last executing test programs: 5.240260276s ago: executing program 0 (id=3346): socket(0x10, 0x3, 0x0) r0 = socket(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34091}, [@IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000001e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1.985626695s ago: executing program 3 (id=3400): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 1.86473843s ago: executing program 3 (id=3402): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 1.671611948s ago: executing program 0 (id=3404): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioprio_set$uid(0x3, 0x0, 0x290c2a18f2fbd00c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=@newqdisc={0x460, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x3, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x8, 0x9, 0x0, 0x47, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0xea1, 0x5, 0x0, 0xb97, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x10, 0x4, 0x0, 0x3, 0x0, 0x5a, 0x5, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x4cc, 0xfffffffd, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x8, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0xfffd, 0x19, 0x3ffffffe}, 0x0, 0x7f}}]}}, @TCA_STAB={0x4}]}, 0x460}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = memfd_secret(0x0) fchownat(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e8000000000201030000000000000000050000057c0001800c000280050001000100000006000340000000002c00018014000300fc0000000000000000000000000000001400000000000000010c00028005000100feffffff053d138ef5ebe5e4390003400000000006000340000300001400018008000100ac1414aa08000200ac14141808000540000000070e0006007369702d32303030300000004000018006000340000200000c00028005000100010000001400018008000100ac1414bb080002000a01010206000340000000000c000280050001000600"/232], 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d307830303030303030303030303030ffffffffffff59b0706f72742c0059e8d70f957a9c0732c02b92ea5455bf1a83d49334a7c509aee02a128c6be3c60e5f9967120d186f384207770e426a1a5fdd15477b611c"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x3}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$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") listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x100000) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x48) 1.625779641s ago: executing program 3 (id=3405): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYBLOB="0000000000000000b7080000000000007b8a8a5f4f6c38f8ff00000000bfa200000000000007020008000000b70400000000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f"], 0xcfa4) 1.364401721s ago: executing program 3 (id=3408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2a00, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 1.332595573s ago: executing program 0 (id=3409): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x495, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, 0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 1.317116264s ago: executing program 1 (id=3410): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@none, 0x6, 0x9, 0x2, 0x7, 0x3, "b24951edc53cb9d33ed328e1fdf3e79c6bf97b74c479d8dfd476218e3d8dc7431339f3bf3437d8388d414320eb9d39edbbe2a5c65b477d3d79bdcd69e794fe8d2b01dc7a11be51289b091f172e0306a51c67069db453e9e38efaceef34bd0779c521fe35bbd8fc5a311609ae89ddd648564ae29e44f1669c059f980c7efae8c2"}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x100000000}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000b00)) 1.241947627s ago: executing program 3 (id=3411): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x193600, 0x0) r1 = io_uring_setup(0x5180, &(0x7f0000000040)={0x0, 0xfb32, 0x1, 0x3, 0x23, 0x0, r0}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000000c0)=0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x7ff, r1, 0x11, {0x5, 0xc229}, 0x40}, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0xe078738cc2ad5654, 0x8000, 0x7ff, 0x200, {{0x25, 0x4, 0x1, 0x0, 0x94, 0x68, 0x0, 0xff, 0x2f, 0x0, @private=0xa010100, @private=0xa010101, {[@timestamp_prespec={0x44, 0x3c, 0x69, 0x3, 0x7, [{@broadcast, 0x7}, {@broadcast, 0x865}, {@local, 0x3}, {@multicast2, 0x5}, {@broadcast, 0x7}, {@empty, 0x78bb}, {@remote, 0x4745}]}, @end, @rr={0x7, 0x27, 0x4a, [@loopback, @empty, @broadcast, @private=0xa010101, @remote, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @lsrr={0x83, 0x17, 0x49, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @broadcast, @empty]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=@newsa={0x1e0, 0x10, 0x800, 0x70bd26, 0x25dfdbff, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x80, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x89, 0x0, r3}, {@in=@broadcast, 0x4d5, 0x32}, @in=@rand_addr=0x64010100, {0x5, 0x100000001, 0x6, 0x9, 0x7, 0xffffffffffffffe6, 0x5, 0x5}, {0x7fffffff, 0x8, 0x7ff, 0xc428}, {0x6, 0x401, 0x7}, 0x70bd2b, 0x34ff, 0x2, 0x1, 0x7, 0x8}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x5, 0xa, 0x20, 0xa0, 0x2b, r4}, {@in6=@private2, 0x4d5, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x9, 0xfffffffffffffffd, 0x0, 0x400, 0x5, 0x100000000, 0x80, 0x4}, {0xcb8a, 0x100000001, 0x5, 0x8000000000000001}, {0x401, 0x0, 0x7ff}, 0x70bd29, 0x3502, 0xa, 0x1, 0xa9, 0x8}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4008080}, 0x800) r5 = perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x0, 0xfe, 0x9, 0x7f, 0x0, 0xe, 0x800, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x45e3, 0x100000001}, 0x14000, 0x2, 0x7fffffff, 0xc, 0x2, 0x4, 0x8000, 0x0, 0x3}, 0xffffffffffffffff, 0xa, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa4, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3e119946018a2d33}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x40800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000880)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000900)='net/protocols\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000940)={{0x1, 0x1, 0x18, r8, {0xfffffffd}}, './file0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r8) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x3}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48004}, 0x20000070) r11 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r11, &(0x7f0000000ac0)={0x1d, r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) syz_io_uring_setup(0x5a6b, &(0x7f0000000b40)={0x0, 0xf097, 0x80, 0x1, 0x2fa, 0x0, r8}, &(0x7f0000000bc0), &(0x7f0000000c00)) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r12, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x3fa, 0x10, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$rds(r9, &(0x7f0000000f80)={&(0x7f0000000d40)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000d80)=""/136, 0x88}], 0x1, &(0x7f0000000f00)=[@mask_fadd={0x58, 0x114, 0x8, {{0x41, 0x5}, &(0x7f0000000e80)=0x2, &(0x7f0000000ec0)=0x9, 0x7, 0x6, 0x0, 0x400, 0x7e, 0x3}}], 0x58, 0x4000}, 0x1) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r9) sendmsg$TIPC_NL_MON_GET(r8, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x6c, r13, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe04c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xecc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x45c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc0000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x96}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6de5495a}]}, @TIPC_NLA_BEARER={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f0000001180)=@flushsa={0x24c, 0x1c, 0x2, 0x70bd27, 0x25dfdbfd, {0x33}, [@algo_auth={0x138, 0x1, {{'ghash\x00'}, 0x780, "077401dabd1b7e8246cc6cc21890fe72e49d8151cc15d5fb8d779ccce03bf5f6bd90b96b7393171abf95d091e37cb4ba8bd415ff174d011ed612bbb88111b16d8928cc7ea56816384b0a660591497ebe59fcb1a59397df102ad812df76b0bc626fbac4a564b19e915ab8eddba0e00e3519f97e6ca39aecfa4da2ade1dd9aee287b6937ffddd22cceb641d81d66503351641c16596306826c960c37fcafe15b2baa1fe1e23e1dd8e9e9a72578cab1f5fda037d8d24883739d5b2efa33b11411c65da608d658a7e2a66b30f4013e56ac5724809825b8c8676a6f39d583042db89ce1eb3d84bacbcb7bd764145e05134479"}}, @policy={0xac, 0x7, {{@in=@multicast2, @in6=@private1, 0x4e22, 0x1, 0x4e24, 0x5, 0xa, 0x20, 0x80, 0x3c, r2, r3}, {0x6, 0xc, 0xffffffffffff0001, 0x3f71, 0xffffffffffffff80, 0x3d2, 0x5, 0x101}, {0x4, 0x5, 0x8, 0x7}, 0x7, 0x6e6bbf, 0x1, 0x0, 0x2}}, @address_filter={0x28, 0x1a, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0xa, 0x4c, 0x7}}, @user_kmaddress={0x2c, 0x13, {@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x2}}]}, 0x24c}}, 0x8014) getsockname$netlink(r0, &(0x7f0000001480), &(0x7f00000014c0)=0xc) socket$rds(0x15, 0x5, 0x0) pipe2(&(0x7f0000001500)={0xffffffffffffffff}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_PRI(r14, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x5, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x200028c0) 1.223463518s ago: executing program 0 (id=3412): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.197729149s ago: executing program 1 (id=3413): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, 0x0) 1.15212909s ago: executing program 3 (id=3415): socket(0x10, 0x3, 0x0) r0 = socket(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34091}, [@IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000001e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1.151449691s ago: executing program 0 (id=3416): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x701) 1.118008982s ago: executing program 1 (id=3417): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000ff4000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) 993.749117ms ago: executing program 1 (id=3419): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300212800b000100627269646765000020000280050016000200000008001d00090000000c001e000500000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRESDEC=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffff}, 0x18) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005"], 0xa8}}, 0x40000) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r6, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x17, 0x1003, 0x62}, 0x2c) 938.3035ms ago: executing program 2 (id=3420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7d1, &(0x7f0000001a80)="$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") setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10001}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0xf5, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)="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", &(0x7f0000000240)="30f49a744b530da2cd2aef0779dba7654922b425999648db863129cab9a24be8b4bb334840cccbd524e37d21ca9a50a4e66752bb", 0x1fd, r0}, 0x38) 886.384472ms ago: executing program 1 (id=3421): pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x55e, &(0x7f0000001ac0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x7fff, 0x0) getdents(r1, 0x0, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c776608e36f3d", @ANYRESHEX, @ANYBLOB=',\x00']) 791.929286ms ago: executing program 2 (id=3422): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x495, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, 0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 608.544294ms ago: executing program 2 (id=3424): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xa96) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1300000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000079450000000000000000000000008ea20000598000d480239a2828fa7ca6244dbd5c45d4b60000008000000000a0b54bfe0f15e42f36d47b77dee5220a40f286d989781b7c8183a8e01dfd36eec8093c048624cd08d27078224929441fa9c9018cb6480b5202631f716b8097a6a6c34d206fc2cb1a10000000000000000000002b59ba0b977b3ff883543427f79e486c7079dd02262407ad350e4f3668d88c43c6ac8031fb025be5325948e26d28021514266f"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") syz_io_uring_setup(0xc5e, &(0x7f0000000740)={0x0, 0x310, 0x2, 0x0, 0x10a}, &(0x7f0000000080), &(0x7f00000007c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x20000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) 608.186964ms ago: executing program 4 (id=3425): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 550.105126ms ago: executing program 4 (id=3426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x9}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000580)={r3, 0x9, 0xde}, 0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095", @ANYRES16=r1, @ANYRES8=r2, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x18) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000024c0)=[{{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x1, 0xe0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) (async, rerun: 64) sendmsg$kcm(r2, 0x0, 0x0) (async, rerun: 64) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtaction={0x98, 0x30, 0x401, 0x4002000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async, rerun: 64) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000200)={0x561d, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}}}, 0x88) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2fc}}, 0x0) 544.104946ms ago: executing program 4 (id=3427): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$uid(0x3, 0x0, 0x290c2a18f2fbd00c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = memfd_secret(0x0) fchownat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001100040026bd7000fbdbdf2507000000", @ANYRES8=r0, @ANYBLOB='\b\x00>'], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e8000000000201030000000000000000050000057c0001800c000280050001000100000006000340000000002c00018014000300fc0000000000000000000000000000001400000000000000010c00028005000100feffffff053d138ef5ebe5e4390003400000000006000340000300001400018008000100ac1414aa08000200ac14141808000540000000070e0006007369702d32303030300000004000018006000340000200000c00028005000100010000001400018008000100ac1414bb080002000a01010206000340000000000c000280050001000600"/232], 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d307830303030303030303030303030ffffffffffff59b0706f72742c0059e8d70f957a9c0732c02b92ea5455bf1a83d49334a7c509aee02a128c6be3c60e5f9967120d186f384207770e426a1a5fdd15477b611c"]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x3}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0xa) r4 = socket$vsock_stream(0x28, 0x1, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$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") listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x100000) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x48) 375.495614ms ago: executing program 4 (id=3428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8) 300.614877ms ago: executing program 0 (id=3429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x55e, &(0x7f0000001ac0)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x7fff, 0x0) getdents(r2, 0x0, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 158.133483ms ago: executing program 4 (id=3430): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x0, 0x2000000, 0x100003a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x48004, 0x1}) r5 = socket$inet6(0xa, 0xa, 0x7) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200, 0x3d5}, &(0x7f0000000200), &(0x7f0000000700)) (async) r6 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200, 0x3d5}, &(0x7f0000000200)=0x0, &(0x7f0000000700)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_TEE={0x21, 0x50, 0x0, @fd_index=0xc000000, 0x0, 0x0, 0x5, 0x8, 0x1, {0x0, r9}}) syz_io_uring_submit(r0, r4, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3f, 0x0, r5, 0x0, &(0x7f0000000040)="859f2d1ac7291060f714592eeffa5e2b6bc09ce95a55642f8e414fd687921a8b40f4a2ee7a22632ee5445cdaaed22abb8289de02322edc454f149c", 0x3b, 0x2100, 0x1, {0x0, r9}}) (async) syz_io_uring_submit(r0, r4, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3f, 0x0, r5, 0x0, &(0x7f0000000040)="859f2d1ac7291060f714592eeffa5e2b6bc09ce95a55642f8e414fd687921a8b40f4a2ee7a22632ee5445cdaaed22abb8289de02322edc454f149c", 0x3b, 0x2100, 0x1, {0x0, r9}}) syz_io_uring_setup(0x14dd, &(0x7f00000001c0)={0x0, 0x7287, 0x2, 0x1, 0x389, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000340)) (async) syz_io_uring_setup(0x14dd, &(0x7f00000001c0)={0x0, 0x7287, 0x2, 0x1, 0x389, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @loopback}, &(0x7f0000000280)=0xc) r12 = semget$private(0x0, 0x20000000102, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x39, 0x10, &(0x7f0000000a80)=ANY=[@ANYRES64=r13, @ANYRES32=r12, @ANYRESHEX=0x0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r14, &(0x7f0000000000)={0x1f, 0x7, @any, 0x5}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfdffffff}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYRES8], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYRES8], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r15 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r15}, 0x18) setitimer(0x2, 0x0, 0x0) (async) setitimer(0x2, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000380)={{}, {0x0, 0x2710}}) (async) futimesat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000380)={{}, {0x0, 0x2710}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="dbf101001800000000000000100000001000000007000000040000000000000e0200000000000097a81d5e5e8b9059"], 0x0, 0x2f}, 0x28) semop(r12, 0x0, 0x0) (async) semop(r12, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) 132.590904ms ago: executing program 2 (id=3431): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300212800b000100627269646765000020000280050016000200000008001d00090000000c001e000500000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRESDEC=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffff}, 0x18) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005"], 0xa8}}, 0x40000) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r6, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x17, 0x1003, 0x62}, 0x2c) 114.567975ms ago: executing program 4 (id=3432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7d1, &(0x7f0000001a80)="$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") setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10001}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0xf5, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)="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", &(0x7f0000000240)="30f49a744b530da2cd2aef0779dba7654922b425999648db863129cab9a24be8b4bb334840cccbd524e37d21ca9a50a4e66752bb", 0x1fd, r0}, 0x38) 40.402278ms ago: executing program 2 (id=3433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) chown(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 10.930779ms ago: executing program 2 (id=3434): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioprio_set$uid(0x3, 0x0, 0x290c2a18f2fbd00c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=@newqdisc={0x460, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x3, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x8, 0x9, 0x0, 0x47, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0xea1, 0x5, 0x0, 0xb97, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x10, 0x4, 0x0, 0x3, 0x0, 0x5a, 0x5, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x4cc, 0xfffffffd, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x8, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0xfffd, 0x19, 0x3ffffffe}, 0x0, 0x7f}}]}}, @TCA_STAB={0x4}]}, 0x460}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = memfd_secret(0x0) fchownat(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e8000000000201030000000000000000050000057c0001800c000280050001000100000006000340000000002c00018014000300fc0000000000000000000000000000001400000000000000010c00028005000100feffffff053d138ef5ebe5e4390003400000000006000340000300001400018008000100ac1414aa08000200ac14141808000540000000070e0006007369702d32303030300000004000018006000340000200000c00028005000100010000001400018008000100ac1414bb080002000a01010206000340000000000c000280050001000600"/232], 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d307830303030303030303030303030ffffffffffff59b0706f72742c0059e8d70f957a9c0732c02b92ea5455bf1a83d49334a7c509aee02a128c6be3c60e5f9967120d186f384207770e426a1a5fdd15477b611c"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x3}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$eJzs3UtrXFUcAPD/nUzS9KFJoRR1IYEurNROmsRHBRd1KVos6L4OyTSUTDolMylNLNgu7MaNFEHEgujOhXuXxS/gpyhooUgJunATuZM76bSZaV4zmdT5/eC259xzZ/7nzL3nzLmPIQH0rbH0n1zEyxHxdRIx0lSWj6xwbG27lUc3ptMlidXVT/5KIsnWNbZPsv8PZ5mXIuK3LyNO5TbGrS4tzxXL5dJClh+vzV8dry4tn748X5wtzZauTE5NnX1ravLdd97uWFtfv/DPdx/f++DsVydWvv3lwdE7SZyLI1lZczt24WZzZizGss9kMM49teFEB4LtJ0mvK8CODGT9fDDSMWAkBtZzLayO7HX1gC76Iu3WQJ9K9H/oU415QOPcvkPnwc+Nh++vnQBtbH9+7dpIDNfPhg6tJNn1kDXp+e5oB+KnMX798+6ddInOXYcA2NTNWxFxJp/fOP4l2fi3c2e2sM3TMbL4bS5AAZ10L53/vNFq/pNbn/9Ei/nP4RZ9dyfa9P8muQcdCNNWOv97r+X8d/2m1ehAlnuhPucbTC5dLpfSse3FiDgZgwfS/DPu53yWW7m/2q6wef6XLmn8xlwwq8eD/IEnXzNTrBV31egmD29FvNJy/pus7/+kxf5PP48LW4xxvHT31XZlm7d/XVduMa3+GPFay/2fPBH4Gfcnx+vHw3jjqNjo79vHf28Xfxvt74qHP2eJ9u0fTZrv11a3H+OH4X9L7cp2evwPJZ/W00PZuuvFWm1hImIo+Wjj+snHr23kG9unx//JE88e/1od/wfTjr3F9t8+drt50+Httb+70vbPtD/+Bzbu/+0n7n/4+fft4m9t/79ZT53M1mxl/NtqBXf7+QEAAAAAAMB+kouII5HkCuvpXK5QWHu+41gcypUr1dqpS5XFKzNR/63saAzmGne6R5qeh5jInodt5Cefyk9FxNGI+GbgYD1fmK6UZ3rdeAAAAAAAAAAAAAAAAAAAANgnDkcMt/r9f+qPgV7XDui6fK8rAPRM+/6flXTiLz0B+9KOv/+HO1sPYO+Z/0P/0v+hf+n/0L/0f+hf+j/0r+b+P9TDegB7bzvf/z+d72JFAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/hwvnz6bK68ujGdJqfuba0OFe5dnqmVJ0rzC9OF6YrC1cLs5XKbLlUmK7Mb/Z+5Url6sRkLF4fr5WqtfHq0vLF+crildrFy/PF2dLF0uCetAoAAAAAAAAAAAAAAAAAAACeL9Wl5bliuVxakJDYUSK/P6oh0ZwY2v379HpkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH/gsAAP//3Kw5xQ==") listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x100000) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x48) 0s ago: executing program 1 (id=3435): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x495, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) kernel console output (not intermixed with test programs): 8192, ipg=32, mo=a846e02c, mo2=0002] [ 221.281535][T12780] loop4: detected capacity change from 0 to 512 [ 221.289069][T12772] System zones: 1-12 [ 221.293195][T12772] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.2997: Directory hole found for htree index block 0 [ 221.307117][T12780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 221.315262][T12780] System zones: 1-12 [ 221.334815][T12780] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.2999: Directory hole found for htree index block 0 [ 221.356234][T12772] EXT4-fs (loop2): Remounting filesystem read-only [ 221.369710][T12772] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 221.378684][T12780] EXT4-fs (loop4): Remounting filesystem read-only [ 221.381347][ T29] audit: type=1326 audit(1764597747.096:9456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12784 comm="syz.0.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8194ef749 code=0x7ffc0000 [ 221.404877][T12772] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 221.418577][T12780] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 221.441104][T12772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.454081][T12780] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 221.487868][T12780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.489438][T12789] 9pnet_virtio: no channels available for device 127.0.0.1 [ 221.568093][T12772] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 221.576412][T12780] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 221.576417][T12789] loop3: detected capacity change from 0 to 1024 [ 221.592441][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.640514][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.658842][ T3825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.670488][T12789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.743751][ T3825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.800843][T12790] lo speed is unknown, defaulting to 1000 [ 221.816139][T12810] loop4: detected capacity change from 0 to 512 [ 221.838588][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.861362][ T3825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.873128][T12810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 221.882880][T12810] System zones: 1-12 [ 221.887079][T12810] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.3008: Directory hole found for htree index block 0 [ 221.903248][T12810] EXT4-fs (loop4): Remounting filesystem read-only [ 221.920952][ T3825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.087360][T12810] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 222.097013][T12810] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 222.106197][T12810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.136195][T12810] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 222.163739][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.315051][T12815] lo speed is unknown, defaulting to 1000 [ 222.339808][T12790] chnl_net:caif_netlink_parms(): no params data found [ 222.446952][T12830] loop4: detected capacity change from 0 to 1024 [ 222.458271][T12830] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 222.469231][T12830] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 222.502682][T12830] JBD2: no valid journal superblock found [ 222.508543][T12830] EXT4-fs (loop4): Could not load journal inode [ 222.637145][ T3825] bridge_slave_1: left allmulticast mode [ 222.643040][ T3825] bridge_slave_1: left promiscuous mode [ 222.648925][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.664507][ T3825] bridge_slave_0: left allmulticast mode [ 222.670343][ T3825] bridge_slave_0: left promiscuous mode [ 222.676049][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.782435][T12843] IPv6: Can't replace route, no match found [ 222.829542][ T3825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.849774][ T3825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.868457][ T3825] bond0 (unregistering): Released all slaves [ 222.889878][T12790] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.896969][T12790] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.907352][T12790] bridge_slave_0: entered allmulticast mode [ 222.913983][T12790] bridge_slave_0: entered promiscuous mode [ 222.942308][T12790] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.949443][T12790] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.957013][T12790] bridge_slave_1: entered allmulticast mode [ 222.964241][T12790] bridge_slave_1: entered promiscuous mode [ 223.003669][ T3825] hsr_slave_0: left promiscuous mode [ 223.009728][ T3825] hsr_slave_1: left promiscuous mode [ 223.015573][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.023073][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.040827][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.048355][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.075857][ T3825] veth1_vlan: left promiscuous mode [ 223.081213][ T3825] veth0_vlan: left promiscuous mode [ 223.148478][ T3825] pimreg (unregistering): left allmulticast mode [ 223.199887][T12854] loop4: detected capacity change from 0 to 1024 [ 223.209924][ T3825] team0 (unregistering): Port device team_slave_0 removed [ 223.257791][T12854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.311615][T12790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.322413][T12790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.340621][T12859] loop3: detected capacity change from 0 to 512 [ 223.358908][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.388456][T12859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.406056][T12861] loop4: detected capacity change from 0 to 1024 [ 223.418528][T12790] team0: Port device team_slave_0 added [ 223.425067][T12790] team0: Port device team_slave_1 added [ 223.448012][T12859] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.459289][T12861] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 223.470224][T12861] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 223.505317][T12859] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.3022: path /597/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 223.538448][T12790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.545547][T12790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.571523][T12790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.583719][T12861] JBD2: no valid journal superblock found [ 223.589665][T12861] EXT4-fs (loop4): Could not load journal inode [ 223.604097][T12859] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.3022: path /597/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 223.635446][T12790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.642634][T12790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.669236][T12790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.692127][T12864] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.3022: lblock 23 mapped to illegal pblock 18 (length 1) [ 223.723727][T12859] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 14: comm syz.3.3022: path /597/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 223.750995][T12859] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 15: comm syz.3.3022: path /597/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 223.774211][T12859] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.3022: path /597/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 223.796020][T12859] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 17: comm syz.3.3022: path /597/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 223.798709][T12790] hsr_slave_0: entered promiscuous mode [ 223.830947][T12790] hsr_slave_1: entered promiscuous mode [ 223.839364][T12790] debugfs: 'hsr0' already exists in 'hsr' [ 223.845202][T12790] Cannot create hsr debugfs directory [ 223.860830][ T3825] IPVS: stop unused estimator thread 0... [ 223.867074][T12859] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.3022: lblock 23 mapped to illegal pblock 18 (length 1) [ 223.900425][T12859] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 19: comm syz.3.3022: path /597/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 223.925859][T12859] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 20: comm syz.3.3022: path /597/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 223.956224][T12884] loop1: detected capacity change from 0 to 1024 [ 223.974661][T12884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.053226][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.093342][ T3849] kernel write not supported for file /input/event2 (pid: 3849 comm: kworker/1:5) [ 224.137867][T12892] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 224.210938][T12898] loop4: detected capacity change from 0 to 1024 [ 224.258150][T12898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.279966][T12790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 224.290053][T12790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 224.301487][T12790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 224.312313][T12790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.345334][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.360199][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.403902][T12911] loop4: detected capacity change from 0 to 1024 [ 224.416549][T12790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.424493][T12911] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 224.435574][T12911] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 224.435763][T12790] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.478255][ T3825] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.485367][ T3825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.500490][ T3825] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.507628][ T3825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.510072][T12911] JBD2: no valid journal superblock found [ 224.520755][T12911] EXT4-fs (loop4): Could not load journal inode [ 224.560447][T12917] loop3: detected capacity change from 0 to 512 [ 224.636022][T12924] lo speed is unknown, defaulting to 1000 [ 224.730306][T12917] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 224.751921][T12917] System zones: 1-12 [ 224.756104][T12917] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3041: Directory hole found for htree index block 0 [ 224.757778][T12790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.785863][T12917] EXT4-fs (loop3): Remounting filesystem read-only [ 224.807463][T12917] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 224.815887][T12917] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 224.836602][T12917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.048552][T12917] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 225.079645][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.170174][T12790] veth0_vlan: entered promiscuous mode [ 225.192993][T12790] veth1_vlan: entered promiscuous mode [ 225.232724][T12790] veth0_macvtap: entered promiscuous mode [ 225.242712][T12946] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 225.249059][T12790] veth1_macvtap: entered promiscuous mode [ 225.294260][T12790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.301556][T12948] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3046'. [ 225.321402][T12790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.344379][ T3825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.353918][ T3825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.397225][ T3825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.427306][ T3825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.498293][T12955] loop0: detected capacity change from 0 to 1024 [ 225.502516][T12959] loop4: detected capacity change from 0 to 1024 [ 225.545267][T12955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.567676][T12959] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 225.578802][T12959] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 225.610820][T12964] loop2: detected capacity change from 0 to 512 [ 225.645808][T12959] JBD2: no valid journal superblock found [ 225.645966][T12964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 225.651701][T12959] EXT4-fs (loop4): Could not load journal inode [ 225.660843][T12790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.678836][ T3813] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.687675][T12964] System zones: 1-12 [ 225.692662][T12964] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3052: Directory hole found for htree index block 0 [ 225.733666][T12972] loop0: detected capacity change from 0 to 1024 [ 225.742946][ T3813] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.757766][T12964] EXT4-fs (loop2): Remounting filesystem read-only [ 225.766046][T12964] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 225.780313][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3050'. [ 225.790906][T12972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.798049][T12964] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 225.812125][ T3813] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.828016][T12790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.844646][T12964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.883295][ T3813] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.923842][T12964] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 225.930436][T12965] lo speed is unknown, defaulting to 1000 [ 225.963389][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.023679][T12965] chnl_net:caif_netlink_parms(): no params data found [ 226.031861][T12995] loop4: detected capacity change from 0 to 512 [ 226.069249][T12995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.097384][T12995] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.117510][ T3813] bridge_slave_1: left allmulticast mode [ 226.123191][ T3813] bridge_slave_1: left promiscuous mode [ 226.129052][ T3813] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.137229][ T3813] bridge_slave_0: left allmulticast mode [ 226.142942][ T3813] bridge_slave_0: left promiscuous mode [ 226.148749][ T3813] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.175912][T12995] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.3060: path /87/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 226.242445][T13010] loop0: detected capacity change from 0 to 1024 [ 226.249668][T13011] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.3060: lblock 23 mapped to illegal pblock 18 (length 1) [ 226.265609][T12995] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.3060: path /87/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 226.287139][ T3813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.289036][T13011] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.3060: lblock 23 mapped to illegal pblock 18 (length 1) [ 226.311626][T13010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.324444][ T3813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.335271][ T3813] bond0 (unregistering): Released all slaves [ 226.342398][T12790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.352963][T12995] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.3060: path /87/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 226.397146][ T3813] tipc: Left network mode [ 226.397551][T12995] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 15: comm syz.4.3060: path /87/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 226.421997][T13018] loop0: detected capacity change from 0 to 512 [ 226.422472][T12995] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.3060: path /87/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 226.448477][T13018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 226.463236][T12995] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 17: comm syz.4.3060: path /87/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 226.463724][T13018] System zones: 1-12 [ 226.488796][T13018] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.3063: Directory hole found for htree index block 0 [ 226.503571][T12965] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.510902][T12965] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.518291][T13018] EXT4-fs (loop0): Remounting filesystem read-only [ 226.524816][T13018] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 226.533230][T12965] bridge_slave_0: entered allmulticast mode [ 226.539771][T12965] bridge_slave_0: entered promiscuous mode [ 226.546117][T13018] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 226.555428][T13018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.564663][T12995] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.3060: lblock 23 mapped to illegal pblock 18 (length 1) [ 226.584908][T13018] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 226.593147][T12995] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 19: comm syz.4.3060: path /87/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 226.615507][ T3813] hsr_slave_0: left promiscuous mode [ 226.627761][ T3813] hsr_slave_1: left promiscuous mode [ 226.636914][T12790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.646803][ T3813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.654402][ T3813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.683548][ T3813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.691029][ T3813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.710176][ T3813] veth1_macvtap: left promiscuous mode [ 226.715765][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 226.715781][ T29] audit: type=1326 audit(1764597752.436:9506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 226.718682][T13026] loop0: detected capacity change from 0 to 128 [ 226.721992][ T29] audit: type=1326 audit(1764597752.436:9507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 226.760712][T13026] vfat: Unknown parameter '' [ 226.775397][ T29] audit: type=1326 audit(1764597752.436:9508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 226.803611][ T29] audit: type=1326 audit(1764597752.436:9509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 226.827153][ T29] audit: type=1326 audit(1764597752.436:9510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 226.850687][ T29] audit: type=1326 audit(1764597752.436:9511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 226.874221][ T29] audit: type=1326 audit(1764597752.436:9512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 226.897899][ T29] audit: type=1326 audit(1764597752.436:9513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 226.921682][ T29] audit: type=1326 audit(1764597752.436:9514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbfc78bf783 code=0x7ffc0000 [ 226.946133][ T3813] veth0_macvtap: left promiscuous mode [ 226.946862][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.951720][ T3813] veth1_vlan: left promiscuous mode [ 226.965997][ T3813] veth0_vlan: left promiscuous mode [ 226.971854][ T29] audit: type=1326 audit(1764597752.446:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.0.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbfc78be1ff code=0x7ffc0000 [ 227.024044][T13028] loop4: detected capacity change from 0 to 1024 [ 227.045736][T13028] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 227.057109][T13028] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 227.092977][ T3813] team0 (unregistering): Port device team_slave_0 removed [ 227.111198][T13028] JBD2: no valid journal superblock found [ 227.116991][T13028] EXT4-fs (loop4): Could not load journal inode [ 227.134363][T12965] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.141559][T12965] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.167693][T12965] bridge_slave_1: entered allmulticast mode [ 227.175486][T12965] bridge_slave_1: entered promiscuous mode [ 227.212429][T13028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3067'. [ 227.235628][T12965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.257050][T12965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.282013][T12965] team0: Port device team_slave_0 added [ 227.289129][T12965] team0: Port device team_slave_1 added [ 227.294378][T13042] loop2: detected capacity change from 0 to 1024 [ 227.312264][T12965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.319325][T12965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.345247][T12965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.368276][T12965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.375255][T12965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.378316][T13042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.401223][T12965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.444317][T13050] netlink: 'syz.0.3073': attribute type 10 has an invalid length. [ 227.454001][T13050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3073'. [ 227.479273][T12965] hsr_slave_0: entered promiscuous mode [ 227.485583][T12965] hsr_slave_1: entered promiscuous mode [ 227.553877][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.577233][ T3813] IPVS: stop unused estimator thread 0... [ 227.641607][T13061] Invalid ELF header magic: != ELF [ 227.649253][T13059] siw: device registration error -23 [ 227.678375][ T36] kernel write not supported for file /input/event2 (pid: 36 comm: kworker/1:1) [ 227.745813][T13071] loop2: detected capacity change from 0 to 128 [ 227.759893][T13071] vfat: Unknown parameter '' [ 227.881035][ T36] kernel write not supported for file /input/event2 (pid: 36 comm: kworker/1:1) [ 227.896300][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3090'. [ 227.928114][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3092'. [ 227.969798][T12965] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.992981][T12965] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.999842][T13099] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 228.013468][T12965] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.040645][T12965] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.122583][T12965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.153584][T13119] loop4: detected capacity change from 0 to 1024 [ 228.168027][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3105'. [ 228.185367][T13119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.206471][T12965] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.218042][T13129] loop2: detected capacity change from 0 to 512 [ 228.248657][ T3825] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.255828][ T3825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.280071][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.298432][ T3826] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.305914][ T3826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.316450][T13129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.334482][T13129] ext4 filesystem being mounted at /603/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.354132][T13135] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 228.381587][T12965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.402143][T13129] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.3107: path /603/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 228.437861][T13139] loop1: detected capacity change from 0 to 512 [ 228.451561][T13139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 228.465024][T13129] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.3107: path /603/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 228.471455][T13139] System zones: 1-12 [ 228.492685][T13139] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.3111: Directory hole found for htree index block 0 [ 228.516343][T13139] EXT4-fs (loop1): Remounting filesystem read-only [ 228.523071][T13139] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 228.531431][T13139] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 228.540140][T13139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.561070][T13139] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 228.572239][T13149] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.3107: lblock 23 mapped to illegal pblock 18 (length 1) [ 228.599919][T12965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.626611][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.650182][T13129] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 14: comm syz.2.3107: path /603/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 228.678116][T13157] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.3107: lblock 23 mapped to illegal pblock 18 (length 1) [ 228.694648][T13129] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 15: comm syz.2.3107: path /603/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 228.716081][T13129] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.3107: path /603/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 228.724309][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'. [ 228.754305][T13129] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 17: comm syz.2.3107: path /603/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 228.835101][T13129] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.3107: lblock 23 mapped to illegal pblock 18 (length 1) [ 228.865116][T13129] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 19: comm syz.2.3107: path /603/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 228.889847][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3116'. [ 228.940898][T13167] lo speed is unknown, defaulting to 1000 [ 228.994391][T13168] team0: Port device team_slave_1 removed [ 229.218397][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.326882][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3123'. [ 229.501049][T13188] loop1: detected capacity change from 0 to 1024 [ 229.508311][T13188] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 229.519439][T13188] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 229.547096][T13190] siw: device registration error -23 [ 229.553273][T13188] JBD2: no valid journal superblock found [ 229.559123][T13188] EXT4-fs (loop1): Could not load journal inode [ 229.746755][T13197] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 229.775802][T13204] loop4: detected capacity change from 0 to 512 [ 229.776761][T12965] veth0_vlan: entered promiscuous mode [ 229.831044][T12965] veth1_vlan: entered promiscuous mode [ 229.854125][T12965] veth0_macvtap: entered promiscuous mode [ 229.865981][T13212] 9pnet_virtio: no channels available for device 127.0.0.1 [ 229.874470][T12965] veth1_macvtap: entered promiscuous mode [ 229.912068][T12965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.923297][T13212] loop2: detected capacity change from 0 to 1024 [ 229.939967][T12965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.968523][ T2418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.992428][ T2418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.027352][ T2418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.054833][ T2418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.089344][T13222] loop3: detected capacity change from 0 to 512 [ 230.160826][T13204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.174611][T13212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.188346][T13222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.201319][T13204] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.233832][T13222] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.252280][T13204] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.3131: path /112/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 230.283764][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.300123][T13222] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.3051: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 230.358123][T13204] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.3131: path /112/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 230.398907][T13222] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.3051: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 230.450523][T13237] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.3131: lblock 23 mapped to illegal pblock 18 (length 1) [ 230.476502][T13240] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.3051: lblock 23 mapped to illegal pblock 18 (length 1) [ 230.506021][T13238] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.3131: lblock 23 mapped to illegal pblock 18 (length 1) [ 230.536187][T13222] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 14: comm syz.3.3051: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 230.572555][T13204] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.3131: path /112/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 230.608257][T13222] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 15: comm syz.3.3051: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 230.676414][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.697790][T13222] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.3051: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 230.763079][T13222] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 17: comm syz.3.3051: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 230.772285][T13239] lo speed is unknown, defaulting to 1000 [ 230.791869][T13250] loop4: detected capacity change from 0 to 512 [ 230.826724][T13222] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.3051: lblock 23 mapped to illegal pblock 18 (length 1) [ 230.844152][T13250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.864499][T13256] __nla_validate_parse: 1 callbacks suppressed [ 230.864516][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3143'. [ 230.880165][T13250] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.881481][T13239] chnl_net:caif_netlink_parms(): no params data found [ 230.894509][T13222] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 19: comm syz.3.3051: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 230.926717][T13250] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.3142: path /113/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 230.970766][T13250] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.3142: path /113/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 230.992831][T13250] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.3142: path /113/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 231.004508][T12965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.014121][T13250] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 15: comm syz.4.3142: path /113/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 231.045513][T13239] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.052916][T13239] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.060426][T13250] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.3142: path /113/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 231.060690][T13263] loop1: detected capacity change from 0 to 512 [ 231.082391][T13239] bridge_slave_0: entered allmulticast mode [ 231.094801][T13239] bridge_slave_0: entered promiscuous mode [ 231.104239][T13250] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 17: comm syz.4.3142: path /113/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 231.106197][T13265] siw: device registration error -23 [ 231.128717][T13263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.142841][T13250] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.3142: lblock 23 mapped to illegal pblock 18 (length 1) [ 231.160056][T13263] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.160710][ T2418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.181360][T13250] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 19: comm syz.4.3142: path /113/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 231.201944][T13239] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.202194][T13250] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 20: comm syz.4.3142: path /113/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 231.209395][T13239] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.229798][T13250] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 21: comm syz.4.3142: path /113/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 231.236721][T13263] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.3145: path /581/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 231.258913][T13239] bridge_slave_1: entered allmulticast mode [ 231.286902][T13239] bridge_slave_1: entered promiscuous mode [ 231.287194][T13263] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.3145: path /581/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 231.351208][T13239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.362170][T13272] IPv6: Can't replace route, no match found [ 231.371980][T13239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.419624][ T2418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.438180][T13239] team0: Port device team_slave_0 added [ 231.452111][T13263] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.3145: path /581/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 231.474058][T13239] team0: Port device team_slave_1 added [ 231.487898][T13270] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.3145: lblock 23 mapped to illegal pblock 18 (length 1) [ 231.520700][T13239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.527913][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.554635][T13239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.568972][T13263] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.3145: path /581/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 231.616948][T13263] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.3145: path /581/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 231.647623][T13239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.654625][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.657544][T13278] loop3: detected capacity change from 0 to 1024 [ 231.680561][T13239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.697790][T13263] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz.1.3145: path /581/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 231.718478][T13263] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.3145: lblock 23 mapped to illegal pblock 18 (length 1) [ 231.729141][T13278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.733210][T13263] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz.1.3145: path /581/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 231.768401][T13263] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 20: comm syz.1.3145: path /581/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 231.768586][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.798689][ T2418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.819678][T12965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.831633][T13239] hsr_slave_0: entered promiscuous mode [ 231.840361][T13282] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3151'. [ 231.857875][T13239] hsr_slave_1: entered promiscuous mode [ 231.867573][T13239] debugfs: 'hsr0' already exists in 'hsr' [ 231.873326][T13239] Cannot create hsr debugfs directory [ 231.891179][ T2418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.892795][T13282] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 231.996534][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.020168][ T2418] bridge_slave_1: left allmulticast mode [ 232.025878][ T2418] bridge_slave_1: left promiscuous mode [ 232.031845][ T2418] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.055581][T13288] loop4: detected capacity change from 0 to 512 [ 232.062720][ T2418] bridge_slave_0: left allmulticast mode [ 232.068600][ T2418] bridge_slave_0: left promiscuous mode [ 232.074278][ T2418] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.086924][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 232.086941][ T29] audit: type=1326 audit(1764597757.806:9735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.1.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed1f2f749 code=0x7ffc0000 [ 232.087557][T13288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.098760][ T29] audit: type=1326 audit(1764597757.816:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.1.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed1f2f749 code=0x7ffc0000 [ 232.154273][ T29] audit: type=1326 audit(1764597757.876:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.1.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f0ed1f2f749 code=0x7ffc0000 [ 232.178102][ T29] audit: type=1326 audit(1764597757.876:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.1.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed1f2f749 code=0x7ffc0000 [ 232.204956][T13284] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3152'. [ 232.205992][T13288] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.214344][ T29] audit: type=1326 audit(1764597757.926:9739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.1.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ed1f2f749 code=0x7ffc0000 [ 232.248695][ T29] audit: type=1326 audit(1764597757.926:9740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.1.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed1f2f749 code=0x7ffc0000 [ 232.272250][ T29] audit: type=1326 audit(1764597757.926:9741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.1.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0ed1f2f749 code=0x7ffc0000 [ 232.272568][T13294] loop1: detected capacity change from 0 to 128 [ 232.295972][ T29] audit: type=1326 audit(1764597757.926:9742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.1.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0ed1f2f783 code=0x7ffc0000 [ 232.325537][ T29] audit: type=1326 audit(1764597757.926:9743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.1.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0ed1f2e1ff code=0x7ffc0000 [ 232.333643][T13294] vfat: Unknown parameter '' [ 232.349279][ T29] audit: type=1326 audit(1764597757.956:9744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.1.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0ed1f2f7d7 code=0x7ffc0000 [ 232.379870][T13288] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.3154: path /115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 232.401644][T13297] loop0: detected capacity change from 0 to 128 [ 232.408436][T13297] vfat: Unknown parameter '' [ 232.414201][T13288] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.3154: path /115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 232.436867][T13288] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.3154: path /115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 232.482642][T13300] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 232.495511][T13298] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.3154: lblock 23 mapped to illegal pblock 18 (length 1) [ 232.511186][T13288] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 15: comm syz.4.3154: path /115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 232.545035][T13288] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.3154: path /115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 232.569581][T13288] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 17: comm syz.4.3154: path /115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 232.593820][T13288] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.3154: lblock 23 mapped to illegal pblock 18 (length 1) [ 232.614812][T13307] loop0: detected capacity change from 0 to 128 [ 232.619689][T13288] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 19: comm syz.4.3154: path /115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 232.624836][T13307] vfat: Unknown parameter '' [ 232.642588][T13288] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 20: comm syz.4.3154: path /115/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 232.667430][ T2418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.678962][ T2418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.691545][T13310] loop1: detected capacity change from 0 to 512 [ 232.698322][ T2418] bond0 (unregistering): Released all slaves [ 232.719920][T13308] loop3: detected capacity change from 0 to 1024 [ 232.733274][T13310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.759587][T13310] ext4 filesystem being mounted at /585/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.760010][T13308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.771307][T13310] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.3162: path /585/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 232.807305][ T2418] hsr_slave_0: left promiscuous mode [ 232.816052][ T2418] hsr_slave_1: left promiscuous mode [ 232.822102][T13318] siw: device registration error -23 [ 232.827914][ T2418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.835291][ T2418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.844166][T13310] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.3162: path /585/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 232.880362][ T2418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.888044][ T2418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.896452][T13320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3165'. [ 232.906960][T13321] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.3162: lblock 23 mapped to illegal pblock 18 (length 1) [ 232.922938][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3165'. [ 232.933125][T12965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.945021][ T2418] veth1_macvtap: left promiscuous mode [ 232.953424][ T2418] veth0_macvtap: left promiscuous mode [ 232.953575][T13310] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.3162: path /585/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 232.964381][ T2418] veth1_vlan: left promiscuous mode [ 232.994268][T13321] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.3162: lblock 23 mapped to illegal pblock 18 (length 1) [ 232.998044][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.008669][ T2418] veth0_vlan: left promiscuous mode [ 233.022167][T13310] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.3162: path /585/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 233.065788][T13328] netlink: 'syz.3.3166': attribute type 10 has an invalid length. [ 233.076330][T13310] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.3162: path /585/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 233.077056][T13328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3166'. [ 233.097879][T13310] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz.1.3162: path /585/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 233.098237][T13310] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.3162: lblock 23 mapped to illegal pblock 18 (length 1) [ 233.098719][T13310] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz.1.3162: path /585/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 233.169352][ T2418] pimreg (unregistering): left allmulticast mode [ 233.214547][ T2418] team0 (unregistering): Port device team_slave_0 removed [ 233.258320][ T3422] lo speed is unknown, defaulting to 1000 [ 233.264185][ T3422] infiniband syz2: ib_query_port failed (-19) [ 233.408638][T13331] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3168'. [ 233.582556][ T2418] IPVS: stop unused estimator thread 0... [ 233.598814][T13353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3176'. [ 233.608671][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'. [ 233.610702][T13239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.629430][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3174'. [ 233.656002][T13239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.690022][T13239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.699355][T13239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.709694][T13349] loop3: detected capacity change from 0 to 1024 [ 233.840463][T13239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.870288][T13239] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.888871][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.895974][ T3823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.941793][ T3823] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.948930][ T3823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.984669][T13379] loop1: detected capacity change from 0 to 512 [ 234.019985][T13379] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.053624][T13379] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.3184: path /590/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 234.116808][T13379] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.3184: path /590/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 234.173163][T13239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.186926][T13391] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.3184: lblock 23 mapped to illegal pblock 18 (length 1) [ 234.239207][T13379] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.3184: path /590/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 234.314816][T13396] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.3184: lblock 23 mapped to illegal pblock 18 (length 1) [ 234.357725][T13379] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.3184: path /590/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 234.396390][T13239] veth0_vlan: entered promiscuous mode [ 234.425424][T13239] veth1_vlan: entered promiscuous mode [ 234.431621][T13379] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.3184: path /590/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 234.470916][T13239] veth0_macvtap: entered promiscuous mode [ 234.490936][T13239] veth1_macvtap: entered promiscuous mode [ 234.506433][T13379] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz.1.3184: path /590/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 234.532974][T13239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.553939][T13239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.567820][T13379] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.3184: lblock 23 mapped to illegal pblock 18 (length 1) [ 234.605186][ T3813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.642135][ T3813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.666945][T13379] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz.1.3184: path /590/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 234.705984][ T3813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.724590][T13410] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 234.740187][T13408] loop3: detected capacity change from 0 to 512 [ 234.746524][ T3813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.778413][T13408] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 234.797058][T13412] loop4: detected capacity change from 0 to 1024 [ 234.811462][T13408] System zones: 1-12 [ 234.815566][T13408] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3187: Directory hole found for htree index block 0 [ 234.895105][T13408] EXT4-fs (loop3): Remounting filesystem read-only [ 234.915147][T13408] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 234.924679][T13408] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 234.934879][T13408] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 236.243893][T13456] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 237.258202][T13463] loop3: detected capacity change from 0 to 512 [ 237.268299][T13461] loop1: detected capacity change from 0 to 1024 [ 237.357296][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 237.357315][ T29] audit: type=1326 audit(1764597763.076:9948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 237.387163][ T29] audit: type=1326 audit(1764597763.076:9949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 237.411164][ T29] audit: type=1326 audit(1764597763.076:9950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 237.434924][ T29] audit: type=1326 audit(1764597763.076:9951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 237.458707][ T29] audit: type=1326 audit(1764597763.076:9952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 237.482185][ T29] audit: type=1326 audit(1764597763.076:9953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 237.505894][ T29] audit: type=1326 audit(1764597763.076:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 237.529473][ T29] audit: type=1326 audit(1764597763.076:9955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 237.552980][ T29] audit: type=1326 audit(1764597763.076:9956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 237.576477][ T29] audit: type=1326 audit(1764597763.076:9957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 237.630867][T13463] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.666754][T13463] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.3202: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 237.695368][T13476] __nla_validate_parse: 5 callbacks suppressed [ 237.695387][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3206'. [ 237.713036][T13463] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.3202: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 237.737089][T13463] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 14: comm syz.3.3202: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 237.758330][T13477] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.3202: lblock 23 mapped to illegal pblock 18 (length 1) [ 237.772857][T13463] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 15: comm syz.3.3202: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 237.800986][T13463] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.3202: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 237.919277][T13463] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 17: comm syz.3.3202: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 237.940263][T13463] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.3202: lblock 23 mapped to illegal pblock 18 (length 1) [ 237.956064][T13463] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 19: comm syz.3.3202: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 237.967042][T13481] loop0: detected capacity change from 0 to 2048 [ 238.631136][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3207'. [ 239.098715][T13496] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 239.638807][T13503] lo speed is unknown, defaulting to 1000 [ 239.715812][T13503] lo speed is unknown, defaulting to 1000 [ 239.775015][T13503] lo speed is unknown, defaulting to 1000 [ 240.309231][T13503] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 240.329607][T13503] lo speed is unknown, defaulting to 1000 [ 240.335736][T13503] lo speed is unknown, defaulting to 1000 [ 240.346084][T13503] lo speed is unknown, defaulting to 1000 [ 240.357777][T13503] lo speed is unknown, defaulting to 1000 [ 240.763239][T13503] lo speed is unknown, defaulting to 1000 [ 241.491147][T13516] loop2: detected capacity change from 0 to 128 [ 241.498371][T13516] vfat: Unknown parameter '' [ 241.518433][T13517] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3219'. [ 241.554108][T13517] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.605844][T13526] loop1: detected capacity change from 0 to 1024 [ 241.665784][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3222'. [ 241.675108][T13526] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 241.686421][T13526] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 241.860480][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3224'. [ 241.873882][T13533] team0: Port device team_slave_1 removed [ 241.918794][T13526] JBD2: no valid journal superblock found [ 241.924570][T13526] EXT4-fs (loop1): Could not load journal inode [ 242.106740][T13544] loop0: detected capacity change from 0 to 512 [ 242.119492][T13544] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.132421][T13544] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 12: comm syz.0.3228: path /49/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 242.153761][T13544] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.3228: path /49/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 242.175855][T13544] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 14: comm syz.0.3228: path /49/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 242.217734][T13549] lo speed is unknown, defaulting to 1000 [ 242.332513][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3225'. [ 242.350764][T13544] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 15: comm syz.0.3228: path /49/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 242.435696][T13544] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.3228: path /49/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 242.566348][T13551] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.3228: lblock 23 mapped to illegal pblock 18 (length 1) [ 242.873809][T13544] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 17: comm syz.0.3228: path /49/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 242.964552][T13559] loop2: detected capacity change from 0 to 1024 [ 242.988787][T13549] team0: Port device team_slave_1 removed [ 243.092507][T13555] lo speed is unknown, defaulting to 1000 [ 243.142895][T13571] netlink: 'syz.0.3232': attribute type 10 has an invalid length. [ 243.153428][T13571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3232'. [ 243.199222][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 243.199238][ T29] audit: type=1326 audit(1764597768.916:10020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.0.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 243.263818][T13555] chnl_net:caif_netlink_parms(): no params data found [ 243.300102][T13576] loop2: detected capacity change from 0 to 1024 [ 243.313022][ T29] audit: type=1326 audit(1764597768.966:10021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.0.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 243.336845][ T29] audit: type=1326 audit(1764597768.966:10022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.0.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 243.360695][ T29] audit: type=1326 audit(1764597768.966:10023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.0.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 243.384440][ T29] audit: type=1326 audit(1764597768.976:10024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.0.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 243.408207][ T29] audit: type=1326 audit(1764597768.976:10025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.0.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 243.432224][ T29] audit: type=1326 audit(1764597768.996:10026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.0.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 243.456132][ T29] audit: type=1326 audit(1764597768.996:10027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.0.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 243.479813][ T29] audit: type=1404 audit(1764597768.996:10028): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 243.494882][ T29] audit: type=1404 audit(1764597769.006:10029): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 243.520318][ T3824] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.531278][T13576] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 243.542353][T13576] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 243.566070][T13576] JBD2: no valid journal superblock found [ 243.572016][T13576] EXT4-fs (loop2): Could not load journal inode [ 243.609781][ T3824] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.637072][T13555] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.644282][T13555] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.651631][T13555] bridge_slave_0: entered allmulticast mode [ 243.658770][T13555] bridge_slave_0: entered promiscuous mode [ 243.666648][ T3824] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.678242][T13555] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.685307][T13555] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.692951][T13555] bridge_slave_1: entered allmulticast mode [ 243.714146][T13555] bridge_slave_1: entered promiscuous mode [ 243.724799][T13587] loop2: detected capacity change from 0 to 512 [ 243.739513][T13587] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.752132][T13587] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.3236: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 243.773438][T13587] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.3236: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 243.795238][T13587] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 14: comm syz.2.3236: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 243.795822][ T3824] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.816576][T13587] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 15: comm syz.2.3236: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 243.847991][T13587] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.3236: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 243.885081][T13555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.900992][T13594] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.3236: lblock 23 mapped to illegal pblock 18 (length 1) [ 243.902813][T13555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.925769][T13600] IPv6: Can't replace route, no match found [ 243.932242][T13598] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3240'. [ 243.941566][T13587] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 17: comm syz.2.3236: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 243.964604][T13587] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.3236: lblock 23 mapped to illegal pblock 18 (length 1) [ 243.980634][T13555] team0: Port device team_slave_0 added [ 243.986370][T13587] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 19: comm syz.2.3236: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 244.019466][T13555] team0: Port device team_slave_1 added [ 244.020049][T13587] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 20: comm syz.2.3236: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 244.061806][T13555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.068868][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.094959][T13555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.115552][ T3395] IPVS: starting estimator thread 0... [ 244.121607][T13598] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 244.128104][T13608] loop0: detected capacity change from 0 to 512 [ 244.152362][ T3824] bridge_slave_1: left allmulticast mode [ 244.158144][ T3824] bridge_slave_1: left promiscuous mode [ 244.163834][ T3824] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.174570][T13613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3244'. [ 244.185935][ T3824] bridge_slave_0: left allmulticast mode [ 244.191851][ T3824] bridge_slave_0: left promiscuous mode [ 244.197684][ T3824] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.206271][T13608] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.216945][T13606] IPVS: using max 2784 ests per chain, 139200 per kthread [ 244.310444][ T3824] bond1 (unregistering): (slave geneve2): Releasing active interface [ 244.333697][T13619] netlink: 'syz.4.3246': attribute type 10 has an invalid length. [ 244.342377][T13619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3246'. [ 244.353207][T13608] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 12: comm syz.0.3243: path /52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 244.374567][T13608] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.3243: path /52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 244.396264][T13608] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 14: comm syz.0.3243: path /52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 244.417167][T13608] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 15: comm syz.0.3243: path /52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 244.437953][ T3824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.439352][T13608] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.3243: path /52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 244.468723][T13621] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.3243: lblock 23 mapped to illegal pblock 18 (length 1) [ 244.483770][ T3824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.492819][T13608] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 17: comm syz.0.3243: path /52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 244.493715][ T3824] bond0 (unregistering): Released all slaves [ 244.525885][ T3824] bond1 (unregistering): Released all slaves [ 244.534048][T13608] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.3243: lblock 23 mapped to illegal pblock 18 (length 1) [ 244.534436][T13555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.555233][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.581250][T13555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.590345][T13608] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 19: comm syz.0.3243: path /52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 244.613423][T13608] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 20: comm syz.0.3243: path /52/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 244.659453][T13555] hsr_slave_0: entered promiscuous mode [ 244.670418][T13555] hsr_slave_1: entered promiscuous mode [ 244.681848][T13555] debugfs: 'hsr0' already exists in 'hsr' [ 244.687724][T13555] Cannot create hsr debugfs directory [ 244.696560][ T3824] hsr_slave_0: left promiscuous mode [ 244.703298][ T3824] hsr_slave_1: left promiscuous mode [ 244.716131][ T3824] veth1_macvtap: left promiscuous mode [ 244.725087][ T3824] veth0_macvtap: left promiscuous mode [ 244.734356][ T3824] veth1_vlan: left promiscuous mode [ 244.743035][ T3824] veth0_vlan: left promiscuous mode [ 244.819992][ T3824] pimreg (unregistering): left allmulticast mode [ 244.878008][ T3824] team0 (unregistering): Port device team_slave_0 removed [ 244.915202][T13634] netlink: 'syz.3.3251': attribute type 10 has an invalid length. [ 244.924957][T13634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3251'. [ 244.942308][ T3395] lo speed is unknown, defaulting to 1000 [ 244.948187][ T3395] infiniband syz2: ib_query_port failed (-19) [ 245.062460][T13640] loop2: detected capacity change from 0 to 1024 [ 245.111901][T13650] loop2: detected capacity change from 0 to 512 [ 245.128699][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 245.128930][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3249'. [ 245.145672][T13650] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.161225][T13650] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.3256: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 245.184938][ T3824] IPVS: stop unused estimator thread 0... [ 245.191149][T13650] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.3256: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 245.201323][T13657] netlink: 'syz.0.3258': attribute type 10 has an invalid length. [ 245.220556][T13657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3258'. [ 245.249289][T13650] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 14: comm syz.2.3256: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 245.280128][T13650] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 15: comm syz.2.3256: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 245.325374][T13659] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.3256: lblock 23 mapped to illegal pblock 18 (length 1) [ 245.356431][T13650] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.3256: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 245.384775][T13661] netlink: 'syz.0.3259': attribute type 10 has an invalid length. [ 245.385575][ T1035] kernel write not supported for file /input/event2 (pid: 1035 comm: kworker/1:2) [ 245.393595][T13661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3259'. [ 245.403478][T13650] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 17: comm syz.2.3256: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 245.440994][T13650] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.3256: lblock 23 mapped to illegal pblock 18 (length 1) [ 245.474610][T13555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.481611][T13650] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 19: comm syz.2.3256: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 245.509722][T13555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.519741][T13650] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 20: comm syz.2.3256: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 245.540332][T13555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.561584][T13664] netlink: 'syz.3.3261': attribute type 10 has an invalid length. [ 245.570224][T13664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3261'. [ 245.598008][T13555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.742028][T13676] loop0: detected capacity change from 0 to 1024 [ 245.750224][T13675] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 245.794316][T13678] loop3: detected capacity change from 0 to 1024 [ 245.856585][T13685] loop0: detected capacity change from 0 to 512 [ 245.875648][T13555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.892352][T13555] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.918948][T13685] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.920807][ T3824] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.936402][ T3824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.955109][T13555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.965573][T13555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.975704][T13685] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 12: comm syz.0.3266: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 246.003590][ T3824] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.010873][ T3824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.037892][T13685] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.3266: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 246.061169][T13685] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 14: comm syz.0.3266: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 246.082365][T13685] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 15: comm syz.0.3266: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 246.103959][T13685] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.3266: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 246.168890][T13685] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 17: comm syz.0.3266: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 246.191743][T13685] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.3266: lblock 23 mapped to illegal pblock 18 (length 1) [ 246.482437][T13555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.622984][T13685] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 19: comm syz.0.3266: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 246.728810][T13719] loop2: detected capacity change from 0 to 128 [ 246.750293][T13719] vfat: Unknown parameter '' [ 246.770857][T13685] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 20: comm syz.0.3266: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 247.103037][T13724] lo speed is unknown, defaulting to 1000 [ 247.129235][T13724] lo speed is unknown, defaulting to 1000 [ 247.149363][T13724] lo speed is unknown, defaulting to 1000 [ 247.163761][T13724] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 247.176725][T13555] veth0_vlan: entered promiscuous mode [ 247.226112][T13555] veth1_vlan: entered promiscuous mode [ 247.250279][T13724] lo speed is unknown, defaulting to 1000 [ 247.265499][T13724] lo speed is unknown, defaulting to 1000 [ 247.291966][T13555] veth0_macvtap: entered promiscuous mode [ 247.323017][T13724] lo speed is unknown, defaulting to 1000 [ 247.329377][T13724] lo speed is unknown, defaulting to 1000 [ 247.336143][T13555] veth1_macvtap: entered promiscuous mode [ 247.354050][T13724] lo speed is unknown, defaulting to 1000 [ 247.390189][T13555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.422304][T13555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.438112][ T3813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.447127][ T3813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.511947][ T3813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.557417][ T3813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.956451][T13758] lo speed is unknown, defaulting to 1000 [ 248.110693][T13764] loop1: detected capacity change from 0 to 512 [ 248.189632][T13768] __nla_validate_parse: 8 callbacks suppressed [ 248.189649][T13768] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3287'. [ 248.259702][T13764] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.287847][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3288'. [ 248.351877][T13764] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.3285: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 248.435667][T13710] IPVS: starting estimator thread 0... [ 248.441532][T13768] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 248.697363][T13780] IPVS: using max 2976 ests per chain, 148800 per kthread [ 248.719578][T13783] siw: device registration error -23 [ 248.727738][T13764] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.3285: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 248.781795][ T29] kauditd_printk_skb: 577 callbacks suppressed [ 248.781836][ T29] audit: type=1326 audit(1764597774.506:10607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecdfbf749 code=0x7ffc0000 [ 248.841144][T13764] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.3285: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 248.865472][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 248.887916][T13787] loop0: detected capacity change from 0 to 128 [ 248.910377][T13787] vfat: Unknown parameter '' [ 248.917479][ T29] audit: type=1326 audit(1764597774.546:10608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7faecdfbf749 code=0x7ffc0000 [ 248.941229][ T29] audit: type=1326 audit(1764597774.546:10609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecdfbf749 code=0x7ffc0000 [ 248.964829][ T29] audit: type=1326 audit(1764597774.556:10610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faecdfbf749 code=0x7ffc0000 [ 248.988528][ T29] audit: type=1326 audit(1764597774.566:10611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecdfbf749 code=0x7ffc0000 [ 249.012272][ T29] audit: type=1326 audit(1764597774.596:10612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faecdfbf749 code=0x7ffc0000 [ 249.035878][ T29] audit: type=1326 audit(1764597774.606:10613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecdfbf749 code=0x7ffc0000 [ 249.059558][ T29] audit: type=1326 audit(1764597774.606:10614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13786 comm="syz.0.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 249.083190][ T29] audit: type=1326 audit(1764597774.606:10615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13786 comm="syz.0.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 249.106812][ T29] audit: type=1326 audit(1764597774.606:10616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13786 comm="syz.0.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fbfc78bf749 code=0x7ffc0000 [ 249.270031][T13798] netlink: 'syz.2.3295': attribute type 10 has an invalid length. [ 249.279792][T13798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3295'. [ 249.350171][T13804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.359987][T13804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.456995][T13813] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3302'. [ 249.488427][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3300'. [ 249.502114][T13817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.542174][T13817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.579092][T13813] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 249.586157][ T10] IPVS: starting estimator thread 0... [ 249.610471][T13825] netlink: 'syz.2.3305': attribute type 10 has an invalid length. [ 249.619451][T13825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3305'. [ 249.677305][T13829] loop0: detected capacity change from 0 to 512 [ 249.689020][T13823] IPVS: using max 2928 ests per chain, 146400 per kthread [ 249.700455][T13829] EXT4-fs mount: 35 callbacks suppressed [ 249.700471][T13829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.719542][T13829] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.742609][T13829] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 12: comm syz.0.3307: path /68/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 249.860029][T13829] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.3307: path /68/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 249.882065][T13829] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 14: comm syz.0.3307: path /68/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 249.902742][T13829] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 15: comm syz.0.3307: path /68/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 249.925790][T13829] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.3307: path /68/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 249.948480][T13829] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 17: comm syz.0.3307: path /68/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 249.969400][T13829] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.3307: lblock 23 mapped to illegal pblock 18 (length 1) [ 250.004985][T13829] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 19: comm syz.0.3307: path /68/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 250.045395][T13846] lo speed is unknown, defaulting to 1000 [ 250.208675][T13829] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 20: comm syz.0.3307: path /68/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 250.251700][T13849] lo speed is unknown, defaulting to 1000 [ 250.282801][T13829] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 21: comm syz.0.3307: path /68/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 250.321979][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3315'. [ 250.525883][T13857] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3316'. [ 250.586050][T12790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.829023][T13857] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 251.040511][T13871] netlink: 'syz.0.3321': attribute type 10 has an invalid length. [ 251.050029][T13871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3321'. [ 251.145352][T13875] loop1: detected capacity change from 0 to 1024 [ 251.153340][T13875] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 251.164290][T13875] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 251.177974][T13877] loop0: detected capacity change from 0 to 512 [ 251.185807][T13875] JBD2: no valid journal superblock found [ 251.191600][T13875] EXT4-fs (loop1): Could not load journal inode [ 251.198741][T13877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 251.206739][T13877] System zones: 1-12 [ 251.215538][T13877] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.3324: Directory hole found for htree index block 0 [ 251.233099][T13877] EXT4-fs (loop0): Remounting filesystem read-only [ 251.241201][T13877] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 251.254168][T13877] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 251.263109][T13877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.282842][T13877] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 251.300748][T12790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.419032][T13888] lo speed is unknown, defaulting to 1000 [ 251.528353][T13890] SELinux: policydb magic number 0x48 does not match expected magic number 0xf97cff8c [ 251.538353][T13890] SELinux: failed to load policy [ 251.544283][T13890] SELinux: policydb magic number 0x48 does not match expected magic number 0xf97cff8c [ 251.556755][T13890] SELinux: failed to load policy [ 251.576211][T13893] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 251.583427][ T10] IPVS: starting estimator thread 0... [ 251.637390][T13905] siw: device registration error -23 [ 251.677583][T13897] IPVS: using max 2688 ests per chain, 134400 per kthread [ 251.705109][T13909] netlink: 'syz.2.3335': attribute type 10 has an invalid length. [ 251.750051][T13912] loop2: detected capacity change from 0 to 512 [ 251.759508][T13912] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 251.768038][T13912] System zones: 1-12 [ 251.772301][T13912] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3336: Directory hole found for htree index block 0 [ 251.785449][T13912] EXT4-fs (loop2): Remounting filesystem read-only [ 251.792471][T13912] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 251.803282][T13912] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 251.810203][T13915] loop0: detected capacity change from 0 to 1024 [ 251.811920][T13912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.818674][T13915] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 251.841396][T13915] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 251.851524][T13912] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 251.852116][T13915] JBD2: no valid journal superblock found [ 251.865314][T13915] EXT4-fs (loop0): Could not load journal inode [ 251.884228][T13239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.958841][T13929] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 252.182650][T13949] loop4: detected capacity change from 0 to 512 [ 252.190421][T13949] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 252.198609][T13949] System zones: 1-12 [ 252.202695][T13949] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.3350: Directory hole found for htree index block 0 [ 252.215366][T13949] EXT4-fs (loop4): Remounting filesystem read-only [ 252.222744][T13949] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 252.238674][T13949] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 252.247539][T13949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.261429][T13949] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 252.318341][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.321503][T13961] loop3: detected capacity change from 0 to 1024 [ 252.335815][T13959] loop1: detected capacity change from 0 to 1024 [ 252.343199][T13959] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 252.345239][T13957] lo speed is unknown, defaulting to 1000 [ 252.354181][T13959] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 252.380362][T13961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.395547][T13959] JBD2: no valid journal superblock found [ 252.396962][T13965] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 252.401348][T13959] EXT4-fs (loop1): Could not load journal inode [ 252.437778][T12965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.716426][T13991] loop1: detected capacity change from 0 to 1024 [ 252.790123][T13991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.796620][T14002] loop4: detected capacity change from 0 to 512 [ 252.811572][T14002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 252.820163][T14002] System zones: 1-12 [ 252.824260][T14005] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 252.837460][T14002] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.3366: Directory hole found for htree index block 0 [ 252.860160][T13555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.882897][T14002] EXT4-fs (loop4): Remounting filesystem read-only [ 252.889902][T14002] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 252.898699][T14002] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 252.903211][T14009] loop3: detected capacity change from 0 to 1024 [ 252.907564][T14002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.936799][T14009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.957552][T14010] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 252.965587][T14002] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 252.978270][T14014] loop2: detected capacity change from 0 to 512 [ 253.000874][T14014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.014062][T12965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.047991][T14014] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.067708][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.086645][T14014] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.3370: path /45/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 253.147542][T14014] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.3370: path /45/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 253.241127][T14021] __nla_validate_parse: 8 callbacks suppressed [ 253.241141][T14021] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3372'. [ 253.256425][T14025] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.3370: lblock 23 mapped to illegal pblock 18 (length 1) [ 253.287341][T14021] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3372'. [ 253.304606][T14026] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.3370: lblock 23 mapped to illegal pblock 18 (length 1) [ 253.354885][T14014] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 14: comm syz.2.3370: path /45/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 253.393650][T14030] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3373'. [ 253.411952][T14014] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 15: comm syz.2.3370: path /45/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 253.418196][T14019] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.435836][T14014] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.3370: path /45/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 253.461886][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3375'. [ 253.471780][T14014] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 17: comm syz.2.3370: path /45/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 253.472526][T14019] loop3: detected capacity change from 0 to 1024 [ 253.492575][T14014] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.3370: lblock 23 mapped to illegal pblock 18 (length 1) [ 253.507867][T14019] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 253.534999][T14014] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 19: comm syz.2.3370: path /45/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 253.663740][T14042] loop4: detected capacity change from 0 to 2048 [ 253.675482][T14044] loop3: detected capacity change from 0 to 1024 [ 253.681459][T14042] EXT4-fs: inline encryption not supported [ 253.708579][T14042] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.722772][T14042] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3378: bg 0: block 120: padding at end of block bitmap is not set [ 253.773065][T14042] EXT4-fs (loop4): Remounting filesystem read-only [ 253.773284][T14044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.791994][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 253.792011][ T29] audit: type=1326 audit(1764597779.526:11149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14041 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd3c965f749 code=0x7ffc0000 [ 253.792040][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3378'. [ 253.865187][T13239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.905813][T14042] hsr_slave_0: left promiscuous mode [ 253.918400][T14042] hsr_slave_1: left promiscuous mode [ 253.924630][T14051] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3380'. [ 253.947663][T14053] loop1: detected capacity change from 0 to 1024 [ 253.967870][T14051] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 253.975845][T14053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.003466][T12965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.022892][ T29] audit: type=1326 audit(1764597779.746:11150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14041 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c965f749 code=0x7ffc0000 [ 254.046658][ T29] audit: type=1326 audit(1764597779.746:11151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14041 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c965f749 code=0x7ffc0000 [ 254.079791][T13555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.103425][T14061] loop3: detected capacity change from 0 to 512 [ 254.111690][T10891] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 254.129300][T14063] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.137825][ T29] audit: type=1400 audit(1764597779.866:11152): avc: denied { read } for pid=14057 comm="syz.2.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 254.138564][T14061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.175075][T14061] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.187730][T14063] loop1: detected capacity change from 0 to 164 [ 254.196830][T14063] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 254.209494][ T29] audit: type=1400 audit(1764597779.936:11153): avc: denied { mount } for pid=14062 comm="syz.1.3384" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 254.211208][T14063] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 254.236188][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3386'. [ 254.261184][T14063] Symlink component flag not implemented [ 254.266855][T14063] Symlink component flag not implemented [ 254.267291][ T29] audit: type=1326 audit(1764597779.936:11154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14062 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5941c2f749 code=0x7ffc0000 [ 254.283347][T14061] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.3382: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 254.296387][ T29] audit: type=1326 audit(1764597779.936:11155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14062 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f5941c2f749 code=0x7ffc0000 [ 254.322726][T14063] Symlink component flag not implemented (7) [ 254.346688][T14063] Symlink component flag not implemented (116) [ 254.358341][T14061] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.3382: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 254.399820][T14061] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 14: comm syz.3.3382: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 254.422990][T14061] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 15: comm syz.3.3382: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 254.424130][ T29] audit: type=1326 audit(1764597780.146:11156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14062 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5941c2f749 code=0x7ffc0000 [ 254.466915][ T29] audit: type=1326 audit(1764597780.146:11157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14062 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5941c2f749 code=0x7ffc0000 [ 254.549119][T14085] loop2: detected capacity change from 0 to 1024 [ 254.560832][T14082] netlink: 'syz.4.3389': attribute type 10 has an invalid length. [ 254.569395][T14085] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 254.569425][T14085] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 254.570212][T14085] JBD2: no valid journal superblock found [ 254.581543][T14082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3389'. [ 254.590392][T14085] EXT4-fs (loop2): Could not load journal inode [ 254.613370][ T29] audit: type=1400 audit(1764597780.346:11158): avc: denied { unmount } for pid=13555 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 254.621679][T14061] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.3382: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 254.655954][T14061] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 17: comm syz.3.3382: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 254.676938][T14061] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.3382: lblock 23 mapped to illegal pblock 18 (length 1) [ 254.691467][T14061] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 19: comm syz.3.3382: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 254.741959][T14094] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3393'. [ 254.755935][T14061] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 20: comm syz.3.3382: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 254.758768][T14094] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 254.817153][T14097] loop1: detected capacity change from 0 to 1024 [ 254.824661][T14061] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 21: comm syz.3.3382: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 254.852160][T14097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.971854][T13555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.982089][T12965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.008902][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'. [ 255.086405][T14110] lo speed is unknown, defaulting to 1000 [ 255.428416][T14119] loop3: detected capacity change from 0 to 512 [ 255.486008][T14119] /dev/loop3: Can't open blockdev [ 255.630661][T14124] netlink: 'syz.1.3403': attribute type 10 has an invalid length. [ 255.720308][T14126] loop0: detected capacity change from 0 to 1024 [ 255.770502][T14131] loop2: detected capacity change from 0 to 1024 [ 255.784605][T14131] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 255.795557][T14131] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 255.820058][T14133] loop1: detected capacity change from 0 to 1024 [ 255.837032][T14135] ip6tnl1: entered promiscuous mode [ 255.842452][T14135] ip6tnl1: entered allmulticast mode [ 255.852531][T14126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.865703][T14133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.878971][T14131] JBD2: no valid journal superblock found [ 255.884811][T14131] EXT4-fs (loop2): Could not load journal inode [ 255.915104][T12790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.926123][T13555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.138380][T14156] SELinux: failed to load policy [ 256.165447][T14161] netlink: 'syz.1.3417': attribute type 10 has an invalid length. [ 256.221355][T14163] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 256.293013][T14165] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 256.347917][T14168] loop2: detected capacity change from 0 to 2048 [ 256.376855][T14170] loop1: detected capacity change from 0 to 512 [ 256.401197][T14168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.416686][T14170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.451009][T13239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.475226][T14170] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.526803][T14177] lo speed is unknown, defaulting to 1000 [ 256.564433][T14170] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.3421: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 256.596135][T14170] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.3421: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 256.637786][T14170] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.3421: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 256.669846][T14170] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.3421: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 256.682366][T14190] loop2: detected capacity change from 0 to 1024 [ 256.703570][T14189] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.3421: lblock 23 mapped to illegal pblock 18 (length 1) [ 256.727098][T14199] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.3421: lblock 23 mapped to illegal pblock 18 (length 1) [ 256.741474][T14170] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.3421: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 256.767812][T14190] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 256.779048][T14190] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 256.794498][T14200] loop4: detected capacity change from 0 to 1024 [ 256.803406][T14170] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz.1.3421: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 256.825533][T14190] JBD2: no valid journal superblock found [ 256.831442][T14190] EXT4-fs (loop2): Could not load journal inode [ 256.840559][T14200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.868258][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.878861][T14170] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.3421: lblock 23 mapped to illegal pblock 18 (length 1) [ 256.898132][T14170] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz.1.3421: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 256.952612][T14204] loop0: detected capacity change from 0 to 512 [ 256.990505][T14204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.023988][T14204] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.054214][T14204] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 12: comm syz.0.3429: path /85/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 257.079431][T14214] syz.4.3430 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 257.139904][T14204] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.3429: path /85/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 257.148684][T14225] loop4: detected capacity change from 0 to 2048 [ 257.184850][T14223] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 257.209983][T14204] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 14: comm syz.0.3429: path /85/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 257.237840][T14225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.250795][T14226] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.3429: lblock 23 mapped to illegal pblock 18 (length 1) [ 257.250918][T13555] ================================================================== [ 257.273167][T13555] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 257.279771][T13555] [ 257.282111][T13555] write to 0xffffffff868696f0 of 8 bytes by task 14226 on cpu 0: [ 257.289833][T13555] data_alloc+0x280/0x2e0 [ 257.294170][T13555] prb_reserve+0x807/0xaf0 [ 257.298614][T13555] vprintk_store+0x56d/0x860 [ 257.303243][T13555] vprintk_emit+0x10d/0x580 [ 257.307888][T13555] vprintk_default+0x26/0x30 [ 257.312598][T13555] vprintk+0x1d/0x30 [ 257.316506][T13555] _printk+0x79/0xa0 [ 257.320409][T13555] __ext4_error_inode+0x30f/0x3f0 [ 257.325434][T13555] ext4_map_blocks+0xa14/0xd00 [ 257.330234][T13555] ext4_getblk+0x114/0x510 [ 257.334664][T13555] ext4_bread_batch+0x5c/0x320 [ 257.339442][T13555] __ext4_find_entry+0x840/0xf40 [ 257.344385][T13555] ext4_lookup+0xbb/0x390 [ 257.348724][T13555] path_openat+0xcf3/0x2170 [ 257.353233][T13555] do_filp_open+0x109/0x230 [ 257.357759][T13555] do_sys_openat2+0xa6/0x110 [ 257.362348][T13555] __x64_sys_openat+0xf2/0x120 [ 257.367115][T13555] x64_sys_call+0x2eab/0x3000 [ 257.371793][T13555] do_syscall_64+0xd2/0x200 [ 257.376310][T13555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.382206][T13555] [ 257.384623][T13555] read to 0xffffffff868696f0 of 8 bytes by task 13555 on cpu 1: [ 257.392251][T13555] prb_reserve+0x220/0xaf0 [ 257.396712][T13555] vprintk_store+0x56d/0x860 [ 257.401309][T13555] vprintk_emit+0x10d/0x580 [ 257.405824][T13555] vprintk_default+0x26/0x30 [ 257.410423][T13555] vprintk+0x1d/0x30 [ 257.414416][T13555] _printk+0x79/0xa0 [ 257.418320][T13555] __ext4_msg+0x18f/0x1a0 [ 257.422757][T13555] ext4_put_super+0x90/0x7d0 [ 257.427389][T13555] generic_shutdown_super+0xe6/0x210 [ 257.432676][T13555] kill_block_super+0x2a/0x70 [ 257.437356][T13555] ext4_kill_sb+0x42/0x80 [ 257.441687][T13555] deactivate_locked_super+0x75/0x1c0 [ 257.447065][T13555] deactivate_super+0x97/0xa0 [ 257.451832][T13555] cleanup_mnt+0x269/0x2e0 [ 257.456254][T13555] __cleanup_mnt+0x19/0x20 [ 257.460687][T13555] task_work_run+0x131/0x1a0 [ 257.465283][T13555] exit_to_user_mode_loop+0xed/0x110 [ 257.470591][T13555] do_syscall_64+0x1d6/0x200 [ 257.475278][T13555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.481173][T13555] [ 257.483503][T13555] value changed: 0xfffffffffffc3ff8 -> 0x000000000007c8e8 [ 257.490693][T13555] [ 257.493013][T13555] Reported by Kernel Concurrency Sanitizer on: [ 257.499174][T13555] CPU: 1 UID: 0 PID: 13555 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 257.510781][T13555] Tainted: [W]=WARN [ 257.514609][T13555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.524664][T13555] ================================================================== [ 257.250799][T13555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.535793][T14233] loop2: detected capacity change from 0 to 1024 [ 257.567310][T14204] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 15: comm syz.0.3429: path /85/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 257.588332][T10891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.599244][T14204] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.3429: path /85/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 257.599622][T14233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.633082][T14204] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 17: comm syz.0.3429: path /85/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 257.667324][T14204] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.3429: lblock 23 mapped to illegal pblock 18 (length 1) [ 257.695202][T13239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.709701][T14204] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 19: comm syz.0.3429: path /85/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 257.730533][T14204] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 20: comm syz.0.3429: path /85/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 257.799851][T12790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.