T17240] loop4: detected capacity change from 0 to 128 [ 310.081053][T17240] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.094679][T17240] ext4 filesystem being mounted at /403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 310.145626][T11080] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.188795][T17247] loop4: detected capacity change from 0 to 128 [ 310.191648][T17247] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.218397][T12532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.229871][T17247] ext4 filesystem being mounted at /405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 310.278836][T11080] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.333374][T17258] syz.4.4645 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 310.386413][T17262] loop4: detected capacity change from 0 to 1024 [ 310.386555][T17243] ================================================================== [ 310.386597][T17243] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 310.386659][T17243] [ 310.386667][T17243] write to 0xffffffff86877768 of 8 bytes by task 17262 on cpu 1: [ 310.386687][T17243] data_alloc+0x271/0x2b0 [ 310.386724][T17243] prb_reserve+0x808/0xaf0 [ 310.386762][T17243] vprintk_store+0x56d/0x860 [ 310.386796][T17243] vprintk_emit+0x178/0x650 [ 310.386817][T17243] vprintk_default+0x26/0x30 [ 310.386838][T17243] vprintk+0x1d/0x30 [ 310.386867][T17243] _printk+0x79/0xa0 [ 310.386901][T17243] set_capacity_and_notify+0x14c/0x1f0 [ 310.386925][T17243] loop_set_size+0x2e/0x70 [ 310.386942][T17243] loop_configure+0x825/0x9c0 [ 310.386957][T17243] lo_ioctl+0x1e1/0x12b0 [ 310.386993][T17243] blkdev_ioctl+0x34f/0x440 [ 310.387019][T17243] __se_sys_ioctl+0xce/0x140 [ 310.387041][T17243] __x64_sys_ioctl+0x43/0x50 [ 310.387077][T17243] x64_sys_call+0x1816/0x2ff0 [ 310.387098][T17243] do_syscall_64+0xd2/0x200 [ 310.387126][T17243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.387147][T17243] [ 310.387153][T17243] read to 0xffffffff86877768 of 16 bytes by task 17243 on cpu 0: [ 310.387169][T17243] _prb_read_valid+0x1bc/0x920 [ 310.387198][T17243] prb_read_valid+0x3c/0x60 [ 310.387235][T17243] printk_get_next_message+0xc8/0x510 [ 310.387261][T17243] console_flush_all+0x290/0x730 [ 310.387281][T17243] console_unlock+0xa1/0x330 [ 310.387297][T17243] con_flush_chars+0xb2/0x1b0 [ 310.387319][T17243] con_write+0x2e/0x40 [ 310.387339][T17243] n_tty_write+0x7d0/0xb50 [ 310.387364][T17243] file_tty_write+0x370/0x690 [ 310.387399][T17243] tty_write+0x25/0x30 [ 310.387426][T17243] vfs_write+0x52a/0x960 [ 310.387446][T17243] ksys_write+0xda/0x1a0 [ 310.387468][T17243] __x64_sys_write+0x40/0x50 [ 310.387502][T17243] x64_sys_call+0x27fe/0x2ff0 [ 310.387529][T17243] do_syscall_64+0xd2/0x200 [ 310.387561][T17243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.387580][T17243] [ 310.387584][T17243] Reported by Kernel Concurrency Sanitizer on: [ 310.387595][T17243] CPU: 0 UID: 0 PID: 17243 Comm: syz.2.4640 Not tainted syzkaller #0 PREEMPT(voluntary) [ 310.387624][T17243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.387640][T17243] ================================================================== [ 310.394101][T17262] loop4: detected capacity change from 0 to 512 [ 310.419503][T17262] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4647: bg 0: block 248: padding at end of block bitmap is not set [ 310.641067][T17262] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4647: Failed to acquire dquot type 1 [ 310.642372][T17262] EXT4-fs (loop4): 1 truncate cleaned up [ 310.659489][T17262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.672039][T17262] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.673146][T16232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.702371][T17262] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.4647: deleted inode referenced: 12 [ 310.703406][T17262] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.4647: deleted inode referenced: 12 [ 310.727150][T17262] syz.4.4647 (17262) used greatest stack depth: 9472 bytes left [ 310.735825][T11080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.