last executing test programs: 3m8.219340767s ago: executing program 32 (id=2975): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) unshare(0x22020400) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x9, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x10000, 0x9, 0x8, 0x20005, 0x80, 0x0, 0xfffffffc, 0x0, 0x120000009}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) fspick(0xffffffffffffff9c, &(0x7f0000003f80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x8cffffff00000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r5, r5]}}], 0x18}, 0x20040001) 2m23.449705342s ago: executing program 5 (id=3758): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f140164c4bd7000fcdbdf2509"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) 2m23.383903148s ago: executing program 5 (id=3760): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x40) sendmsg$kcm(r1, 0x0, 0x8084) 2m23.383655558s ago: executing program 5 (id=3761): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) 2m23.313986536s ago: executing program 5 (id=3764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='virtio_transport_alloc_pkt\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgid(r3) kcmp(r4, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x1}, 0x4, 0x676c, 0xff, 0x0, 0x0, r3, 0x400}) mount$9p_unix(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x2000, &(0x7f0000000400)={'trans=unix,', {[{@cache_readahead}], [{@dont_hash}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_eq}, {@subj_type={'subj_type', 0x3d, '\\'}}, {@dont_hash}]}}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2m23.105014706s ago: executing program 5 (id=3768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x0) 2m22.96377105s ago: executing program 5 (id=3769): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0xda589000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2m22.96352494s ago: executing program 33 (id=3769): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0xda589000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2m6.470605147s ago: executing program 3 (id=4197): sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000894}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 2m6.387492185s ago: executing program 3 (id=4201): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 2m6.350196559s ago: executing program 3 (id=4205): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x1000, 0x10, 0x3, 0x3}, &(0x7f0000000180)=0x18) 2m5.541393059s ago: executing program 3 (id=4244): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) unshare(0x22020600) 2m5.463703776s ago: executing program 3 (id=4246): mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2m5.463393526s ago: executing program 3 (id=4247): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) 2m5.455078827s ago: executing program 34 (id=4247): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) 2m3.381829952s ago: executing program 6 (id=4297): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9}) 2m3.148611414s ago: executing program 6 (id=4302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 2m3.107899798s ago: executing program 6 (id=4306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a0000000000000000000000020010000000000200000000000000000300050000000000020000009d1414000000000000000000030006000000000002"], 0x50}}, 0x0) 2m3.073543932s ago: executing program 6 (id=4308): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 2m2.739261585s ago: executing program 0 (id=4319): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b07283af6ed8d42a819bf58c54c07408000c6cfa4ae3c3"}, 0x64) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2m2.672750981s ago: executing program 0 (id=4320): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000300)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m2.492343599s ago: executing program 6 (id=4327): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000140)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) 2m2.228788755s ago: executing program 6 (id=4334): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2m2.204980288s ago: executing program 35 (id=4334): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2m2.132950235s ago: executing program 0 (id=4336): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 2m2.096414388s ago: executing program 0 (id=4338): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 2m1.686710329s ago: executing program 0 (id=4345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2m1.37242041s ago: executing program 0 (id=4353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x48) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2m1.288488608s ago: executing program 36 (id=4353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x48) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1m56.727755758s ago: executing program 8 (id=4465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe6, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x80, 0x10000, 0xb, 0x2, 0xd93}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m56.656659185s ago: executing program 8 (id=4468): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="38b7c4cc49e8324113e0c15b81d7daf9"]}]}, 0x38}], 0x1}, 0xcc000) 1m56.630165067s ago: executing program 8 (id=4469): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000000000000080000000000000000000000000000fc02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cc011100"], 0x27c}}, 0x0) 1m56.591936341s ago: executing program 8 (id=4471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0003110004"], 0xfdef) 1m56.517920688s ago: executing program 8 (id=4475): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1m56.477624492s ago: executing program 8 (id=4476): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2014c08, &(0x7f0000000540)=ANY=[], 0xfe, 0x6bd, &(0x7f0000000cc0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 1m42.188754062s ago: executing program 37 (id=4476): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2014c08, &(0x7f0000000540)=ANY=[], 0xfe, 0x6bd, &(0x7f0000000cc0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 3.035818221s ago: executing program 1 (id=6627): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3, 0xec, 0xfffd}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0}) 2.454126578s ago: executing program 1 (id=6630): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)=@can_newroute={0x1c, 0x18, 0x100, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x21209ff58316bfda}, [@CGW_LIM_HOPS={0x5, 0xd, 0xc2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socketpair(0x2c, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x60, r4, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffb}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x4, 0x7]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) timer_gettime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2, 0x7, 0x0, 0x5, 0x23, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0x6, 0x8000000000000000, 0x91, 0x3}, @sadb_key={0x1d, 0x8, 0x6f0, 0x0, "090ebfec9e2e3f6284fffc3a538f5212ae23b28b4b70c77d434f23dc0c55c8788e01000107681d064eefc35e3482e4d4a448cf108710e8edd11bd233993d66e49569e4fd124e86c129f52b117a5205e9319e9eda8011760959550a3879874558519fd39d6df151e389053010336dfc8bee0d7ed0dfe8ced0391e7ee5fe1ec943d36e5a85025df74edf877dcaf34e9628740354c4e0f79fc157f23a790d6e9976b8ec121f47f960bcecb90d0f7b5d7c771dc27fa3a44cdf0a9f6d291b63c3307a3b285b0a26206c8cfaba01920fa6d827594defaf6b0d437225609a224857"}]}, 0x118}}, 0x4040014) r6 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendto$packet(r6, &(0x7f0000000280)="28b4644490aa51f5ca82487167e4eeec18e5ea35a8152b7d925ae6dce72e1147b3cee1eb919c2b670dcc1d2bc5d784a8bfc5a780f5faebd8b4664d73e0c0952e704adec3111a938b68ead77d6cf7ed9cb6eb44994df5145a430a1eacd015f1c4d781b299b717603079eaea7bba74e02b", 0x70, 0x800, 0x0, 0x0) 2.220510321s ago: executing program 2 (id=6635): syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d700006cff2001000000000000f300"/54], 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6(0xa, 0x2, 0xff) recvmsg$can_raw(r0, &(0x7f0000000e40)={&(0x7f0000000980)=@isdn, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000000b00)=""/124, 0x7c}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/3, 0x3}, {&(0x7f0000000c40)=""/94, 0x5e}, {&(0x7f0000000cc0)=""/26, 0x1a}], 0x6, &(0x7f0000000d80)=""/140, 0x8c}, 0x40000022) socketpair(0x2a, 0x1, 0x10001, &(0x7f00000000c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f00000008c0)="aa2a2f17585fe05bbb2dac018eab694687b1a7b9a5ade3140afaec49be1db7f077fb9f2537a904a658f1ed0e352432f861a534174b7a5ac148d605c557736241ec5d66a3856679ef221c2b4514f44d4a014c4c3a88c7a266cb9bd89e3fb59439c7da7cc991f53ad34fa0112a8996b29f3127f70a5b9a5c18faf61bdef4a3b43648930b9fe2290ac6e57a997cb0934f4c26914f6c9be6c361e06fbcfa55611bf7e0", 0xa1, 0x4000001, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @remote, 0x8}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') read(r4, &(0x7f0000001180)=""/4096, 0x1000) pread64(r4, &(0x7f0000000080)=""/220, 0xdc, 0x4009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='limits\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x80404e, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 2.220015911s ago: executing program 9 (id=6636): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000b00)=ANY=[], 0x367) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 1.340541238s ago: executing program 9 (id=6645): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) 1.3225597s ago: executing program 9 (id=6647): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x158, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x144, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x158}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'geneve1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) mq_open(&(0x7f0000000e80)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000088a80000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r1, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="d66403c24daaceae37c8a6168c3a9ad34418f23587b10aa74efb925c04829dfbe1f0bbf34a9f982cef007edb513e12d67bf5db285e5b01d4bc44e6df6d58cf6f787e85e2e070a4d7279fe462b74a89aac91236ec30bb587c5f7527c8f8dd3fc57aaa407e6a32090f064a909cc2ac98d83630ca8dfce48478a281cd692a98fdf6371cd0d67edba625", @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8800, &(0x7f00000000c0)={[{@errors_remount}, {@mb_optimize_scan}, {@commit}]}, 0x1, 0x51d, &(0x7f00000001c0)="$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") r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) fcntl$setlease(r3, 0x400, 0x1) sendto$phonet(r5, &(0x7f0000000240)="4141c45626200ef973bac5114b521a49615e0d2dd6dec79e6cc6ed50155797bf50b511dc3f48e38848f6091726cde47a17a29e3b21d5af02a5b67a83c61f06a75301cf5ccf27e2aaf5995ab7c402351e30ed429c1579aa4f44ecf58317fb5fc6b5c293912c95f8b1f28bdc8d0d162a18812dea7b19115bd6e7336088919914afe66a60e49fca3c0d54645398163dfed631c3390892a4a7e005f8c8a29ea67492590b6a988225935f23eae051c5fef933c4497c1c87c84a7ec9d253515601bcc5ab12c30714c1f90a4505a29656a5038d58098ee5d341df05444b6184e84eef7c090918d0839b7fbd4fff95ba81", 0xed, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) 1.280988703s ago: executing program 2 (id=6648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000004900000049000000040000000000000001000085f0b300080d00000000000000ff7f00000f0000000100000f01000000020000004000000003000000be0b000000000000070000000004000000000000080400000000000000505f00ee694e78f35228a48982068d2f5546e444695b4f854b0600f4f8df543c1145b464b808a40c995fcd24d0b177c8bb94a6a83514c9e469f39c91e48d94585571c4c2decf151e4eb74514d876529bb5c4e5267ff11664caca53"], &(0x7f00000001c0)=""/2, 0x68, 0x2, 0x1, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='cachefiles_trunc\x00', r1}, 0xffffffffffffffea) pipe2(&(0x7f0000001cc0), 0x800) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x1, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000180)={0x1}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 1.204842971s ago: executing program 7 (id=6650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0xffe4}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'geneve1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) mq_open(&(0x7f0000000e80)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) fcntl$setlease(r1, 0x400, 0x1) sendto$phonet(0xffffffffffffffff, &(0x7f0000000240)="4141c45626200ef973bac5114b521a49615e0d2dd6dec79e6cc6ed50155797bf50b511dc3f48e38848f6091726cde47a17a29e3b21d5af02a5b67a83c61f06a75301cf5ccf27e2aaf5995ab7c402351e30ed429c1579aa4f44ecf58317fb5fc6b5c293912c95f8b1f28bdc8d0d162a18812dea7b19115bd6e7336088919914afe66a60e49fca3c0d54645398163dfed631c3390892a4a7e005f8c8a29ea67492590b6a988225935f23eae051c5fef933c4497c1c87c84a7ec9d253515601bcc5ab12c30714c1f90a4505a29656a5038d58098ee5d341df05444b6184e84eef7c090918d0839b7fbd4fff95ba81", 0xed, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) 1.187485423s ago: executing program 7 (id=6651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400), 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000004900000049000000040000000000000001000085f0b300080d00000000000000ff7f00000f0000000100000f01000000020000004000000003000000be0b000000000000070000000004000000000000080400000000000000505f00ee694e78f35228a48982068d2f5546e444695b4f854b0600f4f8df543c1145b464b808a40c995fcd24d0b177c8bb94a6a83514c9e469f39c91e48d94585571c4c2decf151e4eb74514d876529bb5c4e5267ff11664caca53"], &(0x7f00000001c0)=""/2, 0x68, 0x2, 0x1, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='cachefiles_trunc\x00', r1}, 0xffffffffffffffea) pipe2(&(0x7f0000001cc0), 0x800) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x1, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) r5 = gettid() fcntl$setownex(r4, 0xf, &(0x7f0000000180)={0x1, r5}) r6 = gettid() sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8002}, 0x4004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_open_dev$evdev(&(0x7f0000000140), 0x100000001, 0x488c00) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 1.185732653s ago: executing program 9 (id=6652): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x10, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000}], 0x0) socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000e1ffffff586c7be1000000af3406000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, 0x0, 0x2000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r6, 0x56a16000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) 1.141284078s ago: executing program 7 (id=6653): r0 = syz_open_dev$usbfs(0x0, 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3, 0xec, 0xfffd}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0}) 1.075384814s ago: executing program 7 (id=6654): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.074404014s ago: executing program 7 (id=6655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[], &(0x7f00000001c0)=""/2, 0x68, 0x2, 0x1, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='cachefiles_trunc\x00', r1}, 0xffffffffffffffea) pipe2(&(0x7f0000001cc0), 0x800) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x1, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) r5 = gettid() fcntl$setownex(r4, 0xf, &(0x7f0000000180)={0x1, r5}) r6 = gettid() sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8002}, 0x4004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_open_dev$evdev(&(0x7f0000000140), 0x100000001, 0x488c00) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r7, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 1.066972725s ago: executing program 9 (id=6656): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000b00)=ANY=[], 0x367) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 547.847546ms ago: executing program 1 (id=6658): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x4000, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'geneve1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) mq_unlink(&(0x7f0000000000)='eth0\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000088a80000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r1, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="d66403c24daaceae37c8a6168c3a9ad34418f23587b10aa74efb925c04829dfbe1f0bbf34a9f982cef007edb513e12d67bf5db285e5b01d4bc44e6df6d58cf6f787e85e2e070a4d7279fe462b74a89aac91236ec30bb587c5f7527c8f8dd3fc57aaa407e6a32090f064a909cc2ac98d83630ca8dfce48478a281cd692a98fdf6371cd0d67edba625", @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) fcntl$setlease(r3, 0x400, 0x1) sendto$phonet(r5, &(0x7f0000000240)="4141c45626200ef973bac5114b521a49615e0d2dd6dec79e6cc6ed50155797bf50b511dc3f48e38848f6091726cde47a17a29e3b21d5af02a5b67a83c61f06a75301cf5ccf27e2aaf5995ab7c402351e30ed429c1579aa4f44ecf58317fb5fc6b5c293912c95f8b1f28bdc8d0d162a18812dea7b19115bd6e7336088919914afe66a60e49fca3c0d54645398163dfed631c3390892a4a7e005f8c8a29ea67492590b6a988225935f23eae051c5fef933c4497c1c87c84a7ec9d253515601bcc5ab12c30714c1f90a4505a29656a5038d58098ee5d341df05444b6184e84eef7c090918d0839b7fbd4fff95ba81", 0xed, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) 487.477862ms ago: executing program 1 (id=6659): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000b00)=ANY=[], 0x367) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 466.523714ms ago: executing program 2 (id=6660): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x4000, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'geneve1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) mq_unlink(&(0x7f0000000000)='eth0\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="d66403c24daaceae37c8a6168c3a9ad34418f23587b10aa74efb925c04829dfbe1f0bbf34a9f982cef007edb513e12d67bf5db285e5b01d4bc44e6df6d58cf6f787e85e2e070a4d7279fe462b74a89aac91236ec30bb587c5f7527c8f8dd3fc57aaa407e6a32090f064a909cc2ac98d83630ca8dfce48478a281cd692a98fdf6371cd0d67edba625", @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) shutdown(0xffffffffffffffff, 0x0) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8800, &(0x7f00000000c0)={[{@errors_remount}, {@mb_optimize_scan}, {@commit}]}, 0x1, 0x51d, &(0x7f00000001c0)="$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") r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) fcntl$setlease(r3, 0x400, 0x1) sendto$phonet(r4, &(0x7f0000000240)="4141c45626200ef973bac5114b521a49615e0d2dd6dec79e6cc6ed50155797bf50b511dc3f48e38848f6091726cde47a17a29e3b21d5af02a5b67a83c61f06a75301cf5ccf27e2aaf5995ab7c402351e30ed429c1579aa4f44ecf58317fb5fc6b5c293912c95f8b1f28bdc8d0d162a18812dea7b19115bd6e7336088919914afe66a60e49fca3c0d54645398163dfed631c3390892a4a7e005f8c8a29ea67492590b6a988225935f23eae051c5fef933c4497c1c87c84a7ec9d253515601bcc5ab12c30714c1f90a4505a29656a5038d58098ee5d341df05444b6184e84eef7c090918d0839b7fbd4fff95ba81", 0xed, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) 460.963965ms ago: executing program 4 (id=6661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0xffe4}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'geneve1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) mq_open(&(0x7f0000000e80)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) fcntl$setlease(r1, 0x400, 0x1) sendto$phonet(0xffffffffffffffff, &(0x7f0000000240)="4141c45626200ef973bac5114b521a49615e0d2dd6dec79e6cc6ed50155797bf50b511dc3f48e38848f6091726cde47a17a29e3b21d5af02a5b67a83c61f06a75301cf5ccf27e2aaf5995ab7c402351e30ed429c1579aa4f44ecf58317fb5fc6b5c293912c95f8b1f28bdc8d0d162a18812dea7b19115bd6e7336088919914afe66a60e49fca3c0d54645398163dfed631c3390892a4a7e005f8c8a29ea67492590b6a988225935f23eae051c5fef933c4497c1c87c84a7ec9d253515601bcc5ab12c30714c1f90a4505a29656a5038d58098ee5d341df05444b6184e84eef7c090918d0839b7fbd4fff95ba81", 0xed, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) 452.910205ms ago: executing program 1 (id=6662): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000b00)=ANY=[], 0x367) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 383.689452ms ago: executing program 1 (id=6663): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 376.202053ms ago: executing program 4 (id=6664): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x40}}, 0x4008054) 349.382466ms ago: executing program 4 (id=6665): r0 = syz_open_dev$usbfs(0x0, 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3, 0xec, 0xfffd}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0}) 318.662279ms ago: executing program 4 (id=6666): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 317.834809ms ago: executing program 2 (id=6667): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)="3b62e8", 0x3}], 0x1}}], 0x1, 0x400a880) close(r0) 220.479959ms ago: executing program 7 (id=6668): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)=@can_newroute={0x1c, 0x18, 0x100, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x21209ff58316bfda}, [@CGW_LIM_HOPS={0x5, 0xd, 0xc2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socketpair(0x2c, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x60, r4, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffb}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x4, 0x7]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) timer_gettime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2, 0x7, 0x0, 0x5, 0x23, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0x6, 0x8000000000000000, 0x91, 0x3}, @sadb_key={0x1d, 0x8, 0x6f0, 0x0, "090ebfec9e2e3f6284fffc3a538f5212ae23b28b4b70c77d434f23dc0c55c8788e01000107681d064eefc35e3482e4d4a448cf108710e8edd11bd233993d66e49569e4fd124e86c129f52b117a5205e9319e9eda8011760959550a3879874558519fd39d6df151e389053010336dfc8bee0d7ed0dfe8ced0391e7ee5fe1ec943d36e5a85025df74edf877dcaf34e9628740354c4e0f79fc157f23a790d6e9976b8ec121f47f960bcecb90d0f7b5d7c771dc27fa3a44cdf0a9f6d291b63c3307a3b285b0a26206c8cfaba01920fa6d827594defaf6b0d437225609a224857"}]}, 0x118}}, 0x4040014) r6 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendto$packet(r6, &(0x7f0000000280)="28b4644490aa51f5ca82487167e4eeec18e5ea35a8152b7d925ae6dce72e1147b3cee1eb919c2b670dcc1d2bc5d784a8bfc5a780f5faebd8b4664d73e0c0952e704adec3111a938b68ead77d6cf7ed9cb6eb44994df5145a430a1eacd015f1c4d781b299b717603079eaea7bba74e02b", 0x70, 0x800, 0x0, 0x0) 151.160925ms ago: executing program 4 (id=6669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x4000, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'geneve1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) mq_open(&(0x7f0000000e80)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000088a80000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r2, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="d66403c24daaceae37c8a6168c3a9ad34418f23587b10aa74efb925c04829dfbe1f0bbf34a9f982cef007edb513e12d67bf5db285e5b01d4bc44e6df6d58cf6f787e85e2e070a4d7279fe462b74a89aac91236ec30bb587c5f7527c8f8dd3fc57aaa407e6a32090f064a909cc2ac98d83630ca8dfce48478a281cd692a98fdf6371cd0d67edba625", @ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8800, &(0x7f00000000c0)={[{@errors_remount}, {@mb_optimize_scan}, {@commit}]}, 0x1, 0x51d, &(0x7f00000001c0)="$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") r7 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) fcntl$setlease(r4, 0x400, 0x1) sendto$phonet(r6, &(0x7f0000000240)="4141c45626200ef973bac5114b521a49615e0d2dd6dec79e6cc6ed50155797bf50b511dc3f48e38848f6091726cde47a17a29e3b21d5af02a5b67a83c61f06a75301cf5ccf27e2aaf5995ab7c402351e30ed429c1579aa4f44ecf58317fb5fc6b5c293912c95f8b1f28bdc8d0d162a18812dea7b19115bd6e7336088919914afe66a60e49fca3c0d54645398163dfed631c3390892a4a7e005f8c8a29ea67492590b6a988225935f23eae051c5fef933c4497c1c87c84a7ec9d253515601bcc5ab12c30714c1f90a4505a29656a5038d58098ee5d341df05444b6184e84eef7c090918d0839b7fbd4fff95ba81", 0xed, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) 114.011029ms ago: executing program 9 (id=6670): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)={0x128, 0x1, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CT={0xd8, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x40}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x100}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x568}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40a}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42b}]}, @CTA_STATUS_MASK={0x8}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd57}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x405}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8c4}]}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_CT={0x4}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x40}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)=@can_newroute={0x1c, 0x18, 0x100, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x21209ff58316bfda}, [@CGW_LIM_HOPS={0x5, 0xd, 0xc2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socketpair(0x2c, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x60, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffb}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x4, 0x7]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) timer_gettime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2, 0x7, 0x0, 0x5, 0x23, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0x6, 0x8000000000000000, 0x91, 0x3}, @sadb_key={0x1d, 0x8, 0x6f0, 0x0, "090ebfec9e2e3f6284fffc3a538f5212ae23b28b4b70c77d434f23dc0c55c8788e01000107681d064eefc35e3482e4d4a448cf108710e8edd11bd233993d66e49569e4fd124e86c129f52b117a5205e9319e9eda8011760959550a3879874558519fd39d6df151e389053010336dfc8bee0d7ed0dfe8ced0391e7ee5fe1ec943d36e5a85025df74edf877dcaf34e9628740354c4e0f79fc157f23a790d6e9976b8ec121f47f960bcecb90d0f7b5d7c771dc27fa3a44cdf0a9f6d291b63c3307a3b285b0a26206c8cfaba01920fa6d827594defaf6b0d437225609a224857"}]}, 0x118}}, 0x4040014) r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendto$packet(r5, &(0x7f0000000280)="28b4644490aa51f5ca82487167e4eeec18e5ea35a8152b7d925ae6dce72e1147b3cee1eb919c2b670dcc1d2bc5d784a8bfc5a780f5faebd8b4664d73e0c0952e704adec3111a938b68ead77d6cf7ed9cb6eb44994df5145a430a1eacd015f1c4d781b299b717603079eaea7bba74e02b", 0x70, 0x800, 0x0, 0x0) 113.535159ms ago: executing program 2 (id=6671): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000b00)=ANY=[], 0x367) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 47.398525ms ago: executing program 2 (id=6672): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x4008054) 0s ago: executing program 4 (id=6673): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000b00)=ANY=[], 0x367) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): o 128 [ 355.639901][T23141] loop7: detected capacity change from 0 to 512 [ 355.651626][T23141] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.687373][T23147] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6098'. [ 355.812607][T23155] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6102'. [ 355.822933][T23155] 0ªX¹¦À: renamed from caif0 [ 355.830414][T23155] 0ªX¹¦À: entered allmulticast mode [ 355.835770][T23155] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 355.886571][T23159] loop1: detected capacity change from 0 to 164 [ 355.906038][T23159] ISOFS: unable to read i-node block [ 355.916156][T23159] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 355.957358][T23166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6107'. [ 355.966388][T23166] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6107'. [ 355.979762][T23166] loop1: detected capacity change from 0 to 512 [ 355.997720][T23166] ext4 filesystem being mounted at /566/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.044140][T23170] loop1: detected capacity change from 0 to 512 [ 356.053148][T23170] ext4 filesystem being mounted at /567/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.091135][ T10] page_pool_release_retry() stalled pool shutdown: id 174, 1 inflight 60 sec [ 357.190147][T23280] loop9: detected capacity change from 0 to 512 [ 357.201767][T23280] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.051885][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 358.051901][ T29] audit: type=1326 audit(1760353733.928:98418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23352 comm="syz.9.6128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8dceec9 code=0x7ffc0000 [ 358.052400][T23353] __nla_validate_parse: 7 callbacks suppressed [ 358.052416][T23353] netlink: 17279 bytes leftover after parsing attributes in process `syz.9.6128'. [ 358.097717][ T29] audit: type=1326 audit(1760353733.928:98419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23352 comm="syz.9.6128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8dceec9 code=0x7ffc0000 [ 358.121471][ T29] audit: type=1326 audit(1760353733.980:98420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23352 comm="syz.9.6128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc2d8dceec9 code=0x7ffc0000 [ 358.145171][ T29] audit: type=1326 audit(1760353733.980:98421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23352 comm="syz.9.6128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8dceec9 code=0x7ffc0000 [ 358.168768][ T29] audit: type=1326 audit(1760353733.980:98422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23352 comm="syz.9.6128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8dceec9 code=0x7ffc0000 [ 358.221486][T23357] netlink: 'syz.4.6129': attribute type 8 has an invalid length. [ 358.287075][T23367] loop7: detected capacity change from 0 to 512 [ 358.306571][T23367] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.356143][T23380] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6137'. [ 358.716256][T23437] loop1: detected capacity change from 0 to 512 [ 358.725102][T23437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.734230][T23437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.742780][T23437] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 358.767562][T23437] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.6144: Allocating blocks 41-42 which overlap fs metadata [ 358.781553][T23437] Quota error (device loop1): write_blk: dquota write failed [ 358.789014][T23437] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 358.798313][T23437] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.6144: Allocating blocks 41-42 which overlap fs metadata [ 358.812584][T23437] Quota error (device loop1): write_blk: dquota write failed [ 358.820623][T23437] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 358.831797][T23437] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.6144: Failed to acquire dquot type 1 [ 358.844156][T23437] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 358.859059][T23437] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6144: corrupted inode contents [ 358.871290][T23437] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #12: comm syz.1.6144: mark_inode_dirty error [ 358.883153][T23437] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6144: corrupted inode contents [ 358.895361][T23437] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.6144: mark_inode_dirty error [ 358.907105][T23437] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6144: corrupted inode contents [ 358.919660][T23437] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 358.929320][T23437] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6144: corrupted inode contents [ 358.941737][T23437] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.6144: mark_inode_dirty error [ 358.954535][T23437] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 358.963861][T23437] EXT4-fs (loop1): 1 truncate cleaned up [ 358.972595][T23437] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 359.108333][T23492] loop9: detected capacity change from 0 to 512 [ 359.115795][T23492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 359.127888][T23492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 359.136343][T23492] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 359.156399][T23496] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6149'. [ 359.174247][T23492] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6147: Allocating blocks 41-42 which overlap fs metadata [ 359.203897][T23492] Quota error (device loop9): write_blk: dquota write failed [ 359.225710][T23506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6151'. [ 359.234704][T23506] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6151'. [ 359.241368][T23492] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6147: Allocating blocks 41-42 which overlap fs metadata [ 359.244167][T23506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6151'. [ 359.266894][T23506] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6151'. [ 359.276567][T23492] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6147: Failed to acquire dquot type 1 [ 359.290911][T23492] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 359.305914][T23492] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6147: corrupted inode contents [ 359.318108][T23492] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #12: comm syz.9.6147: mark_inode_dirty error [ 359.336947][T23492] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6147: corrupted inode contents [ 359.357374][T23492] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.6147: mark_inode_dirty error [ 359.370956][T23492] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6147: corrupted inode contents [ 359.388697][T23492] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 359.405017][T23492] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6147: corrupted inode contents [ 359.418134][T23492] EXT4-fs error (device loop9): ext4_truncate:4637: inode #12: comm syz.9.6147: mark_inode_dirty error [ 359.432930][T23525] loop4: detected capacity change from 0 to 164 [ 359.438335][T23492] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 359.448403][T23525] ISOFS: unable to read i-node block [ 359.453998][T23525] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 359.472194][T23492] EXT4-fs (loop9): 1 truncate cleaned up [ 359.502528][T23492] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 359.625205][T23558] loop9: detected capacity change from 0 to 512 [ 359.638772][T23558] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 359.662799][T23558] EXT4-fs (loop9): 1 truncate cleaned up [ 359.886136][T23569] loop2: detected capacity change from 0 to 256 [ 359.889398][T23571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6162'. [ 360.554998][T23586] loop4: detected capacity change from 0 to 164 [ 360.568599][T23586] ISOFS: unable to read i-node block [ 360.626700][T23586] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 360.713723][T23592] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6170'. [ 360.722768][T23592] netlink: 196 bytes leftover after parsing attributes in process `syz.7.6170'. [ 360.780581][T23595] loop7: detected capacity change from 0 to 512 [ 360.822915][T23595] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.911533][T23604] loop4: detected capacity change from 0 to 512 [ 360.931205][T23604] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 360.962605][T23604] EXT4-fs (loop4): 1 truncate cleaned up [ 360.995345][T23611] loop2: detected capacity change from 0 to 512 [ 361.039383][T23611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 361.070590][T23611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 361.079094][T23611] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 361.113353][T23611] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6177: Allocating blocks 41-42 which overlap fs metadata [ 361.129165][T23618] loop7: detected capacity change from 0 to 164 [ 361.147981][T23618] ISOFS: unable to read i-node block [ 361.151999][T23611] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6177: Allocating blocks 41-42 which overlap fs metadata [ 361.155158][T23624] loop9: detected capacity change from 0 to 512 [ 361.173352][T23618] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 361.187891][T23611] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.6177: Failed to acquire dquot type 1 [ 361.202396][T23624] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.223562][T23611] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 361.238871][T23611] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6177: corrupted inode contents [ 361.254622][T23611] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.6177: mark_inode_dirty error [ 361.275036][T23611] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6177: corrupted inode contents [ 361.330712][T23611] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6177: mark_inode_dirty error [ 361.371752][T23611] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6177: corrupted inode contents [ 361.384360][T23611] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 361.393116][T23611] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6177: corrupted inode contents [ 361.406487][T23611] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.6177: mark_inode_dirty error [ 361.418264][T23611] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 361.435053][T23611] EXT4-fs (loop2): 1 truncate cleaned up [ 361.444576][T23611] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 361.474635][T18674] EXT4-fs unmount: 80 callbacks suppressed [ 361.474649][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.523144][T23641] loop2: detected capacity change from 0 to 1024 [ 361.532666][T23641] EXT4-fs: Ignoring removed oldalloc option [ 361.538651][T23641] EXT4-fs: Ignoring removed bh option [ 361.558108][T23641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.572214][T22679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.636244][T23650] loop4: detected capacity change from 0 to 128 [ 361.651975][T23650] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.902999][T23667] loop7: detected capacity change from 0 to 128 [ 361.994647][T23671] loop4: detected capacity change from 0 to 128 [ 362.107915][T23677] loop7: detected capacity change from 0 to 512 [ 362.127412][T23677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.143914][T23677] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.210351][T23686] loop9: detected capacity change from 0 to 128 [ 362.210375][T16682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.226859][T23686] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 362.279396][T23688] loop7: detected capacity change from 0 to 512 [ 362.301103][T23688] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6208: couldn't read orphan inode 26 (err -116) [ 362.317732][T23688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.330352][T23688] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.363305][T16682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.378189][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.417393][T23695] netlink: 'syz.9.6210': attribute type 10 has an invalid length. [ 362.496120][T23712] loop4: detected capacity change from 0 to 512 [ 362.507564][T23712] EXT4-fs (loop4): failed to initialize system zone (-117) [ 362.515355][T23712] EXT4-fs (loop4): mount failed [ 362.618626][T23722] loop4: detected capacity change from 0 to 512 [ 362.633911][T23722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.646747][T23722] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.672284][T22679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.695143][T23726] loop4: detected capacity change from 0 to 128 [ 362.704561][T23726] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 362.759955][T23730] netlink: 'syz.4.6222': attribute type 10 has an invalid length. [ 362.789829][T23732] loop4: detected capacity change from 0 to 512 [ 362.814118][T23732] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6223: couldn't read orphan inode 26 (err -116) [ 362.826838][T23732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.839387][T23732] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.860307][T22679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.950388][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 362.950473][ T29] audit: type=1326 audit(1760353739.075:98752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23736 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 362.974801][T23740] 9pnet_fd: Insufficient options for proto=fd [ 362.980590][ T29] audit: type=1326 audit(1760353739.075:98753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23736 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 363.010080][ T29] audit: type=1326 audit(1760353739.107:98754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23736 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 363.033709][ T29] audit: type=1326 audit(1760353739.107:98755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23736 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 363.057335][ T29] audit: type=1326 audit(1760353739.107:98756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23736 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 363.080948][ T29] audit: type=1326 audit(1760353739.107:98757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23736 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3cb9b9d710 code=0x7ffc0000 [ 363.104575][ T29] audit: type=1326 audit(1760353739.107:98758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23736 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 363.128277][ T29] audit: type=1326 audit(1760353739.107:98759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23736 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 363.152043][ T29] audit: type=1326 audit(1760353739.117:98760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23736 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 363.175627][ T29] audit: type=1326 audit(1760353739.117:98761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23736 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 363.255566][T23743] loop7: detected capacity change from 0 to 512 [ 363.262453][T23743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.269934][T23743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 363.278421][T23743] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 363.337444][T23743] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6225: Allocating blocks 41-42 which overlap fs metadata [ 363.351299][T23749] __nla_validate_parse: 17 callbacks suppressed [ 363.351329][T23749] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6227'. [ 363.366712][T23749] netlink: 196 bytes leftover after parsing attributes in process `syz.9.6227'. [ 363.377119][T23743] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6225: Allocating blocks 41-42 which overlap fs metadata [ 363.390882][T23749] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6227'. [ 363.400509][T23743] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.6225: Failed to acquire dquot type 1 [ 363.403257][T23755] loop9: detected capacity change from 0 to 512 [ 363.411925][T23749] netlink: 196 bytes leftover after parsing attributes in process `syz.9.6227'. [ 363.431177][T23743] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 363.443647][T23758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6231'. [ 363.454473][T23743] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6225: corrupted inode contents [ 363.454712][T23758] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6231'. [ 363.468199][T23743] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #12: comm syz.7.6225: mark_inode_dirty error [ 363.488765][T23755] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.501478][T23743] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6225: corrupted inode contents [ 363.501920][T23756] loop2: detected capacity change from 0 to 512 [ 363.513465][T23755] ext4 filesystem being mounted at /412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.522135][T23758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6231'. [ 363.539816][T23758] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6231'. [ 363.539989][T23743] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.6225: mark_inode_dirty error [ 363.565682][T23756] EXT4-fs (loop2): failed to initialize system zone (-117) [ 363.572975][T23756] EXT4-fs (loop2): mount failed [ 363.579048][T23743] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6225: corrupted inode contents [ 363.591317][T23743] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 363.591809][T17069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.600377][T23743] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6225: corrupted inode contents [ 363.621064][T23743] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.6225: mark_inode_dirty error [ 363.632780][T23743] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 363.642571][T23743] EXT4-fs (loop7): 1 truncate cleaned up [ 363.651493][T23743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.671659][T23743] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 363.700983][T23765] loop9: detected capacity change from 0 to 512 [ 363.707721][T16682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.707807][T23765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.729940][T23765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 363.738563][T23765] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 363.779653][T23765] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6233: Allocating blocks 41-42 which overlap fs metadata [ 363.794012][T23765] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6233: Allocating blocks 41-42 which overlap fs metadata [ 363.808491][T23765] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6233: Failed to acquire dquot type 1 [ 363.820364][T23765] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 363.835453][T23765] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6233: corrupted inode contents [ 363.847547][T23765] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #12: comm syz.9.6233: mark_inode_dirty error [ 363.860079][T23765] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6233: corrupted inode contents [ 363.872259][T23765] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.6233: mark_inode_dirty error [ 363.885681][T23765] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6233: corrupted inode contents [ 363.897797][T23765] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 363.906545][T23765] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6233: corrupted inode contents [ 363.918848][T23765] EXT4-fs error (device loop9): ext4_truncate:4637: inode #12: comm syz.9.6233: mark_inode_dirty error [ 363.930036][T23765] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 363.939223][T23765] EXT4-fs (loop9): 1 truncate cleaned up [ 363.945347][T23765] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.960611][T23765] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 363.979927][T17069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.261689][T23786] loop1: detected capacity change from 0 to 512 [ 364.275102][T23786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 364.286549][T23786] EXT4-fs (loop1): 1 truncate cleaned up [ 364.293230][T23786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.881134][T23793] team_slave_0: entered promiscuous mode [ 364.887015][T23793] team_slave_0: left promiscuous mode [ 364.940680][T13343] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.054894][T23810] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6246'. [ 365.139677][T23819] loop1: detected capacity change from 0 to 512 [ 365.197403][T23819] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.6244: couldn't read orphan inode 26 (err -116) [ 365.247207][T23819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.260307][T23819] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.277606][T23829] loop7: detected capacity change from 0 to 128 [ 365.302736][T23829] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 365.320277][T23834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6250'. [ 365.457865][T23847] loop2: detected capacity change from 0 to 512 [ 365.478344][T23847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.526378][T23847] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.576288][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.763813][T23872] loop4: detected capacity change from 0 to 128 [ 365.991396][T23891] netlink: 'syz.4.6259': attribute type 10 has an invalid length. [ 366.055415][T23900] team_slave_0: entered promiscuous mode [ 366.061432][T23900] team_slave_0: left promiscuous mode [ 366.136340][T23905] loop2: detected capacity change from 0 to 512 [ 366.173342][T13343] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.183261][T23905] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.6261: couldn't read orphan inode 26 (err -116) [ 366.195927][T23905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.208529][T23905] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.253192][T23909] loop4: detected capacity change from 0 to 128 [ 366.260016][T23909] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 366.578115][T23930] loop7: detected capacity change from 0 to 512 [ 366.590138][T23930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 366.602545][T23933] loop1: detected capacity change from 0 to 512 [ 366.612126][T23933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.624798][T23933] ext4 filesystem being mounted at /589/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.650907][T23930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.659491][T23930] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 366.669886][T13343] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.693824][T23940] loop4: detected capacity change from 0 to 128 [ 366.715720][T23942] loop1: detected capacity change from 0 to 512 [ 366.723807][T23930] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6268: Allocating blocks 41-42 which overlap fs metadata [ 366.739927][T23942] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 366.740532][T23930] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.6268: Failed to acquire dquot type 1 [ 366.764320][T23930] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 366.769127][T23942] EXT4-fs (loop1): 1 truncate cleaned up [ 366.785076][T23942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.789403][T23930] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6268: corrupted inode contents [ 366.809384][T23930] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #12: comm syz.7.6268: mark_inode_dirty error [ 366.840967][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.909629][T23930] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6268: corrupted inode contents [ 366.935938][T23930] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.6268: mark_inode_dirty error [ 366.976334][T23964] team_slave_0: entered promiscuous mode [ 366.982237][T23964] team_slave_0: left promiscuous mode [ 366.992204][T23930] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6268: corrupted inode contents [ 367.005035][T23930] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 367.014050][T23930] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6268: corrupted inode contents [ 367.033532][T23930] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.6268: mark_inode_dirty error [ 367.078383][T23975] loop2: detected capacity change from 0 to 128 [ 367.089234][T23930] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 367.097807][T23975] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 367.136699][T23930] EXT4-fs (loop7): 1 truncate cleaned up [ 367.149447][T23930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.183520][T23930] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 367.217599][T16682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.277479][T23993] loop7: detected capacity change from 0 to 512 [ 367.303725][T23993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 367.333797][T23993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.342260][T23993] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 367.393005][T23993] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6280: Allocating blocks 41-42 which overlap fs metadata [ 367.409554][T23993] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6280: Allocating blocks 41-42 which overlap fs metadata [ 367.428898][T23993] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.6280: Failed to acquire dquot type 1 [ 367.441914][T13343] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.451225][T23993] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 367.466195][T23993] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6280: corrupted inode contents [ 367.482165][T23993] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #12: comm syz.7.6280: mark_inode_dirty error [ 367.496046][T23993] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6280: corrupted inode contents [ 367.517911][T23993] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.6280: mark_inode_dirty error [ 367.532451][T24022] loop4: detected capacity change from 0 to 256 [ 367.558611][T24023] loop2: detected capacity change from 0 to 512 [ 367.598332][T23993] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6280: corrupted inode contents [ 367.632814][T24023] EXT4-fs (loop2): failed to initialize system zone (-117) [ 367.664373][T23993] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 367.672983][T24023] EXT4-fs (loop2): mount failed [ 367.704695][T23993] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6280: corrupted inode contents [ 367.705772][T24031] netlink: 'syz.1.6286': attribute type 10 has an invalid length. [ 367.746037][T23993] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.6280: mark_inode_dirty error [ 367.776174][T23993] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 367.785421][T23993] EXT4-fs (loop7): 1 truncate cleaned up [ 367.791733][T23993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.811058][T23993] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 367.831857][T16682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.151688][T24045] __nla_validate_parse: 16 callbacks suppressed [ 368.151703][T24045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6290'. [ 368.167116][T24045] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6290'. [ 368.176297][T24045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6290'. [ 368.185332][T24045] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6290'. [ 368.198352][T24045] loop4: detected capacity change from 0 to 512 [ 368.211059][T24045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.223901][T24045] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.258028][T22679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.295351][T24050] loop2: detected capacity change from 0 to 512 [ 368.305697][T24050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 368.323372][T24050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.331798][T24050] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 368.355649][T24058] netlink: 'syz.4.6295': attribute type 10 has an invalid length. [ 368.363783][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6295'. [ 368.365273][T24050] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6293: Allocating blocks 41-42 which overlap fs metadata [ 368.386677][T24050] __quota_error: 252 callbacks suppressed [ 368.386693][T24050] Quota error (device loop2): write_blk: dquota write failed [ 368.399954][T24050] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 368.409685][T24050] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6293: Allocating blocks 41-42 which overlap fs metadata [ 368.423777][T24050] Quota error (device loop2): write_blk: dquota write failed [ 368.428172][T24062] loop9: detected capacity change from 0 to 512 [ 368.431388][T24050] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 368.441869][ T29] audit: type=1326 audit(1760353744.843:98999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24061 comm="syz.4.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 368.447790][T24050] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.6293: Failed to acquire dquot type 1 [ 368.471237][ T29] audit: type=1326 audit(1760353744.843:99000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24061 comm="syz.4.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 368.482865][T24062] EXT4-fs: Ignoring removed nomblk_io_submit option [ 368.506031][ T29] audit: type=1326 audit(1760353744.843:99001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24061 comm="syz.4.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 368.506067][ T29] audit: type=1326 audit(1760353744.843:99002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24061 comm="syz.4.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 368.516002][T24050] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, [ 368.536214][ T29] audit: type=1326 audit(1760353744.843:99003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24061 comm="syz.4.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 368.559770][T24050] inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 368.567442][ T29] audit: type=1326 audit(1760353744.843:99004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24061 comm="syz.4.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 368.627956][T24050] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6293: corrupted inode contents [ 368.649237][T24062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.649578][T24050] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.6293: mark_inode_dirty error [ 368.657741][T24062] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 368.679230][T24050] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6293: corrupted inode contents [ 368.695534][T24062] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6296: Allocating blocks 41-42 which overlap fs metadata [ 368.697415][T24050] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6293: mark_inode_dirty error [ 368.739852][T24062] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6296: Allocating blocks 41-42 which overlap fs metadata [ 368.756104][T24050] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6293: corrupted inode contents [ 368.773422][T24050] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 368.783193][T24062] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6296: Failed to acquire dquot type 1 [ 368.799903][T24050] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6293: corrupted inode contents [ 368.812236][T24062] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 368.827256][T24062] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6296: corrupted inode contents [ 368.839290][T24050] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.6293: mark_inode_dirty error [ 368.851350][T24050] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 368.860370][T24062] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #12: comm syz.9.6296: mark_inode_dirty error [ 368.875829][T24050] EXT4-fs (loop2): 1 truncate cleaned up [ 368.885166][T24062] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6296: corrupted inode contents [ 368.897479][T24050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.923154][T24062] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.6296: mark_inode_dirty error [ 368.951816][T24050] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 368.960277][T24062] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6296: corrupted inode contents [ 368.987134][T24062] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 369.012635][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.026850][T24062] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6296: corrupted inode contents [ 369.042537][T24062] EXT4-fs error (device loop9): ext4_truncate:4637: inode #12: comm syz.9.6296: mark_inode_dirty error [ 369.047297][T24078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6302'. [ 369.054087][T24062] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 369.062647][T24078] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6302'. [ 369.063477][T24078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6302'. [ 369.090119][T24078] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6302'. [ 369.111306][T24078] loop2: detected capacity change from 0 to 512 [ 369.116927][T24062] EXT4-fs (loop9): 1 truncate cleaned up [ 369.136432][T24079] loop7: detected capacity change from 0 to 256 [ 369.147228][T24062] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.191125][T24056] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 369.201780][T24078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.264271][T24078] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.281698][T17069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.358022][T24090] netlink: 'syz.4.6307': attribute type 10 has an invalid length. [ 369.370941][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.380801][T24090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6307'. [ 369.511781][T24104] loop2: detected capacity change from 0 to 512 [ 369.533702][T24104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.551457][T24104] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.559931][T24104] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 369.581656][T24104] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6312: Allocating blocks 41-42 which overlap fs metadata [ 369.595821][T24104] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6312: Allocating blocks 41-42 which overlap fs metadata [ 369.611670][T24104] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.6312: Failed to acquire dquot type 1 [ 369.623254][T24104] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 369.638078][T24104] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6312: corrupted inode contents [ 369.650425][T24104] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.6312: mark_inode_dirty error [ 369.662071][T24104] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6312: corrupted inode contents [ 369.674222][T24104] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6312: mark_inode_dirty error [ 369.685868][T24104] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6312: corrupted inode contents [ 369.698041][T24104] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 369.707085][T24104] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6312: corrupted inode contents [ 369.720739][T24104] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.6312: mark_inode_dirty error [ 369.732380][T24104] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 369.741549][T24104] EXT4-fs (loop2): 1 truncate cleaned up [ 369.748132][T24104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.764515][T24104] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 369.786547][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.841966][T24109] netlink: 'syz.2.6313': attribute type 10 has an invalid length. [ 369.909923][T24121] loop2: detected capacity change from 0 to 512 [ 369.916598][T24121] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.925119][T24121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.933641][T24121] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 369.952711][T24121] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6317: Allocating blocks 41-42 which overlap fs metadata [ 369.966756][T24121] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.6317: Failed to acquire dquot type 1 [ 369.978306][T24121] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 369.992888][T24121] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6317: corrupted inode contents [ 370.005039][T24121] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.6317: mark_inode_dirty error [ 370.016583][T24121] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6317: corrupted inode contents [ 370.028741][T24121] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6317: mark_inode_dirty error [ 370.041782][T24121] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6317: corrupted inode contents [ 370.053905][T24121] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 370.062676][T24121] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6317: corrupted inode contents [ 370.074632][T24121] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.6317: mark_inode_dirty error [ 370.086032][T24121] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 370.095317][T24121] EXT4-fs (loop2): 1 truncate cleaned up [ 370.101361][T24121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.116019][T24121] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 370.133513][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.281123][T24139] loop1: detected capacity change from 0 to 512 [ 370.288071][T24139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.297598][T24139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.306171][T24139] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 370.331606][T24144] loop4: detected capacity change from 0 to 512 [ 370.339305][T24139] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.6323: Allocating blocks 41-42 which overlap fs metadata [ 370.357192][T24139] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.6323: Failed to acquire dquot type 1 [ 370.357558][T24144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.369078][T24139] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 370.382544][T24144] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.395520][T24139] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6323: corrupted inode contents [ 370.418068][T24139] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #12: comm syz.1.6323: mark_inode_dirty error [ 370.432712][T24139] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6323: corrupted inode contents [ 370.446386][T24139] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.6323: mark_inode_dirty error [ 370.459195][T24139] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6323: corrupted inode contents [ 370.472091][T22679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.474893][T24139] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 370.490158][T24139] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6323: corrupted inode contents [ 370.507212][T24139] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.6323: mark_inode_dirty error [ 370.537703][T24139] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 370.560304][T24139] EXT4-fs (loop1): 1 truncate cleaned up [ 370.566719][T24139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.586130][T24139] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 370.606324][T13343] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.720972][T24165] loop7: detected capacity change from 0 to 128 [ 371.313233][T24174] loop7: detected capacity change from 0 to 512 [ 371.322473][T24176] loop9: detected capacity change from 0 to 512 [ 371.337656][T24176] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.352361][T24176] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.369453][T24174] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6335: couldn't read orphan inode 26 (err -116) [ 371.405452][T24174] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.462332][T24181] team_slave_0: entered promiscuous mode [ 371.468347][T24181] team_slave_0: left promiscuous mode [ 371.477213][T24174] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.493754][T17069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.658600][T24187] loop4: detected capacity change from 0 to 512 [ 371.667744][T24187] EXT4-fs: Ignoring removed nomblk_io_submit option [ 371.689868][T24187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.698419][T24187] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 371.719240][T24192] netlink: 'syz.9.6339': attribute type 10 has an invalid length. [ 371.759415][T24187] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.6341: Allocating blocks 41-42 which overlap fs metadata [ 371.773800][T24197] loop9: detected capacity change from 0 to 164 [ 371.800573][T24197] ISOFS: unable to read i-node block [ 371.811345][T24187] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.6341: Allocating blocks 41-42 which overlap fs metadata [ 371.835253][T24197] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 371.851124][T24187] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.6341: Failed to acquire dquot type 1 [ 371.898386][T24187] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 371.938520][T24200] loop9: detected capacity change from 0 to 512 [ 371.950628][T24187] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.6341: corrupted inode contents [ 371.975830][T24200] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.002443][T24187] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #12: comm syz.4.6341: mark_inode_dirty error [ 372.027111][T24200] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 372.049092][T24187] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.6341: corrupted inode contents [ 372.090892][T24187] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6341: mark_inode_dirty error [ 372.112568][T17069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.125741][T24187] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.6341: corrupted inode contents [ 372.140860][T24187] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 372.156953][T24203] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 372.174786][T24187] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.6341: corrupted inode contents [ 372.187453][T24187] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.6341: mark_inode_dirty error [ 372.198810][T24187] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 372.207977][T24187] EXT4-fs (loop4): 1 truncate cleaned up [ 372.214173][T24187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.234297][T24187] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 372.253270][T16682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.279118][T22679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.468116][T24221] netlink: 'syz.4.6354': attribute type 10 has an invalid length. [ 372.536533][T24226] loop7: detected capacity change from 0 to 164 [ 372.556276][T24226] ISOFS: unable to read i-node block [ 372.573803][T24226] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 372.609210][T24232] loop9: detected capacity change from 0 to 256 [ 372.615592][T24231] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 372.645307][T24231] vhci_hcd: invalid port number 253 [ 372.777341][T24245] loop7: detected capacity change from 0 to 512 [ 372.815833][T24245] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6360: couldn't read orphan inode 26 (err -116) [ 372.854545][T24245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.877140][T24245] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.966402][T24236] hsr0 speed is unknown, defaulting to 1000 [ 373.209073][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 373.209157][ T29] audit: type=1326 audit(1760353749.853:99433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.4.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 373.238964][ T29] audit: type=1326 audit(1760353749.853:99434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.4.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 373.262886][ T29] audit: type=1326 audit(1760353749.853:99435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.4.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 373.286687][ T29] audit: type=1326 audit(1760353749.853:99436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.4.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 373.311684][ T29] audit: type=1326 audit(1760353749.853:99437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.4.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 373.336997][ T29] audit: type=1326 audit(1760353749.885:99438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.4.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 373.360701][ T29] audit: type=1326 audit(1760353749.885:99439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.4.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 373.384307][ T29] audit: type=1326 audit(1760353749.885:99440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.4.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 373.407917][ T29] audit: type=1326 audit(1760353749.885:99441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.4.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 373.422672][T24236] chnl_net:caif_netlink_parms(): no params data found [ 373.431507][ T29] audit: type=1326 audit(1760353749.885:99442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.4.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 373.548195][T24236] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.555342][T24236] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.577955][T24236] bridge_slave_0: entered allmulticast mode [ 373.592399][T24236] bridge_slave_0: entered promiscuous mode [ 373.605940][T24236] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.613094][T24236] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.638600][T24236] bridge_slave_1: entered allmulticast mode [ 373.652273][T24236] bridge_slave_1: entered promiscuous mode [ 373.692901][T24236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.708736][T16682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.708872][T24236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.748080][T24236] team0: Port device team_slave_0 added [ 373.755493][T24236] team0: Port device team_slave_1 added [ 373.783468][T24236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.790491][T24236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.816437][T24236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.829854][T24236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.836857][T24236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.862792][T24236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.910933][T24236] hsr_slave_0: entered promiscuous mode [ 373.918141][T24236] hsr_slave_1: entered promiscuous mode [ 373.924441][T24236] debugfs: 'hsr0' already exists in 'hsr' [ 373.930214][T24236] Cannot create hsr debugfs directory [ 374.118414][T24297] loop2: detected capacity change from 0 to 512 [ 374.146327][T24297] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.6373: couldn't read orphan inode 26 (err -116) [ 374.161228][T24297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.174118][T24297] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.343749][T24303] loop7: detected capacity change from 0 to 256 [ 374.668449][T24236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.699554][T24236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.710257][T24306] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 374.718122][T24306] vhci_hcd: invalid port number 253 [ 374.729124][T24236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.749343][T24236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.804965][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.839726][T24236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.868118][T24236] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.890980][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.898131][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.917176][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.924326][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.933114][T24320] loop2: detected capacity change from 0 to 164 [ 374.947451][T24320] ISOFS: unable to read i-node block [ 374.965728][T24320] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 375.110453][T24336] loop2: detected capacity change from 0 to 512 [ 375.112993][T24236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.122883][T24336] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.138747][T24336] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.147266][T24336] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 375.175115][T24336] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6384: Allocating blocks 41-42 which overlap fs metadata [ 375.206509][T24336] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6384: Allocating blocks 41-42 which overlap fs metadata [ 375.222096][T24236] veth0_vlan: entered promiscuous mode [ 375.231223][T24236] veth1_vlan: entered promiscuous mode [ 375.237275][T24336] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.6384: Failed to acquire dquot type 1 [ 375.258565][T24336] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 375.278827][T24236] veth0_macvtap: entered promiscuous mode [ 375.286956][T24236] veth1_macvtap: entered promiscuous mode [ 375.293227][T24336] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6384: corrupted inode contents [ 375.312806][T24236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.320095][T24336] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.6384: mark_inode_dirty error [ 375.334139][T24236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.343288][T24336] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6384: corrupted inode contents [ 375.358496][ T2024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.367481][ T2024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.375097][T24336] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6384: mark_inode_dirty error [ 375.377392][ T2024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.396513][ T2024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.409937][T24336] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6384: corrupted inode contents [ 375.424643][T24336] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 375.434012][T24336] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6384: corrupted inode contents [ 375.447334][T24336] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.6384: mark_inode_dirty error [ 375.459738][T24336] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 375.478573][T24336] EXT4-fs (loop2): 1 truncate cleaned up [ 375.485137][T24336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.503076][T24336] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 375.543055][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.717800][T24360] loop1: detected capacity change from 0 to 512 [ 375.737216][T24360] EXT4-fs (loop1): failed to initialize system zone (-117) [ 376.131653][T24360] EXT4-fs (loop1): mount failed [ 376.147951][T24357] loop2: detected capacity change from 0 to 512 [ 376.159582][T24357] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.6386: couldn't read orphan inode 26 (err -116) [ 376.175808][T24357] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.391494][T24379] loop7: detected capacity change from 0 to 164 [ 376.457346][T24379] ISOFS: unable to read i-node block [ 376.462660][T24379] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 376.510844][T24377] loop1: detected capacity change from 0 to 512 [ 376.526085][T24377] EXT4-fs (loop1): failed to initialize system zone (-117) [ 376.547020][T24377] EXT4-fs (loop1): mount failed [ 376.570584][T24388] loop2: detected capacity change from 0 to 512 [ 376.578237][T24388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.598802][T24388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 376.607357][T24388] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 376.629471][T24388] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6396: Allocating blocks 41-42 which overlap fs metadata [ 376.644015][T24388] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6396: Allocating blocks 41-42 which overlap fs metadata [ 376.649946][T24399] netlink: 'syz.7.6399': attribute type 10 has an invalid length. [ 376.663766][T24388] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.6396: Failed to acquire dquot type 1 [ 376.670873][T24399] __nla_validate_parse: 13 callbacks suppressed [ 376.670894][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6399'. [ 376.678627][T24388] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 376.712857][T24388] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6396: corrupted inode contents [ 376.725921][T24388] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.6396: mark_inode_dirty error [ 376.739594][T24388] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6396: corrupted inode contents [ 376.745213][T24407] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6401'. [ 376.751789][T24388] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6396: mark_inode_dirty error [ 376.760558][T24407] netlink: 196 bytes leftover after parsing attributes in process `syz.7.6401'. [ 376.772598][T24388] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6396: corrupted inode contents [ 376.785778][T24407] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6401'. [ 376.793581][T24388] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 376.803615][T24407] netlink: 196 bytes leftover after parsing attributes in process `syz.7.6401'. [ 376.811087][T24388] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6396: corrupted inode contents [ 376.831754][T24388] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.6396: mark_inode_dirty error [ 376.843172][T24388] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 376.852547][T24388] EXT4-fs (loop2): 1 truncate cleaned up [ 376.860507][T24410] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6402'. [ 376.869516][T24410] netlink: 196 bytes leftover after parsing attributes in process `syz.7.6402'. [ 376.879279][T24410] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6402'. [ 376.888295][T24410] netlink: 196 bytes leftover after parsing attributes in process `syz.7.6402'. [ 376.889127][T24388] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 377.118330][T24422] netlink: 'syz.1.6407': attribute type 10 has an invalid length. [ 377.126853][T24422] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.134118][T24422] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.145642][T24422] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.152775][T24422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.160106][T24422] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.167227][T24422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.184898][T24422] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 377.198987][T24424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6407'. [ 377.211950][T24424] bridge_slave_1: left allmulticast mode [ 377.217692][T24424] bridge_slave_1: left promiscuous mode [ 377.223443][T24424] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.246060][T24424] bridge_slave_0: left allmulticast mode [ 377.251747][T24424] bridge_slave_0: left promiscuous mode [ 377.257481][T24424] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.278393][T24424] bond0: (slave bridge0): Releasing backup interface [ 377.849533][T24449] loop2: detected capacity change from 0 to 512 [ 377.856528][T24449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.866124][T24449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 377.874587][T24449] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 377.896302][T24453] loop7: detected capacity change from 0 to 512 [ 377.906359][T24453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.914512][T24449] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6416: Allocating blocks 41-42 which overlap fs metadata [ 377.928252][T24453] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 377.928267][T24453] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 377.932667][T24457] loop4: detected capacity change from 0 to 164 [ 377.938907][T24449] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6416: Allocating blocks 41-42 which overlap fs metadata [ 377.966123][T24457] ISOFS: unable to read i-node block [ 377.966597][T24449] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.6416: Failed to acquire dquot type 1 [ 377.971469][T24457] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 377.986753][T24449] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 378.007533][T24453] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6420: Allocating blocks 41-42 which overlap fs metadata [ 378.009500][T24449] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6416: corrupted inode contents [ 378.022074][T24453] __quota_error: 625 callbacks suppressed [ 378.022091][T24453] Quota error (device loop7): write_blk: dquota write failed [ 378.044902][T24449] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.6416: mark_inode_dirty error [ 378.046545][T24453] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 378.061921][T24449] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6416: corrupted inode contents [ 378.067391][T24453] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6420: Allocating blocks 41-42 which overlap fs metadata [ 378.079851][T24449] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6416: mark_inode_dirty error [ 378.096243][T24453] Quota error (device loop7): write_blk: dquota write failed [ 378.111672][T24453] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 378.121828][T24453] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.6420: Failed to acquire dquot type 1 [ 378.133661][T24453] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 378.148984][T24449] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6416: corrupted inode contents [ 378.161090][T24453] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6420: corrupted inode contents [ 378.173292][T24449] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 378.176991][T24453] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #12: comm syz.7.6420: mark_inode_dirty error [ 378.183033][T24449] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6416: corrupted inode contents [ 378.195359][T24453] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6420: corrupted inode contents [ 378.207954][T24449] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.6416: mark_inode_dirty error [ 378.217784][T24453] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.6420: mark_inode_dirty error [ 378.239822][T24453] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6420: corrupted inode contents [ 378.253427][T24449] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 378.263547][T24453] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 378.271928][T24449] EXT4-fs (loop2): 1 truncate cleaned up [ 378.278452][T24453] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6420: corrupted inode contents [ 378.303480][T24453] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.6420: mark_inode_dirty error [ 378.315921][T24466] loop9: detected capacity change from 0 to 128 [ 378.324811][ T29] audit: type=1326 audit(1760353755.232:100056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24465 comm="syz.9.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8dceec9 code=0x7ffc0000 [ 378.329691][T24453] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 378.348533][ T29] audit: type=1326 audit(1760353755.232:100057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24465 comm="syz.9.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8dceec9 code=0x7ffc0000 [ 378.381211][ T29] audit: type=1326 audit(1760353755.232:100058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24465 comm="syz.9.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc2d8dceec9 code=0x7ffc0000 [ 378.381818][T24453] EXT4-fs (loop7): 1 truncate cleaned up [ 378.405077][ T29] audit: type=1326 audit(1760353755.232:100059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24465 comm="syz.9.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8dceec9 code=0x7ffc0000 [ 378.412283][T24449] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 378.434448][ T29] audit: type=1326 audit(1760353755.232:100060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24465 comm="syz.9.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d8dceec9 code=0x7ffc0000 [ 378.468874][ T29] audit: type=1326 audit(1760353755.232:100061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24465 comm="syz.9.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc2d8dceec9 code=0x7ffc0000 [ 378.494410][T24453] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 378.570229][T24473] team_slave_0: entered promiscuous mode [ 378.572166][T24472] loop7: detected capacity change from 0 to 512 [ 378.576146][T24473] team_slave_0: left promiscuous mode [ 378.583418][T24472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.594708][T24472] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 378.603229][T24472] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 378.615387][T24472] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6426: Allocating blocks 41-42 which overlap fs metadata [ 378.629673][T24472] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.6426: Failed to acquire dquot type 1 [ 378.643918][T24472] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 378.658523][T24472] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6426: corrupted inode contents [ 378.670902][T24472] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #12: comm syz.7.6426: mark_inode_dirty error [ 378.683147][T24472] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6426: corrupted inode contents [ 378.695200][T24477] loop9: detected capacity change from 0 to 512 [ 378.695225][T24472] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.6426: mark_inode_dirty error [ 378.713097][T24472] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6426: corrupted inode contents [ 378.715294][T24477] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.725261][T24472] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 378.744300][T24472] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6426: corrupted inode contents [ 378.756440][T24472] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.6426: mark_inode_dirty error [ 378.767694][T24472] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 378.779035][T24472] EXT4-fs (loop7): 1 truncate cleaned up [ 378.790419][T24472] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 378.898128][T24484] loop9: detected capacity change from 0 to 512 [ 378.929580][T24484] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.6429: couldn't read orphan inode 26 (err -116) [ 378.946355][T24484] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.058170][T24495] team_slave_0: entered promiscuous mode [ 379.063996][T24495] team_slave_0: left promiscuous mode [ 379.096836][T24499] loop7: detected capacity change from 0 to 512 [ 379.103993][T24499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 379.111510][T24499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 379.120081][T24499] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 379.148788][T24499] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6436: Allocating blocks 41-42 which overlap fs metadata [ 379.162761][T24499] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6436: Allocating blocks 41-42 which overlap fs metadata [ 379.192077][T24499] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.6436: Failed to acquire dquot type 1 [ 379.206967][T24499] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 379.233705][T24499] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6436: corrupted inode contents [ 379.249569][T24499] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #12: comm syz.7.6436: mark_inode_dirty error [ 379.261672][T24499] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6436: corrupted inode contents [ 379.274741][T24499] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.6436: mark_inode_dirty error [ 379.298810][T24499] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6436: corrupted inode contents [ 379.328186][T24499] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 379.346628][T24509] netlink: 'syz.4.6440': attribute type 10 has an invalid length. [ 379.355721][T24499] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6436: corrupted inode contents [ 379.385540][T24499] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.6436: mark_inode_dirty error [ 379.407554][T24511] loop2: detected capacity change from 0 to 512 [ 379.408277][T24499] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 379.435251][T24511] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 379.442749][T24499] EXT4-fs (loop7): 1 truncate cleaned up [ 379.464777][T24511] EXT4-fs (loop2): 1 truncate cleaned up [ 379.472284][T24499] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 379.528102][T24518] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 379.572451][T24518] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 379.605615][T24341] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 379.628488][T24518] vhci_hcd: invalid port number 253 [ 379.683284][T24524] loop7: detected capacity change from 0 to 512 [ 379.690163][T24524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 379.700736][T24524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 379.709251][T24524] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 379.751543][T24524] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6446: Allocating blocks 41-42 which overlap fs metadata [ 379.776222][T24524] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6446: Allocating blocks 41-42 which overlap fs metadata [ 379.793060][T24524] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.6446: Failed to acquire dquot type 1 [ 379.804916][T24524] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 379.819713][T24524] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6446: corrupted inode contents [ 379.843812][T24524] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #12: comm syz.7.6446: mark_inode_dirty error [ 379.857831][T24524] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6446: corrupted inode contents [ 379.870286][T24524] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.6446: mark_inode_dirty error [ 379.881933][T24524] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6446: corrupted inode contents [ 379.894933][T24524] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 379.903909][T24524] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6446: corrupted inode contents [ 379.919096][T24524] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.6446: mark_inode_dirty error [ 379.961046][T24524] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 379.970359][T24524] EXT4-fs (loop7): 1 truncate cleaned up [ 379.998621][T24524] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 380.962622][T24555] loop2: detected capacity change from 0 to 164 [ 381.010058][T24555] ISOFS: unable to read i-node block [ 381.016044][T24555] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 381.033996][T24559] loop4: detected capacity change from 0 to 512 [ 381.052185][T24559] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 381.073021][T24559] EXT4-fs (loop4): 1 truncate cleaned up [ 381.357101][T24580] netlink: 'syz.9.6468': attribute type 10 has an invalid length. [ 381.390829][T24588] team_slave_0: entered promiscuous mode [ 381.396761][T24588] team_slave_0: left promiscuous mode [ 381.459068][T24599] loop1: detected capacity change from 0 to 164 [ 381.473104][T24599] ISOFS: unable to read i-node block [ 381.478598][T24599] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 381.698278][T24633] loop7: detected capacity change from 0 to 512 [ 381.716388][T24633] EXT4-fs (loop7): failed to initialize system zone (-117) [ 381.737384][T24633] EXT4-fs (loop7): mount failed [ 382.046030][T24642] loop2: detected capacity change from 0 to 512 [ 382.061569][T24642] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 382.102923][T24642] EXT4-fs (loop2): 1 truncate cleaned up [ 382.287617][T24653] netlink: 'syz.7.6483': attribute type 10 has an invalid length. [ 382.296515][T24653] __nla_validate_parse: 14 callbacks suppressed [ 382.296528][T24653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6483'. [ 382.510244][T24683] loop1: detected capacity change from 0 to 164 [ 382.524638][T24683] ISOFS: unable to read i-node block [ 382.536720][T24683] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 382.614025][T24696] team_slave_0: entered promiscuous mode [ 382.619802][T24696] team_slave_0: left promiscuous mode [ 382.653226][T24703] team_slave_0: entered promiscuous mode [ 382.659019][T24703] team_slave_0: left promiscuous mode [ 382.710704][T24714] loop2: detected capacity change from 0 to 512 [ 382.717638][T24714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 382.750450][T24714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 382.758972][T24714] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 382.794860][T24714] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6495: Allocating blocks 41-42 which overlap fs metadata [ 382.833505][ T29] kauditd_printk_skb: 687 callbacks suppressed [ 382.833532][ T29] audit: type=1326 audit(1760353759.969:100738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="syz.1.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0623ceec9 code=0x7ffc0000 [ 382.844595][T24714] Quota error (device loop2): write_blk: dquota write failed [ 382.870961][T24714] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 382.870971][ T29] audit: type=1326 audit(1760353760.001:100739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="syz.1.6499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb0623ceec9 code=0x7ffc0000 [ 382.880069][ T29] audit: type=1326 audit(1760353760.001:100740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0623ceec9 code=0x7ffc0000 [ 382.926907][ T29] audit: type=1326 audit(1760353760.001:100741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0623ceec9 code=0x7ffc0000 [ 382.950158][ T29] audit: type=1326 audit(1760353760.001:100742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0623ceec9 code=0x7ffc0000 [ 382.959402][T24714] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6495: Allocating blocks 41-42 which overlap fs metadata [ 382.973399][ T29] audit: type=1326 audit(1760353760.001:100743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0623ceec9 code=0x7ffc0000 [ 382.987859][T24714] Quota error (device loop2): write_blk: dquota write failed [ 383.009999][ T29] audit: type=1326 audit(1760353760.001:100744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24733 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0623ceec9 code=0x7ffc0000 [ 383.041521][T24714] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.6495: Failed to acquire dquot type 1 [ 383.069096][T24714] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 383.097056][T24714] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6495: corrupted inode contents [ 383.117229][T24714] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.6495: mark_inode_dirty error [ 383.140136][T24714] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6495: corrupted inode contents [ 383.172612][T24714] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6495: mark_inode_dirty error [ 383.209753][T24714] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6495: corrupted inode contents [ 383.227309][T24714] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 383.236962][T24714] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6495: corrupted inode contents [ 383.270183][T24714] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.6495: mark_inode_dirty error [ 383.281875][T24714] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 383.291722][T24714] EXT4-fs (loop2): 1 truncate cleaned up [ 383.326362][T24714] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 383.381084][T24759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6501'. [ 383.390154][T24759] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6501'. [ 383.411483][T24759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6501'. [ 383.430155][T24759] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6501'. [ 383.453422][T24765] loop4: detected capacity change from 0 to 512 [ 383.487916][T24765] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 383.511456][T24772] loop2: detected capacity change from 0 to 512 [ 383.557355][T24772] EXT4-fs (loop2): failed to initialize system zone (-117) [ 383.581743][T24772] EXT4-fs (loop2): mount failed [ 383.735810][T24788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6507'. [ 383.744812][T24788] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6507'. [ 383.764491][T24788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6507'. [ 383.774035][T24788] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6507'. [ 383.783503][T24790] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 383.791390][T24786] loop4: detected capacity change from 0 to 1024 [ 383.798633][T24786] EXT4-fs: Ignoring removed oldalloc option [ 383.804694][T24786] EXT4-fs: Ignoring removed bh option [ 383.821547][T24794] loop2: detected capacity change from 0 to 512 [ 383.832717][T24794] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 383.911023][T24808] loop2: detected capacity change from 0 to 512 [ 383.917769][T24808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 383.950365][T24808] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 383.958974][T24808] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 384.002956][T24808] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6512: Allocating blocks 41-42 which overlap fs metadata [ 384.018797][T24808] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.6512: Allocating blocks 41-42 which overlap fs metadata [ 384.035356][T24819] netlink: 180 bytes leftover after parsing attributes in process `syz.7.6514'. [ 384.056549][T24808] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.6512: Failed to acquire dquot type 1 [ 384.068488][T24808] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 384.087318][T24808] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6512: corrupted inode contents [ 384.104076][T24808] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.6512: mark_inode_dirty error [ 384.116270][T24808] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6512: corrupted inode contents [ 384.144844][T24808] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6512: mark_inode_dirty error [ 384.156473][T24808] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6512: corrupted inode contents [ 384.168864][T24808] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 384.187586][T24808] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.6512: corrupted inode contents [ 384.219915][T24808] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.6512: mark_inode_dirty error [ 384.243253][T24808] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 384.312489][T24808] EXT4-fs (loop2): 1 truncate cleaned up [ 384.422032][T24808] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 384.694899][T24849] loop4: detected capacity change from 0 to 512 [ 384.708743][T24849] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6520: couldn't read orphan inode 26 (err -116) [ 384.741380][T24849] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.774987][T24855] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 385.299987][T24875] loop9: detected capacity change from 0 to 512 [ 385.307261][T24875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 385.314576][T24875] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 385.323073][T24875] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 385.336268][T24875] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6529: Allocating blocks 41-42 which overlap fs metadata [ 385.350405][T24875] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6529: Allocating blocks 41-42 which overlap fs metadata [ 385.364479][T24875] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6529: Failed to acquire dquot type 1 [ 385.376024][T24875] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 385.390885][T24875] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6529: corrupted inode contents [ 385.406602][T24875] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #12: comm syz.9.6529: mark_inode_dirty error [ 385.420407][T24875] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6529: corrupted inode contents [ 385.423587][T24882] netlink: 'syz.2.6530': attribute type 10 has an invalid length. [ 385.438842][T24875] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.6529: mark_inode_dirty error [ 385.463692][T24875] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6529: corrupted inode contents [ 385.524114][T24875] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 385.536935][T24884] loop2: detected capacity change from 0 to 512 [ 385.543380][T24875] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6529: corrupted inode contents [ 385.578437][T24884] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.594880][T24875] EXT4-fs error (device loop9): ext4_truncate:4637: inode #12: comm syz.9.6529: mark_inode_dirty error [ 385.627924][T24875] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 385.664450][T24875] EXT4-fs (loop9): 1 truncate cleaned up [ 385.678855][T24875] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 385.814302][T24910] loop4: detected capacity change from 0 to 512 [ 385.821493][T24910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 385.828623][T24910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 385.837203][T24910] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 385.859869][T24910] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.6542: Allocating blocks 41-42 which overlap fs metadata [ 385.874590][T24910] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.6542: Allocating blocks 41-42 which overlap fs metadata [ 385.889152][T24910] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.6542: Failed to acquire dquot type 1 [ 385.900963][T24910] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 385.922353][T24910] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.6542: corrupted inode contents [ 385.944581][T24910] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #12: comm syz.4.6542: mark_inode_dirty error [ 385.966597][T24910] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.6542: corrupted inode contents [ 385.978935][T24910] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6542: mark_inode_dirty error [ 385.991506][T24910] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.6542: corrupted inode contents [ 386.004993][T24910] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 386.014307][T24910] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.6542: corrupted inode contents [ 386.026721][T24910] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.6542: mark_inode_dirty error [ 386.038309][T24910] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 386.052394][T24910] EXT4-fs (loop4): 1 truncate cleaned up [ 386.065696][T24910] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 386.110065][T24932] loop7: detected capacity change from 0 to 1024 [ 386.117246][T24932] EXT4-fs: Ignoring removed oldalloc option [ 386.123172][T24932] EXT4-fs: Ignoring removed bh option [ 386.172832][ T10] page_pool_release_retry() stalled pool shutdown: id 178, 1 inflight 60 sec [ 386.593044][T24949] loop2: detected capacity change from 0 to 128 [ 386.895218][T24963] loop9: detected capacity change from 0 to 512 [ 386.902250][T24963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.914717][T24963] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 386.923287][T24963] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 386.955388][T24964] loop2: detected capacity change from 0 to 256 [ 386.964655][T24963] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6559: Allocating blocks 41-42 which overlap fs metadata [ 386.989205][T24963] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6559: Allocating blocks 41-42 which overlap fs metadata [ 387.004874][T24963] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6559: Failed to acquire dquot type 1 [ 387.007809][T24966] netlink: 'syz.7.6560': attribute type 10 has an invalid length. [ 387.032317][T24963] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 387.049635][T24963] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6559: corrupted inode contents [ 387.061855][T24963] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #12: comm syz.9.6559: mark_inode_dirty error [ 387.088629][T24963] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6559: corrupted inode contents [ 387.094032][T24975] loop7: detected capacity change from 0 to 1024 [ 387.107328][T24975] EXT4-fs: Ignoring removed oldalloc option [ 387.113284][T24975] EXT4-fs: Ignoring removed bh option [ 387.119886][T24963] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.6559: mark_inode_dirty error [ 387.131814][T24963] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6559: corrupted inode contents [ 387.152189][T24963] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 387.171227][T24963] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6559: corrupted inode contents [ 387.190699][T24963] EXT4-fs error (device loop9): ext4_truncate:4637: inode #12: comm syz.9.6559: mark_inode_dirty error [ 387.217536][T24963] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 387.242362][T24963] EXT4-fs (loop9): 1 truncate cleaned up [ 387.278742][T24963] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 387.351409][T24984] team_slave_0: entered promiscuous mode [ 387.357259][T24984] team_slave_0: left promiscuous mode [ 387.484904][T24994] loop4: detected capacity change from 0 to 512 [ 387.494595][T24994] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 387.585724][T25000] netlink: 'syz.4.6572': attribute type 10 has an invalid length. [ 387.628473][T25000] __nla_validate_parse: 6 callbacks suppressed [ 387.628492][T25000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6572'. [ 387.757612][T25007] loop1: detected capacity change from 0 to 512 [ 387.775007][T25007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.785526][T25007] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.794105][T25007] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 387.820961][T25007] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.6575: Allocating blocks 41-42 which overlap fs metadata [ 387.847977][T25007] __quota_error: 901 callbacks suppressed [ 387.847996][T25007] Quota error (device loop1): write_blk: dquota write failed [ 387.861309][T25007] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 387.873572][T25007] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.6575: Allocating blocks 41-42 which overlap fs metadata [ 387.914671][T25007] Quota error (device loop1): write_blk: dquota write failed [ 387.923428][T25007] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 387.934296][T25015] loop9: detected capacity change from 0 to 512 [ 387.941431][T25015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.948978][T25015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.954368][T25007] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.6575: Failed to acquire dquot type 1 [ 387.957455][T25015] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 387.978950][T25007] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 387.993880][T25007] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6575: corrupted inode contents [ 388.007117][T25007] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #12: comm syz.1.6575: mark_inode_dirty error [ 388.019931][T25015] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6577: Allocating blocks 41-42 which overlap fs metadata [ 388.038245][T25015] Quota error (device loop9): write_blk: dquota write failed [ 388.045790][T25015] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 388.056600][T25007] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6575: corrupted inode contents [ 388.080480][T25007] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.6575: mark_inode_dirty error [ 388.092386][T25015] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 388.096187][T25007] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6575: corrupted inode contents [ 388.102517][T25015] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6577: Failed to acquire dquot type 1 [ 388.121543][T25007] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 388.134646][T25007] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6575: corrupted inode contents [ 388.146776][T25015] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 388.163894][T25015] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6577: corrupted inode contents [ 388.164868][T25007] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.6575: mark_inode_dirty error [ 388.177041][T25015] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #12: comm syz.9.6577: mark_inode_dirty error [ 388.198529][T25007] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 388.207940][T25007] EXT4-fs (loop1): 1 truncate cleaned up [ 388.209889][T25015] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6577: corrupted inode contents [ 388.227860][T25015] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.6577: mark_inode_dirty error [ 388.240090][T25015] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6577: corrupted inode contents [ 388.252285][T25015] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 388.261304][T25015] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6577: corrupted inode contents [ 388.274180][T25015] EXT4-fs error (device loop9): ext4_truncate:4637: inode #12: comm syz.9.6577: mark_inode_dirty error [ 388.287153][T25015] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 388.287186][T25007] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 388.296365][T25015] EXT4-fs (loop9): 1 truncate cleaned up [ 388.308037][T25024] loop7: detected capacity change from 0 to 512 [ 388.340858][T25024] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6579: couldn't read orphan inode 26 (err -116) [ 388.357258][T25015] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 388.364714][T25024] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.414334][ T29] audit: type=1326 audit(1760353765.831:101629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25029 comm="syz.1.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0623ceec9 code=0x7ffc0000 [ 388.468682][ T29] audit: type=1326 audit(1760353765.831:101630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25029 comm="syz.1.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0623ceec9 code=0x7ffc0000 [ 388.477454][T25034] team_slave_0: entered promiscuous mode [ 388.492586][ T29] audit: type=1326 audit(1760353765.831:101631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25029 comm="syz.1.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb0623ceec9 code=0x7ffc0000 [ 388.498345][T25034] team_slave_0: left promiscuous mode [ 388.686895][T24341] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 388.703516][T25039] netlink: 'syz.9.6585': attribute type 10 has an invalid length. [ 388.712108][T25039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6585'. [ 388.754621][T25043] loop9: detected capacity change from 0 to 1024 [ 388.772169][T25043] EXT4-fs: Ignoring removed oldalloc option [ 388.778165][T25043] EXT4-fs: Ignoring removed bh option [ 388.809371][T25045] loop2: detected capacity change from 0 to 512 [ 388.817349][T25045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.829876][T25045] EXT4-fs (loop2): 1 truncate cleaned up [ 389.225940][T25064] loop2: detected capacity change from 0 to 512 [ 389.233852][T25064] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 389.256376][T25064] EXT4-fs (loop2): 1 truncate cleaned up [ 389.300374][T25067] loop1: detected capacity change from 0 to 512 [ 389.319925][T25067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 389.354792][T25067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.363376][T25067] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 389.385379][T25067] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.6592: Allocating blocks 41-42 which overlap fs metadata [ 389.421464][T25067] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.6592: Allocating blocks 41-42 which overlap fs metadata [ 389.435416][T25067] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.6592: Failed to acquire dquot type 1 [ 389.447016][T25067] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 389.461752][T25067] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6592: corrupted inode contents [ 389.476567][T25067] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #12: comm syz.1.6592: mark_inode_dirty error [ 389.491486][T25067] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6592: corrupted inode contents [ 389.504333][T25067] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.6592: mark_inode_dirty error [ 389.518429][T25067] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6592: corrupted inode contents [ 389.531109][T25067] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 389.540726][T25067] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.6592: corrupted inode contents [ 389.553865][T25067] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.6592: mark_inode_dirty error [ 389.567787][T25067] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 389.581203][T25067] EXT4-fs (loop1): 1 truncate cleaned up [ 389.609067][T25067] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 389.779145][T25079] loop9: detected capacity change from 0 to 164 [ 389.786401][T25079] ISOFS: unable to read i-node block [ 389.800117][T25079] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 389.817278][T25083] team_slave_0: entered promiscuous mode [ 389.823145][T25083] team_slave_0: left promiscuous mode [ 389.831699][T25087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6600'. [ 389.840756][T25087] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6600'. [ 389.850420][T25087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6600'. [ 389.859578][T25087] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6600'. [ 389.875040][T25087] loop2: detected capacity change from 0 to 512 [ 389.883954][T25087] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.918456][T25093] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6602'. [ 389.927466][T25093] netlink: 196 bytes leftover after parsing attributes in process `syz.9.6602'. [ 389.939074][T25093] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6602'. [ 389.948167][T25093] netlink: 196 bytes leftover after parsing attributes in process `syz.9.6602'. [ 389.961649][T25093] loop9: detected capacity change from 0 to 512 [ 389.970520][T25093] ext4 filesystem being mounted at /468/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 390.041559][T25100] loop2: detected capacity change from 0 to 128 [ 390.059785][T25104] loop9: detected capacity change from 0 to 512 [ 390.066807][T25104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 390.074811][T25104] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.083299][T25104] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 390.096269][T25104] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6604: Allocating blocks 41-42 which overlap fs metadata [ 390.098162][T25106] netlink: 'syz.7.6607': attribute type 10 has an invalid length. [ 390.110444][T25104] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.6604: Allocating blocks 41-42 which overlap fs metadata [ 390.132818][T25104] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6604: Failed to acquire dquot type 1 [ 390.147371][T25104] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 390.169795][T25104] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6604: corrupted inode contents [ 390.182869][T25104] EXT4-fs error (device loop9): ext4_dirty_inode:6509: inode #12: comm syz.9.6604: mark_inode_dirty error [ 390.194565][T25104] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6604: corrupted inode contents [ 390.207143][T25104] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.6604: mark_inode_dirty error [ 390.219427][T25104] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6604: corrupted inode contents [ 390.231635][T25104] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 390.240551][T25113] loop7: detected capacity change from 0 to 512 [ 390.247716][T25113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 390.257873][T25113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.266381][T25113] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 390.277212][T25104] EXT4-fs error (device loop9): ext4_do_update_inode:5624: inode #12: comm syz.9.6604: corrupted inode contents [ 390.290043][T25104] EXT4-fs error (device loop9): ext4_truncate:4637: inode #12: comm syz.9.6604: mark_inode_dirty error [ 390.301695][T25104] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 390.311058][T25104] EXT4-fs (loop9): 1 truncate cleaned up [ 390.318071][T25113] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.6609: Allocating blocks 41-42 which overlap fs metadata [ 390.332331][T25104] EXT4-fs mount: 68 callbacks suppressed [ 390.332349][T25104] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.344904][T25113] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.6609: Failed to acquire dquot type 1 [ 390.362267][T25113] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 390.363199][T25104] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 390.389880][T25113] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6609: corrupted inode contents [ 390.402215][T25113] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #12: comm syz.7.6609: mark_inode_dirty error [ 390.414184][T25113] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6609: corrupted inode contents [ 390.426354][T25113] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.6609: mark_inode_dirty error [ 390.438136][T25113] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6609: corrupted inode contents [ 390.438352][T17069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.451546][T25113] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 390.468304][T25113] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #12: comm syz.7.6609: corrupted inode contents [ 390.499152][T25113] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.6609: mark_inode_dirty error [ 390.511272][T25113] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 390.529355][T25113] EXT4-fs (loop7): 1 truncate cleaned up [ 390.536198][T25113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.666363][T25112] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 390.801475][T25123] loop4: detected capacity change from 0 to 164 [ 390.887145][T16682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.898264][T25123] ISOFS: unable to read i-node block [ 390.913723][T25123] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 390.923533][T25127] loop1: detected capacity change from 0 to 1024 [ 390.930653][T25127] EXT4-fs: Ignoring removed oldalloc option [ 390.936661][T25127] EXT4-fs: Ignoring removed bh option [ 390.962423][T25127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.968270][T25132] loop7: detected capacity change from 0 to 512 [ 391.061168][T25132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.073952][T25132] ext4 filesystem being mounted at /505/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.108435][T16682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.157511][T25147] loop2: detected capacity change from 0 to 512 [ 391.168257][T25147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.181262][T25147] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.332760][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.628069][T25162] loop7: detected capacity change from 0 to 256 [ 392.276463][T24236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.326835][T25174] loop4: detected capacity change from 0 to 512 [ 392.337368][T25174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.350304][T25174] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 392.444299][T22679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.502387][T25187] loop2: detected capacity change from 0 to 512 [ 392.516776][T25187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.535626][T25193] team_slave_0: entered promiscuous mode [ 392.541483][T25193] team_slave_0: left promiscuous mode [ 392.544054][T25187] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 392.607767][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.696497][ T29] kauditd_printk_skb: 512 callbacks suppressed [ 392.696515][ T29] audit: type=1326 audit(1760353770.326:102133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc20dbeec9 code=0x7ffc0000 [ 392.737154][ T29] audit: type=1326 audit(1760353770.326:102134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc20dbeec9 code=0x7ffc0000 [ 392.760842][ T29] audit: type=1326 audit(1760353770.326:102135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc20dbeec9 code=0x7ffc0000 [ 392.784731][ T29] audit: type=1326 audit(1760353770.326:102136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc20dbeec9 code=0x7ffc0000 [ 392.808608][ T29] audit: type=1326 audit(1760353770.326:102137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbc20dbeec9 code=0x7ffc0000 [ 392.832343][ T29] audit: type=1326 audit(1760353770.326:102138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc20dbeec9 code=0x7ffc0000 [ 392.856078][ T29] audit: type=1326 audit(1760353770.326:102139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc20dbeec9 code=0x7ffc0000 [ 392.867072][T25229] loop7: detected capacity change from 0 to 512 [ 392.879831][ T29] audit: type=1326 audit(1760353770.326:102140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.7.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbc20dbeec9 code=0x7ffc0000 [ 392.916485][T25230] loop4: detected capacity change from 0 to 164 [ 392.924149][T25230] ISOFS: unable to read i-node block [ 392.929457][T25230] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 392.938908][T25229] EXT4-fs (loop7): failed to initialize system zone (-117) [ 392.950041][T25229] EXT4-fs (loop7): mount failed [ 393.434517][ T29] audit: type=1326 audit(1760353771.093:102141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25320 comm="syz.4.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 393.458259][ T29] audit: type=1326 audit(1760353771.093:102142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25320 comm="syz.4.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9b9eec9 code=0x7ffc0000 [ 393.525426][T25327] loop9: detected capacity change from 0 to 512 [ 393.547605][T25327] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.563948][T25327] ext4 filesystem being mounted at /476/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.613803][T25341] loop4: detected capacity change from 0 to 512 [ 393.637682][T17069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.654760][T25341] EXT4-fs (loop4): failed to initialize system zone (-117) [ 393.675098][T25341] EXT4-fs (loop4): mount failed [ 393.717886][T25352] netlink: 'syz.9.6652': attribute type 10 has an invalid length. [ 393.726739][T25352] __nla_validate_parse: 9 callbacks suppressed [ 393.726812][T25352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6652'. [ 394.258348][T25371] loop4: detected capacity change from 0 to 128 [ 394.280113][T25373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6658'. [ 394.289230][T25373] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6658'. [ 394.298365][T25373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6658'. [ 394.307403][T25373] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6658'. [ 394.370468][T25377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6660'. [ 394.379552][T25377] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6660'. [ 394.390722][T25377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6660'. [ 394.401016][T25377] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6660'. [ 394.413161][T25383] loop1: detected capacity change from 0 to 1024 [ 394.420307][T25383] EXT4-fs: Ignoring removed oldalloc option [ 394.426519][T25383] EXT4-fs: Ignoring removed bh option [ 394.429972][T25377] loop2: detected capacity change from 0 to 512 [ 394.440053][T25383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.458278][T25377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.471051][T25377] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.504999][T18674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.685164][T25399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6669'. [ 394.743024][T25399] loop4: detected capacity change from 0 to 512 [ 394.759724][T25399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.779447][T25399] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.823344][T22679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.851564][T25393] ================================================================== [ 394.859693][T25393] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 394.867716][T25393] [ 394.870057][T25393] write to 0xffff88811a08f6ac of 4 bytes by task 25383 on cpu 1: [ 394.877792][T25393] xas_set_mark+0x12b/0x140 [ 394.882322][T25393] tag_pages_for_writeback+0xc2/0x290 [ 394.887747][T25393] ext4_do_writepages+0x6b2/0x2750 [ 394.892896][T25393] ext4_writepages+0x176/0x300 [ 394.897686][T25393] do_writepages+0x1c6/0x310 [ 394.902284][T25393] file_write_and_wait_range+0x156/0x2c0 [ 394.907930][T25393] generic_buffers_fsync_noflush+0x45/0x120 [ 394.913827][T25393] ext4_sync_file+0x1ab/0x690 [ 394.918512][T25393] vfs_fsync_range+0x10d/0x130 [ 394.923284][T25393] ext4_buffered_write_iter+0x34f/0x3c0 [ 394.928834][T25393] ext4_file_write_iter+0x387/0xf60 [ 394.934047][T25393] iter_file_splice_write+0x666/0xa60 [ 394.939422][T25393] direct_splice_actor+0x156/0x2a0 [ 394.944539][T25393] splice_direct_to_actor+0x312/0x680 [ 394.949916][T25393] do_splice_direct+0xda/0x150 [ 394.954695][T25393] do_sendfile+0x380/0x650 [ 394.959131][T25393] __x64_sys_sendfile64+0x105/0x150 [ 394.964340][T25393] x64_sys_call+0x2bb4/0x3000 [ 394.969024][T25393] do_syscall_64+0xd2/0x200 [ 394.973538][T25393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.979437][T25393] [ 394.981758][T25393] read to 0xffff88811a08f6ac of 4 bytes by task 25393 on cpu 0: [ 394.989380][T25393] file_write_and_wait_range+0x10e/0x2c0 [ 394.995026][T25393] generic_buffers_fsync_noflush+0x45/0x120 [ 395.000933][T25393] ext4_sync_file+0x1ab/0x690 [ 395.005615][T25393] vfs_fsync_range+0x10d/0x130 [ 395.010390][T25393] ext4_buffered_write_iter+0x34f/0x3c0 [ 395.015943][T25393] ext4_file_write_iter+0x387/0xf60 [ 395.021159][T25393] iter_file_splice_write+0x666/0xa60 [ 395.026536][T25393] direct_splice_actor+0x156/0x2a0 [ 395.031654][T25393] splice_direct_to_actor+0x312/0x680 [ 395.037033][T25393] do_splice_direct+0xda/0x150 [ 395.041804][T25393] do_sendfile+0x380/0x650 [ 395.046236][T25393] __x64_sys_sendfile64+0x105/0x150 [ 395.051452][T25393] x64_sys_call+0x2bb4/0x3000 [ 395.056155][T25393] do_syscall_64+0xd2/0x200 [ 395.060669][T25393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.066569][T25393] [ 395.068891][T25393] value changed: 0x02000021 -> 0x04000021 [ 395.074607][T25393] [ 395.076931][T25393] Reported by Kernel Concurrency Sanitizer on: [ 395.083085][T25393] CPU: 0 UID: 0 PID: 25393 Comm: syz.1.6663 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 395.094470][T25393] Tainted: [W]=WARN [ 395.098274][T25393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.108338][T25393] ================================================================== [ 395.224592][T24236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.168184][ T23] page_pool_release_retry() stalled pool shutdown: id 181, 1 inflight 60 sec