last executing test programs: 2.141453047s ago: executing program 4 (id=358): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000027000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', r0, 0x4000, r3}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380), 0x2}}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r7, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) 2.093864021s ago: executing program 1 (id=361): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r3) 2.008830458s ago: executing program 1 (id=362): socket(0x18, 0x1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x3a, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x7, 0x6}) 1.930603414s ago: executing program 1 (id=364): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) io_setup(0x81, &(0x7f0000001440)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 1.909510166s ago: executing program 4 (id=368): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) unshare(0x22020600) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) set_robust_list(&(0x7f00000003c0)={0x0, 0xfffffffffffffff7}, 0x18) recvmsg(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffec9, 0x0}, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) socket(0x1e, 0x5, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000040)='./file0\x00', r0}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, 0x0, 0x0) 1.810952344s ago: executing program 1 (id=372): prctl$PR_SET_DUMPABLE(0x4, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mbind(&(0x7f000026f000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000680)=0x7fffffff, 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="02", 0x1}], 0x1}, 0x0) 1.566612254s ago: executing program 3 (id=380): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$eJzs3ctvXNd9B/DvHfEl2lBlW3VVwbZGMmTTNkuRVC1B8KKWyKFEl4+WpAALbWEZllQIIurCbgHb6EIFiq5q1CiKAk02gZdZGXAW8SbQLlkFWWURIPF/EBhZKQGCCebOUOJjZihSFKnIn89gNPfxO+f87tw792iGM/eEP2b1er28b3P+0vd3M1kePecnv/78i08b93+/lb7sy+vFD5OBJNWk5/flsdI7MbkwP7tJRTeTK0luJ0WS/jQfO9i/Zu5Kiv/Ok/fmb6f4bg63KTawxY1jU3W+1fb6+AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfSxOTo6FiRmem5S29XOyuHAO+yfqW6r8pRv4uvVjfR16bZIika9wwMrAz1ffjQvdXPNv45nueac881R/4eyCdPPHvwjWd6KivluyS0Kz78+JOb7y4vX/vg3qLeTQv1P9yctqVve8Uu1OamF+enZ89dqFWnF+erZ0+fHj15cWqxOjWd2uLlxaXabHVioXZuaX6hOjTxSnXs7NlT1drI5flLcxcmR2ZqKwvP/MX46Ojp6lsjf1M7t7A4P3fyrZHFiYvTMzPTcxfKmMbqRsyZxoH419NL1aXaudlq9fqN5WunNkuyETTWdk1R3ZdVQeOb1TQ+Oj4+NjY+Pnb69bOvnxkd7dmwYHSdbIjY+4OWvfODh3IOh22qtPr/zGQ6c7mUt1Nte5vIZBYyn9kO61tW+v8TJ2td213d/6/08ofvrT6Ssv9/oTn3Qqf+v0Mum9/q9WbN2y2/cvswH+eT3My7Wc5yruWDB66xP+sy++2D1ti6VR98azfeLqSWuUxnMfOZzmzOlUuqrSXVnM3pnM5o3snFTGUx1UxlOjOpZTGXs5il1MojaiILqeVcljKfhVQzlIm8kmrGcjZncyrV1DKSy5nPpczlQiZzrqzlem6Uz/upLjneDRq7n6DxLkE73P/XH8X/CfKw7ej5Gx5EvdX/t3uP3gyor0wNTexaVgAAAMBO+vOf5MChp3/8y6Q3z5efy09Nz9RG9zotAAAAYAeVX9d7rvHQ25h6PoX3/wAAAPC4Kcrf2BVJBnO0OdX8JdS++BAAAAAAHhPl3/9faDwMNqaOprh7JZQre50bAAAAsDPuXmM/na6xu+lV+Ivhlcv/Vq82H6+2IlrX+R2cmp6pjUzMz7wxlpfKqwyUvzTYUNu+pOgtf37wao41o44NNh8H19Y40IgaG3ljLK/meGtDhl5sPLw41CZyvBn5cjPy5S6RpxqRAPC4O96lP77f/v/VDDcjho/09CXpOdKmZx3VswLAo2LzMXY2jSj+8t77/95WtWv6/6dz/WjzKwUjeS/vZzlXM1z+2qD8xsGaWv/+s9ZnBne/hjCa4U0+DViJ/dmZSoY7fB7Ql/X1jmd4k08EmrH5h+TUw98RALCLjnfoh7fS/w+vev+fje//7w4tdM1PCgHgkXB3BPuHOLHX2wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgJ23o1f7H9hm8V+1xvV7uMMQbJjY33oOtl/P/yTZvZyLRlv9O1dhZQfqqSfZrf21exM5mGz7WW17GPcl2fvt2srEXp6VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2C1Fsq/d8krSn2Q0ycndz2r7isYWdXFr1zLZbT/92w4r/mr1THEnd/JRDuxOTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3x6t6/9X0nx8orkoPZXkRJIrSf5ur3PcSXf2OoEdsn+b5VZd/7+xz1Mv0tPc7Sl6JyYX5mfL8RP6G+u//vyLTxv3VcX777edMrCybnCJVgvrY7/35MrUU2WpwclrH978l/f/uTp5PpX05fzS1Mzk7IWFN+8Vebb4MqmmeV+xku+/nfjRZ222/MvGlra3vt2p8smZ3Njun7Ur3b3dbm4sXxtvtLRUe3vpX//pxkerVj2dY8mLQ8nQ2pb+sXHv0NKx9HZrrfim+M/iQP4vV8r933g2inrR2EV/Um7//us3lq+NvPf+8tUOOR3M0SRXk4H7z+lo5wE5yqOu0ttodbQMavxzqF193cf0aFvjWIdteKo8ZAZb29B3X9tQ3SSBVc97pd36ZkanOmT0TF5qs6fr/UnnjF7qvqfbK74pflFczM/zH6vG/6g09v+JdH51rq2ijFx1pHSMrDQjyy0fX73infWRv/7/+8q+7TA1bNV/rXnxVlad/1v7aofOR/Wi6/loVYtbe12sa3HdUdHldVH2SIfWlWidfTqVaeV5qBnVIc8/zWtJz5FuZ8UNvfVrm53SVsq/2X71dl//3ymG8pvcMv4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw6CuSfe2WV5ITSQ6uzFeT+haq7e+0ojJYbDXFHXXr7j+PhcpWCxR3cicf5cDDSQcAAAAAAACA3XZ+8uvPv/i0cS//Hr/vTr3e+vt+NelJcrD43/2ZXJif3aSi3uRKktuN6YFOQb+rN61d2iiXJ+/N327MHW5bwcH73S4AoLM/BAAA///r9m7p") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@newqdisc={0xc80, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc54, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x527f6531, 0xc, 0x7, 0x5, 0x3, 0x5, 0x7, 0x10000, 0x1ff, 0x7a, 0x6, 0x7, 0xd, 0x3, 0x40, 0x2, 0x1, 0x800, 0x6, 0x400, 0x7, 0x138ccd55, 0x3, 0x4, 0xfffff000, 0x1, 0x200, 0x5, 0x2, 0xcf, 0x0, 0x3, 0x74, 0xc, 0x7fff, 0x32, 0x7, 0x1a, 0xfffffffc, 0xbc0, 0xffff8000, 0x1, 0x30008000, 0x4, 0xd, 0xb, 0xfffff276, 0xb8, 0xe63f, 0x1, 0xc3, 0x5, 0x7, 0x8, 0x81, 0x7f, 0x60e, 0x1, 0xc, 0x9, 0x1, 0x7, 0x3, 0x2, 0x3674bf80, 0x200, 0x80000000, 0xfffffffa, 0x3ff, 0x9, 0x1, 0xfffffff8, 0x6, 0x6, 0x1, 0x2440000, 0xe418, 0xf, 0x4, 0x8, 0x3, 0x8, 0x261, 0x6, 0x4, 0xffffffff, 0xb1db, 0x9, 0x2, 0x80000001, 0x4, 0x7, 0x2, 0x81, 0x8, 0x200, 0x6, 0x9, 0x0, 0x0, 0xb39, 0x40, 0x100, 0x8000, 0x8001, 0xd4d5, 0xc, 0x7c6, 0x4, 0x0, 0x103, 0xa, 0x0, 0xc8d2, 0x1ff, 0xf, 0x1, 0x7, 0x1, 0x2, 0x7, 0x7, 0x1, 0x5, 0x7, 0x462404da, 0x0, 0x7, 0x8, 0x39, 0x7, 0xd, 0x0, 0x7, 0x666f, 0x6, 0x1, 0x0, 0xa72, 0x0, 0x0, 0xd, 0x2, 0x9, 0x7fffffff, 0xfff, 0xffffffff, 0x4, 0x4, 0x6, 0xc, 0x82, 0x2, 0x5, 0x8, 0x0, 0x0, 0x7, 0x10000, 0x2, 0x8, 0x5, 0x2, 0x0, 0x6, 0x759c, 0x7, 0x48, 0x5, 0x7fff, 0x23568549, 0xfff, 0x0, 0xc6, 0x4, 0x5, 0x2, 0x3, 0xfffffffb, 0x5, 0x0, 0xffffff01, 0xffffffde, 0x2c, 0x0, 0x0, 0x4, 0xfffffff8, 0x1, 0x40, 0x6, 0x0, 0x10001, 0xb, 0x6, 0x4, 0x4, 0x227, 0x93, 0x1, 0x400, 0x400, 0x4, 0x3, 0xffffff6b, 0x9, 0x2, 0x7, 0x4, 0x80000000, 0xe, 0xffff, 0x31, 0x9, 0x1000, 0x0, 0x1, 0x4, 0x4, 0xc, 0x2, 0x3, 0x0, 0x24, 0xa, 0x7f, 0x8, 0x7, 0x2, 0x3, 0x2, 0xffffff00, 0x9, 0xffffffff, 0xd, 0x9, 0x1, 0x6, 0x3, 0x8, 0x9, 0x6, 0xcbe4, 0x5, 0x4, 0x7ff, 0x6, 0xfffffff9, 0x4, 0xb, 0x2, 0x81, 0x4, 0x8c0, 0x8, 0x80000001]}, @TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6809c6d4, 0x0, 0xb, 0x9, 0x3, 0x0, 0x6, 0x9, 0x0, 0x6, 0x2f, 0x3, 0xa, 0x0, 0x7, 0x3ff, 0x8, 0x1, 0x68, 0x9a5, 0x2, 0x7d8f3a00, 0x10, 0x7ae, 0xc67, 0xe3, 0x7, 0xd, 0x8, 0x6, 0x0, 0x0, 0x101, 0xb6c2, 0x4, 0x8f, 0xffffffff, 0xd87, 0x9a24, 0x1, 0x0, 0x10, 0x6efd, 0xf, 0x4, 0xffffffcf, 0x6, 0x1000, 0x2, 0x8, 0x8, 0x2, 0x1ff, 0xfffffff8, 0x6, 0x54f2, 0x0, 0xc89a, 0x3, 0x7, 0x80000000, 0xb, 0x2, 0x14a, 0x52, 0x8, 0xfffffffc, 0x1, 0x5, 0xe3, 0x7, 0x1, 0xc, 0x7fffffff, 0xfffffff9, 0x6, 0x7, 0x9, 0x4, 0x2, 0x43d, 0x7ff, 0x8, 0x3ff, 0x3adc, 0x7c, 0xfffffffa, 0x3, 0x3, 0x1e78, 0x9, 0x69e, 0x20000, 0xfffffffc, 0x1, 0x7, 0x4, 0x401, 0x1ff, 0xc46, 0x0, 0x2, 0x1, 0x9, 0x401, 0x5, 0x5, 0x3, 0x6, 0xafa, 0x0, 0x3b4, 0x2e, 0x2, 0x9, 0x0, 0xb07d, 0x81, 0x5, 0x6, 0xffffff9a, 0x5, 0xfffffffc, 0x3, 0x1fd, 0x6, 0x7fff, 0x4, 0x6, 0x0, 0x6, 0x8, 0xffffffff, 0x3, 0x5, 0xc34, 0x8, 0x7, 0x3, 0x1000, 0x0, 0xffff, 0x90, 0x8, 0x4b, 0x334, 0x3, 0x81, 0x7ff, 0x8, 0xffffffa3, 0xfffffeff, 0xb1, 0x7, 0x3, 0x1, 0x9, 0x686, 0x80, 0x3, 0x10, 0x80000001, 0xc7f1, 0x6, 0x2, 0x401, 0x6, 0x8, 0x1000, 0x1f, 0x2, 0x1, 0x5, 0x0, 0x7, 0x4, 0x5, 0x7f, 0x2, 0x4, 0x7b, 0xffe, 0xda06, 0x3c8, 0x4, 0x1000, 0x7, 0x46, 0x6, 0x7, 0xb9, 0x8, 0x7fff, 0xd, 0xa14, 0x8, 0x9, 0xf674, 0x3, 0x3, 0xfffffff7, 0x3, 0x9, 0x3ef7, 0x7, 0x1, 0x800, 0x10, 0xff, 0x7, 0x3, 0x0, 0xff, 0xff, 0x51d, 0x0, 0x7, 0xff, 0x9, 0x2, 0x2, 0x1ff, 0x5, 0xbe, 0x1, 0x7, 0x80, 0x6, 0x6, 0x5, 0x3, 0x5, 0x2, 0x10001, 0x0, 0xbf, 0x6, 0x2, 0x5d, 0x8, 0x7, 0x55, 0x49, 0x1, 0x6cc466bd, 0x1, 0x4, 0x200, 0x1, 0x2, 0x4, 0xb, 0xe0000000, 0xbda4, 0x2]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1c4f}, @TCA_TBF_PARMS={0x28, 0x1, {{0xef, 0x0, 0x79, 0x1, 0x2, 0xffff8001}, {0xb, 0x2, 0x0, 0x8, 0x4, 0x7f}, 0x9, 0x10001, 0xf44}}, @TCA_TBF_RTAB={0x404, 0x2, [0x101, 0x3, 0x0, 0x5, 0xfd90, 0x6, 0x7, 0x7, 0x15, 0x3, 0x0, 0x1, 0x10001, 0xa, 0x6, 0x8, 0x80000000, 0x2, 0xed, 0x7, 0x3, 0x3635, 0x6, 0x3, 0x1008, 0x3aea6292, 0x0, 0xb1f4, 0x8, 0x9, 0x73, 0x5, 0x8bf, 0x9000, 0x2, 0x6, 0xf7, 0x7fff, 0x9, 0x1, 0x7, 0xffffffff, 0x4, 0x101, 0xd, 0x2, 0xef, 0x52, 0x3, 0x3, 0xfffffff6, 0x0, 0x1, 0x7, 0xf, 0xe6b, 0x1, 0x2, 0x7ff, 0x5, 0x3, 0x1, 0x0, 0x11, 0x0, 0x9, 0x1, 0x120000, 0x3ffc000, 0x288, 0x5, 0xfff, 0x4, 0x6, 0x4, 0x1000, 0x8, 0x7f, 0x4, 0xffffffff, 0x8, 0x6c, 0xb825, 0x2, 0xa4e, 0x2, 0x1, 0x7, 0x1ffe0000, 0x9, 0x305, 0x6, 0x101, 0x800, 0x0, 0xfffffffe, 0xe, 0x7, 0x1, 0x800, 0xc, 0x81, 0x3, 0x8000, 0xdb2, 0x1, 0x942, 0xff, 0x6, 0xb4ef, 0x2, 0x71, 0x7, 0xc000000, 0x300, 0x3, 0x2, 0x81, 0x4, 0x8, 0x1, 0x0, 0x9, 0xb, 0xc, 0xfffffff9, 0x9, 0x5, 0x2, 0xffffff80, 0xd4, 0x8, 0x10000, 0x1, 0x1212, 0xffffffff, 0x101, 0x3, 0x5, 0x7, 0xb, 0xe6, 0x10000, 0x1, 0x80000000, 0x200, 0x5, 0x400000, 0x4, 0xffff8000, 0x7, 0x4, 0x80, 0xeb, 0x3, 0x9, 0x200, 0x7, 0x88, 0x2, 0x7fffffff, 0xfff, 0x9, 0x6, 0x7fffffff, 0x4, 0x40, 0x5, 0x7, 0x9, 0x6, 0xffffffe4, 0xff800, 0xb, 0x8, 0x861d, 0x3, 0x8c1, 0x0, 0x5, 0x1a0, 0x300000, 0x3, 0x3, 0x8, 0x7, 0x0, 0x2, 0xffffffff, 0x8001, 0x4, 0x5, 0x6, 0x3, 0x1, 0xffff, 0x9, 0x18000000, 0x4, 0x8, 0x80, 0x6, 0xffff0000, 0x7f, 0x8, 0x5, 0x6, 0x7f, 0xca7c, 0x4, 0xfff, 0x8a7b, 0xdc, 0xc52, 0x3ff, 0x80000001, 0x0, 0x0, 0x40, 0x2, 0x2, 0x9, 0x9, 0x4, 0x1a6, 0x10, 0xfffffff3, 0x8000, 0x6, 0x8, 0x1800000, 0x5, 0x1, 0x0, 0x4, 0x2, 0x5, 0x4, 0x7de, 0xc980, 0x63376e93, 0x8001, 0x3, 0x79, 0x9, 0x10001, 0x8, 0x6, 0xc, 0x10, 0xfffffffa, 0x4d58, 0x8000, 0x2, 0x10000, 0x9]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd457dc44c41be09a}]}}]}, 0xc80}, 0x1, 0x0, 0x0, 0x51}, 0x0) 1.455555463s ago: executing program 2 (id=381): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRESDEC=r2, @ANYBLOB="c3871ac03ac0a0b967d0c28e9cb82b08b6959db2bddb0dc8cb4eb5fda00ef6050052bb328710105967", @ANYRES32=r4, @ANYRES32=r2], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x6}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000001400002c00128009000100626f6e64000000001c00028008000b00042000000500060000000000080007"], 0x4c}}, 0x0) r10 = timerfd_create(0x0, 0x0) timerfd_settime(r10, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) pselect6(0x40, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x8003ff, 0x0, 0x23e654d4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x1f, &(0x7f00000004c0)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xbf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xcff3}, @map_val={0x18, 0x9, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r11) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r13}, 0x10) sendto$inet6(r12, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 1.444057114s ago: executing program 3 (id=382): r0 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee1, 0x80, 0x2002, 0x8b6}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") ioctl$sock_ifreq(r3, 0x89b0, &(0x7f0000000300)={'veth0_to_hsr\x00', @ifru_data=&(0x7f0000000100)="ecbb8406cb4b2c1659f667d22581740b08dabd7fe66e10107dba5e0370987bed"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000009600000a580000e242efb0f29000060a0b04000000030000b776de860000020000002c000480e7180a77ceacafaa280003640e000100636f6e6e6c696d6974000000140012800800024000000e0900010073797a30000000000900020073797a32000000000000000011000100000000000000d1ff535d975911669d8235cbd98614e7a6cdcb680f44b8def6ee071cd59f43039945066285ff8a2c67baa6b937dca5d69caeb756830d604309092f0143eff830058f02d3525b4aa660de32112b0bc95153369ceac7d883981879cdb13e"], 0x80}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, 0x0, 0x64, 0x183000, 0x23456}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000003000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000002"], 0x50) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.079303073s ago: executing program 3 (id=383): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) unshare(0x22020600) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) set_robust_list(&(0x7f00000003c0)={0x0, 0xfffffffffffffff7}, 0x18) recvmsg(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffec9, 0x0}, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) socket(0x1e, 0x5, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000040)='./file0\x00', r0, 0x4000, r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.041481216s ago: executing program 1 (id=384): r0 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee1, 0x80, 0x2002, 0x8b6}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") ioctl$sock_ifreq(r3, 0x89b0, &(0x7f0000000300)={'veth0_to_hsr\x00', @ifru_data=&(0x7f0000000100)="ecbb8406cb4b2c1659f667d22581740b08dabd7fe66e10107dba5e0370987bed"}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000009600000a580000e242efb0f29000060a0b04000000030000b776de860000020000002c000480e7180a77ceacafaa280003640e000100636f6e6e6c696d6974000000140012800800024000000e0900010073797a30000000000900020073797a32000000000000000011000100000000000000d1ff535d975911669d8235cbd98614e7a6cdcb680f44b8def6ee071cd59f43039945066285ff8a2c67baa6b937dca5d69caeb756830d604309092f0143eff830058f02d3525b4aa660de32112b0bc95153369ceac7d883981879cdb13e"], 0x80}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, 0x0, 0x64, 0x183000, 0x23456}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) 1.008766919s ago: executing program 4 (id=385): r0 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1, 0x1000000}, 0x20) r3 = fsopen(&(0x7f0000000300)='devpts\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x437, 0x70bd2d, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x7, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 937.955105ms ago: executing program 4 (id=386): socket(0x18, 0x1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x3a, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x7, 0x6}) 841.622153ms ago: executing program 4 (id=389): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x4, 0x34a, &(0x7f0000000900)="$eJzs3UFrHGUYB/Cna5uUaLo5iKAgvtSLXpYkfgEXaUEMKGlXqgdhaja67HQ37CyVLWK9efVzFI/eBPEL5KB3b95y8dhD6cjuZjebGlGi6Rj6+8EwT3jzn3lflhney/Ac3Pr2Tne3aOxmw6i9naIWEbWHEWuTaurC4bk2qZfG5fJs7Ot4s37r11dvfPTxe82trWvbKV1v3nxrM6V05bUfv/jyu6s/DZ//8PsrPyzH/tonB79v/rb/0v7LB49vft4pUqdIvf4wZel2vz/MbufttNMpuo2UPsjbWdFOnV7RHhwb3837e3ujlPV2Vlf2Bu2iSFlvlLrtURr203AwStlnWaeXGo1GWl0J/k7rwfZ21qx6FpytwaCZXVh8aOdaDyqZEABQqVPu/+eq2P/PZmD/fyoL20D7/2fBeP+/dPj8Hmf/DwAAAAAAAAAAAAAA58HDsqyXZVmfncvZ1yGHf1c8Pc7Yn37/J46q58fZunF5/uHe5Yj8m7utu63peTre3I1O5NGO9ajHo/FrYWZaX39369p6GqtFxJ37k/zVnyNazx3Pb0Q91k7Ob6SpWD3MT65zKVYW85tRjxcX8veP8psn5pfijdcX8o2oxy+fRj/y2Jm83o7yX22k9M77W0/klyf/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCzoZHm1o73v5/27280/mp8mp/311+Pejw6ub//+on9+S/GKxerXTsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzBSje90sz9uD0xYXImJ8/NPUrOf/v7rp0y9q/9UFH5dlWf1yKi8uRcRTudcLEfH/WPI5Kyp+MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAFjpp+Vz0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqlSM7nWzPG8PzrCoeo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADnyR8BAAD//6xbFvE=") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 822.566604ms ago: executing program 0 (id=390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_secret(0x80000) fcntl$setlease(r1, 0x400, 0x0) close(r1) 773.482538ms ago: executing program 0 (id=391): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r3, 0xffffffffffffffff, 0x0) 754.36129ms ago: executing program 0 (id=392): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000027000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', r0, 0x4000, r3}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380), 0x2}}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) 659.687107ms ago: executing program 4 (id=393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000200000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x800, 0x3, 0x1000034e}, &(0x7f0000000040), &(0x7f0000000580)) 653.854118ms ago: executing program 1 (id=394): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x1, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r5, 0xffffffffffffffff, 0x0) 594.557193ms ago: executing program 0 (id=395): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x1, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r5, 0xffffffffffffffff, 0x0) 569.359424ms ago: executing program 0 (id=396): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 551.948186ms ago: executing program 2 (id=397): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='sched_switch\x00', r4, 0x0, 0x80000000000001}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 358.695962ms ago: executing program 0 (id=398): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) unshare(0x22020600) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) set_robust_list(&(0x7f00000003c0)={0x0, 0xfffffffffffffff7}, 0x18) recvmsg(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffec9, 0x0}, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) socket(0x1e, 0x5, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000040)='./file0\x00', r0, 0x4000, r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 308.155596ms ago: executing program 2 (id=399): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r3) 255.01805ms ago: executing program 2 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, 0x0, 0x20) 163.636847ms ago: executing program 2 (id=401): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) io_setup(0x81, &(0x7f0000001440)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 163.398517ms ago: executing program 3 (id=402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_secret(0x80000) fcntl$setlease(r1, 0x400, 0x0) close(r1) 110.729542ms ago: executing program 3 (id=403): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000640)='./file1\x00', 0x12200, 0x6f) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000480)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000500)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0xb4, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x11, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000003000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000006000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x5c, 0x0, 0x0, 0x40f00, 0x55, '\x00', 0x0, @fallback=0x3b, r2, 0x8, &(0x7f00000006c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x6, 0xd, 0x2a}, 0x10, 0xffffffffffffffff, r1, 0x4, 0x0, &(0x7f0000000740)=[{0x4, 0x4, 0x6, 0x4}, {0x5, 0x1, 0x10, 0x9}, {0x0, 0x5, 0x0, 0x9}, {0x5, 0x4, 0x10}], 0x10, 0x83}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r0, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x1d, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x8d6, 0x39, &(0x7f0000000440)=""/57, 0x41000, 0x9, '\x00', r5, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x8, &(0x7f0000000a00)=[r8, r9, r10, r0], &(0x7f0000000a40)=[{0x4, 0x1, 0xc, 0xb}, {0x4, 0x2, 0x3, 0x4}, {0x4, 0x2, 0x1, 0x8}, {0x3, 0x4, 0x4, 0x1}, {0x5, 0x2, 0xa, 0x5}, {0x3, 0x1, 0x10, 0x6}, {0x5, 0x3, 0x6, 0x1}, {0x2, 0x4, 0x1, 0x5}], 0x10, 0x4}, 0x94) listxattr(0x0, 0x0, 0x0) 26.218189ms ago: executing program 2 (id=404): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x4, 0x34a, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 0s ago: executing program 3 (id=405): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000027000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', r0, 0x4000, r3}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380), 0x2}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) kernel console output (not intermixed with test programs): =process permissive=1 [ 18.902829][ T29] audit: type=1400 audit(1755190610.167:61): avc: denied { siginh } for pid=3222 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 26.088088][ T29] audit: type=1400 audit(1755190617.357:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.088933][ T3292] cgroup: Unknown subsys name 'net' [ 26.111240][ T29] audit: type=1400 audit(1755190617.357:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.138894][ T29] audit: type=1400 audit(1755190617.387:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.398935][ T3292] cgroup: Unknown subsys name 'cpuset' [ 26.404984][ T3292] cgroup: Unknown subsys name 'rlimit' [ 26.536093][ T29] audit: type=1400 audit(1755190617.807:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.566186][ T29] audit: type=1400 audit(1755190617.807:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.588025][ T29] audit: type=1400 audit(1755190617.807:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.604077][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.608974][ T29] audit: type=1400 audit(1755190617.807:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.638005][ T29] audit: type=1400 audit(1755190617.837:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.661353][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.663827][ T29] audit: type=1400 audit(1755190617.837:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.696032][ T29] audit: type=1400 audit(1755190617.887:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.732684][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 27.817973][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.825066][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.832872][ T3301] bridge_slave_0: entered allmulticast mode [ 27.839311][ T3301] bridge_slave_0: entered promiscuous mode [ 27.845812][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.853116][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.860558][ T3301] bridge_slave_1: entered allmulticast mode [ 27.867010][ T3301] bridge_slave_1: entered promiscuous mode [ 27.882267][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 27.926467][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.937705][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.965472][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.980898][ T3301] team0: Port device team_slave_0 added [ 27.993645][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 28.008435][ T3301] team0: Port device team_slave_1 added [ 28.044317][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.051405][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.059130][ T3306] bridge_slave_0: entered allmulticast mode [ 28.065464][ T3306] bridge_slave_0: entered promiscuous mode [ 28.076030][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 28.084967][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.091923][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.117942][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.129182][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.136108][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.162111][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.176073][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.183166][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.190498][ T3306] bridge_slave_1: entered allmulticast mode [ 28.196796][ T3306] bridge_slave_1: entered promiscuous mode [ 28.256993][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.267251][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.283137][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.290528][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.297703][ T3308] bridge_slave_0: entered allmulticast mode [ 28.304239][ T3308] bridge_slave_0: entered promiscuous mode [ 28.310708][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.317740][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.324996][ T3307] bridge_slave_0: entered allmulticast mode [ 28.331243][ T3307] bridge_slave_0: entered promiscuous mode [ 28.344836][ T3301] hsr_slave_0: entered promiscuous mode [ 28.350802][ T3301] hsr_slave_1: entered promiscuous mode [ 28.356710][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.363825][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.371149][ T3308] bridge_slave_1: entered allmulticast mode [ 28.377968][ T3308] bridge_slave_1: entered promiscuous mode [ 28.384090][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.391131][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.398245][ T3307] bridge_slave_1: entered allmulticast mode [ 28.404970][ T3307] bridge_slave_1: entered promiscuous mode [ 28.430723][ T3306] team0: Port device team_slave_0 added [ 28.450435][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.460070][ T3306] team0: Port device team_slave_1 added [ 28.466824][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.480371][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.487585][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.494683][ T3313] bridge_slave_0: entered allmulticast mode [ 28.501887][ T3313] bridge_slave_0: entered promiscuous mode [ 28.509326][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.523365][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.532934][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.540395][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.547468][ T3313] bridge_slave_1: entered allmulticast mode [ 28.553817][ T3313] bridge_slave_1: entered promiscuous mode [ 28.590630][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.597572][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.623634][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.634933][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.642089][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.668100][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.685570][ T3307] team0: Port device team_slave_0 added [ 28.692279][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.701950][ T3308] team0: Port device team_slave_0 added [ 28.710440][ T3307] team0: Port device team_slave_1 added [ 28.718727][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.728417][ T3308] team0: Port device team_slave_1 added [ 28.768557][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.775840][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.801962][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.813911][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.821565][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.848512][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.862242][ T3313] team0: Port device team_slave_0 added [ 28.879192][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.886114][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.912323][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.923145][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.930116][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.956034][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.970633][ T3313] team0: Port device team_slave_1 added [ 28.982548][ T3306] hsr_slave_0: entered promiscuous mode [ 28.988878][ T3306] hsr_slave_1: entered promiscuous mode [ 28.994716][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 29.000455][ T3306] Cannot create hsr debugfs directory [ 29.035689][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.042736][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.068687][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.081006][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.087936][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.113943][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.158215][ T3308] hsr_slave_0: entered promiscuous mode [ 29.164617][ T3308] hsr_slave_1: entered promiscuous mode [ 29.170435][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 29.176140][ T3308] Cannot create hsr debugfs directory [ 29.209996][ T3313] hsr_slave_0: entered promiscuous mode [ 29.216035][ T3313] hsr_slave_1: entered promiscuous mode [ 29.222201][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 29.227915][ T3313] Cannot create hsr debugfs directory [ 29.235108][ T3307] hsr_slave_0: entered promiscuous mode [ 29.241007][ T3307] hsr_slave_1: entered promiscuous mode [ 29.246764][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 29.252508][ T3307] Cannot create hsr debugfs directory [ 29.270921][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.290610][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.299836][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.324976][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.411410][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.432453][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.448445][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.460772][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.481827][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.490601][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.505233][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.515327][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.550682][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.559210][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.567809][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.576980][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.599441][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.613659][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.633592][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.646137][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.661471][ T1751] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.668525][ T1751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.681575][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.691164][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.699213][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.708803][ T1751] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.715942][ T1751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.731377][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.747020][ T1751] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.754142][ T1751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.765930][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.773497][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.815663][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.845783][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.856857][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.877135][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.886737][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.897451][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.904651][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.918833][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.925964][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.935610][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.942793][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.964156][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.975278][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.985899][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.002661][ T2142] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.009768][ T2142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.022528][ T2142] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.029637][ T2142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.047191][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.057119][ T2142] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.064855][ T2142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.076108][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.093970][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.146515][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.157195][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.241547][ T3301] veth0_vlan: entered promiscuous mode [ 30.260721][ T3301] veth1_vlan: entered promiscuous mode [ 30.277995][ T3306] veth0_vlan: entered promiscuous mode [ 30.287447][ T3306] veth1_vlan: entered promiscuous mode [ 30.298338][ T3301] veth0_macvtap: entered promiscuous mode [ 30.307976][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.322940][ T3301] veth1_macvtap: entered promiscuous mode [ 30.340775][ T3306] veth0_macvtap: entered promiscuous mode [ 30.353584][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.364942][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.373758][ T3306] veth1_macvtap: entered promiscuous mode [ 30.381382][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.394032][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.412635][ T3313] veth0_vlan: entered promiscuous mode [ 30.418912][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.427683][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.437292][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.447159][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.460090][ T3313] veth1_vlan: entered promiscuous mode [ 30.473124][ T3313] veth0_macvtap: entered promiscuous mode [ 30.487351][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.504302][ T3313] veth1_macvtap: entered promiscuous mode [ 30.515296][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.531861][ T1751] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.542028][ T1751] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.556856][ T1751] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.571547][ T3307] veth0_vlan: entered promiscuous mode [ 30.578334][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.591471][ T1751] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.611575][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.617665][ T3308] veth0_vlan: entered promiscuous mode [ 30.634781][ T1751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.643992][ T1751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.664318][ T1751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.673477][ T3307] veth1_vlan: entered promiscuous mode [ 30.685290][ T3308] veth1_vlan: entered promiscuous mode [ 30.699564][ T1751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.719330][ T3307] veth0_macvtap: entered promiscuous mode [ 30.730043][ T3307] veth1_macvtap: entered promiscuous mode [ 30.740581][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.759252][ T3308] veth0_macvtap: entered promiscuous mode [ 30.780002][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.788098][ T3308] veth1_macvtap: entered promiscuous mode [ 30.799964][ T3476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 30.805514][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.817463][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.828810][ T1679] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.829557][ T3482] FAULT_INJECTION: forcing a failure. [ 30.829557][ T3482] name failslab, interval 1, probability 0, space 0, times 1 [ 30.850297][ T3482] CPU: 1 UID: 0 PID: 3482 Comm: syz.0.7 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 30.850364][ T3482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 30.850416][ T3482] Call Trace: [ 30.850422][ T3482] [ 30.850429][ T3482] __dump_stack+0x1d/0x30 [ 30.850454][ T3482] dump_stack_lvl+0xe8/0x140 [ 30.850478][ T3482] dump_stack+0x15/0x1b [ 30.850493][ T3482] should_fail_ex+0x265/0x280 [ 30.850514][ T3482] should_failslab+0x8c/0xb0 [ 30.850538][ T3482] kmem_cache_alloc_noprof+0x50/0x310 [ 30.850600][ T3482] ? getname_flags+0x80/0x3b0 [ 30.850623][ T3482] getname_flags+0x80/0x3b0 [ 30.850648][ T3482] __x64_sys_link+0x33/0x70 [ 30.850723][ T3482] x64_sys_call+0x12a7/0x2ff0 [ 30.850740][ T3482] do_syscall_64+0xd2/0x200 [ 30.850761][ T3482] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 30.850780][ T3482] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 30.850853][ T3482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.850875][ T3482] RIP: 0033:0x7f20c17bebe9 [ 30.850894][ T3482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.850908][ T3482] RSP: 002b:00007f20c021f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 30.850977][ T3482] RAX: ffffffffffffffda RBX: 00007f20c19e5fa0 RCX: 00007f20c17bebe9 [ 30.851002][ T3482] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 30.851012][ T3482] RBP: 00007f20c021f090 R08: 0000000000000000 R09: 0000000000000000 [ 30.851022][ T3482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.851034][ T3482] R13: 00007f20c19e6038 R14: 00007f20c19e5fa0 R15: 00007ffd4d759e38 [ 30.851051][ T3482] [ 30.865158][ T3485] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 31.050788][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.093413][ T3485] 9pnet: Could not find request transport: 0xffffffffffffffff [ 31.108712][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 31.108726][ T29] audit: type=1400 audit(1755190622.387:128): avc: denied { create } for pid=3496 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.116477][ T3486] 9pnet: Could not find request transport: 0xffffffffffffffff [ 31.153912][ T3489] loop4: detected capacity change from 0 to 512 [ 31.161279][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.167429][ T29] audit: type=1326 audit(1755190622.417:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedc71ebe9 code=0x7ffc0000 [ 31.171481][ T3489] ======================================================= [ 31.171481][ T3489] WARNING: The mand mount option has been deprecated and [ 31.171481][ T3489] and is ignored by this kernel. Remove the mand [ 31.171481][ T3489] option from the mount to silence this warning. [ 31.171481][ T3489] ======================================================= [ 31.193508][ T29] audit: type=1326 audit(1755190622.417:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedc71ebe9 code=0x7ffc0000 [ 31.238631][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.251501][ T29] audit: type=1400 audit(1755190622.417:131): avc: denied { read write } for pid=3488 comm="syz.4.10" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 31.286411][ T29] audit: type=1400 audit(1755190622.417:132): avc: denied { open } for pid=3488 comm="syz.4.10" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 31.311588][ T29] audit: type=1326 audit(1755190622.417:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feedc71ebe9 code=0x7ffc0000 [ 31.312350][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.334808][ T29] audit: type=1326 audit(1755190622.417:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedc71ebe9 code=0x7ffc0000 [ 31.367571][ T29] audit: type=1326 audit(1755190622.417:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedc71ebe9 code=0x7ffc0000 [ 31.391398][ T29] audit: type=1326 audit(1755190622.417:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedc71ebe9 code=0x7ffc0000 [ 31.407580][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.414688][ T29] audit: type=1326 audit(1755190622.417:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedc71ebe9 code=0x7ffc0000 [ 31.425998][ T3499] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 31.468811][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.481900][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.519401][ T3489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.540180][ T3509] FAULT_INJECTION: forcing a failure. [ 31.540180][ T3509] name failslab, interval 1, probability 0, space 0, times 0 [ 31.548571][ T3489] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.553251][ T3509] CPU: 1 UID: 0 PID: 3509 Comm: syz.2.3 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 31.553278][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 31.553289][ T3509] Call Trace: [ 31.553296][ T3509] [ 31.553303][ T3509] __dump_stack+0x1d/0x30 [ 31.553325][ T3509] dump_stack_lvl+0xe8/0x140 [ 31.553344][ T3509] dump_stack+0x15/0x1b [ 31.553538][ T3509] should_fail_ex+0x265/0x280 [ 31.553559][ T3509] should_failslab+0x8c/0xb0 [ 31.553592][ T3509] kmem_cache_alloc_node_noprof+0x57/0x320 [ 31.553620][ T3509] ? __alloc_skb+0x101/0x320 [ 31.553722][ T3509] __alloc_skb+0x101/0x320 [ 31.553750][ T3509] netlink_alloc_large_skb+0xba/0xf0 [ 31.553816][ T3509] netlink_sendmsg+0x3cf/0x6b0 [ 31.553837][ T3509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 31.553858][ T3509] __sock_sendmsg+0x145/0x180 [ 31.553916][ T3509] __sys_sendto+0x268/0x330 [ 31.553953][ T3509] __x64_sys_sendto+0x76/0x90 [ 31.553983][ T3509] x64_sys_call+0x2d05/0x2ff0 [ 31.554067][ T3509] do_syscall_64+0xd2/0x200 [ 31.554092][ T3509] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 31.554114][ T3509] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 31.554199][ T3509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.554220][ T3509] RIP: 0033:0x7fd7eeeaebe9 [ 31.554236][ T3509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.554252][ T3509] RSP: 002b:00007fd7ed90f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 31.554304][ T3509] RAX: ffffffffffffffda RBX: 00007fd7ef0d5fa0 RCX: 00007fd7eeeaebe9 [ 31.554317][ T3509] RDX: 000000000000004c RSI: 0000200000000080 RDI: 0000000000000007 [ 31.554405][ T3509] RBP: 00007fd7ed90f090 R08: 0000000000000000 R09: 0000000000000000 [ 31.554417][ T3509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.554430][ T3509] R13: 00007fd7ef0d6038 R14: 00007fd7ef0d5fa0 R15: 00007ffe5d472148 [ 31.554448][ T3509] [ 31.791456][ T3489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.10: corrupted inode contents [ 31.813082][ T3517] loop2: detected capacity change from 0 to 512 [ 31.820640][ T3517] EXT4-fs: quotafile must be on filesystem root [ 31.827307][ T3489] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.10: mark_inode_dirty error [ 31.858753][ T3489] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.10: corrupted inode contents [ 31.895953][ C1] hrtimer: interrupt took 36846 ns [ 31.905113][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.940945][ T3529] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17'. [ 31.996544][ T3536] mmap: syz.2.15 (3536) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.009844][ T3534] Zero length message leads to an empty skb [ 32.048535][ T3539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 32.071915][ T3541] loop0: detected capacity change from 0 to 512 [ 32.112892][ T3541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.135341][ T3546] loop3: detected capacity change from 0 to 2048 [ 32.200815][ T3541] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.243191][ T3550] loop4: detected capacity change from 0 to 1024 [ 32.264702][ T3546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.321698][ T3550] EXT4-fs: Ignoring removed bh option [ 32.327384][ T3550] EXT4-fs: inline encryption not supported [ 32.340708][ T3550] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.373506][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.399948][ T3550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 32.425874][ T3550] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.23: lblock 2 mapped to illegal pblock 2 (length 1) [ 32.448357][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 32.457234][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 32.473935][ T3557] loop0: detected capacity change from 0 to 1024 [ 32.481027][ T3550] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.23: lblock 0 mapped to illegal pblock 48 (length 1) [ 32.495515][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 32.505476][ T3550] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.23: Failed to acquire dquot type 0 [ 32.516823][ T3557] EXT4-fs: Ignoring removed bh option [ 32.522278][ T3550] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 32.532806][ T3546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.548628][ T3550] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.23: mark_inode_dirty error [ 32.567662][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 32.576481][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 32.580435][ T3557] EXT4-fs: inline encryption not supported [ 32.590279][ T3550] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 32.601204][ T3550] EXT4-fs (loop4): 1 orphan inode deleted [ 32.607356][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 32.607481][ T3559] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 32.616547][ T3550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.641398][ T3557] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.653026][ T2142] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.669126][ T3557] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 32.701661][ T2142] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 32.714078][ T3550] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.23: lblock 0 mapped to illegal pblock 48 (length 1) [ 32.748810][ T3557] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.24: lblock 2 mapped to illegal pblock 2 (length 1) [ 32.768547][ T3566] 9pnet_fd: Insufficient options for proto=fd [ 32.791319][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 32.813815][ T3570] loop1: detected capacity change from 0 to 1764 [ 32.821034][ T3557] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.24: lblock 0 mapped to illegal pblock 48 (length 1) [ 32.852315][ T3570] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 32.856320][ T3557] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.24: Failed to acquire dquot type 0 [ 32.879566][ T3557] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 32.879726][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.904713][ T3557] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.24: mark_inode_dirty error [ 32.922165][ T3557] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 32.923990][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.943792][ T3557] EXT4-fs (loop0): 1 orphan inode deleted [ 32.961850][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.961891][ T3575] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 32.981975][ T3577] loop2: detected capacity change from 0 to 1024 [ 32.990688][ T3577] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 33.008602][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 33.011756][ T3557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.034211][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.041403][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.051114][ T3577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.072911][ T3577] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.32: missing EA_INODE flag [ 33.084679][ T3577] EXT4-fs (loop2): Remounting filesystem read-only [ 33.091224][ T3577] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.279164][ T3585] loop3: detected capacity change from 0 to 512 [ 34.168884][ T3593] loop4: detected capacity change from 0 to 1024 [ 34.178425][ T3585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.191553][ T3585] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.215731][ T3557] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.24: lblock 0 mapped to illegal pblock 48 (length 1) [ 34.234818][ T3593] EXT4-fs: Ignoring removed bh option [ 34.241241][ T3593] EXT4-fs: inline encryption not supported [ 34.247974][ T3593] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.261269][ T3593] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 34.263841][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.270728][ T3593] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.31: lblock 2 mapped to illegal pblock 2 (length 1) [ 34.280168][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.290956][ T3593] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.31: lblock 0 mapped to illegal pblock 48 (length 1) [ 34.313105][ T3593] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.31: Failed to acquire dquot type 0 [ 34.324487][ T3593] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 34.335574][ T3593] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.31: mark_inode_dirty error [ 34.345912][ T3592] syz.2.32 (3592) used greatest stack depth: 10912 bytes left [ 34.375829][ T3593] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 34.429553][ T3593] EXT4-fs (loop4): 1 orphan inode deleted [ 34.434321][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.435949][ T3593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.447553][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 34.471934][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 34.484685][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.604875][ T1751] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.606432][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.614868][ T1751] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.632381][ T2142] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.660881][ T2142] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.676978][ T3593] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.31: lblock 0 mapped to illegal pblock 48 (length 1) [ 34.748863][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.764451][ T3616] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3616 comm=syz.2.39 [ 34.776795][ T3616] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3616 comm=syz.2.39 [ 34.934479][ T3643] loop0: detected capacity change from 0 to 1024 [ 34.951446][ T3645] syz.1.54 uses obsolete (PF_INET,SOCK_PACKET) [ 34.964557][ T3643] EXT4-fs: Ignoring removed bh option [ 34.973113][ T3643] EXT4-fs: inline encryption not supported [ 34.983364][ T3643] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.002748][ T3643] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 35.015287][ T3650] loop2: detected capacity change from 0 to 256 [ 35.050637][ T3643] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.53: lblock 2 mapped to illegal pblock 2 (length 1) [ 35.065572][ T3643] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.53: lblock 0 mapped to illegal pblock 48 (length 1) [ 35.081482][ T3643] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.53: Failed to acquire dquot type 0 [ 35.095623][ T3648] loop4: detected capacity change from 0 to 2048 [ 35.102454][ T3643] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 35.112234][ T3643] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.53: mark_inode_dirty error [ 35.127711][ T3648] EXT4-fs (loop4): failed to initialize system zone (-117) [ 35.137211][ T3643] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 35.149524][ T3643] EXT4-fs (loop0): 1 orphan inode deleted [ 35.168102][ T1751] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.184635][ T3643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.206997][ T1751] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 35.208665][ T3648] EXT4-fs (loop4): mount failed [ 35.259014][ T3643] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.53: lblock 0 mapped to illegal pblock 48 (length 1) [ 35.286712][ T3663] capability: warning: `syz.2.58' uses deprecated v2 capabilities in a way that may be insecure [ 35.337232][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.637646][ T3700] loop0: detected capacity change from 0 to 512 [ 35.645232][ T3700] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 35.655093][ T3700] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 35.674979][ T3700] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.71: Invalid inode table block 1 in block_group 0 [ 35.689055][ T3700] EXT4-fs (loop0): Remounting filesystem read-only [ 35.695659][ T3700] EXT4-fs (loop0): get root inode failed [ 35.701324][ T3700] EXT4-fs (loop0): mount failed [ 35.731062][ T3705] loop3: detected capacity change from 0 to 512 [ 35.844084][ T3714] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 35.871962][ T3721] __nla_validate_parse: 6 callbacks suppressed [ 35.871998][ T3721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.80'. [ 35.988304][ T3733] netlink: 40 bytes leftover after parsing attributes in process `syz.2.82'. [ 36.019342][ T3735] loop4: detected capacity change from 0 to 1764 [ 36.041299][ T3735] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 36.117644][ T29] kauditd_printk_skb: 558 callbacks suppressed [ 36.117658][ T29] audit: type=1326 audit(1755191139.384:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c17bebe9 code=0x7ffc0000 [ 36.197016][ T3744] loop0: detected capacity change from 0 to 764 [ 36.223142][ T3744] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 36.226612][ T3746] loop2: detected capacity change from 0 to 1024 [ 36.249595][ T29] audit: type=1400 audit(1755191139.524:681): avc: denied { create } for pid=3738 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.284114][ T3746] EXT4-fs: Ignoring removed bh option [ 36.290952][ T3746] EXT4-fs: inline encryption not supported [ 36.319313][ T3746] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.347141][ T29] audit: type=1400 audit(1755191139.614:682): avc: denied { write } for pid=3738 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.446562][ T3746] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 36.458436][ T3746] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.87: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.481357][ T3746] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 36.490872][ T3746] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.87: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.507632][ T3746] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 36.516557][ T3746] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.87: Failed to acquire dquot type 0 [ 36.528935][ T3746] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 36.539102][ T3746] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.87: mark_inode_dirty error [ 36.551444][ T3746] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 36.564240][ T3746] EXT4-fs (loop2): 1 orphan inode deleted [ 36.570677][ T3746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.583492][ T41] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.602816][ T41] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 36.611380][ T41] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 36.629390][ T3746] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.87: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.660417][ T3746] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 36.719119][ T29] audit: type=1326 audit(1755191139.975:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0ad8ebe9 code=0x7ffc0000 [ 36.742469][ T29] audit: type=1326 audit(1755191139.975:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a0ad8ebe9 code=0x7ffc0000 [ 36.766126][ T29] audit: type=1326 audit(1755191139.975:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0ad8ebe9 code=0x7ffc0000 [ 36.843777][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.878883][ T3760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.90'. [ 36.892022][ T3760] bridge0: entered promiscuous mode [ 36.906869][ T3760] bridge0: port 3(macvlan2) entered blocking state [ 36.913480][ T3760] bridge0: port 3(macvlan2) entered disabled state [ 36.921867][ T3760] macvlan2: entered allmulticast mode [ 36.927273][ T3760] bridge0: entered allmulticast mode [ 36.940799][ T3760] macvlan2: left allmulticast mode [ 36.945964][ T3760] bridge0: left allmulticast mode [ 36.954902][ T3760] bridge0: left promiscuous mode [ 37.003749][ T3766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.017682][ T3766] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 37.027707][ T3766] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 37.077269][ T3778] FAULT_INJECTION: forcing a failure. [ 37.077269][ T3778] name failslab, interval 1, probability 0, space 0, times 0 [ 37.090085][ T3778] CPU: 0 UID: 0 PID: 3778 Comm: syz.1.96 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 37.090135][ T3778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 37.090147][ T3778] Call Trace: [ 37.090154][ T3778] [ 37.090161][ T3778] __dump_stack+0x1d/0x30 [ 37.090179][ T3778] dump_stack_lvl+0xe8/0x140 [ 37.090195][ T3778] dump_stack+0x15/0x1b [ 37.090208][ T3778] should_fail_ex+0x265/0x280 [ 37.090294][ T3778] should_failslab+0x8c/0xb0 [ 37.090315][ T3778] kmem_cache_alloc_node_noprof+0x57/0x320 [ 37.090344][ T3778] ? __alloc_skb+0x101/0x320 [ 37.090425][ T3778] __alloc_skb+0x101/0x320 [ 37.090516][ T3778] ? audit_log_start+0x365/0x6c0 [ 37.090546][ T3778] audit_log_start+0x380/0x6c0 [ 37.090577][ T3778] audit_seccomp+0x48/0x100 [ 37.090612][ T3778] ? __seccomp_filter+0x68c/0x10d0 [ 37.090629][ T3778] __seccomp_filter+0x69d/0x10d0 [ 37.090647][ T3778] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 37.090700][ T3778] ? vfs_write+0x7e8/0x960 [ 37.090747][ T3778] ? __rcu_read_unlock+0x4f/0x70 [ 37.090838][ T3778] ? __fget_files+0x184/0x1c0 [ 37.090862][ T3778] __secure_computing+0x82/0x150 [ 37.090883][ T3778] syscall_trace_enter+0xcf/0x1e0 [ 37.090959][ T3778] do_syscall_64+0xac/0x200 [ 37.090985][ T3778] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.091054][ T3778] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 37.091140][ T3778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.091157][ T3778] RIP: 0033:0x7f083748ebe9 [ 37.091169][ T3778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.091185][ T3778] RSP: 002b:00007f0835ef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 37.091205][ T3778] RAX: ffffffffffffffda RBX: 00007f08376b5fa0 RCX: 00007f083748ebe9 [ 37.091216][ T3778] RDX: 0000200000000a40 RSI: 0000200000000a00 RDI: 00002000000009c0 [ 37.091276][ T3778] RBP: 00007f0835ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.091289][ T3778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.091302][ T3778] R13: 00007f08376b6038 R14: 00007f08376b5fa0 R15: 00007fff211c20e8 [ 37.091318][ T3778] [ 37.324548][ T3781] netlink: 76 bytes leftover after parsing attributes in process `syz.0.97'. [ 37.379458][ T3786] loop2: detected capacity change from 0 to 1024 [ 37.385084][ T3787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.100'. [ 37.386445][ T3786] EXT4-fs: Ignoring removed bh option [ 37.406260][ T3786] EXT4-fs: inline encryption not supported [ 37.417190][ T3786] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.446968][ T3789] loop1: detected capacity change from 0 to 1024 [ 37.460375][ T3786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 37.469181][ T3789] EXT4-fs: Ignoring removed bh option [ 37.474749][ T3789] EXT4-fs: inline encryption not supported [ 37.486650][ T3786] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.99: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.487273][ T3789] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.512793][ T3789] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 37.516211][ T3786] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.99: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.523267][ T3789] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.101: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.540638][ T3786] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.99: Failed to acquire dquot type 0 [ 37.565399][ T3786] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 37.577597][ T3786] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.99: mark_inode_dirty error [ 37.580820][ T3789] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.101: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.603553][ T3786] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 37.607674][ T3789] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.101: Failed to acquire dquot type 0 [ 37.619949][ T3786] EXT4-fs (loop2): 1 orphan inode deleted [ 37.631891][ T3786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.650588][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.666429][ T3789] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 37.692003][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 37.703811][ T3789] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.101: mark_inode_dirty error [ 37.726843][ T3786] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.99: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.763687][ T3811] netlink: 76 bytes leftover after parsing attributes in process `syz.3.109'. [ 37.781962][ T3789] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 37.837945][ T3789] EXT4-fs (loop1): 1 orphan inode deleted [ 37.850908][ T3789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.885590][ T3819] vlan2: entered allmulticast mode [ 37.921018][ T1679] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.935599][ T1679] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 37.948301][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.949468][ T3789] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.101: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.995279][ T3824] loop3: detected capacity change from 0 to 1024 [ 38.028566][ T3824] EXT4-fs: Ignoring removed bh option [ 38.040283][ T3824] EXT4-fs: inline encryption not supported [ 38.058264][ T3825] loop0: detected capacity change from 0 to 512 [ 38.118518][ T3825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.131736][ T3825] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.165540][ T3829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.116'. [ 38.229613][ T3824] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.300594][ T3824] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 38.354962][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.370599][ T3824] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.115: lblock 2 mapped to illegal pblock 2 (length 1) [ 38.404222][ T3824] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.115: lblock 0 mapped to illegal pblock 48 (length 1) [ 38.418654][ T3824] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.115: Failed to acquire dquot type 0 [ 38.434407][ T3824] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 38.444326][ T3824] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.115: mark_inode_dirty error [ 38.457908][ T3824] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 38.470688][ T3824] EXT4-fs (loop3): 1 orphan inode deleted [ 38.477038][ T3824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.489693][ T1679] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 38.504558][ T1679] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 38.528119][ T3824] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.115: lblock 0 mapped to illegal pblock 48 (length 1) [ 38.568355][ T3839] loop1: detected capacity change from 0 to 512 [ 38.578452][ T3844] netlink: 76 bytes leftover after parsing attributes in process `syz.2.121'. [ 38.588302][ T3839] journal_path: Non-blockdev passed as './bus' [ 38.594640][ T3839] EXT4-fs: error: could not find journal device path [ 38.603687][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.648787][ T3853] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 38.650504][ T3852] loop3: detected capacity change from 0 to 1024 [ 38.738714][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.759830][ T3852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.801785][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.869051][ T3869] loop3: detected capacity change from 0 to 1024 [ 38.892886][ T3872] loop4: detected capacity change from 0 to 512 [ 38.899963][ T3869] EXT4-fs: Ignoring removed bh option [ 38.917781][ T3869] EXT4-fs: inline encryption not supported [ 38.934160][ T3877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 38.943475][ T3869] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.954802][ T3869] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 38.955700][ T3872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.970089][ T3881] netlink: 'syz.1.133': attribute type 21 has an invalid length. [ 38.983336][ T3872] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.987382][ T3869] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.130: lblock 2 mapped to illegal pblock 2 (length 1) [ 38.997706][ T3881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.133'. [ 39.017308][ T3881] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 39.033921][ T3869] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.130: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.053600][ T3869] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.130: Failed to acquire dquot type 0 [ 39.078881][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.102399][ T3869] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 39.118791][ T3869] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.130: mark_inode_dirty error [ 39.145795][ T3869] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 39.173197][ T3869] EXT4-fs (loop3): 1 orphan inode deleted [ 39.184948][ T51] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.205261][ T3869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.221528][ T3895] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 39.228070][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 39.242190][ T3895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.257909][ T3895] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 39.265927][ T3895] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 39.294071][ T3869] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.325726][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.328544][ T3911] geneve2: entered promiscuous mode [ 39.340112][ T3911] geneve2: entered allmulticast mode [ 39.353402][ T41] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 39.365055][ T3915] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 39.374589][ T41] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 39.399580][ T1679] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 39.412098][ T1679] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 39.431844][ T3919] FAULT_INJECTION: forcing a failure. [ 39.431844][ T3919] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.445001][ T3919] CPU: 1 UID: 0 PID: 3919 Comm: syz.3.149 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 39.445026][ T3919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.445037][ T3919] Call Trace: [ 39.445043][ T3919] [ 39.445066][ T3919] __dump_stack+0x1d/0x30 [ 39.445087][ T3919] dump_stack_lvl+0xe8/0x140 [ 39.445104][ T3919] dump_stack+0x15/0x1b [ 39.445120][ T3919] should_fail_ex+0x265/0x280 [ 39.445141][ T3919] should_fail+0xb/0x20 [ 39.445189][ T3919] should_fail_usercopy+0x1a/0x20 [ 39.445212][ T3919] _copy_to_user+0x20/0xa0 [ 39.445239][ T3919] bpf_test_finish+0x106/0x500 [ 39.445262][ T3919] bpf_prog_test_run_xdp+0x578/0x910 [ 39.445327][ T3919] ? __rcu_read_unlock+0x4f/0x70 [ 39.445352][ T3919] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 39.445370][ T3919] bpf_prog_test_run+0x22a/0x390 [ 39.445400][ T3919] __sys_bpf+0x4b9/0x7b0 [ 39.445428][ T3919] __x64_sys_bpf+0x41/0x50 [ 39.445509][ T3919] x64_sys_call+0x2aea/0x2ff0 [ 39.445531][ T3919] do_syscall_64+0xd2/0x200 [ 39.445562][ T3919] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.445582][ T3919] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.445601][ T3919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.445625][ T3919] RIP: 0033:0x7f8a0ad8ebe9 [ 39.445727][ T3919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.445744][ T3919] RSP: 002b:00007f8a097f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 39.445764][ T3919] RAX: ffffffffffffffda RBX: 00007f8a0afb5fa0 RCX: 00007f8a0ad8ebe9 [ 39.445776][ T3919] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 39.445788][ T3919] RBP: 00007f8a097f7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.445800][ T3919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.445812][ T3919] R13: 00007f8a0afb6038 R14: 00007f8a0afb5fa0 R15: 00007fffbf5302d8 [ 39.445846][ T3919] [ 39.686165][ T3927] loop3: detected capacity change from 0 to 1024 [ 39.734277][ T3930] loop2: detected capacity change from 0 to 1764 [ 39.752045][ T3937] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 39.771698][ T3927] EXT4-fs: Ignoring removed bh option [ 39.789392][ T3930] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 39.799272][ T3927] EXT4-fs: inline encryption not supported [ 39.799429][ T3941] netlink: 'syz.4.157': attribute type 1 has an invalid length. [ 39.806808][ T3927] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.830596][ T3927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 39.841243][ T3927] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.154: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.862641][ T3927] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.154: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.877360][ T3927] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.154: Failed to acquire dquot type 0 [ 39.889583][ T3927] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 39.904654][ T3927] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.154: mark_inode_dirty error [ 39.917210][ T3927] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 39.928242][ T3927] EXT4-fs (loop3): 1 orphan inode deleted [ 39.934451][ T3927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.947391][ T41] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.969349][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 39.986797][ T3927] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.154: lblock 0 mapped to illegal pblock 48 (length 1) [ 40.065214][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.096146][ T3955] loop4: detected capacity change from 0 to 512 [ 40.106209][ T3955] EXT4-fs: Ignoring removed i_version option [ 40.112336][ T3955] ext4: Bad value for 'min_batch_time' [ 40.222315][ T3972] loop4: detected capacity change from 0 to 1764 [ 40.238971][ T3972] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 40.259229][ T3974] loop3: detected capacity change from 0 to 1024 [ 40.270814][ T3974] EXT4-fs: Ignoring removed bh option [ 40.276735][ T3974] EXT4-fs: inline encryption not supported [ 40.283044][ T3974] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.303309][ T3974] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 40.312739][ T3974] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.171: lblock 2 mapped to illegal pblock 2 (length 1) [ 40.328319][ T3974] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.171: lblock 0 mapped to illegal pblock 48 (length 1) [ 40.342947][ T3974] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.171: Failed to acquire dquot type 0 [ 40.354534][ T3974] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 40.364321][ T3974] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.171: mark_inode_dirty error [ 40.368300][ T3979] loop4: detected capacity change from 0 to 1024 [ 40.376550][ T3974] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 40.392992][ T3974] EXT4-fs (loop3): 1 orphan inode deleted [ 40.396157][ T3979] EXT4-fs: Ignoring removed bh option [ 40.399532][ T3974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.417247][ T51] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.435710][ T3979] EXT4-fs: inline encryption not supported [ 40.438152][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 40.441927][ T3979] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.458008][ T3974] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.466464][ T3979] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 40.482408][ T3979] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.173: lblock 2 mapped to illegal pblock 2 (length 1) [ 40.497456][ T3979] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.173: lblock 0 mapped to illegal pblock 48 (length 1) [ 40.511792][ T3979] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.173: Failed to acquire dquot type 0 [ 40.524605][ T3979] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 40.534590][ T3979] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.173: mark_inode_dirty error [ 40.534656][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.547553][ T3979] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 40.566056][ T3979] EXT4-fs (loop4): 1 orphan inode deleted [ 40.572271][ T3979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.584823][ T1679] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.605818][ T1679] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 40.621695][ T3979] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.173: lblock 0 mapped to illegal pblock 48 (length 1) [ 40.730177][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.846246][ T4006] loop3: detected capacity change from 0 to 1024 [ 40.852944][ T4006] EXT4-fs: Ignoring removed bh option [ 40.860756][ T4009] loop4: detected capacity change from 0 to 1764 [ 40.871365][ T4010] loop0: detected capacity change from 0 to 1764 [ 40.889607][ T4006] EXT4-fs: inline encryption not supported [ 40.906493][ T4006] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.920502][ T4010] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 40.976361][ T4006] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 41.008801][ T4017] loop0: detected capacity change from 0 to 1024 [ 41.025375][ T4017] EXT4-fs: Ignoring removed bh option [ 41.030877][ T4006] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.184: lblock 2 mapped to illegal pblock 2 (length 1) [ 41.051620][ T4017] EXT4-fs: inline encryption not supported [ 41.067979][ T4006] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.184: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.086224][ T4006] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.184: Failed to acquire dquot type 0 [ 41.115535][ T4017] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.127521][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 41.127533][ T29] audit: type=1326 audit(1755191400.404:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 41.160346][ T4006] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 41.170691][ T29] audit: type=1326 audit(1755191400.434:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 41.194477][ T29] audit: type=1326 audit(1755191400.434:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 41.201063][ T4006] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.184: mark_inode_dirty error [ 41.218059][ T29] audit: type=1326 audit(1755191400.434:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 41.253106][ T29] audit: type=1326 audit(1755191400.434:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 41.277734][ T29] audit: type=1326 audit(1755191400.434:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 41.301341][ T29] audit: type=1326 audit(1755191400.434:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 41.308556][ T4006] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 41.324653][ T29] audit: type=1326 audit(1755191400.434:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 41.324678][ T29] audit: type=1326 audit(1755191400.434:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 41.339019][ T4017] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 41.393786][ T29] audit: type=1326 audit(1755191400.584:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 41.423959][ T4006] EXT4-fs (loop3): 1 orphan inode deleted [ 41.434192][ T4006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.447139][ T51] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.466452][ T4017] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.189: lblock 2 mapped to illegal pblock 2 (length 1) [ 41.483157][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 41.502710][ T4017] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.189: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.518158][ T4017] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.189: Failed to acquire dquot type 0 [ 41.529959][ T4017] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 41.555557][ T4004] Set syz1 is full, maxelem 65536 reached [ 41.572048][ T4006] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.184: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.586592][ T4004] syz.2.179 (4004) used greatest stack depth: 10904 bytes left [ 41.587805][ T4017] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.189: mark_inode_dirty error [ 41.623506][ T4017] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 41.635772][ T4017] EXT4-fs (loop0): 1 orphan inode deleted [ 41.642683][ T4017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.655292][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.680245][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 41.692838][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.751603][ T4037] loop1: detected capacity change from 0 to 1764 [ 41.760538][ T4017] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.189: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.864209][ T4044] __nla_validate_parse: 4 callbacks suppressed [ 41.864224][ T4044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.201'. [ 41.960933][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.058367][ T4063] loop1: detected capacity change from 0 to 512 [ 42.083433][ T4063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.133119][ T4063] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.179429][ T4073] netlink: 96 bytes leftover after parsing attributes in process `syz.4.210'. [ 42.192144][ T4071] loop0: detected capacity change from 0 to 512 [ 42.200753][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.221987][ T4071] EXT4-fs: quotafile must be on filesystem root [ 42.266568][ T4076] loop1: detected capacity change from 0 to 512 [ 42.286785][ T4079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.213'. [ 42.316348][ T4082] loop0: detected capacity change from 0 to 1024 [ 42.322962][ T4082] EXT4-fs: Ignoring removed bh option [ 42.341492][ T4084] loop4: detected capacity change from 0 to 1764 [ 42.349225][ T4082] EXT4-fs: inline encryption not supported [ 42.357372][ T4082] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.388955][ T4084] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 42.397631][ T4082] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 42.417577][ T4082] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.214: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.445280][ T4089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.217'. [ 42.461895][ T4082] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.214: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.491831][ T4082] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.214: Failed to acquire dquot type 0 [ 42.517017][ T4091] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4091 comm=syz.4.218 [ 42.529519][ T4091] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4091 comm=syz.4.218 [ 42.545943][ T4082] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 42.559972][ T4082] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.214: mark_inode_dirty error [ 42.573646][ T4082] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 42.585442][ T4082] EXT4-fs (loop0): 1 orphan inode deleted [ 42.591920][ T4082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.609558][ T4098] netlink: 'syz.4.220': attribute type 21 has an invalid length. [ 42.617566][ T4098] netlink: 132 bytes leftover after parsing attributes in process `syz.4.220'. [ 42.626624][ T4098] netlink: 'syz.4.220': attribute type 1 has an invalid length. [ 42.635548][ T1679] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.660359][ T1679] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 42.693572][ T4082] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.214: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.716968][ T4102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.221'. [ 42.780641][ T4105] netlink: 88 bytes leftover after parsing attributes in process `syz.4.223'. [ 42.874535][ T4111] loop4: detected capacity change from 0 to 512 [ 42.883414][ T4111] EXT4-fs: quotafile must be on filesystem root [ 42.926366][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.930448][ T4115] loop3: detected capacity change from 0 to 1024 [ 42.952037][ T4117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.229'. [ 42.973581][ T4119] loop0: detected capacity change from 0 to 1024 [ 42.981305][ T4115] EXT4-fs: Ignoring removed bh option [ 42.991947][ T4119] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 43.002629][ T4115] EXT4-fs: inline encryption not supported [ 43.040411][ T4119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.057878][ T4119] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.228: missing EA_INODE flag [ 43.071476][ T4119] EXT4-fs (loop0): Remounting filesystem read-only [ 43.087495][ T4115] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.180659][ T4115] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 43.195529][ T4115] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.227: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.213943][ T4115] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.227: lblock 0 mapped to illegal pblock 48 (length 1) [ 43.228840][ T4115] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.227: Failed to acquire dquot type 0 [ 43.240711][ T4115] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 43.250914][ T4115] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.227: mark_inode_dirty error [ 43.660139][ T4134] loop1: detected capacity change from 0 to 512 [ 43.668590][ T4115] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 43.685580][ T4115] EXT4-fs (loop3): 1 orphan inode deleted [ 43.693081][ T4115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.706451][ T1679] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.736871][ T1679] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 43.758937][ T4115] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 43.794781][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.812031][ T4140] netlink: 88 bytes leftover after parsing attributes in process `syz.3.236'. [ 43.872123][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.914869][ T4146] loop4: detected capacity change from 0 to 1764 [ 43.990861][ T4157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.241'. [ 44.013505][ T4155] lo speed is unknown, defaulting to 1000 [ 44.019272][ T4155] lo speed is unknown, defaulting to 1000 [ 44.025399][ T4151] loop3: detected capacity change from 0 to 512 [ 44.032136][ T4151] EXT4-fs: quotafile must be on filesystem root [ 44.075946][ T4155] lo speed is unknown, defaulting to 1000 [ 44.112087][ T4155] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 44.132617][ T4163] loop3: detected capacity change from 0 to 512 [ 44.148195][ T4168] netlink: 'syz.1.246': attribute type 21 has an invalid length. [ 44.156059][ T4155] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 44.173211][ T4168] netlink: 'syz.1.246': attribute type 1 has an invalid length. [ 44.210533][ T4155] lo speed is unknown, defaulting to 1000 [ 44.230674][ T4174] loop3: detected capacity change from 0 to 1764 [ 44.238078][ T4155] lo speed is unknown, defaulting to 1000 [ 44.281561][ T4155] lo speed is unknown, defaulting to 1000 [ 44.287887][ T4174] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 44.299733][ T4155] lo speed is unknown, defaulting to 1000 [ 44.330908][ T4155] lo speed is unknown, defaulting to 1000 [ 44.338514][ T4155] lo speed is unknown, defaulting to 1000 [ 44.364559][ T4155] syz.0.243 (4155) used greatest stack depth: 10712 bytes left [ 44.393353][ T4181] loop4: detected capacity change from 0 to 1024 [ 44.403179][ T4181] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 44.425844][ T4181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.443961][ T4181] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.252: missing EA_INODE flag [ 44.458245][ T4181] EXT4-fs (loop4): Remounting filesystem read-only [ 44.544641][ T4196] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 44.562224][ T4194] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 44.674755][ T4210] lo speed is unknown, defaulting to 1000 [ 44.730728][ T4210] lo speed is unknown, defaulting to 1000 [ 45.010541][ T4219] loop3: detected capacity change from 0 to 1764 [ 45.052936][ T4220] loop0: detected capacity change from 0 to 512 [ 45.080273][ T4226] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 45.097460][ T4220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.110748][ T4220] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.138590][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.182951][ T4232] lo speed is unknown, defaulting to 1000 [ 45.215858][ T4236] loop1: detected capacity change from 0 to 1764 [ 45.233615][ T4236] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 45.250685][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.334432][ T4248] loop4: detected capacity change from 0 to 1024 [ 45.361456][ T4248] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 45.390084][ T4248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.417245][ T4248] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.280: missing EA_INODE flag [ 45.429243][ T4248] EXT4-fs (loop4): Remounting filesystem read-only [ 45.552324][ T4256] loop1: detected capacity change from 0 to 512 [ 45.564600][ T4256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.577996][ T4256] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.416024][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.437291][ T4260] lo speed is unknown, defaulting to 1000 [ 46.486557][ T4260] lo speed is unknown, defaulting to 1000 [ 46.800983][ T4266] loop3: detected capacity change from 0 to 1024 [ 46.810976][ T4266] EXT4-fs: Ignoring removed bh option [ 46.816447][ T4266] EXT4-fs: inline encryption not supported [ 46.828484][ T4266] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.850267][ T4266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 46.860213][ T4266] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.283: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.877224][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.901057][ T4266] __quota_error: 431 callbacks suppressed [ 46.901072][ T4266] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 46.927653][ T4266] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.283: lblock 0 mapped to illegal pblock 48 (length 1) [ 46.933424][ T4271] loop0: detected capacity change from 0 to 1764 [ 46.951237][ T4266] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 46.960282][ T4266] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.283: Failed to acquire dquot type 0 [ 46.999775][ T4266] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 47.028466][ T4276] __nla_validate_parse: 7 callbacks suppressed [ 47.028478][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 47.041150][ T4266] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.283: mark_inode_dirty error [ 47.059673][ T4266] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 47.061102][ T4284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.290'. [ 47.084423][ T4266] EXT4-fs (loop3): 1 orphan inode deleted [ 47.090451][ T29] audit: type=1326 audit(1755191662.361:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.0.291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20c17bebe9 code=0x0 [ 47.097198][ T4266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.115675][ T41] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.143376][ T41] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 47.151954][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 47.186656][ T4266] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.283: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.202727][ T4266] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 47.242732][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.251870][ T4295] loop1: detected capacity change from 0 to 1764 [ 47.267819][ T4295] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 47.276634][ T29] audit: type=1326 audit(1755191662.561:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 47.305091][ T29] audit: type=1326 audit(1755191662.561:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 47.329086][ T29] audit: type=1326 audit(1755191662.561:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 47.352591][ T29] audit: type=1326 audit(1755191662.561:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 47.376846][ T29] audit: type=1326 audit(1755191662.581:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083748ebe9 code=0x7ffc0000 [ 47.429422][ T4304] loop2: detected capacity change from 0 to 512 [ 47.436729][ T4304] EXT4-fs: quotafile must be on filesystem root [ 47.517899][ T4311] loop3: detected capacity change from 0 to 1764 [ 47.542162][ T4315] loop2: detected capacity change from 0 to 1764 [ 47.560214][ T4317] netlink: 'syz.1.303': attribute type 10 has an invalid length. [ 47.567988][ T4317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.303'. [ 47.656476][ T4321] loop3: detected capacity change from 0 to 1024 [ 47.666889][ T4321] EXT4-fs: Ignoring removed bh option [ 47.674272][ T4321] EXT4-fs: inline encryption not supported [ 47.681714][ T4321] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.704454][ T4321] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 47.713576][ T4321] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.305: lblock 2 mapped to illegal pblock 2 (length 1) [ 47.728937][ T4321] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.305: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.744988][ T4321] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.305: Failed to acquire dquot type 0 [ 47.816420][ T4321] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 47.828199][ T4321] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.305: mark_inode_dirty error [ 47.855874][ T4321] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 47.883974][ T4321] EXT4-fs (loop3): 1 orphan inode deleted [ 47.912360][ T4321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.154582][ T4336] loop2: detected capacity change from 0 to 512 [ 48.196696][ T4336] EXT4-fs: quotafile must be on filesystem root [ 48.493864][ T4346] loop4: detected capacity change from 0 to 1764 [ 48.525352][ T4346] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 48.535007][ T4348] loop2: detected capacity change from 0 to 1764 [ 48.593833][ T4350] netlink: 'syz.4.316': attribute type 10 has an invalid length. [ 48.601663][ T4350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.316'. [ 48.697576][ T4354] loop4: detected capacity change from 0 to 1764 [ 48.707164][ T1751] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.746001][ T1751] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 48.772511][ T4321] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.305: lblock 0 mapped to illegal pblock 48 (length 1) [ 48.836219][ T4359] loop4: detected capacity change from 0 to 512 [ 48.851193][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.882035][ T4359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.905223][ T4361] loop2: detected capacity change from 0 to 512 [ 48.927360][ T4361] EXT4-fs: quotafile must be on filesystem root [ 48.933890][ T4359] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.000216][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.013620][ T4365] loop2: detected capacity change from 0 to 512 [ 49.042604][ T4365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.057043][ T4365] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.255973][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.277720][ T4382] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 49.286418][ T4382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.328'. [ 49.286625][ T4380] loop3: detected capacity change from 0 to 512 [ 50.145085][ T4386] loop0: detected capacity change from 0 to 512 [ 50.194885][ T4380] EXT4-fs: quotafile must be on filesystem root [ 50.201093][ T4386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.213929][ T4386] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.281131][ T4390] loop2: detected capacity change from 0 to 1764 [ 50.425403][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.449515][ T4407] loop2: detected capacity change from 0 to 512 [ 50.470746][ T4407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.484065][ T4407] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.498022][ T4398] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.333: corrupted inode contents [ 50.538937][ T4398] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.333: mark_inode_dirty error [ 50.553642][ T4398] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.333: corrupted inode contents [ 50.572989][ T4419] loop0: detected capacity change from 0 to 512 [ 50.579958][ T4417] loop1: detected capacity change from 0 to 1764 [ 50.580224][ T4419] EXT4-fs: quotafile must be on filesystem root [ 50.611694][ T4417] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 50.623523][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.637998][ T4421] loop4: detected capacity change from 0 to 512 [ 50.650315][ T4424] loop0: detected capacity change from 0 to 512 [ 50.690347][ T4426] loop1: detected capacity change from 0 to 1024 [ 50.710670][ T4421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.716602][ T4426] EXT4-fs: Ignoring removed bh option [ 50.726353][ T4421] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.735312][ T4426] EXT4-fs: inline encryption not supported [ 50.743351][ T4421] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.339: corrupted inode contents [ 50.756575][ T4421] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.339: mark_inode_dirty error [ 50.769550][ T4421] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.339: corrupted inode contents [ 50.781691][ T4426] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.800272][ T4426] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 50.809474][ T4426] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.343: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.824737][ T4426] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.343: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.826065][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.838993][ T4426] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.343: Failed to acquire dquot type 0 [ 50.860283][ T4426] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 50.871025][ T4426] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.343: mark_inode_dirty error [ 50.882871][ T4426] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 50.914341][ T4426] EXT4-fs (loop1): 1 orphan inode deleted [ 50.929295][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.930457][ T4426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.956783][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 50.991695][ T4426] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.343: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.057220][ T4451] loop0: detected capacity change from 0 to 1764 [ 51.081172][ T4451] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 51.105173][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.116147][ T4453] loop4: detected capacity change from 0 to 512 [ 51.130439][ T4453] EXT4-fs: quotafile must be on filesystem root [ 51.145438][ T4457] loop0: detected capacity change from 0 to 512 [ 51.187296][ T4459] loop1: detected capacity change from 0 to 1764 [ 51.256486][ T4468] loop4: detected capacity change from 0 to 512 [ 51.273713][ T4468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.287403][ T4468] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.304830][ T4461] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.358: corrupted inode contents [ 51.321964][ T4471] netlink: 'syz.0.359': attribute type 21 has an invalid length. [ 51.331000][ T4471] netlink: 132 bytes leftover after parsing attributes in process `syz.0.359'. [ 51.340404][ T4471] netlink: 'syz.0.359': attribute type 1 has an invalid length. [ 51.358044][ T4461] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.358: mark_inode_dirty error [ 51.372086][ T4461] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.358: corrupted inode contents [ 51.420704][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.421392][ T4480] loop0: detected capacity change from 0 to 1764 [ 51.459149][ T4480] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 51.481402][ T4487] loop3: detected capacity change from 0 to 512 [ 51.489657][ T4487] EXT4-fs: quotafile must be on filesystem root [ 51.531379][ T4493] loop3: detected capacity change from 0 to 512 [ 51.703129][ T4501] lo speed is unknown, defaulting to 1000 [ 51.790709][ T4520] netlink: 'syz.2.378': attribute type 21 has an invalid length. [ 51.794499][ T4518] loop3: detected capacity change from 0 to 1764 [ 51.806316][ T4520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.378'. [ 51.815321][ T4520] netlink: 'syz.2.378': attribute type 1 has an invalid length. [ 51.849097][ T4518] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 51.903923][ T4524] loop3: detected capacity change from 0 to 1024 [ 51.911574][ T4522] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 51.930800][ T4524] EXT4-fs: Ignoring removed bh option [ 51.936332][ T4524] EXT4-fs: inline encryption not supported [ 51.943457][ T4524] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.957018][ T4524] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 51.971574][ T4524] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.382: lblock 2 mapped to illegal pblock 2 (length 1) [ 52.005195][ T4524] __quota_error: 711 callbacks suppressed [ 52.005209][ T4524] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 52.020279][ T4524] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.382: lblock 0 mapped to illegal pblock 48 (length 1) [ 52.034490][ T4524] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 52.043356][ T4524] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.382: Failed to acquire dquot type 0 [ 52.056000][ T4524] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 52.066117][ T4524] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.382: mark_inode_dirty error [ 52.079217][ T4524] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 52.090476][ T4524] EXT4-fs (loop3): 1 orphan inode deleted [ 52.097321][ T4524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.111359][ T4337] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.127607][ T4337] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 52.136208][ T4337] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 52.154869][ T4524] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.382: lblock 0 mapped to illegal pblock 48 (length 1) [ 52.171774][ T4524] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 52.248735][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.330951][ T4530] loop1: detected capacity change from 0 to 1024 [ 52.340183][ T4530] EXT4-fs: Ignoring removed bh option [ 52.351272][ T4530] EXT4-fs: inline encryption not supported [ 52.360420][ T4530] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.373073][ T4530] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 52.383809][ T4530] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.384: lblock 2 mapped to illegal pblock 2 (length 1) [ 52.400643][ T4530] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 52.409046][ T4530] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.384: lblock 0 mapped to illegal pblock 48 (length 1) [ 52.425409][ T4530] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 52.434272][ T4530] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.384: Failed to acquire dquot type 0 [ 52.447226][ T4530] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 52.458218][ T4530] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.384: mark_inode_dirty error [ 52.469533][ T4530] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 52.469669][ T4542] loop4: detected capacity change from 0 to 512 [ 52.480175][ T4530] EXT4-fs (loop1): 1 orphan inode deleted [ 52.492697][ T4530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.505204][ T51] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.524784][ T51] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 52.533293][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 52.566649][ T4530] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.384: lblock 0 mapped to illegal pblock 48 (length 1) [ 52.584235][ T29] audit: type=1326 audit(1755191923.868:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c17bebe9 code=0x7ffc0000 [ 52.608605][ T29] audit: type=1326 audit(1755191923.868:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c17bebe9 code=0x7ffc0000 [ 52.632167][ T29] audit: type=1326 audit(1755191923.868:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20c17bebe9 code=0x7ffc0000 [ 52.801475][ T4556] vlan2: entered allmulticast mode [ 53.258482][ T4578] loop3: detected capacity change from 0 to 512 [ 53.290158][ T4578] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.309850][ T4582] loop2: detected capacity change from 0 to 512 [ 53.338595][ T3306] ================================================================== [ 53.346661][ T3306] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 53.354458][ T3306] [ 53.356947][ T3306] write to 0xffff888237c25ea8 of 1 bytes by task 3505 on cpu 0: [ 53.364651][ T3306] folios_put_refs+0x25c/0x2d0 [ 53.369499][ T3306] folio_batch_move_lru+0x1fd/0x230 [ 53.374678][ T3306] lru_add_drain_cpu+0x77/0x250 [ 53.379948][ T3306] __folio_batch_release+0x44/0xb0 [ 53.386029][ T3306] shmem_undo_range+0x344/0xa80 [ 53.390872][ T3306] shmem_evict_inode+0x134/0x520 [ 53.395801][ T3306] evict+0x2e0/0x550 [ 53.399775][ T3306] iput+0x447/0x5b0 [ 53.403568][ T3306] dentry_unlink_inode+0x24f/0x260 [ 53.408755][ T3306] __dentry_kill+0x18d/0x4b0 [ 53.413333][ T3306] dput+0x5e/0xd0 [ 53.416958][ T3306] do_renameat2+0x602/0xa10 [ 53.421540][ T3306] __x64_sys_rename+0x58/0x70 [ 53.426205][ T3306] x64_sys_call+0x1f9/0x2ff0 [ 53.430783][ T3306] do_syscall_64+0xd2/0x200 [ 53.435351][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.441239][ T3306] [ 53.443554][ T3306] read to 0xffff888237c25ea8 of 1 bytes by task 3306 on cpu 1: [ 53.451250][ T3306] __lru_add_drain_all+0x12b/0x3f0 [ 53.456436][ T3306] lru_add_drain_all+0x10/0x20 [ 53.461281][ T3306] invalidate_bdev+0x47/0x70 [ 53.465877][ T3306] ext4_put_super+0x624/0x7d0 [ 53.470540][ T3306] generic_shutdown_super+0xe3/0x210 [ 53.475823][ T3306] kill_block_super+0x2a/0x70 [ 53.480482][ T3306] ext4_kill_sb+0x42/0x80 [ 53.484874][ T3306] deactivate_locked_super+0x75/0x1c0 [ 53.490252][ T3306] deactivate_super+0x97/0xa0 [ 53.495303][ T3306] cleanup_mnt+0x269/0x2e0 [ 53.500916][ T3306] __cleanup_mnt+0x19/0x20 [ 53.505928][ T3306] task_work_run+0x12e/0x1a0 [ 53.510505][ T3306] exit_to_user_mode_loop+0xe4/0x100 [ 53.515814][ T3306] do_syscall_64+0x1d6/0x200 [ 53.520478][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.526881][ T3306] [ 53.529188][ T3306] value changed: 0x19 -> 0x00 [ 53.534101][ T3306] [ 53.536416][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 53.542994][ T3306] CPU: 1 UID: 0 PID: 3306 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 53.556780][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.567081][ T3306] ==================================================================